Commit graph

9143 commits

Author SHA1 Message Date
dependabot[bot]
c71cedf9f4
Bump helm/chart-releaser-action from 1.1.0 to 1.4.0
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.1.0 to 1.4.0.
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](https://github.com/helm/chart-releaser-action/compare/v1.1.0...v1.4.0)

---
updated-dependencies:
- dependency-name: helm/chart-releaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-06 20:20:23 +00:00
Lauri Ojansivu
b7f62cf5f2 Updated ChangeLog. 2022-06-06 15:00:22 +03:00
Lauri Ojansivu
dfea3d0e73 Removed lightbox that caused bugs like Maximum stack size exceeded. TODO later: Add a new way to open attachment image bigger.
Thanks to xet7 !

Related #4545
2022-06-06 14:58:45 +03:00
Lauri Ojansivu
e4e1a8f4e6 Updated ChangeLog. 2022-06-06 10:45:56 +03:00
Lauri Ojansivu
43b2d71404 Upgraded to Meteor 2.7.3 .
Thanks to Meteor developers !
2022-06-06 10:41:49 +03:00
Lauri Ojansivu
c9f8e111c5 Updated ChangeLog. 2022-06-06 10:34:48 +03:00
Lauri Ojansivu
67596602d7 Merge branch 'master' of github.com:wekan/wekan 2022-06-06 10:33:13 +03:00
Lauri Ojansivu
5af4f54f4c Added translations: Moroccan Arabic (ary) and Standard Moroccan Tamazight (zgh).
Thanks to translators!
2022-06-06 10:32:36 +03:00
Lauri Ojansivu
0d7d38b358
Merge pull request #4543 from turrisxyz/Dependency-GitHub 2022-06-02 05:51:49 +03:00
naveen
680770a7df chore(deps): Included dependency review
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-01 23:35:00 +00:00
Lauri Ojansivu
14c3432896
Merge pull request #4539 from wekan/dependabot/github_actions/github/codeql-action-2
Bump github/codeql-action from 1 to 2
2022-05-31 05:17:43 +03:00
Lauri Ojansivu
34fc724d95
Merge pull request #4537 from wekan/dependabot/github_actions/docker/login-action-2
Bump docker/login-action from 1.9.0 to 2
2022-05-31 05:17:11 +03:00
dependabot[bot]
1ed2c3b45a
Bump docker/login-action from 1.9.0 to 2
Bumps [docker/login-action](https://github.com/docker/login-action) from 1.9.0 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](28218f9b04...49ed152c8e)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 02:16:56 +00:00
Lauri Ojansivu
81f74f4db6
Merge pull request #4536 from wekan/dependabot/github_actions/docker/metadata-action-4.0.1
Bump docker/metadata-action from 3.3.0 to 4.0.1
2022-05-31 05:16:33 +03:00
Lauri Ojansivu
b5bc07d2e7
Merge pull request #4535 from wekan/dependabot/github_actions/actions/checkout-3
Bump actions/checkout from 2 to 3
2022-05-31 05:15:57 +03:00
Lauri Ojansivu
85fcaff678
Merge pull request #4538 from wekan/dependabot/github_actions/actions/cache-3
Bump actions/cache from 2 to 3
2022-05-31 05:15:11 +03:00
dependabot[bot]
d5247daf8a
Bump github/codeql-action from 1 to 2
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 02:12:27 +00:00
dependabot[bot]
9ff87d189f
Bump actions/cache from 2 to 3
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 02:12:24 +00:00
dependabot[bot]
2d36116823
Bump docker/metadata-action from 3.3.0 to 4.0.1
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3.3.0 to 4.0.1.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](98669ae865...69f6fc9d46)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 02:12:17 +00:00
dependabot[bot]
9f0b9b29a5
Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-31 02:12:13 +00:00
Lauri Ojansivu
1d7e08390c
Merge pull request #4534 from turrisxyz/Dependabot-GitHub-Actions
chore: Included githubactions in the dependabot config
2022-05-31 05:11:48 +03:00
naveen
bbffa2eb6b chore: Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-31 01:40:38 +00:00
Lauri Ojansivu
52ea940265
Merge pull request #4533 from turrisxyz/Pinned-Dependencies-GitHub
chore: Set permissions for GitHub actions
2022-05-30 04:15:47 +03:00
neilnaveen
355b358fe2 chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
2022-05-30 01:09:08 +00:00
Lauri Ojansivu
d74662bfd7 Updated ChangeLog. 2022-05-29 00:26:23 +03:00
Lauri Ojansivu
e151da7163 Updated ChangeLog. 2022-05-29 00:24:42 +03:00
Lauri Ojansivu
1c71baec81 Update package-lock.json 2022-05-28 23:17:03 +03:00
Lauri Ojansivu
9382c2cd04 v6.27 2022-05-28 23:10:25 +03:00
Lauri Ojansivu
25e50e3908 Upgraded to Meteor 2.7.3-beta.0 .
Thanks to Meteor developers !
2022-05-28 22:58:04 +03:00
Lauri Ojansivu
c6331830d4 Updated translations. 2022-05-28 22:38:17 +03:00
Lauri Ojansivu
4226a0bc37 Updated ChangeLog. 2022-05-24 00:47:35 +03:00
Lauri Ojansivu
693a49f852 Try to fix Snap. Part 8.
Thanks to xet7 !
2022-05-24 00:46:41 +03:00
Lauri Ojansivu
0b797ceb7e Updated ChangeLog. 2022-05-24 00:33:06 +03:00
Lauri Ojansivu
2587e2f00a Try to fix Snap. Part 7.
Thanks to xet7 !
2022-05-24 00:32:20 +03:00
Lauri Ojansivu
6ad83bcaeb Updated ChangeLog. 2022-05-24 00:15:29 +03:00
Lauri Ojansivu
f2815a9039 Try to fix Snap. Part 6.
Thanks to xet7 !
2022-05-24 00:14:12 +03:00
Lauri Ojansivu
6d7e69cc9f Updated ChangeLog. 2022-05-24 00:02:19 +03:00
Lauri Ojansivu
fac1ba5952 Try to fix Snap. Part 5.
Thanks to xet7 !
2022-05-24 00:01:13 +03:00
Lauri Ojansivu
3db14ad03a Updated ChangeLog. 2022-05-23 23:45:16 +03:00
Lauri Ojansivu
9ca26d22d0 Try to fix Snap. Part 4.
Thanks to xet7 !
2022-05-23 23:44:16 +03:00
Lauri Ojansivu
7640c7c04d Updated ChangeLog. 2022-05-23 23:23:34 +03:00
Lauri Ojansivu
ea66eca60d Try to fix Snap. Part 3: Added --unsafe-perm to npm install.
Thanks to xet7 !

