68 Commits

Author SHA1 Message Date
dependabot[bot]
90a6995906 chore(deps): bump ruby/setup-ruby from 1.278.0 to 1.287.0 (#2174)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 16:59:13 -05:00
Sebastian Beltran
5efeac806e ci: remove Lighthouse audit workflow (#2171) 2026-01-29 21:53:23 -05:00
Jon Church
74108b7375 ci(deploy): ensure .well-known dir is uploaded to gh-pages (#2162) 2026-01-20 15:39:00 -05:00
Sebastian Beltran
ab6682cd1e ci: Fix error in the workflow. (#2159) 2026-01-20 11:42:57 -05:00
Sebastian Beltran
9bb1ff2109 docs: add security.txt (#1974)
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: shubham oulkar <91728992+ShubhamOulkar@users.noreply.github.com>
Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>
Co-authored-by: Jon Church <me@jonchurch.com>
2026-01-19 15:55:57 -05:00
dependabot[bot]
854c50eb82 chore(deps): bump actions/upload-artifact from 5 to 6 (#2148)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 15:57:30 -05:00
dependabot[bot]
f5f9757fb7 chore(deps): bump crowdin/github-action from 2.12.0 to 2.13.0 (#2150)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-04 12:57:02 -05:00
dependabot[bot]
1eaa6c17a9 chore(deps): bump ruby/setup-ruby from 1.270.0 to 1.278.0 (#2149)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-04 12:56:42 -05:00
dependabot[bot]
56bae20508 chore(deps): bump ruby/setup-ruby from 1.267.0 to 1.268.0 (#2124)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-12-13 20:02:03 -05:00
dependabot[bot]
691e344ed3 chore(deps): bump actions/checkout from 5 to 6 (#2123)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-12-13 19:58:02 -05:00
dependabot[bot]
812bb5422c chore(deps): bump github/codeql-action from 3 to 4 (#2099)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-11-07 18:04:18 -05:00
dependabot[bot]
859c28575f chore(deps): bump crowdin/github-action from 2.11.0 to 2.12.0 (#2097)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-11-07 18:04:00 -05:00
dependabot[bot]
17da555ec3 chore(deps): bump actions/setup-node from 5 to 6 (#2098)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-11-07 13:48:02 -05:00
dependabot[bot]
33a856bbe9 chore(deps): bump actions/upload-artifact from 4 to 5 (#2095)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-11-07 13:38:17 -05:00
dependabot[bot]
02497293e3 chore(deps): bump ruby/setup-ruby from 1.263.0 to 1.267.0 (#2096)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-11-07 13:37:05 -05:00
dependabot[bot]
69cdaa2a44 chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#2074)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-10-18 17:28:22 -05:00
dependabot[bot]
e545090f08 chore(deps): bump ruby/setup-ruby from 1.257.0 to 1.263.0 (#2072)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-10-18 17:25:59 -05:00
dependabot[bot]
e00b0660ad chore(deps): bump actions/github-script from 7 to 8 (#2071)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-10-18 17:20:30 -05:00
dependabot[bot]
48789f639a chore(deps): bump actions/setup-node from 4 to 5 (#2073)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-04 16:33:17 -05:00
dependabot[bot]
7f59bcc89c chore(deps): bump crowdin/github-action from 2.10.0 to 2.11.0 (#2070)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-04 16:22:32 -05:00
shubham oulkar
00e199ad99 feat : improve language picker component (#2040)
Signed-off-by: Shubham Oulkar <oulkarshubhu@gmail.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-09-14 09:32:41 -05:00
dependabot[bot]
72ff6baa31 chore(deps): bump actions/checkout from 4 to 5 (#2054)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-02 10:05:26 +02:00
dependabot[bot]
1a79fcaab3 chore(deps): bump crowdin/github-action from 2.9.1 to 2.10.0 (#2053)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-02 10:05:16 +02:00
dependabot[bot]
e526272c2e chore(deps): bump actions/upload-pages-artifact from 3 to 4 (#2052)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-02 10:03:06 +02:00
dependabot[bot]
9b41d4dc45 chore(deps): bump ruby/setup-ruby from 1.254.0 to 1.257.0 (#2051)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-02 10:00:47 +02:00
shubham oulkar
4106a902f3 ci: skip Lighthouse audit when Netlify preview is not live (#2048) 2025-08-30 20:52:52 -05:00
Sebastian Beltran
5df99fe254 ci: fix multiple comments in Lighthouse workflow (#2030)
* ci: fix multiple comments in Lighthouse workflow

