dependabot[bot]
44baf3b723
build(deps): bump dsanders11/project-actions from 1.1.0 to 1.2.0 ( #93 )
...
Bumps [dsanders11/project-actions](https://github.com/dsanders11/project-actions ) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/dsanders11/project-actions/releases )
- [Changelog](https://github.com/dsanders11/project-actions/blob/main/.releaserc.json )
- [Commits](3a81985616...82e99438bd )
---
updated-dependencies:
- dependency-name: dsanders11/project-actions
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-13 09:36:06 -07:00
David Sanders
0e3b472c9a
chore: use Dependabot to update GitHub Actions deps ( #92 )
2024-03-13 09:29:12 -07:00
electron-roller[bot]
da359016d5
chore: bump electronjs/node in .circleci/config.yml to 2.2.1 ( #91 )
...
Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
2024-02-14 15:09:33 -08:00
electron-roller[bot]
5d7bdf3ff3
chore: bump electronjs/node in .circleci/config.yml to 2.2.0 ( #89 )
...
Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
2024-01-18 09:39:45 -08:00
electron-roller[bot]
16ce6ffbea
chore: bump continuousauth/npm to 2.1.0 (main) ( #87 )
...
* chore: bump continuousauth/npm in .circleci/config.yml to 2.1.0
* chore: remove cfa devDependency
---------
Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com>
Co-authored-by: George Xu <george.xu99@hotmail.com >
2023-11-21 16:19:19 -08:00
Samuel Attard
df604873fa
chore: fix audit output
2023-11-20 17:11:07 -08:00
Samuel Attard
57201b124c
chore: fix lint
v2.0.1
2023-11-20 17:02:16 -08:00
Jake
20b1b02c11
fix: ignore differences caused by merged machO files ( #66 )
...
* Ignore differences caused by merged machO files
* Fix filter indent
* Fix types & Fix error caught by type check
2023-11-20 16:59:14 -08:00
Samuel Attard
b6f0c88db4
feat: bump minimum node version to 16 and add tests ( #86 )
...
BREAKING CHANGE: Minimum node version is now 16
v2.0.0
2023-11-09 11:08:39 -08:00
Samuel Attard
bb304ce10b
fix: Revert "feat: bump minimum node version to 16 and add tests ( #86 )"
...
This reverts commit 8e2842b4a3 .
v1.5.1
2023-11-09 11:08:16 -08:00
Samuel Attard
8e2842b4a3
feat: bump minimum node version to 16 and add tests ( #86 )
...
* build: add tests
* build: bump deps
* sigh
* build: install rosetta on m1
v1.5.0
2023-11-09 10:56:22 -08:00
Baldvin Th
02119d5a83
fix: import for path now compiles correctly after TypeScript was added ( #85 )
...
* Fixing import for path after TypeScript was added
* Added esModuleInterop: true, fixed breaking imports after change
v1.4.5
2023-11-05 11:37:48 -03:00
Erik Moura
1948f1caa9
fix: use Typescript for files in entry-asar ( #83 )
v1.4.4
2023-11-02 19:10:17 -03:00
Masoud Soroush
52fa9a2a78
fix: add missing app ( #81 )
v1.4.3
2023-11-02 14:03:37 -03:00
David Sanders
4e631b7ca2
ci: add new issues and pull requests to project board ( #82 )
2023-11-02 09:40:21 -07:00
Samuel Attard
fe1a0e06b0
build: update debug transitively to fix audit output
2023-10-30 23:18:49 -07:00
Felix Rieseberg
9a808beecc
fix: Run app.setAppPath() with the right path ( #78 )
...
* Fix: Run app.setAppPath() with the right path
* Implement feedback <3
* test: Add linting
v1.4.2
2023-09-06 08:52:08 -07:00
David Sanders
381ca1a748
chore: fix lint and add lint to CI job ( #79 )
2023-08-31 11:17:25 -07:00
David Sanders
0d2b974dcc
ci: use electronjs/node orb ( #77 )
...
* ci: use electronjs/node orb
* ci: bump orb version
* ci: expand test matrix
* ci: update config
* ci: bump orb version
2023-08-25 06:45:53 -07:00
dependabot[bot]
0cfaddcc77
build(deps): bump semver from 5.7.1 to 5.7.2 ( #74 )
...
