Skip to content

Commit f702b85

Browse files
mgarbsmgarbs
authored
Merge branch 'main' into extended-asset-changes
Signed-off-by: Michael Garber <michael.garber@hashgraph.com>
2 parents 3098937 + c9521c8 commit f702b85

71 files changed

Lines changed: 11863 additions & 1706 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.codacy.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
exclude_paths:
3+
- "site/package-lock.json"
4+
- "site/node_modules/**"
5+
- "site/dist/**"

‎.github/workflows/add-hip-number.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@ jobs:
2020
continue-on-error: true # Silently fail - don't show red X on PRs
2121
steps:
2222
- name: Harden Runner
23-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
23+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2424
with:
2525
egress-policy: audit
2626

2727
- name: Checkout Code
28-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
28+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2929
with:
3030
token: ${{ secrets.GH_ACCESS_TOKEN }}
3131
fetch-depth: 0

‎.github/workflows/deploy-site.yml‎

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
name: Deploy Site
2+
3+
on:
4+
push:
5+
branches: [main]
6+
workflow_dispatch:
7+
8+
permissions:
9+
contents: read
10+
pages: write
11+
id-token: write
12+
pull-requests: read
13+
discussions: read
14+
15+
concurrency:
16+
group: "pages"
17+
cancel-in-progress: false
18+
19+
jobs:
20+
build:
21+
runs-on: hiero-improvement-proposals-linux-medium
22+
steps:
23+
- name: Harden the runner (Audit all outbound calls)
24+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
25+
with:
26+
egress-policy: audit
27+
28+
- name: Checkout
29+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
30+
31+
- name: Setup Node.js
32+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
33+
with:
34+
node-version: "20"
35+
36+
- name: Install dependencies
37+
working-directory: site
38+
run: npm ci
39+
40+
- name: Setup Pages
41+
id: pages
42+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
43+
44+
- name: Build data
45+
working-directory: site
46+
run: npm run build:data
47+
env:
48+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
49+
50+
- name: Build site
51+
working-directory: site
52+
run: npm run build
53+
env:
54+
VITE_BASE: ${{ steps.pages.outputs.base_path }}/
55+
56+
- name: Upload artifact
57+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
58+
with:
59+
path: site/dist
60+
61+
deploy:
62+
environment:
63+
name: github-pages
64+
url: ${{ steps.deployment.outputs.page_url }}
65+
runs-on: hiero-improvement-proposals-linux-medium
66+
needs: build
67+
steps:
68+
- name: Harden the runner (Audit all outbound calls)
69+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
70+
with:
71+
egress-policy: audit
72+
73+
- name: Deploy to GitHub Pages
74+
id: deployment
75+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/notifications.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,12 @@ jobs:
1515
runs-on: hiero-improvement-proposals-linux-medium
1616
steps:
1717
- name: Harden Runner
18-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
18+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
1919
with:
2020
egress-policy: audit
2121

2222
- name: Check out repository code
23-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
with:
2525
fetch-depth: 0
2626

‎.github/workflows/schedule-last-call-date-end.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ jobs:
2222

2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
25+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2626
with:
2727
egress-policy: audit
2828

2929
- name: Check out the code
30-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3131

3232
- name: Import GPG Key
3333
id: gpg_importer

‎.github/workflows/send-discord-message.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,12 @@ jobs:
2424
runs-on: hiero-improvement-proposals-linux-medium
2525
steps:
2626
- name: Harden Runner
27-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
27+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2828
with:
2929
egress-policy: audit
3030

3131
- name: Checkout repository
32-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
32+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3333

3434
- name: Extract HIP abstract
3535
id: extract_abstract
@@ -72,7 +72,7 @@ jobs:
7272
- name: Discord notification
7373
env:
7474
DISCORD_WEBHOOK: ${{ secrets.DISCORD }}
75-
uses: step-security/action-discord@12bdaf0579698ae72d3caf0cc14578ced05f9bed # v0.1.4
75+
uses: step-security/action-discord@e31fd4e664027caad89e85cc4e9166e193dd6d2d # v0.1.5
7676
with:
7777
args: |
7878
# ${{ steps.extract_abstract.outputs.filename_no_ext }} moved into ${{ github.event.inputs.status }} status

