From de14039194addbd724247f60490510d01afaabff Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Tue, 15 Feb 2022 02:49:55 -0800 Subject: [PATCH 1/9] Cancel concurrent CI runs for same pr/commit (#16) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/workflows/ci.yml | 4 ++++ .github/workflows/release.yml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2291b25..c8f935e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -8,6 +8,10 @@ on: branches: - master + workflow_dispatch: +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} + cancel-in-progress: true jobs: build: name: Build diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a8439d7..b5a0f8e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,10 @@ on: tags: - "*.*" + workflow_dispatch: +concurrency: + group: ${{ github.workflow }}-${{ github.head_ref || github.ref }} + cancel-in-progress: true jobs: build: name: Build From 94a232905b52b840e976a494076d173784f170b6 Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Fri, 16 Aug 2024 23:46:32 -0700 Subject: [PATCH 2/9] Use Go 1.23 (#22) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/workflows/ci.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c8f935e..1f49e28 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ concurrency: jobs: build: name: Build - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v1 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b5a0f8e..b1de5f8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,7 @@ concurrency: jobs: build: name: Build - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v1 From 916b80f659a092d7ec6c6ee13d87a0072324905f Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Fri, 27 Dec 2024 18:54:34 -0800 Subject: [PATCH 3/9] Update github action modules (#23) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/workflows/ci.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1f49e28..f775621 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,10 +18,10 @@ jobs: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v4 - name: Use Node.js 10.x - uses: actions/setup-node@v1 + uses: actions/setup-node@v4 with: node-version: 10.x diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b1de5f8..a0c8fe9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,10 +14,10 @@ jobs: name: Build runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@v4 - name: Use Node.js - uses: actions/setup-node@v1 + uses: actions/setup-node@v4 with: node-version: 10.x From aad6be403e7c060114772e865879c97769834613 Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Sat, 28 Dec 2024 18:59:29 -0800 Subject: [PATCH 4/9] Update github action modules (#24) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a0c8fe9..83acbe2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: name: Build runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v1 - name: Use Node.js uses: actions/setup-node@v4 From 021e346474ba27955dd8ada1aca15013dab41602 Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Sat, 18 Apr 2026 10:38:44 +0600 Subject: [PATCH 5/9] Configure dependabot refresh schedule (#37) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/dependabot.yml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..09134d1 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,9 @@ +version: 2 +updates: + - package-ecosystem: "npm" + directory: "/" + schedule: + interval: "cron" + cron: "0 * * * *" + timezone: "UTC" + open-pull-requests-limit: 0 From 6418a3b077b7fbf8203ce436b692682e43a10454 Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Sun, 19 Apr 2026 10:58:02 +0600 Subject: [PATCH 6/9] Configure dependabot refresh schedule (#38) Signed-off-by: 1gtm <1gtm@appscode.com> --- .github/dependabot.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 09134d1..c2f87f8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -3,7 +3,5 @@ updates: - package-ecosystem: "npm" directory: "/" schedule: - interval: "cron" - cron: "0 * * * *" - timezone: "UTC" + interval: "daily" open-pull-requests-limit: 0 From ca69da7c883d8ff12ca47b163071b0c11ac10fc2 Mon Sep 17 00:00:00 2001 From: Tamal Saha Date: Fri, 15 May 2026 23:12:12 +0600 Subject: [PATCH 7/9] Add AGENTS.md (#41) Signed-off-by: Tamal Saha --- AGENTS.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 AGENTS.md diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..2124c4d --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,29 @@ +# AGENTS.md + +This file provides guidance to coding agents (e.g. Claude Code, claude.ai/code) when working with code in this repository. + +## Repository purpose + +`@bytebuilders/deploy-button` — an embeddable JavaScript widget that renders a "Deploy to ByteBuilders" button on third-party sites (vendor catalogs, docs, demos). Clicking it opens a modal that hands the user off to the ByteBuilders console with the chart/source pre-filled. Built with webpack and shipped as a minified bundle under `dist/`. + +## Architecture + +- `src/` — widget source (the `DeployButton` class, modal logic, styles). +- `modal.html` — modal template. +- `public/` — static assets. +- `dist/` — built bundle (committed for direct CDN consumption). +- `webpack.config.js` — bundler config. +- `package.json` — npm scripts and dependencies. + +## Common commands + +- `npm install` — install dependencies. +- `npm run build` — webpack production build → `dist/`. +- (No tests configured.) + +## Conventions + +- This is an **embeddable widget**, not a SPA. Keep the bundle small and self-contained. +- The bundle is checked into `dist/` so third parties can consume it directly from GitHub; rebuild + commit `dist/` when changing `src/`. +- Don't introduce global state that conflicts with the host page. +- License: see `LICENSE` if present. From 4c7c547f2bf4af855cc8be6fa3967eace3e37fa6 Mon Sep 17 00:00:00 2001 From: Tamal Saha Date: Sat, 16 May 2026 07:56:14 +0600 Subject: [PATCH 8/9] Harden CI workflows (#40) * Harden GitHub Actions workflows - Pin every action ref to a full-length commit SHA with a trailing version comment, so floating tags like @v4 can't be re-pointed at malicious code. - Bump outdated actions/checkout@v1 to @v4.3.1 (where present). - Tag-triggered workflows now check out with fetch-depth: 1 and fetch-tags: true so the tag ref is available downstream. - release-tracker.yml grants contents: write at the job level so the default GITHUB_TOKEN can push commits/tags back to the repo. Signed-off-by: Tamal Saha * Use node-version: '22' in setup-node steps Signed-off-by: Tamal Saha * Normalize Prepare git user, fetch-depth, drop permission-issues Signed-off-by: Tamal Saha * Add 1gtm-app[bot] to kodiak auto_approve_usernames Signed-off-by: Tamal Saha * Normalize kodiak auto_approve_usernames Signed-off-by: Tamal Saha * Bump softprops/action-gh-release to v2.6.2; add permissions Signed-off-by: Tamal Saha --------- Signed-off-by: Tamal Saha --- .github/.kodiak.toml | 2 +- .github/workflows/ci.yml | 6 +++--- .github/workflows/release.yml | 10 +++++++--- 3 files changed, 11 insertions(+), 7 deletions(-) diff --git a/.github/.kodiak.toml b/.github/.kodiak.toml index ded81e4..b64a5f6 100644 --- a/.github/.kodiak.toml +++ b/.github/.kodiak.toml @@ -15,4 +15,4 @@ strip_html_comments = true # default: false always = true # default: false [approve] -auto_approve_usernames = ["1gtm", "tamalsaha"] +auto_approve_usernames = ["tamalsaha", "1gtm", "1gtm-app[bot]"] \ No newline at end of file diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f775621..47cbde1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,12 +18,12 @@ jobs: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Use Node.js 10.x - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: - node-version: 10.x + node-version: '22' - name: Build env: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 83acbe2..e0fdc3b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,13 +13,17 @@ jobs: build: name: Build runs-on: ubuntu-24.04 + permissions: + contents: write steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + with: + fetch-depth: 0 - name: Use Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: - node-version: 10.x + node-version: '22' - name: Build run: | From da01126177a3a278a9942ed2f6df123a8da5687c Mon Sep 17 00:00:00 2001 From: Tamal Saha Date: Tue, 19 May 2026 00:23:13 +0600 Subject: [PATCH 9/9] Add CLAUDE.md pointing to AGENTS.md Signed-off-by: Tamal Saha --- CLAUDE.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 CLAUDE.md diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 0000000..43c994c --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1 @@ +@AGENTS.md