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

* fix comment

---------

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: shubham oulkar <91728992+ShubhamOulkar@users.noreply.github.com>
2025-08-04 09:16:56 +05:30
Sebastian Beltran
69c03457e9 ci: fix security alert for Lighthouse workflow (#2031)
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-08-04 09:03:08 +05:30
Sebastian Beltran
76bbf94db0 ci: remove base_url from crowdin workflows (#1979)
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: shubham oulkar <91728992+ShubhamOulkar@users.noreply.github.com>
2025-08-02 10:32:15 -05:00
shubham oulkar
74fcef53bc ci(lighthouse) : remove seo results (#1998)
remove seo results
2025-08-02 20:54:32 +05:30
dependabot[bot]
d5eb506b2b chore(deps): bump crowdin/github-action from 2.8.0 to 2.9.1 (#1997)
Bumps [crowdin/github-action](https://github.com/crowdin/github-action) from 2.8.0 to 2.9.1.
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](297234bae0...590c05e09a)

---
updated-dependencies:
- dependency-name: crowdin/github-action
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-08-01 18:55:42 -05:00
dependabot[bot]
3751b43911 chore(deps): bump ruby/setup-ruby from 1.245.0 to 1.254.0 (#1996)
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.245.0 to 1.254.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](a4effe49ee...2a7b30092b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: bjohansebas <103585995+bjohansebas@users.noreply.github.com>
2025-08-01 18:53:49 -05:00
shubham oulkar
c75ec31341 ci: run lighthouse report (#1985) 2025-08-01 13:41:48 -05:00
dependabot[bot]
6a57f3900f chore(deps): bump crowdin/github-action from 2.7.0 to 2.8.0 (#1959)
Bumps [crowdin/github-action](https://github.com/crowdin/github-action) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/crowdin/github-action/releases)
- [Commits](b8012bd549...297234bae0)

---
updated-dependencies:
- dependency-name: crowdin/github-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-11 12:57:54 -05:00
dependabot[bot]
90784d7559 chore(deps): bump ruby/setup-ruby from 1.207.0 to 1.245.0 (#1958)
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.207.0 to 1.245.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/v1.207.0...a4effe49ee8ee5b8b5091268c473a4628afb5651)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.245.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-11 12:47:21 -05:00
Sebastian Beltran
57cbe6cdcd ci: update workflows (#1924)
* ci: update CI workflows to handle pull request reviews

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

* chore: update codeowners

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

* Update .github/workflows/ci.yml

---------

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-06-24 19:41:01 -05:00
dependabot[bot]
951e88c5cb chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#1937)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...05b42c6244)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-20 19:26:46 -05:00
dependabot[bot]
c8a13b71aa chore(deps): bump ruby/setup-ruby from 1.207.0 to 1.244.0 (#1918)
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.207.0 to 1.244.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](4a9ddd6f33...13e7a03dc3)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.244.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-29 10:15:26 -05:00
dependabot[bot]
14295d36cb chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 (#1917)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](62b2cac7ed...f49aabe0b5)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-29 10:12:49 -05:00
Sebastian Beltran
308cdf4940 codeql: remove ruby from CodeQL language matrix (#1926)
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-05-28 09:15:48 -05:00
StepSecurity Bot
fc56d27543 [StepSecurity] Apply security best practices (#1905)
* [StepSecurity] Apply security best practices

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Update .github/dependabot.yml

* Delete .github/workflows/dependency-review.yml

* Update dependabot.yml

* ci: pin crowdin actions

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

---------

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: Ulises Gascón <ulisesgascongonzalez@gmail.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-05-27 21:15:08 -05:00
github-actions[bot]
dcdef7dc24 New Crowdin Translations (#1874)
* New Crowdin translations by GitHub Action

* remove id, ru, sk, th, tr, uk, uz langs

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

* fix index.md

* ci: separates the upload of content to Crowdin from the download of content (https://github.com/expressjs/expressjs.com/pull/1864)

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>

---------

Signed-off-by: Sebastian Beltran <bjohansebas@gmail.com>
Co-authored-by: Crowdin Bot <support+bot@crowdin.com>
Co-authored-by: Sebastian Beltran <bjohansebas@gmail.com>
2025-05-27 20:33:08 -05:00
ctcpip
cae37bd7bc 🔒️ fix permissions on workflow 2025-04-14 15:01:41 -05:00
Chris de Almeida
db7dc3215b Revert "ci: separates the upload of content to Crowdin from the download of content" (#1865)
Reverts expressjs/expressjs.com#1864
2025-04-08 19:32:19 +00:00
Sebastian Beltran
2da701b138 ci: separates the upload of content to Crowdin from the download of content (#1864) 2025-04-08 13:22:02 -05:00
ctcpip
5c9f73f76c 🐛 fix crowdin action 2025-03-31 17:18:04 -05:00
ctcpip
f0ee73d928 🐛 fix crowdin action 2025-03-31 17:02:16 -05:00
Sebastian Beltran
e2814aee92 ci: remove CI on review submission (#1812) 2025-03-06 15:05:32 -05:00
Sebastian Beltran
502d0790f6 Do not enforce Ruby version (#1811) 2025-03-06 10:09:42 -05:00
Sebastian Beltran
85e0462654 ci: deploy website with github actions (#1767) 2025-02-17 15:56:25 -05:00