‎.github/workflows/send-email.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: hiero-improvement-proposals-linux-medium
2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
25+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2626
with:
2727
egress-policy: audit
2828

‎.github/workflows/stale-hip-management.yml‎

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -29,19 +29,21 @@ jobs:
2929

3030
steps:
3131
- name: Harden Runner
32-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
32+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
3333
with:
3434
egress-policy: audit
3535

3636
- name: Check out the code
37-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
37+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3838

3939
- name: Process Stale PRs
4040
env:
4141
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4242
INACTIVITY_DAYS_INPUT: ${{ github.event.inputs.inactivity_days || '60' }}
4343
WARNING_DAYS_INPUT: ${{ github.event.inputs.warning_days || '14' }}
4444
run: |
45+
set +e
46+
4547
# Validate inputs to prevent code injection
4648
if ! [[ "$INACTIVITY_DAYS_INPUT" =~ ^[0-9]+$ ]]; then
4749
echo "Error: inactivity_days must be a positive integer"
@@ -138,16 +140,20 @@ jobs:
138140
if [ $DAYS_SINCE_WARNING -ge $WARNING_DAYS ] && [ "$HAS_ACTIVITY" = false ]; then
139141
echo " Closing PR #$PR_NUMBER as Stagnant (warning period expired)"
140142
141-
# Add stale label
142-
gh pr edit $PR_NUMBER --add-label "stale"
143+
# Add stale label using the API directly to avoid gh cli deprecation warnings
144+
gh api "repos/${{ github.repository }}/issues/$PR_NUMBER/labels" \
145+
--method POST \
146+
--field "labels[]=stale" > /dev/null 2>&1 || echo " Warning: Could not add stale label"
143147
144148
# Post closing comment
145149
gh pr comment $PR_NUMBER --body "This HIP has been marked as Stagnant due to inactivity. Feel free to reopen when ready to continue."
146150
147151
# Close the PR
148-
gh pr close $PR_NUMBER
149-
150-
echo " PR #$PR_NUMBER closed successfully"
152+
if gh pr close $PR_NUMBER; then
153+
echo " PR #$PR_NUMBER closed successfully"
154+
else
155+
echo " ERROR: Failed to close PR #$PR_NUMBER"
156+
fi
151157
152158
else
153159
if [ "$HAS_ACTIVITY" = true ]; then

‎.github/workflows/update-draft-hips.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,12 +17,12 @@ jobs:
1717
pull-requests: read
1818
steps:
1919
- name: Harden the runner (Audit all outbound calls)
20-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
20+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2121
with:
2222
egress-policy: audit
2323

2424
- name: Checkout Code
25-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2626
with:
2727
token: ${{ secrets.GH_ACCESS_TOKEN }}
2828
ref: 'main'

‎.github/workflows/validateHeaders.yml‎

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
runs-on: hiero-improvement-proposals-linux-medium
1515
steps:
1616
- name: Harden Runner
17-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
17+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
1818
with:
1919
egress-policy: audit
2020

2121
- name: Check out repository code
22-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323
with:
2424
fetch-depth: 0
2525

@@ -39,14 +39,13 @@ jobs:
3939
PR_NUMBER=${{ github.event.pull_request.number }}
4040
REPO=${{ github.repository }}
4141
PR_DATA=$(curl -s -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/repos/$REPO/pulls/$PR_NUMBER/files")
42-
MD_FILES=$(echo "$PR_DATA" | jq -r '.[] | select(.filename | test(".md$")) | .filename')
42+
MD_FILES=$(echo "$PR_DATA" | jq -r '.[] | select(.filename | test(".md$")) | select(.status != "removed") | .filename')
4343
4444
for FILE in $MD_FILES; do
4545
FULL_PATH="${{ github.workspace }}/$FILE"
4646
if [[ -f "$FULL_PATH" ]]; then
4747
node "${{ github.workspace }}/scripts/validateHIP.js" "$FULL_PATH"
4848
else
49-
echo "No file found for $FILE"
50-
exit 1
49+
echo "Skipping $FILE (not found on disk)"
5150
fi
5251
done

0 commit comments

Comments
 (0)