Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
70 commits
Select commit Hold shift + click to select a range
594f3c7
Handle multiple config changes in a PR or Push event and process them…
decyjphr Oct 14, 2025
8ce7b72
build(deps): bump undici from 7.7.0 to 7.16.0 (#881)
dependabot[bot] Dec 29, 2025
e4a6ce4
build(deps): bump node-cron from 3.0.3 to 4.2.1 (#865)
dependabot[bot] Dec 29, 2025
c07a33f
build(deps): bump @apidevtools/json-schema-ref-parser (#882)
dependabot[bot] Dec 29, 2025
9592e84
build(deps): bump minimatch from 10.0.1 to 10.0.3 (#883)
dependabot[bot] Dec 29, 2025
fdb6d37
build(deps-dev): bump eslint-plugin-import from 2.31.0 to 2.32.0 (#884)
dependabot[bot] Dec 30, 2025
7362d01
ci(deps): bump docker/login-action from 3.5.0 to 3.6.0 (#885)
dependabot[bot] Dec 30, 2025
19f0949
ci(deps): bump actions/setup-node from 4 to 6 (#890)
dependabot[bot] Dec 30, 2025
ac8e1c6
build(deps): bump js-yaml in the npm_and_yarn group across 1 director…
dependabot[bot] Dec 30, 2025
6c12139
ci(deps): bump docker/metadata-action from 5.8.0 to 5.10.0 (#897)
dependabot[bot] Dec 30, 2025
a516d99
ci(deps): bump actions/checkout from 4 to 6 (#898)
dependabot[bot] Dec 30, 2025
c0de63b
ci(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#899)
dependabot[bot] Dec 30, 2025
b86aa10
build(deps): bump the npm_and_yarn group across 1 directory with 2 up…
dependabot[bot] Jan 2, 2026
a567e4e
build(deps): bump qs in the npm_and_yarn group across 1 directory (#912)
dependabot[bot] Jan 2, 2026
447021f
build(deps): bump qs in the npm_and_yarn group across 1 directory (#913)
dependabot[bot] Jan 2, 2026
802217e
build(deps): bump octokit from 5.0.3 to 5.0.5 (#905)
dependabot[bot] Feb 4, 2026
5eec970
build(deps-dev): bump smee-client from 4.3.1 to 5.0.0 (#906)
dependabot[bot] Feb 4, 2026
0bc802d
build(deps-dev): bump @eslint/eslintrc from 3.3.1 to 3.3.3 (#908)
dependabot[bot] Feb 4, 2026
423468d
ci(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#909)
dependabot[bot] Feb 4, 2026
95ee4ac
build(deps): bump undici in the npm_and_yarn group across 1 directory…
dependabot[bot] Feb 4, 2026
dcc00e7
ci(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#924)
dependabot[bot] Feb 4, 2026
b2a6c96
build(deps): bump the npm_and_yarn group across 1 directory with 2 up…
dependabot[bot] Feb 4, 2026
f22d6a7
[WIP] Upgrade project to support Node.js 22 and 24 (#939)
Copilot Mar 2, 2026
1262444
Fix Dependabot CI: correct actor check from `dependabot` to `dependab…
Copilot Mar 2, 2026
eef9762
Refactor advanced CodeQL workflow steps (#941)
decyjphr Mar 3, 2026
ba3df39
Added support for proxy servers in all execution environments (#917)
tylerohlsen Mar 3, 2026
829bc8b
build(deps): bump probot from 13.4.4 to 14.2.4 (#907)
dependabot[bot] Mar 3, 2026
11f29c9
fix: prevent race conditions by creating new objects for repository c…
John15321 Mar 13, 2026
2f2229d
Change helm defaults to be more newcomer friendly (#919)
tylerohlsen Mar 16, 2026
34ce7a1
fix: add HOST=0.0.0.0 env to Dockerfile for probot v14 compatibility …
Copilot Mar 23, 2026
16feaad
fix: migrate all octokit API calls to .rest namespace for probot v14 …
Copilot Mar 23, 2026
6a8b6ae
Add HOST environment variable to Dockerfile (#950)
decyjphr Mar 23, 2026
241b5d9
docs: add troubleshooting section for Docker build and runtime issues…
decyjphr Mar 23, 2026
c718e9a
build(deps): bump undici in the npm_and_yarn group across 1 directory…
dependabot[bot] Mar 23, 2026
809dc2a
build(deps-dev): bump brace-expansion
dependabot[bot] Mar 27, 2026
5ceec1f
