jellyfin/jellyfin-vue
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-vue.git synced 2026-09-03 05:10:26 +03:00
Code Issues Packages Projects Releases Wiki Activity
5,875 Commits 19 Branches 3 Tags
997714a7bbb2f2ef1687841ebe4df66dc9e302ca
Commit Graph
371 Commits
Author SHA1 Message Date
renovate[bot] ad4dde43d6 chore(deps): update ci (#2778) 2026-04-16 21:37:02 +02:00
renovate[bot] c3377913b8 chore(deps): update docker/login-action action to v4.1.0 (#2765) 2026-04-08 00:08:42 +02:00
renovate[bot] d5a2895192 ci(renovate): migrate config (#2774) 2026-04-07 23:40:20 +02:00
Fernando Fernández 9a9b4252be ci(renovate): separate catalogs for runtime and development dependencies 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-04-07 23:02:13 +02:00
Fernando Fernández de6989c152 ci(pnpm): run a check for monorepo dependency cycles, switch to pnpm i 
pnpm i is an alias to pnpm install, so the shorter version is desired

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-04-07 18:58:12 +02:00
Fernando Fernández 68673a092f chore(monorepo): move frontend under packages folder 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-04-07 18:58:12 +02:00
Fernando Fernández f82cf2bdea ci(renovate): run pnpm dedupe on every dependency update 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-04-07 18:58:12 +02:00
Fernando Fernández f00e60fcd3 chore: migrate to pnpm 
NPM refuses to acknowledge their limitations when working with monorepos

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-04-07 18:58:12 +02:00
Bill Thornton ed01ae9c6a chore: add min stability days for npm renovate updates (#2766) 2026-04-03 16:23:32 -04:00
renovate[bot] 8f6bcafe60 chore(deps): update ci (#2731) 2026-03-30 11:31:02 +02:00
Fernando Fernández 1c23f65588 ci: move back attestation to origin jobs 
The collector job didn't take into account attestations for multiple arches.
The fix for that would be a bit overengineered, so we make it back to the original jobs. The permissions given to the jobs are minimal (only attestattion creation would be possible), so the attack surface of scripts would be minimal

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-03-30 11:28:19 +02:00
Fernando Fernández 36088021cb ci: replace actions/attest-build-provenance with actions/attest 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-03-30 11:06:55 +02:00
Fernando Fernández 2588d8e4ce ci: more explicit permissions, separate artifact attestations in different job 
To satisfy the requirements pointed at https://github.com/jellyfin/jellyfin-vue/pull/2735

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-03-30 11:06:55 +02:00
Fernando Fernández 0d567a1234 revert: "Mitigate pull_request_target privilege escalation (#2735)" 
This reverts commit 1a9c256903.

See https://github.com/jellyfin/jellyfin-vue/pull/2735#issuecomment-4077194367 and
https://github.com/jellyfin/jellyfin-vue/pull/2735#issuecomment-4148987114 for more details.
 2026-03-30 11:05:07 +02:00
Fernando Fernández 6c42ad1bfa ci(renovate): pin gh actions versions by sha 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-03-30 11:05:07 +02:00
Andrew Rabert 1a9c256903 Mitigate pull_request_target privilege escalation (#2735) 
Hotfix — replaces pull_request_target with pull_request to stop
granting write permissions and secrets to fork PRs. Some workflows
will break; can be fixed properly later.
 2026-02-19 23:58:30 -05:00
renovate[bot] 76b27f3156 chore(deps): update ci (#2720) 2026-01-28 23:48:00 +01:00
Fernando Fernández 38fcd50f54 ci: use new ubuntu-slim runners 
For lightweight tasks, will probably allow for more concurrency across the entire org

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2026-01-28 23:38:09 +01:00
renovate[bot] 31f36a3e5d chore(deps): update ci (#2713) 2025-12-13 21:15:34 +01:00
renovate[bot] b557e31942 chore(deps): update ci (#2709) 2025-11-24 18:18:07 +00:00
Fernando Fernández 4fd64f8a26 chore: fix potential script injection in GitHub Actions [security] 
Signed-off-by: GitHub <noreply@github.com>
 2025-10-29 10:37:44 +00:00
renovate[bot] 25508b3f51 chore(deps): update ci (#2701) 2025-10-29 02:08:53 +01:00
renovate[bot] e90652fc0d chore(deps): update ci (#2688) 2025-10-12 17:41:40 +02:00
Fernando Fernández 50a217c5ea chore(package): add packageManager field 
The `actions/setup-node` makes use of this field, and I guess it
makes sense to use the new "official" way (though it's still experimental)
to hint environments of which package managers are being used
in the project.

