nathannaveen
79374829ec
chore: Set permissions for GitHub actions ( #38144 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-06-27 15:01:04 +02:00
Roland Dalmulder
3dba5567a6
Merge branch '4.1-dev' into 4.2-dev
...
# Conflicts:
# .drone.yml
# administrator/language/en-GB/install.xml
# administrator/language/en-GB/langmetadata.xml
# administrator/manifests/files/joomla.xml
# administrator/manifests/packages/pkg_en-GB.xml
# api/language/en-GB/install.xml
# api/language/en-GB/langmetadata.xml
# installation/language/en-GB/langmetadata.xml
# language/en-GB/install.xml
# language/en-GB/langmetadata.xml
# libraries/src/Version.php
2022-06-03 20:48:30 +02:00
Allon Moritz
a3e71b8153
[4.2] Add Allon Moritz as code owner for libraries ( #37967 )
...
* Add Allon Moritz as code owner for libraries
* Remove web auth owner
2022-06-03 12:28:23 +02:00
Crystal Dionysopoulos
31b3b8980f
A11y GitHub issue template ( #37906 )
...
* Initial commit to create a11y_issue.md
* Adding J version question
* Adding a11y label automatically
Per the GitHub docs, it's possible to add the appropriate label automatically in the YAML front matter: https://docs.github.com/en/communities/using-templates-to-encourage-useful-issues-and-pull-requests/manually-creating-a-single-issue-template-for-your-repository
Co-authored-by: Christiane Maier-Stadtherr <dev@chmst.de>
2022-05-30 21:05:00 +02:00
Alex Api
f5ba0ce829
Update create-translation-pull-request-v4.yml ( #37344 )
...
Might found a type on SYNC_VERSION environment variable
2022-03-22 12:21:00 +01:00
George Wilson
943117a8ba
Removed as no longer contributing
2022-02-27 23:40:09 +00:00
George Wilson
b48dd43fe2
Remove myself from ownership of some things
2022-02-27 23:39:32 +00:00
Benjamin Trenkle
7c9ac469e4
Merge commit '05e21f49d62aca3cc7591e9b3c05f860c292e205' into 4.1/upmerges/2022-02-20
2022-02-20 19:41:44 +01:00
Tobias Zulauf
05e21f49d6
update contributing.md file to be merged up to 4.1 and 4.2 thanks @brianteeman ( #36953 )
2022-02-20 10:25:50 +01:00
Tobias Zulauf
936131669b
add @HLeithner to the codeowners and remove none existent files ( #37037 )
2022-02-14 19:21:23 +01:00
Brian Teeman
da25d59714
Update README.md ( #36811 )
...
* Update README.md
* Update README.txt
* Update README.md
* Update CONTRIBUTING.md
2022-01-31 16:57:16 +01:00
Harald Leithner
c375260c2d
Merge branch '4.0-dev' into 4.1-dev
2022-01-23 20:01:12 +01:00
Harald Leithner
661fd2622f
Switch translation bot to 4.1-dev branch
2022-01-23 19:58:02 +01:00
Phil E. Taylor
8ecd5f6757
Revert "Update CODEOWNERS ( #36484 )" ( #36488 )
...
This reverts commit bcaf88095a
2021-12-30 00:20:59 +01:00
Phil E. Taylor
bcaf88095a
Update CODEOWNERS ( #36484 )
2021-12-29 23:01:34 +00:00
Benjamin Trenkle
f3efe182c1
Merge branch '4.0-dev' of github.com:joomla/joomla-cms into 4.1-dev
...
# Conflicts:
# administrator/language/en-GB/install.xml
# administrator/language/en-GB/langmetadata.xml
# administrator/manifests/files/joomla.xml
# administrator/manifests/packages/pkg_en-GB.xml
# api/language/en-GB/install.xml
# api/language/en-GB/langmetadata.xml
# installation/language/en-GB/langmetadata.xml
# language/en-GB/install.xml
# language/en-GB/langmetadata.xml
# libraries/src/Version.php
2021-11-15 14:45:13 +01:00
Brian Teeman
88f7b4d3ee
Update cacert-update.yml Action ( #35956 )
2021-11-02 09:59:56 +00:00
Benjamin Trenkle
447c628bcb
Merge branch '4.0-dev' of github.com:joomla/joomla-cms into 4.1-dev
...