Merge pull request #952 from github/dependabot/npm_and_yarn/npm_and_y…
lindluni Mar 29, 2026
620a1ee
build(deps): bump proxy-from-env from 1.1.0 to 2.0.0 (#934)
dependabot[bot] Mar 30, 2026
21e8df5
ci(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#935)
dependabot[bot] Mar 30, 2026
4124899
build(deps): bump path-to-regexp (#953)
dependabot[bot] Mar 30, 2026
74d5c44
build(deps): bump the npm_and_yarn group across 1 directory with 2 up…
dependabot[bot] Mar 30, 2026
74f6fc4
Remove non-deterministic `npm install -g npm` from devcontainer Docke…
Copilot Mar 30, 2026
13d3937
Pin Dockerfile base image to SHA256 digest (#957)
Copilot Mar 30, 2026
d326ac8
Use `npm ci` instead of `npm install` in CI workflow (#958)
Copilot Mar 31, 2026
4578aea
Replace npm install with npm ci in workflow (#960)
decyjphr Mar 31, 2026
edc9d29
Bug/issue 465 (#970)
madkoo May 7, 2026
b9afee8
Bug/issue 842 (#928)
madkoo May 7, 2026
3d61f1f
Fix custom_properties diffing when config uses `property_name` (#978)
Copilot May 12, 2026
0774803
fix(variables): add noop mode support (#926)
klutchell Jun 4, 2026
db9d78c
fix: update lodash to ^4.18.1 to fix code injection vulnerability (#992)
decyjphr Jun 5, 2026
e6ac2a6
build(deps): bump uuid in the npm_and_yarn group across 1 directory
dependabot[bot] Jun 5, 2026
a680b0b
Bug/archived repo (#991)
madkoo Jun 12, 2026
7f96326
Merge branch 'main-enterprise' into dependabot/npm_and_yarn/npm_and_y…
decyjphr Jun 12, 2026
254bad3
Merge pull request #987 from github/dependabot/npm_and_yarn/npm_and_y…
decyjphr Jun 12, 2026
44667a6
build(deps): bump the npm_and_yarn group across 1 directory with 3 up…
dependabot[bot] Jun 15, 2026
4ce85a2
Initial plan
Copilot Jun 17, 2026
f69fffa
feat: add priorityClassName support to Helm chart
Copilot Jun 17, 2026
4dac294
Merge pull request #1004 from github/copilot/allow-priorityclassname-…
decyjphr Jun 17, 2026
53a1c75
Add include/exclude repo filters to team settings
neatcoder Jun 24, 2026
83c7a95
Merge branch 'main-enterprise' into dependabot/npm_and_yarn/npm_and_y…
decyjphr Jul 27, 2026
baac44d
Merge pull request #1001 from github-community-projects/dependabot/np…
decyjphr Jul 27, 2026
7877772
Merge branch 'main-enterprise' into neatcoder/team-include-exclude
decyjphr Jul 27, 2026
abcf581
Merge pull request #1009 from neatcoder/neatcoder/team-include-exclude
decyjphr Aug 4, 2026
f2016a9
build(deps-dev): bump flatted from 3.3.4 to 3.4.4 (#1055)
dependabot[bot] Aug 17, 2026
5f4313d
build(deps): bump undici in the npm_and_yarn group across 1 directory…
dependabot[bot] Aug 17, 2026
2b38818
build(deps-dev): bump shell-quote from 1.8.4 to 1.10.0 (#1057)
dependabot[bot] Aug 17, 2026
4fef67d
build(deps): bump js-yaml in the npm_and_yarn group across 1 director…
dependabot[bot] Aug 17, 2026
4940918
build(deps-dev): bump brace-expansion (#1060)
dependabot[bot] Aug 17, 2026
585ba6f
build(deps): bump body-parser (#1061)
dependabot[bot] Aug 18, 2026
c73be50
Fix GHSA-52cp-r559-cp3m: resolve transitive js-yaml via jest and lock…
decyjphr Aug 18, 2026
d45b873
Merge main-enterprise into yadhav/fix-recent-issues (resolve PR #990 …
decyjphr Aug 19, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 11 additions & 3 deletions index.js
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,14 @@ const NopCommand = require('./lib/nopcommand')
const SettingsGenerator = require('./lib/settingsGenerator')
const AppOctokitClient = require('./lib/appOctokitClient')
const env = require('./lib/env')
const { getProxyForUrl } = require('proxy-from-env')
const { setGlobalDispatcher, ProxyAgent } = require('undici')