Signed-off-by: GitHub <noreply@github.com>
 2025-10-12 15:30:24 +00:00
renovate[bot] 1530212856 chore(deps): update ci (#2685) 2025-09-02 15:07:11 +02:00
renovate[bot] 26c3a1707d chore(deps): update ci (#2674) 2025-08-26 20:40:22 +02:00
renovate[bot] 43e86a9a70 chore(deps): update ci (#2658) 2025-06-28 11:36:53 +00:00
renovate[bot] d43dc8292d chore(deps): update ci (#2651) 2025-05-27 17:08:02 +00:00
renovate[bot] 71c53f97d4 chore(deps): update ci (#2648) 2025-05-15 16:47:34 +00:00
renovate[bot] 219e671941 chore(deps): update ci (#2636) 2025-05-09 00:39:06 +02:00
Fernando Fernández ed169bd523 chore: vite as peerDependencies in @jellyfin-vue/tauri-packaging 
Vite is now a monorepo-wide package anyway

Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2025-05-05 19:38:29 +02:00
renovate[bot] 1ce3ccc111 chore(deps): update actions/attest-build-provenance action to v2.3.0 (#2629) 2025-04-29 20:42:40 +02:00
Fernando Fernández 57bb098bd8 ci(renovate): don't pin peerDependencies 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2025-04-29 20:27:08 +02:00
Fernando Fernández d668199a54 chore: remove all vue-i18n libraries 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2025-04-29 20:05:38 +02:00
renovate[bot] bade0fafc7 chore(deps): update ci (#2621) 2025-04-27 17:39:34 +00:00
renovate[bot] ca212ea8a6 chore(deps): update ci (#2613) 2025-04-04 17:29:47 +00:00
renovate[bot] b27152eb89 chore(deps): update ci (#2609) 2025-03-22 10:19:15 +00:00
renovate[bot] 7440265a90 chore(deps): update ci (#2606) 2025-03-18 19:00:11 +00:00
renovate[bot] 69716c0439 chore(deps): update ci (#2602) 2025-03-15 12:51:03 +01:00
renovate[bot] 3d6df9edc8 ci(renovate): migrate config (#2599) 2025-03-07 18:04:57 +00:00
renovate[bot] 364fd58323 chore(deps): update ci (#2596) 2025-03-07 17:44:33 +00:00
renovate[bot] 97a43a4066 chore(deps): update ci (#2582) 2025-03-01 20:40:14 +00:00
renovate[bot] e854fc4a1c chore(deps): update ci (#2577) 2025-02-08 12:24:06 +00:00
Fernando Fernández f1bf23e778 ci(renovate): exclude vite from tauri group 2025-02-08 12:12:52 +00:00
renovate[bot] f54caa09d4 chore(deps): update ci (#2573) 2025-01-28 05:59:09 +01:00
Fernando Fernández 1b94b1dad6 ci(renovate): apply priority order correctly 
Tauri npm updates were being assigned to the npm
and npm-dev groups, instead of the tauri one.
 2025-01-27 15:46:14 +00:00
Fernando Fernández 9d251bcf68 ci: arm runner, no cache, skip docker cleanup 2025-01-25 13:55:29 +00:00
renovate[bot] 2c951f7e0c chore(deps): update ci (#2562) 2025-01-25 00:23:44 +01:00
Fernando Fernández 945356d505 feat: create tauri-runtime package 
Signed-off-by: Fernando Fernández <ferferga@hotmail.com>
 2025-01-25 00:06:49 +01:00
Fernando Fernández d814145263 ci(codeql): enable dependency caching 2025-01-21 12:08:29 +01:00