Bumps [semver](https://github.com/npm/node-semver ) from 5.7.1 to 5.7.2.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v5.7.1...v5.7.2 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-04 14:40:00 -07:00
Koushik Dutta
fddff57c15
fix: arm64/x64 inputs may contain universal binaries that are not the same ( #62 )
...
* Mach-O types are in big endian format
One of my dependencies for some reason has two universal binaries per platform, and they are not exactly the same bytewise. I'm unsure why. But I am certain they are functional.
In any case, this error is erroneously being thrown since it fails the previous byte comparison match.
```ts
throw new Error(`Can't reconcile two non-macho files ${file}`);
```
CAFEBABE and FEEDFACE magics for universal binaries. This will allow packaging to continue if both the arm and x64 packages have universal binaries.
* Update asar-utils.ts
* Update asar-utils.ts
v1.4.1
2023-06-24 23:09:09 -07:00
Samuel Attard
b02ce7697f
feat: add infoPlistsToIgnore prop to prevent modification ( #72 )
v1.4.0
2023-06-24 22:38:09 -07:00
David Sanders
85b1f90f2c
docs: update status badges in README.md ( #73 )
2023-06-07 11:45:28 -07:00
David Sanders
3ecbbd5710
ci: use action-semantic-pull-request ( #71 )
...
Refs https://github.com/electron/electron/pull/33857 .
Since this repo uses CFA releases, enforce semantic commit messages.
2023-05-15 12:11:03 -07:00
Samuel Attard
8bff0b7579
build: use gen2 macOS resource class ( #65 )
2023-02-07 15:07:33 -08:00
dependabot[bot]
283773eb45
build(deps): bump http-cache-semantics from 4.1.0 to 4.1.1 ( #64 )
...
Bumps [http-cache-semantics](https://github.com/kornelski/http-cache-semantics ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/kornelski/http-cache-semantics/releases )
- [Commits](https://github.com/kornelski/http-cache-semantics/compare/v4.1.0...v4.1.1 )
---
updated-dependencies:
- dependency-name: http-cache-semantics
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-04 13:49:22 -08:00
David Sanders
a99ae94fc2
chore: add LICENSE file to match package.json ( #63 )
2023-01-31 11:14:06 -08:00
David Sanders
0d70c1c39f
chore: set @wg-ecosystem as CODEOWNERS ( #60 )
2023-01-25 15:23:49 -08:00
Samuel Attard
ba587f0a08
build: use cfa orb
2022-12-24 17:09:55 +13:00
Samuel Attard
580002844b
build: update dependencies to clean up 'yarn audit'
2022-11-26 19:08:03 -08:00
Samuel Attard
365775311f
fix: update dir-compare for minimatch redos
v1.3.4
2022-11-26 18:58:59 -08:00
Quang Lam
1fc0005ae8
fix: merged ASAR does not unpack when there is only one unpacked file ( #55 )
v1.3.3
2022-10-18 17:17:11 -07:00
Samuel Attard
64cbc83faf
build: configure semantic release for main branch
v1.3.2
2022-10-18 16:08:05 -07:00
Samuel Attard
691e4ef31d
fix: migrate from asar to @electron/asar
2022-10-18 16:06:38 -07:00
Samuel Attard
d902197267
build: migrate master <-> main
2022-10-18 16:05:13 -07:00
Mike Maietta
72a3f83d27
fix: export MakeUniversalOpts ( #48 )
...
This is to allow other packages to extract specific logic/options with typesafety
v1.3.1
2022-10-03 00:05:29 -07:00
Samuel Attard
3cc1365561
Update config.yml
2022-10-03 00:04:43 -07:00
dependabot[bot]
3a30fe989b
build(deps): bump plist from 3.0.4 to 3.0.5 ( #44 )
...
Bumps [plist](https://github.com/TooTallNate/node-plist ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/TooTallNate/node-plist/releases )
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md )
- [Commits](https://github.com/TooTallNate/node-plist/commits )
---
updated-dependencies:
- dependency-name: plist
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v1.3.0
2022-06-01 13:06:11 -07:00
Jesse Vincent
01dfb8a963
feat: don't lipo binaries that are identical in the x64 and arm64 versions and match an allowlist ( #47 )
...
* fix: Don’t lipo binaries that are already a universal file or the same arch #17
Some Mach-O files may have already been fat binaries and will throw an error if lipoed again.