const baseUrl = env.GHE_HOST ? `${env.GHE_PROTOCOL || 'https'}://${env.GHE_HOST}` : 'https://api.github.com'
const proxyAddress = getProxyForUrl(baseUrl)
if (proxyAddress) {
setGlobalDispatcher(new ProxyAgent(proxyAddress))
}

let deploymentConfig

Expand Down Expand Up @@ -589,7 +597,7 @@ module.exports = (robot, { getRouter }, Settings = require('./lib/settings')) =>
repo: env.ADMIN_REPO,
path: oldPath,
headers: {
'X-GitHub-Api-Version': '2022-11-28'
'X-GitHub-Api-Version': '2026-03-10'
}
})
let content = Buffer.from(repofile.data.content, 'base64').toString()
Expand All @@ -603,7 +611,7 @@ module.exports = (robot, { getRouter }, Settings = require('./lib/settings')) =>
repo: env.ADMIN_REPO,
path: newPath,
headers: {
'X-GitHub-Api-Version': '2022-11-28'
'X-GitHub-Api-Version': '2026-03-10'
}
})
} catch (error) {
Expand All @@ -618,7 +626,7 @@ module.exports = (robot, { getRouter }, Settings = require('./lib/settings')) =>
message: `Repo Renamed and safe-settings renamed the file from ${payload.changes.repository.name.from} to ${payload.repository.name}`,
sha: repofile.data.sha,
headers: {
'X-GitHub-Api-Version': '2022-11-28'
'X-GitHub-Api-Version': '2026-03-10'
}
})
robot.log.debug(`Created a new setting file ${newPath}`)
Expand Down
1 change: 0 additions & 1 deletion lib/plugins/variables.js
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ module.exports = class Variables extends Diffable {
super(...args)

if (this.entries) {
// Force all names to uppercase to avoid comparison issues.
this.entries.forEach((variable) => {
variable.name = variable.name.toUpperCase()
})
Expand Down
7 changes: 4 additions & 3 deletions lib/settings.js
Original file line number Diff line number Diff line change
Expand Up @@ -2025,7 +2025,7 @@ class Settings {
// Copilot code review would recoommend using object assign but that would cause the error
let repoConfig = this.config.repository
if (repoConfig) {
repoConfig = Object.assign(repoConfig, { name: repo.repo, org: repo.owner })
repoConfig = Object.assign({}, repoConfig, { name: repo.repo, org: repo.owner })
}

const subOrgConfig = this.getSubOrgConfig(repo.repo)
Expand All @@ -2041,7 +2041,8 @@ class Settings {
if (subOrgConfig) {
let suborgRepoConfig = subOrgConfig.repository
if (suborgRepoConfig) {
suborgRepoConfig = Object.assign(suborgRepoConfig, { name: repo.repo, org: repo.owner })
// Create a new object to avoid mutating the shared subOrgConfig.repository
suborgRepoConfig = Object.assign({}, suborgRepoConfig, { name: repo.repo, org: repo.owner })
repoConfig = this.mergeDeep.mergeDeep({}, repoConfig, suborgRepoConfig)
}
}
Expand Down Expand Up @@ -2556,7 +2557,7 @@ class Settings {
this.log.debug(` In getRepoConfigMap ${JSON.stringify(this.repo)}`)
// GitHub getContent api has a hard limit of returning 1000 entries without
// any pagination. They suggest to use Tree api.
// https://docs.github.com/en/rest/repos/contents?apiVersion=2022-11-28#get-repository-content
// https://docs.github.com/en/rest/repos/contents?apiVersion=2026-03-10#get-repository-content

// get <CONFIG_PATH>/repos directory sha to use in the getTree api
const repo = { owner: this.repo.owner, repo: env.ADMIN_REPO }
Expand Down
137 changes: 85 additions & 52 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 3 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -51,10 +51,10 @@
"eslint-plugin-node": "^11.1.0",
"eslint-plugin-promise": "^6.6.0",
"http-status-codes": "^2.2.0",
"jest": "^29.5.0",
"jest-junit": "^16.0.0",
"jest": "^29.7.0",
"jest-junit": "^17.0.0",
"jest-when": "^3.5.2",
"lockfile-lint": "^4.14.0",
"lockfile-lint": "^4.14.1",
"nock": "^14.0.1",
"nodemon": "^3.1.9",
"npm-run-all": "^4.1.5",
Expand Down
Loading