# Conflicts:
# .drone.yml
# administrator/language/en-GB/install.xml
# administrator/language/en-GB/langmetadata.xml
# administrator/manifests/files/joomla.xml
# administrator/manifests/packages/pkg_en-GB.xml
# api/language/en-GB/install.xml
# api/language/en-GB/langmetadata.xml
# installation/language/en-GB/langmetadata.xml
# language/en-GB/install.xml
# language/en-GB/langmetadata.xml
# libraries/src/Version.php
2021-10-19 15:26:27 +02:00
George Wilson
2976dc974d
Cacert action needs to be in the default branch for 3.10
2021-10-07 22:33:09 +01:00
Tobias Zulauf
f625ba469c
[4.1] Add Joomla! Accessibility Team to the code owners ( #35629 )
...
* add Joomla! Accessibility Team to the code owners
* add cassiopeia
* add everything in the templates
2021-09-22 07:06:12 +02:00
George Wilson
db1b585c15
Ensure branch is 3.10-dev
2021-09-20 20:25:09 +01:00
George Wilson
7f44428958
Mozilla cacert update via Github Action ( #34703 )
...
* Github action to update the mozilla cacert bundle
* Only run in core repo
* No running on push. Alloow manual trigger
* Update action to create a PR
2021-09-20 12:44:31 +02:00
joomla-translation-bot
5921e439d6
Translation Update ( #35379 )
2021-09-11 23:21:57 +01:00
joomla-translation-bot
3bb6894423
Translation Update ( #35321 )
2021-08-23 19:03:01 +01:00
joomla-translation-bot
b2d763422c
Translation Update ( #35098 )
2021-08-16 23:38:06 +01:00
wilsonge
ca951153fd
Merge branch '3.10-dev' into 4.0-dev
2021-08-10 09:18:00 +01:00
Tobias Zulauf
e983254762
Update branches and fix some references still pointing to staging ( #35073 )
2021-08-09 11:43:23 +01:00
Tobias Zulauf
328b7d39e6
[4.0] Remove com_csp and move the CSP configuration to the HttpHeaders plugin ( #33550 )
2021-05-07 09:05:31 +02:00
wilsonge
6bfdcb2ac1
Merge commit '30d26a1' into 4.0-dev
2021-05-02 23:53:05 +01:00
Phil E. Taylor
afc196adc6
replace https://resources.joomla.org ( #32907 )
...
* update url
* replace redirected and dead urls
Signed-off-by: Phil E. Taylor <phil@phil-taylor.com>
2021-03-30 07:47:50 +02:00
wilsonge
a1158ee07f
Merge branch '3.10-dev' into 4.0-dev
2020-12-15 18:17:51 +00:00
wilsonge
af5b1001da
Merge commit '58e0942' into 4.0-dev
2020-12-15 01:36:51 +00:00
wilsonge
cc50a5e9a8
Merge commit '9b4c991' into 4.0-dev
2020-11-26 02:53:17 +00:00
Bear
8510a87d91
Revert incorrectly changed files in #30778 ( #31295 )
...
* syncing
* revert incorrectly changed files
* adding incorrectly ignored file.
2020-11-01 23:58:00 +01:00
Quy
a84d617232
Fix paths ( #31102 )
...
Fix paths in codeowners file.
2020-10-15 20:49:03 +02:00
George Wilson
e3c4d58389
Remove Michael from stats plugin codeowner and remove me from core js
2020-10-02 02:07:56 +01:00
Phil Taylor
02ce9db22e
Suggest text change of PR Template to make it more clear ( #29732 )
2020-06-21 15:46:37 +01:00
George Wilson
fe0563cb79
[4.0] Workflow enhancement
...
