ruff/.github/workflows at dff9c753fc8a0bca81b70abb84ea7bccecbb7f71 - ruff

mirrors/ruff

0 Fork 0

mirror of https://github.com/astral-sh/ruff.git synced 2026-10-28 19:00:26 +08:00

Files

T

History

zaniebotandzaniebot dff9c753fc Lock wrangler for playground deployments (#27838 )

Pinning `cloudflare/wrangler-action` does not pin the `wrangler@4`
package it installs during deployment. Install Wrangler from a
dedicated, committed lockfile with lifecycle scripts disabled, then
invoke that local executable directly. Require `npm>=11.10.0` with
`engines.npm` and `engine-strict` so older clients cannot silently
ignore the seven-day `min-release-age` policy, and pin Node.js to
`24.19.0` at the install sites. Both playgrounds now use the reviewed
dependency tree already recorded for the playground API, and Cloudflare
credentials are passed only to the deployment command.

Related: astral-sh/ruff#27839 isolates the playground builds from
deployment credentials, and astral-sh/ruff#27844 enforces the
corresponding `npm` floor in the existing package roots.
astral-sh/ruff-vscode#1152 and astral-sh/ty-vscode#526 likewise give
credentialed publishers their own locked toolchains.

---------

Co-authored-by: zaniebot <242828183+zaniebot@users.noreply.github.com>

2026-08-19 10:12:55 -05:00

build-binaries.yml

Disable known GitHub cache clients in release workflows (#27846 )

2026-08-18 22:03:17 +00:00

build-docker.yml

Disable known GitHub cache clients in release workflows (#27846 )

2026-08-18 22:03:17 +00:00

build-wasm.yml

Disable cache-aware actions throughout release workflows (#27854 )

2026-08-18 16:38:52 -05:00

ci.yaml

Lock wrangler for playground deployments (#27838 )