Kovid Goyal
ae36822837
Ignore a bunch of CVes in python that havent actually had their fixes released yet.
2026-01-23 19:07:02 +05:30
Kovid Goyal
e342f5ffab
Ignore inapplicable CVE in python stdlib
2026-01-16 19:13:16 +05:30
Kovid Goyal
edd466e5f7
Pygments does not need type checking globally ignored anymore
2026-01-14 22:18:11 +05:30
Kovid Goyal
8a10931f0e
Download grype from my own server
...
Far higher reliability than githubj;wq
2026-01-10 12:42:09 +05:30
Kovid Goyal
24b634ae1a
Nicer 403 error andling when downloading grype
2026-01-02 11:35:28 +05:30
dependabot[bot]
232edb3ad3
Bump actions/cache from 4 to 5 in the actions group
...
Bumps the actions group with 1 update: [actions/cache](https://github.com/actions/cache ).
Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-22 03:22:12 +00:00
Kovid Goyal
f39183bd6b
Ignore inapplicable CVE
2025-12-11 12:49:16 +05:30
Kovid Goyal
d87ba95d9c
Ignore CVE-2025-13836
...
We dont care about this DoS enough, so ignore until a new version of
python 3.12 s released with the fix. Not updating past Python 3.12 for
this DoS.
2025-12-04 15:10:26 +05:30
dependabot[bot]
e69318e5fb
Bump actions/checkout from 5 to 6 in the actions group
...
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout ).
Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-01 03:51:10 +00:00
Kovid Goyal
5f90102413
Add support for RAR archive preview
2025-11-27 09:33:15 +05:30
Kovid Goyal
0195f0f5f6
auto fixes to github actions by zizmor
2025-11-07 09:36:57 +05:30
Kovid Goyal
97b030edf7
Dont scan grype itself with grype
2025-11-02 15:41:01 +05:30
Kovid Goyal
d3ef27c2bc
Update grype db as part of install
2025-10-17 10:59:11 +05:30
dependabot[bot]
6a6296a90f
Bump github/codeql-action from 3 to 4 in the actions group
...
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action ).
Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-13 03:41:50 +00:00
Kovid Goyal
0bfcffbaed
Fix spurious CVE in dep detection
2025-10-11 13:23:33 +05:30
Kovid Goyal
3b0938e878
Run govulncheck on the binary and remove upload of SARIF to github as github doesnt like the SARIF govulncheck produces
2025-09-24 13:12:00 +05:30
Kovid Goyal
4771de3f95
Print out the govulncheck.sarif file in CI
2025-09-24 12:57:21 +05:30
Kovid Goyal
4ffacbbe80
Another try at running govulncheck
2025-09-24 12:50:06 +05:30
Kovid Goyal
3383675bb2
...
2025-09-23 16:15:34 +05:30
Kovid Goyal
508b022721
Run dependency scanner CI job on schedule as well
2025-09-23 08:52:35 +05:30
Kovid Goyal
4e240b94e1
explicitly close opened url
2025-09-22 12:30:53 +05:30
Kovid Goyal
53e2f00473
A fancier download_with_retry function
2025-09-22 12:28:48 +05:30
Kovid Goyal
a05a56e413
use a retry for all downloads in CI script
2025-09-22 12:16:41 +05:30
Kovid Goyal
92ee52b68c
Retry grype download on failure
2025-09-22 11:36:27 +05:30
Kovid Goyal
dfeef6df83
Ignore CVE that does not apply
2025-09-20 10:06:30 +05:30
Kovid Goyal
1672110854
Turn off CodeQL TRAP caching
...
It was using up the GitHub actions caching quota of 10GB
2025-09-19 22:53:14 +05:30
Kovid Goyal
54368be554
Fix grype not scanning C deps that dont have CPEs
2025-09-18 09:22:28 +05:30
Kovid Goyal
c30f8cec46
...
