Merge branch 'main' into setbindgroup

Author: kainino0x

.circleci/config.yml

@@ -29,7 +29,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af # v2.1.3
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:
           results_file: results.sarif
           results_format: sarif
@@ -52,6 +52,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0b21cf2492b6b02c465a3e5d7c473717ad7721ba # v3.23.1
+        uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
         with:
           sarif_file: results.sarif

.eslintrc.yml

@@ -0,0 +1,45 @@
+# Tag release and update changelog
+name: Tag release and update Changelog
+
+on:
+  workflow_dispatch:
+    inputs:
+      release-sha:
+        required: true
+        type: string
+
+jobs:
+    create-release:
+      runs-on: ubuntu-latest
+      steps:
+        - name: Checkout repo
+          uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        # Updates changelog and writes the release version into the environment
+        - name: Update Changelog
+          run: python3 tools/maint/create_release.py --action
+        - name: Create Changelog PR
+          uses: peter-evans/create-pull-request@v6
+          with:
+            token: ${{ secrets.EMSCRIPTEN_BOT_TOKEN }}
+            title: Mark ${{ env.RELEASE_VERSION }} as released
+            team-reviewers: release-reviewers
+            delete-branch: true
+        - name: Tag release sha
+          uses: actions/github-script@v7
+          with:
+            github-token: ${{ secrets.EMSCRIPTEN_BOT_TOKEN }}
+            script: |
+              const tag_sha = '${{ inputs.release-sha }}';
+              const release_version = '${{ env.RELEASE_VERSION }}';
+              console.log(`Version ${release_version} at SHA ${tag_sha}`);
+              const regex = /^[0-9]+.[0-9]+.[0-9]+$/;
+              const match = release_version.match(regex);
+              if (!match) {
+                throw new Error('Malformed release version');
+              }
+              await github.rest.git.createRef({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                ref: `refs/tags/${release_version}`,
+                sha: tag_sha
+              });

.github/workflows/scorecards.yml

@@ -597,3 +597,7 @@ a license to everyone to use it as detailed in LICENSE.)
 * James Hu <[email protected]>
 * Jerry Zhuang <[email protected]>
 * Taisei Kon <[email protected]>
+* YAMAMOTO Takashi <[email protected]>
+* Artur Gatin <[email protected]> (copyright owned by Teladoc Health, Inc.)
+* Christian Lloyd <[email protected]> (copyright owned by Teladoc Health, Inc.)
+* Sean Morris <[email protected]>