protobuf

Commit Graph

Author	SHA1	Message	Date
Adam Cozzette	a2f3fd0367	Upgrade our `emulation` and `tcmalloc` Docker images This will pull in a change allowing us to exclude Bazel targets using the `-//foo:bar` syntax. PiperOrigin-RevId: 558149395	1 year ago
Mike Kruskal	fff4905588	Drop support for Bazel 5. This moves all our CI to Bazel 6 and drops the additional parameterization we had on Bazel version. PiperOrigin-RevId: 551986376	1 year ago
Mike Kruskal	a80daa2a2c	Drop support for Bazel 5. This moves all our CI to Bazel 6 and drops the additional parameterization we had on Bazel version. PiperOrigin-RevId: 551986376	1 year ago
Joyce	010fde9a18	Set top level permissions to read only on GitHub Workflows (#12971 ) Hi, here is Joyce from Google again. I'd like starting suggesting the [Token-Permission check](https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions) fix. Let me know if I might be missing any permission. Thanks! ### Security Reason This is needed because, by default, github grants write-all permission to all workflows, which could be exploit by an attacker in case of a compromised workflow. Limiting permissions is a simple and effective way to also limit the impact of an eventual compromised workflow. Thus, it is both a recommendation from [OpenSSF Scorecard](https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions) and the [Github](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions) to always use credentials that are minimally scoped. Closes #12971 COPYBARA_INTEGRATE_REVIEW=https://github.com/protocolbuffers/protobuf/pull/12971 from joycebrum:main `6d6dac5678` PiperOrigin-RevId: 537973051	2 years ago
Mike Kruskal	8a07f45293	Add release tests for statically linked binaries For now, this only covers linux on the two architectures we have testing support for. However, it serves as a good sanity check and can be expanded in the future. PiperOrigin-RevId: 514449399	2 years ago
Mike Kruskal	804ec94a16	Add release tests for statically linked binaries For now, this only covers linux on the two architectures we have testing support for. However, it serves as a good sanity check and can be expanded in the future. PiperOrigin-RevId: 514449399	2 years ago
Mike Kruskal	8ad6cdd007	Modify release artifacts for protoc to statically link system libraries. Closes #12063 PiperOrigin-RevId: 513034570	2 years ago
Mike Kruskal	723bd4c3c1	Modify release artifacts for protoc to statically link system libraries. Closes #12063 PiperOrigin-RevId: 513034570	2 years ago
Mike Kruskal	ef8ebe6c19	Migrate our shared github actions to a separate repository. This will make PRs from forked repositories significantly less painful, since they'll agree on which version of each action to use. OTOH, we'll have a separate repo that needs to be maintained, and changes to it will need to be coordinated and versioned carefully. This will likely need to be done less often though now that our infrastructure is stable. PiperOrigin-RevId: 512117705	2 years ago
Mike Kruskal	b7e0f842e9	Remove recursive checkout for purely Bazel tests This will prevent unnecessary network access. PiperOrigin-RevId: 510444213	2 years ago
Mike Kruskal	f0ef44d1e1	Migrate remaining macOS tests to GHA actions PiperOrigin-RevId: 506744609	2 years ago
Mike Kruskal	a138e54582	Migrate Python and Ruby Linux tests to GHA actions PiperOrigin-RevId: 506449977	2 years ago

9 Commits (5c33ed08556c31a1679dd7d2503284a5cabdf744)