Skip to content

Commit ee300c5

Browse files
NathanWalkerNathanWalker
authored
Merge branch 'main' into scorecard-pin
2 parents 9ae6e02 + 162d80c commit ee300c5

File tree

20 files changed

+396
-27
lines changed

20 files changed

+396
-27
lines changed

‎.github/dependabot.yml‎

Lines changed: 196 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,196 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: github-actions
4+
directory: /
5+
schedule:
6+
interval: monthly
7+
8+
- package-ecosystem: npm
9+
directory: /
10+
schedule:
11+
interval: monthly
12+
time: "23:00"
13+
open-pull-requests-limit: 10
14+
ignore:
15+
- dependency-name: "*"
16+
update-types: ["version-update:semver-major"]
17+
18+
- package-ecosystem: npm
19+
directory: /test-app/app/src/main/assets/app
20+
schedule:
21+
interval: monthly
22+
time: "23:00"
23+
open-pull-requests-limit: 10
24+
ignore:
25+
- dependency-name: "*"
26+
update-types: ["version-update:semver-major"]
27+
28+
- package-ecosystem: npm
29+
directory: /test-app/app/src/main/assets/app/tests
30+
schedule:
31+
interval: monthly
32+
time: "23:00"
33+
open-pull-requests-limit: 10
34+
ignore:
35+
- dependency-name: "*"
36+
update-types: ["version-update:semver-major"]
37+
38+
- package-ecosystem: npm
39+
directory: /test-app/app/src/main/assets/app/tns_modules/dummy-package
40+
schedule:
41+
interval: monthly
42+
time: "23:00"
43+
open-pull-requests-limit: 10
44+
ignore:
45+
- dependency-name: "*"
46+
update-types: ["version-update:semver-major"]
47+
48+
- package-ecosystem: npm
49+
directory: /test-app/build-tools/android-metadata-generator
50+
schedule:
51+
interval: monthly
52+
time: "23:00"
53+
open-pull-requests-limit: 10
54+
ignore:
55+
- dependency-name: "*"
56+
update-types: ["version-update:semver-major"]
57+
58+
- package-ecosystem: npm
59+
directory: /test-app/build-tools/jsparser
60+
schedule:
61+
interval: monthly
62+
time: "23:00"
63+
open-pull-requests-limit: 10
64+
ignore:
65+
- dependency-name: "*"
66+
update-types: ["version-update:semver-major"]
67+
68+
- package-ecosystem: npm
69+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app
70+
schedule:
71+
interval: monthly
72+
time: "23:00"
73+
open-pull-requests-limit: 10
74+
ignore:
75+
- dependency-name: "*"
76+
update-types: ["version-update:semver-major"]
77+
78+
- package-ecosystem: npm
79+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/component/not_ns_subcomponent
80+
schedule:
81+
interval: monthly
82+
time: "23:00"
83+
open-pull-requests-limit: 10
84+
ignore:
85+
- dependency-name: "*"
86+
update-types: ["version-update:semver-major"]
87+
88+
- package-ecosystem: npm
89+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/component
90+
schedule:
91+
interval: monthly
92+
time: "23:00"
93+
open-pull-requests-limit: 10
94+
ignore:
95+
- dependency-name: "*"
96+
update-types: ["version-update:semver-major"]
97+
98+
- package-ecosystem: npm
99+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/components_collection/component1
100+
schedule:
101+
interval: monthly
102+
time: "23:00"
103+
open-pull-requests-limit: 10
104+
ignore:
105+
- dependency-name: "*"
106+
update-types: ["version-update:semver-major"]
107+
108+
- package-ecosystem: npm
109+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/components_collection/component2
110+
schedule:
111+
interval: monthly
112+
time: "23:00"
113+
open-pull-requests-limit: 10
114+
ignore:
115+
- dependency-name: "*"
116+
update-types: ["version-update:semver-major"]
117+
118+
- package-ecosystem: npm
119+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/components_collection/component2/subcomponent2.1
120+
schedule:
121+
interval: monthly
122+
time: "23:00"
123+
open-pull-requests-limit: 10
124+
ignore:
125+
- dependency-name: "*"
126+
update-types: ["version-update:semver-major"]
127+
128+
- package-ecosystem: npm
129+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/components_collection
130+
schedule:
131+
interval: monthly
132+
time: "23:00"
133+
open-pull-requests-limit: 10
134+
ignore:
135+
- dependency-name: "*"
136+
update-types: ["version-update:semver-major"]
137+
138+
- package-ecosystem: npm
139+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/not_ns_module/not_ns_module_submodule
140+
schedule:
141+
interval: monthly
142+
time: "23:00"
143+
open-pull-requests-limit: 10
144+
ignore:
145+
- dependency-name: "*"
146+
update-types: ["version-update:semver-major"]
147+
148+
- package-ecosystem: npm
149+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules/not_ns_module
150+
schedule:
151+
interval: monthly
152+
time: "23:00"
153+
open-pull-requests-limit: 10
154+
ignore:
155+
- dependency-name: "*"
156+
update-types: ["version-update:semver-major"]
157+
158+
- package-ecosystem: npm
159+
directory: /test-app/build-tools/jsparser/tests/cases/mini_app/app/tns_modules
160+
schedule:
161+
interval: monthly
162+
time: "23:00"
163+
open-pull-requests-limit: 10
164+
ignore:
165+
- dependency-name: "*"
166+
update-types: ["version-update:semver-major"]
167+
168+
- package-ecosystem: npm
169+
directory: /test-app/build-tools/jsparser/tests
170+
schedule:
171+
interval: monthly
172+
time: "23:00"
173+
open-pull-requests-limit: 10
174+
ignore:
175+
- dependency-name: "*"
176+
update-types: ["version-update:semver-major"]
177+
178+
- package-ecosystem: npm
179+
directory: /test-app
180+
schedule:
181+
interval: monthly
182+
time: "23:00"
183+
open-pull-requests-limit: 10
184+
ignore:
185+
- dependency-name: "*"
186+
update-types: ["version-update:semver-major"]
187+
188+
- package-ecosystem: npm
189+
directory: /test-app/tools
190+
schedule:
191+
interval: monthly
192+
time: "23:00"
193+
open-pull-requests-limit: 10
194+
ignore:
195+
- dependency-name: "*"
196+
update-types: ["version-update:semver-major"]