2025-09-17 23:30:37 +05:30
Kovid Goyal
0eddbefda9
List vulnerabilities by CVE
2025-09-17 23:20:39 +05:30
Kovid Goyal
c4cb9cdbb7
Filter out another form of the same CVE
2025-09-17 23:14:40 +05:30
Kovid Goyal
87856efa49
Run grype against SBOM as well
2025-09-17 22:29:49 +05:30
Kovid Goyal
cf9b0da489
...
2025-09-17 22:06:38 +05:30
Kovid Goyal
ebb7ccebd0
Add a check dependencies action
...
Use the gyre tool to scan all binaries and generate a report
2025-09-17 21:32:28 +05:30
Kovid Goyal
77fbd5beba
Use CodeQL on github actions
2025-09-17 07:47:34 +05:30
Kovid Goyal
d647e21779
Use the bundle for CodeQL builds
...
Speeds up the dependency fetch and hopefully fixes the failure on macOS
2025-09-16 07:36:00 +05:30
Kovid Goyal
96253f4798
Also run CodeQL for C on macOS to improve coverage
2025-09-16 07:21:48 +05:30
Kovid Goyal
1d37ef84ce
Run CodeQL analysis for different languages in parallel
2025-09-16 07:11:13 +05:30
dependabot[bot]
04a8a60a87
Bump the actions group with 4 updates
...
Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout ), [actions/setup-python](https://github.com/actions/setup-python ), [actions/setup-go](https://github.com/actions/setup-go ) and [actions/cache](https://github.com/actions/cache ).
Updates `actions/checkout` from 3 to 5
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v5 )
Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4...v6 )
Updates `actions/setup-go` from 3 to 6
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v3...v6 )
Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/setup-python
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/setup-go
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/cache
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-15 06:26:51 +00:00
Kovid Goyal
8b946d906b
Have dependabot update GitHub actions as well
2025-09-15 11:34:02 +05:30
Kovid Goyal
edfda1e7af
Remove deprecated option from CodeQL setup
2025-04-20 15:51:29 +05:30
Kovid Goyal
9cea3fbcb8
Enable CodeQL for Go
2025-04-20 15:44:36 +05:30
Kovid Goyal
afe5877e6a
Fix indentation in codeql yml file
2025-04-14 10:21:10 +05:30
Kovid Goyal
5382fa8692
Bump version of CodeQL actions
...
Version 2 is deprecated.
Fixes #8537
Fixes #8536
2025-04-14 08:09:31 +05:30
Galantsev, Dmitrii
4a8824c10e
Fix bad code block formatting in docs
...
I noticed that
<https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.text_fg_override_threshold >
said ':code:` ratio`' instead of being formatted as code. I assume
that's because of a space after `.
Fixed 2 cases where I found the issue.
Added a simple code block check to CI.
Signed-off-by: Galantsev, Dmitrii <dmitrii.galantsev@amd.com >
2025-03-30 17:48:12 -05:00
Kovid Goyal
9e1601a9b5
Nicer way to include grapheme test data in Go tests
2025-03-27 03:20:27 +05:30
Kovid Goyal
e76daa3736
Fix failing go vet in CI
2025-03-27 02:51:26 +05:30
Kovid Goyal
f02245af79
Also run gofmt on kittens subdir in CI
2025-03-23 20:26:10 +05:30
Kovid Goyal
c32e7ce7ab
Remove git credentials after checkout
2025-02-24 12:00:58 +05:30
Kovid Goyal
744145f392
Add cairo and pixman as deps on Linux
...
Needed to render COLRv1 fonts. Which are needed because bitmap emoji
fonts dont render well at large font sizes such as can be used with
multicell chars.
2025-02-03 11:06:38 +05:30
Kovid Goyal
cad319a3c7
Bump minimum python version to 3.10
...
3.9 is EOL in a few months and I am tired of typing Optional
2025-01-07 12:07:01 +05:30