20bb19e5b4
Merge branch 'master' into zlib-1.3.2
2026-04-13 20:22:46 +02:00
68548c9c73
remove unused dependency, snyk should work as a static code scanner
2026-04-03 18:53:21 +02:00
e00ae3fb44
chore(deps): bump dawidd6/action-download-artifact from 19 to 20
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 19 to 20.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/8a338493df3d275e4a7a63bcff3b8fe97e51a927...8305c0f1062bb0d184d09ef4493ecb9288447732 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '20'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-03 11:52:33 +00:00
f5543d4317
chore(deps): bump dawidd6/action-download-artifact from 18 to 19
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 18 to 19.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/1f8785ff7a5130826f848e7f72725c85d241860f...8a338493df3d275e4a7a63bcff3b8fe97e51a927 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '19'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-18 11:52:44 +00:00
907c4d75f6
chore(deps): bump dawidd6/action-download-artifact from 17 to 18
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 17 to 18.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/09b07ec687d10771279a426c79925ee415c12906...1f8785ff7a5130826f848e7f72725c85d241860f )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '18'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 11:56:20 +00:00
47d5485a33
Merge pull request #1804 from PrivateBin/docs/contrib-guide
...
Strengthen AI guidlines & enforce screenshots for visual changes
2026-03-15 15:22:13 +01:00
69ac3ad079
chore(deps): bump dawidd6/action-download-artifact from 16 to 17
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 16 to 17.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/2536c51d3d126276eb39f74d6bc9c72ac6ef30d3...09b07ec687d10771279a426c79925ee415c12906 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '17'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-12 11:52:43 +00:00
d462c201de
style: fix typos
2026-03-03 15:21:37 +01:00
2986c97ea7
docs: also adjust PR template accordingly
2026-03-03 15:19:11 +01:00
e69570b73e
Strengthen AI guidlines & force screenshots for visual users
...
IMHO after https://github.com/PrivateBin/PrivateBin/pull/1754 we again need to make it a requirement in the guidelines to disclose the fact an LLM is used.
This also adds to attach screenshots for visual changes etc. (which again also ensures users actually _test_ the changes they submit)
I wrote it here and not in the wiki, because:
* this text can be read by an LLM inside the git repo, which I guess is beneficial
* the text may be shown more prominently ere IMHO
* I guess the wiki guidelines rather give a "big introduction" into how to contribute with the code base, and do not define "rules"/guidelines at all
2026-03-03 15:15:22 +01:00
380fe5b2c3
chore(deps): bump actions/upload-artifact from 6 to 7
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-27 11:52:45 +00:00
e680917be9
chore(deps): bump dawidd6/action-download-artifact from 15 to 16
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 15 to 16.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/fe9d59ce33ce92db8a6ac90b2c8be6b6d90417c8...2536c51d3d126276eb39f74d6bc9c72ac6ef30d3 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '16'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-26 11:52:41 +00:00
bf32c7ea64
Enable Dependabot for JavaScript dependencies
2026-02-24 12:30:15 +01:00
26e7e5eed9
Bump dawidd6/action-download-artifact from 14 to 15
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 14 to 15.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/5c98f0b039f36ef966fdb7dfa9779262785ecb05...fe9d59ce33ce92db8a6ac90b2c8be6b6d90417c8 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '15'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-18 11:52:39 +00:00
a0fbafd1fc
docs(templates): update PR template to remove WIP prepending nit/suggestion
...
Given GitHub has full support for draft PRs nowadays, this "workaround" is not needed anymore and can be removed, IMHO.
2026-02-17 00:13:48 +01:00
6ef3993fed
Bump dawidd6/action-download-artifact from 12 to 14
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 12 to 14.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/0bd50d53a6d7fb5cb921e607957e9cc12b4ce392...5c98f0b039f36ef966fdb7dfa9779262785ecb05 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '14'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-02 13:08:51 +00:00
df4560802b
docs: add AI "trap"
2026-01-17 14:14:42 +01:00
b722030b4a
docs: require users to disclose in PR whether an A/LLM tool is used
...
Add disclosure section for AI tool usage in PRs.
2026-01-16 17:52:07 +01:00
db422cfe6a
Bump dawidd6/action-download-artifact from 11 to 12
...