Related https://github.com/wekan/wekan/issues/4505#issuecomment-1135101672
2022-05-23 23:22:00 +03:00
Lauri Ojansivu
0ae8de4c04 Updated ChangeLog. 2022-05-23 22:58:45 +03:00
Lauri Ojansivu
e50d69cfb7 Try to fix Snap. Part 2.
Thanks to xet7 !
2022-05-23 22:57:36 +03:00
Lauri Ojansivu
d95436df51 Updated ChangeLog. 2022-05-23 22:34:39 +03:00
Lauri Ojansivu
3b419848d1 Try to fix Snap.
Thanks to xet7 !

Related #4524,
related #4423
2022-05-23 22:32:45 +03:00
Lauri Ojansivu
8efc8605a1 Updated ChangeLog. 2022-05-23 14:09:07 +03:00
Lauri Ojansivu
4f44c5bf87 Removed wekan-accounts-sandstorm .test-app directory, that could not be git cloned on Windows.
Thanks to xet7 !
2022-05-23 13:39:55 +03:00
Lauri Ojansivu
4b12245537 Updated ChangeLog. 2022-05-23 00:53:17 +03:00
Lauri Ojansivu
adcc33ed7f Fix opening card scrolls to wrong position when many swimlanes and card at bottom of board.
Thanks to xet7 !
2022-05-23 00:50:21 +03:00