5 Commits

Author SHA1 Message Date
James Beard
4fa5c7dc2b
Preparing for NPM trusted publishing plus node version housekeeping (#2952)
* Added id-token permission to allow for migration to npm trusted
publishing. Updating node versions to reflect support matrix.
* Renamed turf.yml more descriptively to ci.yml
2025-12-10 09:51:03 +11:00
mfedderly
2c28ed1b4e
Pin the exact SHA1's of GitHub Actions we use (#2863)
This is as recommended in the security guide https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions, and as demonstrated recently in an action we don't use https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised
2025-03-29 12:43:37 -04:00
mfedderly
948cdafaf7
Upgrade pnpm/action-setup in github actions (#2696) 2024-08-09 13:52:25 -04:00
Tim Welch
36167829d9
deprecate CHANGELOG, improve release action, PR template, Contributing doc (#2621)
* update release action - github release adds auto-generated commit log, marks draft, marks latest release
* refactors Contributing including new release docs
* Simplifies the pull request template
2024-06-23 00:29:22 -07:00
mfedderly
1f39da5355
Prep infra for v7 release (#2607)
* Prep infra for v7 release

* Update workflow name

* Clarify release process instructions

* Move publish commands into workflow and out of package.json

* Prerelease version should include merged tags

* Update release procedure to reflect the user pushing the release tag

* Fix build

* Remove errant yml
2024-05-17 11:44:57 -04:00