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact ) from 11 to 12.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases )
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5...0bd50d53a6d7fb5cb921e607957e9cc12b4ce392 )
---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
dependency-version: '12'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-25 11:03:31 +00:00
10b4a6ba4b
Bump actions/upload-artifact from 5 to 6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 11:04:11 +00:00
3f5858616d
Bump actions/cache from 4 to 5
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-12 11:04:20 +00:00
c6343be01b
enable PHP 8.5 for testing
2025-12-02 06:44:53 +01:00
3be3aeb080
Bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-21 11:04:46 +00:00
f4216b34df
Apply suggestions from code review
...
Co-authored-by: El RIDO <elrido@gmx.net >
2025-11-12 19:36:05 +01:00
42df559d3c
docs: update how to open
...
Co-authored-by: El RIDO <elrido@gmx.net >
2025-11-11 19:52:12 +01:00
4f64ad3b12
docs: remove wrong public dir advise
...
Co-authored-by: El RIDO <elrido@gmx.net >
2025-11-02 17:49:26 +01:00
46599af4f0
Add note about jQuery dropping
...
Co-authored-by: El RIDO <elrido@gmx.net >
2025-11-02 17:47:12 +01:00
baa0117028
wipfix: apply doc fixes from contributors
2025-10-30 15:11:16 +00:00
55fcca0f8d
Add information about Composer dir
2025-10-30 13:21:59 +01:00
207c79057b
Add GitHub Copilot instructions
...
As per discussion in https://github.com/orgs/PrivateBin/discussions/1696 here are some instructions generated by Copilot itself.
I used this prompt (in chat not agent mode, but well... should be enough) as suggested by GitHub: https://docs.github.com/copilot/how-tos/configure-custom-instructions/add-repository-instructions#anweisen-von-copilot-programmier-agent-zum-generieren-einer-copilot-instructionsmd-datei
Also added the feedback from the discussion.
2025-10-30 13:18:30 +01:00
8526816468
Bump actions/upload-artifact from 4 to 5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 12:00:40 +00:00
3b45d8fa79
Bump actions/setup-node from 5 to 6
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-14 11:05:10 +00:00
8d98b9f1e1
unify workflow code styles
2025-10-10 15:08:35 +02:00
51eff47614
apply explicit permissions as per CodeQL suggestion
...
as per rule ID actions/missing-workflow-permissions
2025-10-10 15:07:44 +02:00
317a0a09af
Bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-09 11:36:44 +00:00
ebc2365171
Bump actions/setup-node from 4 to 5
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-09 11:05:11 +00:00
ac1b16e803
Potential fix for code scanning alert no. 59: Workflow does not contain permissions
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-10-08 19:09:49 +02:00
851befb39d
Merge branch 'master' into eslint
2025-10-08 18:31:10 +02:00
a8901e6d6e
disable sarif generation, so we at least get a result
2025-10-08 13:58:40 +02:00
2eb26aced4
disable upload of results due to github code scanning API change
2025-10-08 09:23:49 +02:00
081a469a11
remove folders causing errors in report
2025-10-08 09:14:35 +02:00
d638b2dac4
correct version selector
2025-10-08 08:56:44 +02:00
ee531a0b81
update codeql actions to release 4 (node 24) and enable github action scanning
2025-10-08 08:45:06 +02:00
020818d3fc
move codacy action to workflows to get it to execute
...
we seem to have never noticed that it didn't ever run after adding it
2025-10-08 08:43:52 +02:00
3b7347d589
chore: also run when dependencies are updated
2025-10-06 17:06:16 +00:00
38bc1a2590
chore: obviously also run if workflow file is adusted
2025-10-06 17:04:51 +00:00
6b5908b202
chore: run EsLint on PRs
2025-10-06 17:01:48 +00:00
e775647206
attempting to make the condition list more readable
2025-09-13 07:56:54 +02:00
5cca4be89a
enable running tests on pull requests
2025-09-13 07:21:10 +02:00
86b1a4e9ac
disable running snyk if triggering user doesn't have access to the secret
2025-09-13 07:20:25 +02:00
El RIDO
dependabot[bot]
rugk