github-mirrors/yt-dlp
1
0
Fork 0
mirror of https://github.com/yt-dlp/yt-dlp.git synced 2026-11-03 19:32:46 +02:00
Code Issues Packages Projects Releases Wiki Activity
24,035 Commits 1 Branch 142 Tags
master
Commit Graph
17 Commits
Author SHA1 Message Date
dlp-botandbashonly fd26888eb0 [ci] Update 7 actions in 9 workflows (#17925) 
* Bump actions/download-artifact v8.0.1 => v8.0.2
* Bump actions/setup-node v7.0.0 => v7.1.0
* Bump actions/setup-python v7.0.0 => v7.1.0
* Bump actions/upload-artifact v7.0.1 => v7.0.2
* Bump github/codeql-action v4.38.2 => v4.39.1
* Bump pypa/gh-action-pypi-publish v1.14.2 => v1.14.3
* Bump zizmorcore/zizmor-action v0.6.4 => v0.8.0

Authored by: bashonly, dlp-bot

Co-authored-by: bashonly <bashonly@protonmail.com>
 2026-10-26 20:16:22 +00:00
dlp-botandbashonly 779f599669 [ci] Update 3 actions in 3 workflows (#17748) 
* Bump docker/setup-qemu-action v4.2.0 => v4.4.0
* Bump github/codeql-action v4.37.7 => v4.38.2
* Bump zizmorcore/zizmor-action v0.6.2 => v0.6.4
* Use self-repository syntax in reusable workflow calls

Authored by: bashonly, dlp-bot

Co-authored-by: bashonly <bashonly@protonmail.com>
 2026-09-27 21:12:35 +00:00
dlp-bot 874af899e7 [ci] Update 7 actions in 10 workflows (#17345) 
* Bump actions/checkout v7.0.0 => v7.0.1
* Bump actions/setup-node v6.4.0 => v7.0.0
* Bump actions/setup-python v6.3.0 => v7.0.0
* Bump denoland/setup-deno v2.0.4 => v2.0.5
* Bump github/codeql-action v4.36.3 => v4.37.7
* Bump pypa/gh-action-pypi-publish v1.14.0 => v1.14.2
* Bump zizmorcore/zizmor-action v0.5.7 => v0.6.2

Authored by: dlp-bot
 2026-08-16 01:54:39 +00:00
dlp-bot 84db5246fa [ci] Update 5 actions in 8 workflows (#17024) 
* Bump actions/cache v5.0.5 => v6.1.0
* Bump actions/setup-python v6.2.0 => v6.3.0
* Bump docker/setup-qemu-action v4.1.0 => v4.2.0
* Bump github/codeql-action v4.36.2 => v4.36.3
* Bump zizmorcore/zizmor-action v0.5.6 => v0.5.7

Authored by: dlp-bot
 2026-07-02 18:18:59 +00:00
dlp-bot da99b21b2d [ci] Bump actions/checkout v6.0.3 => v7.0.0 (#17015) 
Authored by: dlp-bot
 2026-06-20 23:11:44 +00:00
dlp-bot 59bba1be7b [ci] Update 3 actions in 9 workflows (#16782) 
* Bump actions/checkout v6.0.2 => v6.0.3
* Bump docker/setup-qemu-action v4.0.0 => v4.1.0
* Bump github/codeql-action v4.35.5 => v4.36.2

Authored by: dlp-bot
 2026-06-09 00:52:34 +00:00
dlp-bot 125bb40468 [ci] Update 2 actions in 2 workflows (#16743) 
* Bump github/codeql-action v4.35.2 => v4.35.5
* Bump zizmorcore/zizmor-action v0.5.3 => v0.5.6

Authored by: dlp-bot
 2026-05-22 17:23:03 +00:00
bashonly a85b386212 [ci] Update 8 actions in 7 workflows (#16384) 
* Bump actions/cache v5.0.3 => v5.0.5
* Bump actions/setup-node v6.3.0 => v6.4.0
* Bump actions/upload-artifact v7.0.0 => v7.0.1
* Bump denoland/setup-deno v2.0.3 => v2.0.4
* Bump github/codeql-action v4.33.0 => v4.35.2
* Bump pypa/gh-action-pypi-publish v1.13.0 => v1.14.0
* Bump rhysd/actionlint 1.7.11 => 1.7.12
* Bump zizmorcore/zizmor-action v0.5.2 => v0.5.3

