mirrors/arti.git/.gitlab-ci.yml, branch arti-v1.4.3mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.32025-04-30T14:43:13ZMerge branch 'dev/cve/wildcard_check' into 'main'2025-04-30T14:43:13Zoparaopara@torproject.org2025-04-30T14:43:13Zurn:sha1:05b7e3ad18e9210c9f83462189076cbc23945b07
maint: Check for wildcard requirements
Closes #1918
See merge request tpo/core/arti!2954maint: Check for wildcard requirements2025-04-29T14:17:54ZClara Englercve@cve.cx2025-04-24T13:09:54Zurn:sha1:203d012ad173ac90f5ddc32c1821bd15d553702e
This commit adds a script that checks all Cargo.toml files whether a
version requirement contains a wildcard, that is, a version containing a
"*" preceded by an arbitrary amount of digits and dots.
Fixes #1918
ci: upgrade shadow version to get TCP FIN fix2025-04-24T19:16:11ZSteven Engleropara@torproject.org2025-04-24T19:05:57Zurn:sha1:253eccf0296e0931eaa604b7ac30396c4c683354tor-circmgr: removed "ntor_v3" feature flag2025-04-01T14:17:21ZSteven Engleropara@torproject.org2025-04-01T00:56:00Zurn:sha1:c8fac43195c2baba6ab5464d2ea9e11dc0b0a141
ntor v3 is now always enabled.
integration-chutney-shadow: save tor logs2025-03-31T20:47:40ZJim Newsomejnewsome@torproject.org2025-03-31T18:51:38Zurn:sha1:b7889531d6ff9c10a9d701a38138bdae85c77bd0CI: bump shadow version2025-03-31T20:47:40ZJim Newsomejnewsome@torproject.org2025-03-31T14:51:16Zurn:sha1:d281876dd457966b9506b687dda9f033feb7142b
Bump to today's latest - 24343d0ef1da38e2e9fe6684bdffe3cf32c1153d.
Primarily to get determinism fix
https://github.com/shadow/shadow/pull/3542.
Upgrade to cbindgen 0.28.02025-03-30T15:09:54ZNick Mathewsonnickm@torproject.org2025-03-30T15:09:54Zurn:sha1:f0172ef099dd98b4fe4565de43649c7a01a00706maint: Make matrix-check run in parallel in CI.2025-03-04T18:45:39ZWesley Aptekar-Casselsme@wesleyac.com2025-03-04T18:05:00Zurn:sha1:c8881c83763b957a3a729ff3521b82eb98c55f05
We should ideally do this for every-crate as well, but since that's
written in bash, it's a little more annoying to do. The options there
are either to rewrite it in python (probably good to do anyways) or to
modify the list_crates script to move the parallelization in there
(useful since it lets us reuse code, but doing that with a generator is
likely not possible). For now I'm just going to file a ticket to do that
and go back to working on stuff i actually should be doing :)
Fixes: #1625
CI: use Dependency Proxy when available2025-02-20T04:02:19ZJérôme Charaouijerome@riseup.net2025-02-19T18:56:59Zurn:sha1:8762f8d8dbeeba3bce6859b91e6a7f1d770dfc0f
This sets up CI to allow the use of the GitLab Dependency Proxy which
caches images pulled from DockerHub, in order to bypass rate-limiting.
The DOCKER_REGISTRY_URL variable is set dynamically by the
check_dependency_proxy_access job defined in dependency_proxy.yml such
that only pipelines triggered by users with the requisite access will be
configured to use the proxy, while all others will continue to pull from
DockerHub as before.
When DOCKER_REGISTRY_URL is pre-set in a project's CI/CD variable
settings, the extra job is skipped and the dependency proxy is used
always, unconditionally.
To avoid breaking CI pipelines on 3rd-party GitLab instances, we only
include the dependency proxy template on gitlab.tpo
docs: Only mv coverage directory if it's available.2025-01-30T15:51:30ZAlexander Hansen Færøyahf@torproject.org2025-01-30T15:08:46Zurn:sha1:5cb802740f8e593100bcba80c8d7f1f15912de63
This is useful when testing just the publish target.