Skip to content

3.0.4: update from main #4065

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 455 commits into from
Sep 10, 2024
Merged

Conversation

ralfhandl
Copy link
Contributor

This merges current main into v3.0.4-dev, resolving the two merge conflicts in

  • .gitignore: taken from main
  • validate-markdown.yaml: taken from v3.0.4-dev

earth2marsh and others added 30 commits February 1, 2024 09:54
Workflows run from the workflow file on main, even when they
run on branches.  But just running "npm i" or a command like "npx"
that also installs packages uses the package.json file from
the branch.

Rather than attempt to keep the branch package files up-to-date
(which would _quadruple_ the number of update PRs, adding three
branch update PRs for every dependabot PR), let's just checkout
the package.json from main whenver we run.  The other workflows
only run on main - these two are the ones that run on branches.
Always checkout JavaScript environment from main
…ekeeping time (OAI#3522)

* Remove old backlog agenda and unused tag filters from weekly meeting agenda, add housekeeping entry

* Update agenda.md

Building on Lorna's work, this:
- changes housekeeping to governance to avoid conflict with the issue label
- tightens up the instructions (wordsmithing and general cleanup)
- re-orders meeting info and CoC
- shortens the ideal time for the first two items to 5 mins

---------

Co-authored-by: Marsh Gardiner <[email protected]>
Signed-off-by: Vincent Biret <[email protected]>
Signed-off-by: Vincent Biret <[email protected]>
moving Uri to emeritus
adds missing package lock for reproductible CI
Checkout package-lock.json from main and use node v20.
Add --yes to npx because it seems to need it when run locally,
although it's probably redundant in the CI environment.  But
it's safe to include.
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 1.2.2 to 1.3.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v1.3.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
In yet another attempt to prevent people from opening PRs that
we cannot accept.
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v1.3.1/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [yaml](https://github.com/eemeli/yaml) from 2.3.4 to 2.4.0.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.3.4...v2.4.0)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
* Added security considerations document

* Update SECURITY_CONSIDERATIONS.md

Co-authored-by: Asbjørn Ulsberg <[email protected]>

* Update SECURITY_CONSIDERATIONS.md

Co-authored-by: Asbjørn Ulsberg <[email protected]>

* Add note about external references being potentially on untrusted domains

* Update SECURITY_CONSIDERATIONS.md

Co-authored-by: Ralf Handl <[email protected]>

* Update SECURITY_CONSIDERATIONS.md

Co-authored-by: Lorna Jane Mitchell <[email protected]>

* Added note about security schemes

---------

Co-authored-by: Asbjørn Ulsberg <[email protected]>
Co-authored-by: Ralf Handl <[email protected]>
Co-authored-by: Lorna Jane Mitchell <[email protected]>
Add essential policies to DEVELOPMENT.md
Thank you, @MikeRalphson , for all your contributions through the years, and we hope to see more of you in the future whenever you're able. 🙏
ralfhandl and others added 8 commits August 20, 2024 17:59
Add markdown style guide to CONTRIBUTING
EDITORS.md: list of current and former specification editors
build script: example links point to HTML wrapper on learn site
Bumps [@hyperjump/json-schema](https://github.com/hyperjump-io/json-schema) from 1.9.6 to 1.9.8.
- [Commits](hyperjump-io/json-schema@v1.9.6...v1.9.8)

---
updated-dependencies:
- dependency-name: "@hyperjump/json-schema"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
…p/json-schema-1.9.8

Bump @hyperjump/json-schema from 1.9.6 to 1.9.8
dependabot bot and others added 3 commits September 4, 2024 07:24
Bumps [yaml](https://github.com/eemeli/yaml) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@ralfhandl ralfhandl marked this pull request as ready for review September 6, 2024 07:41
Copy link
Contributor

@mikekistler mikekistler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. 👍

I reviewed this by checking out the branch locally and then diffing with main. Only 5 files are changed:

>git diff main --name-only               
.github/workflows/validate-markdown.yaml
package-lock.json
package.json
scripts/format-markdown.sh
versions/3.0.4.md

Changes to versions/3.04.md are what we want. I checked the diffs of the other files and all look right.

@handrews
Copy link
Member

handrews commented Sep 6, 2024

Same question here- why are we doing this when we're about to merge in the other direction?

@handrews
Copy link
Member

handrews commented Sep 7, 2024

From a DM conversation, apparently this is how it's preferred to resolve conflicts, which seems messy to me but I won't object to it.

Copy link
Member

@handrews handrews left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

3.0.4.md was not changed so this looks good.

@ralfhandl ralfhandl merged commit a11ce6f into OAI:v3.0.4-dev Sep 10, 2024
4 checks passed
@ralfhandl ralfhandl deleted the 3.0.4-update-from-main branch September 10, 2024 08:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.