‎.github/workflows/dependency-review.yml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Dependency Review Action
2+
#
3+
# This Action will scan dependency manifest files that change as part of a Pull Request,
4+
# surfacing known-vulnerable versions of the packages declared or updated in the PR.
5+
# Once installed, if the workflow run is marked as required,
6+
# PRs introducing known-vulnerable packages will be blocked from merging.
7+
#
8+
# Source repository: https://github.com/actions/dependency-review-action
9+
name: 'Dependency Review'
10+
on: [pull_request]
11+
12+
permissions:
13+
contents: read
14+
15+
jobs:
16+
dependency-review:
17+
runs-on: ubuntu-latest
18+
steps:
19+
- name: 'Checkout Repository'
20+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
21+
- name: 'Dependency Review'
22+
uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3

‎.github/workflows/npm_release.yml‎

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ on:
88
env:
99
NPM_TAG: "next"
1010
EMULATOR_NAME: "runtime-emu"
11-
NDK_VERSION: r27
11+
NDK_VERSION: r27d
1212
ANDROID_API: 33
1313
ANDROID_ABI: x86_64
1414
NDK_ARCH: darwin
@@ -21,6 +21,11 @@ jobs:
2121
npm_version: ${{ steps.npm_version_output.outputs.NPM_VERSION }}
2222
npm_tag: ${{ steps.npm_version_output.outputs.NPM_TAG }}
2323
steps:
24+
- name: Harden the runner (Audit all outbound calls)
25+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
26+
with:
27+
egress-policy: audit
28+
2429
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
2530
with:
2631
fetch-depth: 0
@@ -88,6 +93,11 @@ jobs:
8893
runs-on: macos-13
8994
needs: build
9095
steps:
96+
- name: Harden the runner (Audit all outbound calls)
97+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
98+
with:
99+
egress-policy: audit
100+
91101
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
92102
with:
93103
submodules: true
@@ -142,6 +152,11 @@ jobs:
142152
NPM_VERSION: ${{needs.build.outputs.npm_version}}
143153
NPM_TAG: ${{needs.build.outputs.npm_tag}}
144154
steps:
155+
- name: Harden the runner (Audit all outbound calls)
156+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
157+
with:
158+
egress-policy: audit
159+
145160
- uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1
146161
with:
147162
node-version: 22
@@ -168,6 +183,11 @@ jobs:
168183
env:
169184
NPM_VERSION: ${{needs.build.outputs.npm_version}}
170185
steps:
186+
- name: Harden the runner (Audit all outbound calls)
187+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
188+
with:
189+
egress-policy: audit
190+
171191
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
172192
with:
173193
fetch-depth: 0

