7977720146
chore(deps): bump actions/checkout from 4.3.1 to 7.0.0 ( #12 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.3.1 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 13:11:05 +01:00
Ivan Pereira
3cfe36db0b
chore: add dependabot config for npm and github-actions
2026-07-14 12:42:56 +01:00
Ivan Pereira
a24b4e5b05
ci: harden workflows against token exfiltration
...
Disable checkout credential persistence so repository-controlled code
run by npm ci/test cannot read GITHUB_TOKEN from .git/config, and pin
actions to full commit SHAs to guard against mutable-tag supply-chain
attacks.
2026-07-14 12:42:55 +01:00
Ivan Pereira
e5f054272d
ci: restrict npm publish tags to main
2026-07-14 12:19:06 +01:00
Ivan Pereira
5a3a1e82bf
docs: backfill changelog and add release verification
2026-07-14 12:06:42 +01:00
Ivan Pereira
e6a194bd85
ci: run typecheck and tests before npm publish
2026-07-14 03:26:33 +01:00
Ivan Pereira
bbb5623f25
refactor(runtime): replace Bun dependency with Node fetch
...
Run Perplexity search and auth requests through pi's Node runtime instead of
shelling out to Bun. Move development and CI commands to npm, add a Node test
build path, and keep OTP auth fail-fast when Set-Cookie headers are not
available.
2026-06-23 15:51:16 +01:00
Ivan Pereira
048ec32a3c
Strip v prefix in version check
2026-02-23 12:40:55 +00:00
Ivan Pereira
12dcd11384
Fix tag pattern to match v-prefixed tags
2026-02-23 12:40:43 +00:00
Ivan Pereira
29723c50e3
Upgrade npm to latest before publish for OIDC support
2026-02-23 12:36:34 +00:00
Ivan Pereira
6737807356
Switch to OIDC trusted publishing, drop NPM_TOKEN
2026-02-23 12:35:44 +00:00
Ivan Pereira
10c2b1cf6b
Add npm publish GitHub Actions workflow
2026-02-23 12:32:53 +00:00
Ivan Pereira