Co-authored-by: Mitch Cohen <mitch@1password.com >
Co-authored-by: Nick McGuire <nick.mcguire@1password.com >
* Add a x64ArchFiles config key to allow allow-listing of files that are only always x64Arch
Co-authored-by: Andrew Beyer <beyer@1password.com >
Co-authored-by: Mitch Cohen <mitch@1password.com >
Co-authored-by: Nick McGuire <nick.mcguire@1password.com >
2022-06-01 13:05:54 -07:00
dependabot[bot]
3bd173d61a
build(deps): bump minimist from 1.2.5 to 1.2.6
...
Bumps [minimist](https://github.com/substack/minimist ) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases )
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6 )
---
updated-dependencies:
- dependency-name: minimist
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-03-29 18:07:33 -07:00
Samuel Attard
479e80d6a9
fix: handle MainMenu.nib mismatch in Electron 18 ( #42 )
v1.2.1
2022-03-09 11:04:13 -08:00
dependabot[bot]
2c3c1a60a0
build(deps): bump node-fetch from 2.6.1 to 2.6.7 ( #38 )
...
Bumps [node-fetch](https://github.com/node-fetch/node-fetch ) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases )
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7 )
---
updated-dependencies:
- dependency-name: node-fetch
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-03 11:50:56 -08:00
dependabot[bot]
cdcbe58dee
build(deps): bump trim-off-newlines from 1.0.1 to 1.0.3 ( #37 )
...
Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines ) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/stevemao/trim-off-newlines/releases )
- [Commits](https://github.com/stevemao/trim-off-newlines/compare/v1.0.1...v1.0.3 )
---
updated-dependencies:
- dependency-name: trim-off-newlines
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-03 11:50:50 -08:00
Fedor Indutny
38ab1c3559
feat: add option to merge ASARs ( #34 )
...
* feat: fuse ASARs
* Rename, improve
* Rename option
* Drop universal from MACHO_MAGIC
v1.2.0
2022-01-25 10:35:57 +13:00
Charles Kerr
9f86e1dd2b
Merge pull request #30 from v-gjy/patch-1
...
chore: add repository info to package.json
2021-10-19 12:54:39 -05:00
Jingying Gu
a626463c95
Update package.json to include the repository
...
Hi there!
This change adds the repository property to your package.json file(s). Having this available provides a number of benefits to security tooling. For example, it allows for greater trust by checking for signed commits, contributors to a release and validating history with the project. It also allows for comparison between the source code and the published artifact in order to detect attacks on authors during the publication process.
We validate that we're making a PR against the correct repository by comparing the metadata for the published artifact on [npmjs.com](www.npmjs.com) against the metadata in the package.json file in the repository.
This change is provided by a team at Microsoft -- we're happy to answer any questions you may have. (Members of this team include [@s-tuli](https://github.com/s-tuli ), [@iarna](https://github.com/iarna ), [@rancyr](https://github.com/v-rr ), [@Jaydon Peng](https://github.com/v-jiepeng ), [@Zhongpeng Zhou](https://github.com/v-zhzhou ) and [@Jingying Gu](https://github.com/v-gjy )). If you would prefer that we not make these sorts of PRs to projects you maintain, please just say. If you'd like to learn more about what we're doing here, we've prepared a document talking about both this project and some of our other activities around supply chain security here: [microsoft/Secure-Supply-Chain](https://github.com/microsoft/Secure-Supply-Chain )
This PR provides repository metadata for the following packages:
* @electron/universal
2021-10-18 14:15:32 +08:00
Samuel Attard
36b58a84f3
feat: add support for auto-merging ElectronAsarIntegrity values
v1.1.0
2021-09-15 12:50:03 -07:00
dependabot[bot]
fe8d99e31d
build(deps): bump tar from 4.4.15 to 4.4.19
...
Bumps [tar](https://github.com/npm/node-tar ) from 4.4.15 to 4.4.19.
- [Release notes](https://github.com/npm/node-tar/releases )
- [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-tar/compare/v4.4.15...v4.4.19 )
---
updated-dependencies:
- dependency-name: tar
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-09-02 11:43:24 -07:00
dependabot[bot]
d336231787
build(deps): bump path-parse from 1.0.6 to 1.0.7
...
Bumps [path-parse](https://github.com/jbgutierrez/path-parse ) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases )
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7 )
---
updated-dependencies:
- dependency-name: path-parse
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-08-12 15:49:25 -07:00
Samuel Attard
6cd85d89aa
chore: update deps
2021-07-30 01:36:40 -07:00