‎.github/workflows/pull_request.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ on:
44
env:
55
NPM_TAG: "pr"
66
EMULATOR_NAME: "runtime-emu"
7-
NDK_VERSION: r27
7+
NDK_VERSION: r27d
88
ANDROID_API: 33
99
ANDROID_ABI: x86_64
1010
NDK_ARCH: darwin

‎.github/workflows/scorecards.yml‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
name: Scorecard supply-chain security
2+
on:
3+
# For Branch-Protection check. Only the default branch is supported. See
4+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
5+
branch_protection_rule:
6+
# To guarantee Maintained check is occasionally updated. See
7+
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
8+
schedule:
9+
- cron: '20 7 * * 2'
10+
push:
11+
branches: ["main"]
12+
13+
# Declare default permissions as read only.
14+
permissions: read-all
15+
16+
jobs:
17+
analysis:
18+
name: Scorecard analysis
19+
runs-on: ubuntu-latest
20+
permissions:
21+
# Needed to upload the results to code-scanning dashboard.
22+
security-events: write
23+
# Needed to publish results and get a badge (see publish_results below).
24+
id-token: write
25+
contents: read
26+
actions: read
27+
# To allow GraphQL ListCommits to work
28+
issues: read
29+
pull-requests: read
30+
# To detect SAST tools
31+
checks: read
32+
33+
steps:
34+
35+
- name: "Checkout code"
36+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
37+
with:
38+
persist-credentials: false
39+
40+
- name: "Run analysis"
41+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
42+
with:
43+
results_file: results.sarif
44+
results_format: sarif
45+
# (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
46+
# - you want to enable the Branch-Protection check on a *public* repository, or
47+
# - you are installing Scorecards on a *private* repository
48+
# To create the PAT, follow the steps in https://github.com/ossf/scorecard-action#authentication-with-pat.
49+
# repo_token: ${{ secrets.SCORECARD_TOKEN }}
50+
51+
# Public repositories:
52+
# - Publish results to OpenSSF REST API for easy access by consumers
53+
# - Allows the repository to include the Scorecard badge.
54+
# - See https://github.com/ossf/scorecard-action#publishing-results.
55+
# For private repositories:
56+
# - `publish_results` will always be set to `false`, regardless
57+
# of the value entered here.
58+
publish_results: true
59+
60+
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
61+
# format to the repository Actions tab.
62+
- name: "Upload artifact"
63+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
64+
with:
65+
name: SARIF file
66+
path: results.sarif
67+
retention-days: 5
68+
69+
# Upload the results to GitHub's code scanning dashboard.
70+
- name: "Upload to code-scanning"
71+
uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
72+
with:
73+
sarif_file: results.sarif

‎package.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"name": "@nativescript/android",
33
"description": "NativeScript for Android using v8",
4-
"version": "8.9.1",
4+
"version": "8.9.2",
55
"repository": {
66
"type": "git",
77
"url": "https://github.com/NativeScript/android.git"
@@ -13,7 +13,7 @@
1313
"v8": "10.3.22.0",
1414
"gradle": "8.14.3",
1515
"gradleAndroid": "8.12.1",
16-
"ndk": "r27",
16+
"ndk": "r27d",
1717
"ndkApiLevel": "21",
1818
"minSdk": "21",
1919
"compileSdk": "35",

‎test-app/app/src/main/assets/app/mainpage.js‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,4 +71,5 @@ require('./tests/testNativeTimers');
7171
require("./tests/testPostFrameCallback");
7272
require("./tests/console/logTests.js");
7373
require('./tests/testURLImpl.js');
74-
require('./tests/testURLSearchParamsImpl.js');
74+
require('./tests/testURLSearchParamsImpl.js');
75+
require('./tests/testPerformanceNow');

0 commit comments

Comments
 (0)