From 2cebf42cacf984f6b3f5d07a0e76319d45758975 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 21:35:37 +0000 Subject: [PATCH 1/3] deps: bump globals from 17.8.0 to 17.9.0 in the minor group Bumps the minor group with 1 update: [globals](https://github.com/sindresorhus/globals). Updates `globals` from 17.8.0 to 17.9.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](https://github.com/sindresorhus/globals/compare/v17.8.0...v17.9.0) --- updated-dependencies: - dependency-name: globals dependency-version: 17.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] --- package-lock.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index b6b7f91..e1bc642 100644 --- a/package-lock.json +++ b/package-lock.json @@ -31,7 +31,7 @@ "vitest": "^4.1.10" }, "engines": { - "node": ">=20.19.0" + "node": ">=22.12.0" }, "funding": { "type": "github", @@ -1823,9 +1823,9 @@ } }, "node_modules/globals": { - "version": "17.8.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-17.8.0.tgz", - "integrity": "sha512-Zz/LMDZScFmkakeL2cTHzf+PbWKdpU3uclqkZT7TjDG58j5WPt0PpA+n9uPI24fZtlw07q0OtEi84K+umsRzqQ==", + "version": "17.9.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-17.9.0.tgz", + "integrity": "sha512-m/MvAW61QVU5VDNF1Vj8axt016h8w7L5TU1e9zlab7XIttAT2YAlCwl75K1fOqvMM9apmD7lbCIRhpfkhmxhCg==", "dev": true, "license": "MIT", "engines": { From 4db6c5b2e6ad9130c09ad44d75da18a7211b629c Mon Sep 17 00:00:00 2001 From: "cldmv-bot[bot]" <230771808+cldmv-bot[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 21:37:34 +0000 Subject: [PATCH 2/3] chore: bump version to 1.1.6 --- package-lock.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index e1bc642..aa551ae 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@cldmv/git-embedded", - "version": "1.1.5", + "version": "1.1.6", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@cldmv/git-embedded", - "version": "1.1.5", + "version": "1.1.6", "license": "Apache-2.0", "dependencies": { "@cldmv/slothlet": "^3.7.0", diff --git a/package.json b/package.json index dcfcbc1..df4eb16 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@cldmv/git-embedded", - "version": "1.1.5", + "version": "1.1.6", "description": "Manage embedded git repositories (anonymous gitlinks) without .gitmodules. Provides hooks that restore standard git-command ergonomics for embedded children while keeping the child's origin URL out of the public parent repo.", "type": "module", "license": "Apache-2.0", From 87c6cda7013bd8b26537ba8fc4e75be88e5f6629 Mon Sep 17 00:00:00 2001 From: Shinrai Date: Sat, 8 Aug 2026 10:01:57 -0700 Subject: [PATCH 3/3] =?UTF-8?q?fix(ci):=20route=20Required=20PR=20Check=20?= =?UTF-8?q?mirror=20job=20like=20the=20reusable=20(private=E2=86=92cldmv-r?= =?UTF-8?q?unners)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Golden-reference copy of the CLDMV/.github#208 fix so future onboards copy the corrected template. The mirror job hardcoded runs-on: ubuntu-latest; match workflow-ci.yml's visibility-aware routing (private->cldmv-runners, public->ubuntu-latest, RUNS_ON_DEFAULT override). Refs CLDMV/.github#208 --- .github/workflows/ci.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b18b558..d89be9c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -287,7 +287,13 @@ jobs: github.event.pull_request.head.ref == 'next' || github.event.pull_request.head.ref == 'hotfixes' ) - runs-on: ubuntu-latest + # Match the reusable's runner routing (workflow-ci.yml): private CLDMV + # repos run on self-hosted cldmv-runners (GitHub-hosted Actions budget is + # private-metered and exhausted), public repos use free GitHub-hosted, and + # RUNS_ON_DEFAULT overrides. Hardcoding ubuntu-latest here made this + # required check fail to provision a runner on private repos once the + # reusable moved its own jobs to cldmv-runners in v4.19.1 (see CLDMV/.github#208). + runs-on: ${{ vars.RUNS_ON_DEFAULT != '' && vars.RUNS_ON_DEFAULT || ((github.repository_owner == 'CLDMV' && github.event.repository.private) && 'cldmv-runners' || 'ubuntu-latest') }} # Pure shell mirror — no GitHub API access. Strip the workflow's # write defaults to zero for this job. permissions: {}