Move workflows towards a state machine with workflow plugins
2020-05-30 00:06:48 +01:00
wilsonge
75b3d190b1
Merge branch '3.10-dev' into 4.0-dev
2020-05-29 22:42:32 +01:00
Tobias Zulauf
3042bc489c
Add an rfc issue template ( #29206 )
...
Co-authored-by: Brian Teeman <brian@teeman.net>
2020-05-25 19:50:55 +02:00
bembelimen
73e6388744
Merge branch '4.0-dev' of github.com:joomla/joomla-cms into workflow-v3
...
# Conflicts:
# administrator/components/com_workflow/forms/filter_stages.xml
# administrator/components/com_workflow/tmpl/stages/default.php
2020-05-11 00:47:22 +02:00
wilsonge
b683913f9b
Merge commit '549b0e4' into 4.0-dev
2020-05-09 14:42:25 +01:00
Harald Leithner
1afb6708f4
Workflow rename transition options to actions ( #79 )
...
* Add codeowners
* Rename transition tab options to actions
2020-05-01 23:55:49 +02:00
Tobias Zulauf
7c211a1873
add the github sponsor page ( #28435 )
2020-03-22 21:54:35 +01:00
Harald Leithner
73627c5aa6
[4.0] WebAuthn Passwordless Authentication – Reloaded ( #28094 )
...
This PR adds support for WebAuthn (W3C Web Authentication). This is a W3C standard made official in March 2019.
WebAuthn allows users to authenticate (log in) securely into a site without using a password. Instead it uses authenticators. An authenticator is either a discrete hardware device or a Trusted Platform Module (TPM) / Secure Enclave built into your device. Moreover, it only works under HTTPS. By using secure hardware and secure transport it makes sure that the authentication is resistant to eavesdropping, phishing, brute-force and other attack modes associated with fixed passwords.
2020-03-05 14:24:08 +01:00
George Wilson
f21b2db76c
Remove some places where I don't need to review things
2020-02-09 16:53:21 +00:00
wilsonge
5c3bcf8a5e
Joomla! 3.9.11
...
-----BEGIN PGP SIGNATURE-----
iQHIBAABCgAyFiEEc8tLlhrb4aveTfJiRzuTXEnqGwgFAl1RkF4UHGxlaXRobmVy
QGl0cm9uaWMuYXQACgkQRzuTXEnqGwg6vgv9EyIvgaPnnT+prjBDt6O4rOQngHaU
rqslEbq3CAjo0oA7HXIJBSx6OxQF8/0RJVk2AL1XX8hJ9Zttc15RJnCa7IBxc7W1
E2+2s1aH2IJl9gUmqRU63/5P9TBQHWa8DqhKj0WuEfjea7mnvQu5bHuVYXfs7Ej8
W+LnnnALGNFPhemn22azP30QaIGaRWzAXhutHi28YHmx/GiaTQRW6KOCJPL2VJ0U
WpTShFqmV7KQmSMoE6naPlFtVc0wARVBRemCNCogtrg7N2Rb3X3VgplGX2CddnY+
13knzlXwy3jb5PTe7TOd/ZYcWubD1NJjzamVO1D/yU5QCqvUTxD1NQtJrqn0VxPr
9F7jV4/A9MMiNd6mhzZACq07OBxVhZnG095sBHaBnetmpW+tAxm8RAA7HccnvgF8
rkhqvsLjNyYtRt0qtnFcVQnkSS1yCHZ01xBYJB7yJGHzCoIQI6tm9b8c4rNtwa+6
l4TR4IddzqOaz94qik/Tklpj4l8iUaOKcYLL
=uzJa
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE5a/8IjweQSgQZsLg74Exkxj8nQQFAl1rD+IACgkQ74Exkxj8
nQSDEggAuXLn79N91B01UKqvidupxf058FWAq8j4J/wlLcVFlWXFG7lF1jG6sdln
u9QiTsv7aspo9UBFXDbjc7VPDh0ztOeCxff0nvVY4nQJLREOs47zd0DbuHr/QAEP
mgiQDPrzCqweG+pAigFKtjCKEmWvs79yJPpDBboUiWKC7KhCJ5+TIDW+IFM25Xgu
uAmsvKpiZhDRmKQGdnlkSSy7D8dYkNayFSHBHs1NCblbglQIqz834tGRVmAsyNR0
IQx0xEkOMdt4whpeDdnJWpEf3DYXR1+zqT5ETlkINT2Exy5akuzL2ImjDb2YGg6m
61x0qVeWYHFiKeIyOR9wlAa2D8iz8A==
=ERxi
-----END PGP SIGNATURE-----
Merge tag '3.9.11' into 4.0-dev
Joomla! 3.9.11
2019-09-01 01:25:04 +01:00
wilsonge
d67fe4d7bf
Joomla! 3.9.8 release
...
