Update from main #1406
Open
Update from main #1406
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Mainly for no-search servers
Deploying phanpy with
|
| Latest commit: |
b4003e0
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://d837b4f1.phanpy.pages.dev |
| Branch Preview URL: | https://main.phanpy.pages.dev |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
phanpy | b4003e0 | Commit Preview URL Branch Preview URL |
Jan 16 2026, 06:56 PM |
This comment has been minimized.
This comment has been minimized.
* New translations (German) * Update catalogs.json * New translations (Polish) --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
- Use warning icon for content warning in composer - Put icons back to the post meta - Use moon icon for Quiet Public, so it's consistent with Mastodon's
Only for small sizes
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
Comment on lines
+10
to
+73
| if: github.repository == 'cheeaun/phanpy' | ||
| concurrency: | ||
| group: rollbar-deploy | ||
| cancel-in-progress: true | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v6 | ||
|
|
||
| - name: Setup Node.js | ||
| uses: actions/setup-node@v6 | ||
| with: | ||
| node-version: 24 | ||
| cache: "npm" | ||
|
|
||
| - name: Install dependencies | ||
| run: npm ci | ||
|
|
||
| - name: Build | ||
| run: npm run build | ||
|
|
||
| - name: Get commit info | ||
| id: commit | ||
| run: | | ||
| COMMIT_HASH=$(git rev-parse --short HEAD) | ||
| echo "version=$COMMIT_HASH" >> $GITHUB_OUTPUT | ||
|
|
||
| - name: Gather source map paths | ||
| id: maps | ||
| run: | | ||
| set -e | ||
| # Find all .js.map files under dist and produce a space-separated list | ||
| SOURCE_MAPS=$(find dist -type f -name '*.js.map' -print | tr '\n' ' ' | sed -E 's/ $//' || true) | ||
| if [ -z "$SOURCE_MAPS" ]; then | ||
| echo "No source maps found under dist" | ||
| echo "source_maps=" >> $GITHUB_OUTPUT | ||
| echo "minified_urls=" >> $GITHUB_OUTPUT | ||
| exit 0 | ||
| fi | ||
|
|
||
| # Derive minified URLs from each map file. Preserve path under `dist`. | ||
| HOST_BASE="https://dev.phanpy.social" | ||
| MINIFIED_URLS="" | ||
| for map_path in $SOURCE_MAPS; do | ||
| rel_path=${map_path#dist/} | ||
| minified_rel_path=${rel_path%.map} | ||
| if [ -z "$MINIFIED_URLS" ]; then | ||
| MINIFIED_URLS="$HOST_BASE/$minified_rel_path" | ||
| else | ||
| MINIFIED_URLS="$MINIFIED_URLS $HOST_BASE/$minified_rel_path" | ||
| fi | ||
| done | ||
|
|
||
| echo "source_maps=$SOURCE_MAPS" >> $GITHUB_OUTPUT | ||
| echo "minified_urls=$MINIFIED_URLS" >> $GITHUB_OUTPUT | ||
|
|
||
| - name: Deploy to Rollbar | ||
| uses: rollbar/github-deploy-action@2.1.2 | ||
| env: | ||
| ROLLBAR_ACCESS_TOKEN: ${{ secrets.ROLLBAR_ACCESS_TOKEN }} | ||
| with: | ||
| environment: "development" | ||
| version: ${{ steps.commit.outputs.version }} | ||
| source_maps: ${{ steps.maps.outputs.source_maps }} | ||
| minified_urls: ${{ steps.maps.outputs.minified_urls }} |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 4 days ago
To fix the problem, we should explicitly set the GITHUB_TOKEN permissions for this workflow/job to the minimum required. This workflow only needs to read the repository contents (for actions/checkout and to access the code being built). It does not create or modify issues, PRs, releases, or contents, so contents: read is sufficient.
The best fix is to add a permissions block at the job level under rollbar-deploy: so it applies only to this job without affecting any other jobs that might be added later. Concretely, in .github/workflows/rollbar-deploy.yml, insert:
permissions:
contents: readindented to align with if:, concurrency:, and runs-on:. No additional imports or methods are needed because this is a configuration-only change.
Suggested changeset
1
.github/workflows/rollbar-deploy.yml
| @@ -8,6 +8,8 @@ | ||
| jobs: | ||
| rollbar-deploy: | ||
| if: github.repository == 'cheeaun/phanpy' | ||
| permissions: | ||
| contents: read | ||
| concurrency: | ||
| group: rollbar-deploy | ||
| cancel-in-progress: true |
Copilot is powered by AI and may make mistakes. Always verify output.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
This comment has been minimized.
…r-FR,gl-ES,he-IL,it-IT,ja-JP,kab,ko-KR,lt-LT,nb-NO,nl-NL,oc-FR,pl-PL,pt-BR,pt-PT,ru-RU,th-TH,tok,tr-TR,uk-UA,zh-CN,zh-TW) (#1414) * New translations (German) * New translations (Spanish) * New translations (Polish) * New translations (French) * New translations (Arabic) * New translations (Catalan) * New translations (Czech) * New translations (Basque) * New translations (Finnish) * New translations (Hebrew) * New translations (Italian) * New translations (Japanese) * New translations (Korean) * New translations (Lithuanian) * New translations (Dutch) * New translations (Portuguese) * New translations (Russian) * New translations (Turkish) * New translations (Ukrainian) * New translations (Chinese Simplified) * New translations (Chinese Traditional) * New translations (Galician) * New translations (Portuguese, Brazilian) * New translations (Persian) * New translations (Thai) * New translations (Esperanto) * New translations (Norwegian Bokmal) * New translations (Occitan) * New translations (Kabyle) * New translations (Toki Pona) * Update catalogs.json --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Contributor
Author
📦 Bundle Size Report
|
* New translations (Catalan) * New translations (Galician) * New translations (Italian) * New translations (Spanish)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is an automated pull request to update from branch main