Authored by: bashonly
 2026-05-16 00:24:12 +00:00
bashonly 4fc768b7f7 [ci] Bump actions pins (#16252) 
* Bump actions/cache v5.0.2 → v5.0.3
* Bump actions/download-artifact v7.0.0 → v8.0.1
* Bump actions/setup-node v6.2.0 → v6.3.0
* Bump actions/upload-artifact v6.0.0 → v7.0.0
* Bump docker/setup-qemu-action v3.7.0 → v4.0.0
* Bump github/codeql-action v4.31.9 → v4.33.0
* Bump oven-sh/setup-bun v2.1.2 → v2.2.0
* Bump zizmorcore/zizmor-action v0.4.1 → v0.5.2
* Bump actionlint v1.7.9 → v1.7.11
* Bump zizmor v1.22.0 → v1.23.1
* Adapt zizmor configuration to new version

Authored by: bashonly
 2026-03-17 18:04:32 +00:00
bashonlyseproSimon Sawicki
 		a65349443b [cleanup] Misc (#15430) 
Authored by: bashonly, Grub4K, seproDev

Co-authored-by: sepro <sepro@sepr0.com>
Co-authored-by: Simon Sawicki <contact@grub4k.dev>
 2026-01-29 16:22:35 +00:00
bashonly ab3ff2d5dd [build] Harden CI/CD pipeline (#15387) 
* NOTE: the release workflows' new handling of secrets
  may be a breaking change for forks that are using any secrets
  other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN.

  Previously, the release workflow would try to resolve a token
  secret name based on the `target` or `source` input,
  e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN,
  and then fall back to using the ARCHIVE_REPO_TOKEN secret if the
  resolved token secret name was not found in the repository.

  This behavior has been replaced by the release workflow
  always using the ARCHIVE_REPO_TOKEN secret as the token
  for publishing releases to any external archive repository.

* Add zizmor CI job for auditing workflows

* Pin all actions to commit hashes instead of symbolic references

* Explicitly set GITHUB_TOKEN permissions at the job level

* Use actions/checkout with `persist-credentials: false` whenever possible

* Remove/replace template expansions in workflow scripts

* Remove all usage of actions/cache from build/release workflows

* Remove the cache-warmer.yml workflow

* Remove the unused download.yml workflow

* Set concurrency limits for any workflows that are triggered by PRs

* Avoid loading the entire secrets context

* Replace usage of `secrets: inherit` with explicit `secrets:` blocks

* Pin all external docker images to hash that are used by the build workflow

* Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail

* Ensure any pwsh steps will fail on non-zero exit codes

Authored by: bashonly
 2025-12-30 21:05:10 +00:00
bashonly a6a8f6b6d6 [ci] Explicitly declare permissions and limit credentials (#15324) 
Authored by: bashonly
 2025-12-19 19:22:23 +00:00
bashonlyseproYehan Wasurarezky_nightky
 		7a52ff29d8 [cleanup] Misc (#15016) 
Closes #15160, Closes #15184
Authored by: bashonly, seproDev, RezSat, oxyzenQ

Co-authored-by: sepro <sepro@sepr0.com>
Co-authored-by: Yehan Wasura <yehantest@gmail.com>
Co-authored-by: rezky_nightky <with.rezky@gmail.com>
 2025-12-07 23:58:34 +00:00
seproandbashonly c7bda2192a [cleanup] Misc (#14594) 
Authored by: seproDev, bashonly

Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>
 2025-10-15 11:16:50 +00:00
bashonlyStefan LobbenmeierdirkfSimon Sawicki
 		4985a40417 [cleanup] Misc (#12238) 
Authored by: StefanLobbenmeier, dirkf, Grub4K

Co-authored-by: Stefan Lobbenmeier <Stefan.Lobbenmeier@gmail.com>
Co-authored-by: dirkf <fieldhouse@gmx.net>
Co-authored-by: Simon Sawicki <contact@grub4k.xyz>
 2025-02-19 02:29:29 +00:00
bashonly 5438593a35 [ci] Bump actions/checkout to v4 
Authored by: bashonly
 2023-11-12 18:30:01 -06:00
Jorge 6355b5f1e1 [misc] Add CodeQL workflow (#7497) 2023-07-06 20:21:46 +05:30