-----BEGIN PGP SIGNATURE-----
iQHIBAABCgAyFiEEc8tLlhrb4aveTfJiRzuTXEnqGwgFAl0AB8EUHGxlaXRobmVy
QGl0cm9uaWMuYXQACgkQRzuTXEnqGwjJugv8DY7CYZLAKfq9zEXwh+vKDAMG91oL
rNg4KWdyz0Hm/peXkxVDefn1Pwqnb5b9szsKVOweNnQy4jguZ+M2yh+VS+2ftSAr
ptCYVcainnX0trPGONqBQSubYmwqqRq+A22tCt0yKidzNZJGCpZAylWee58cpGpg
9nzeLU1+ovaLqKoip1xm+C5qZFmK3+no99hHJErJ8NxhnKNVXFGlP2hz1zpSlPT1
XA4hsEj/EyzhQRUEUVAPoa978YmvICKiR0JqN+es/fte+AijC84rwYUeyKcu8Yzd
G+rEjwvGghiLmq76++dWWZ5dV8qFrLup54iN4IxZJUbmd92349auUmU6R0DlZ2e5
L0av6mtgeJzCp9QZLmQTATp+BMtvWzr0uGqhTb3M660fVShbHS8EbxYdjxfrMnrq
wJTN6qibeC0qGnr58zs57Qz/c2/+S2oqEl+YL3jfXdUPFC+X2YDOIEXRVJePnQj4
acGJUbnBhSbnTbFsNlxGITPU/4D+pRL5cknR
=xfI3
-----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
iQEzBAABCAAdFiEE5a/8IjweQSgQZsLg74Exkxj8nQQFAl1qmjQACgkQ74Exkxj8
nQQd/QgAhFG13nor7SHtLd/gIlxxswe9PCjEGVFTEmjtJcvkpeER8qChFmudiDB3
9gQ8wtu2GTidX2HFUqS/Y0PnW4rc++uoy5NU88qWlmpFESchPiRGxxiAN0arS1qA
HoMgbIi81oFwiRZ4Wg7hvExRkOHgBt55oryF0/ZLFqXAl9Jbpbmw5xIjnqI1fNRA
r3sNNchaKt2m/PIUtzHFSg5OFoXD2CGCXjn/PpxrPtitLmmL9nPwH7OO8CeyqcMw
ZAah/KdQkM1FHP5xJn4bfPoEpe1IOwryz512vCag8eQm+YJP5ZaSKZDenKOIqH5d
2YfNxvFBZkYd11iFNR06GmBTG9pZdQ==
=2FID
-----END PGP SIGNATURE-----
Merge tag '3.9.8' into 4.0-dev
Joomla! 3.9.8 release
2019-08-31 17:02:58 +01:00
George Wilson
c372ec30c9
Add link to the sponsorship page
2019-07-31 23:40:03 +01:00
Hannes Papenberg
f6f6736f50
Adding @hackwar for tests and cleanup ( #25674 )
2019-07-21 19:49:00 +02:00
