Jay Wu and Claude Sonnet 5.5
d94f8dbf72
ci: apply macOS stapling workaround before packaging app ( #10661 )
...
The pfctl rule that blocks QUIC (UDP 443) was only applied before the
Inso CLI stapling step. The app packaging step also staples through
https://api.apple-cloudkit.com and hits the same issue, so run the
workaround before "Package app (MacOS only)" instead.
Ref: actions/runner-images#14924
Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-27 06:03:42 +00:00
Jay Wu
61922aea77
fix(ci): work around macOS stapling issue in release build ( #10647 )
...
Block outgoing UDP on port 443 before stapling the Inso CLI installer,
as a workaround for actions/runner-images[#14924 ](https://github.com/actions/runner-images/issues/14924 ).
2026-10-22 21:56:08 +08:00
kwburns-kong
20b29355b3
fix: set persist-credentials: false on non-pushing actions/checkout steps ( #10447 )
...
actions/checkout steps across CI workflows leaves GITHUB_TOKEN persisted in git config after checkout. None of these steps perform a git push using that persisted credential, disable credential persistence on the actions.
2026-09-01 14:28:44 +00:00
Jay Wu and Vivek Thuravupala
afaaec6f8d
fix(build): macos latest ( #10400 )
...
* Revert "fix: revert electron-builder to previous version to fix macos build (#10394 )"
This reverts commit 34c5010a81 .
* use macos-15-large
---------
Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com >
2026-08-14 06:26:12 -07:00
kwburns-kong
a45f9688dd
Add harden-runner to all CI workflows ( #10300 )
2026-08-04 19:18:10 +02:00
Jay Wu
01dacacd6b
fix(ci): change release build workflow to manual trigger ( #10139 )
2026-06-23 17:56:46 +08:00
Vivek Thuravupala
4d0901f111
chore: bump/inline actions off of Node 20 runtime ( #9983 )
...
* chore: bump easily bumpable actions off of Node 20 runtime
* chore: bump remaining actions or replace with inline logic where Node 24 versions are unavailable
* refactor: remove variable interpolation in run blocks as flagged by Semgrep
2026-06-09 06:16:27 +00:00
Ryan Willis
7f609226ac
fix: packaged inso segfault patch via pkg-safe consola reporter ( #10035 )
2026-06-08 19:30:58 +00:00
Jay Wu
d61526496e
fix(e2e): run e2e for release branches ( #10004 )
2026-06-03 00:40:24 +00:00
Jay Wu
40282dea66
chore: comment out smctl credentials save in workflow ( #9898 )
...
the command is no longer executed while keeping it in place for future reference.
2026-05-06 17:42:58 -07:00
Ryan Willis
d109903243
chore: resolve GHA warning annotations and reduce CI time [INS-2312] ( #9839 )
2026-04-22 10:44:47 -07:00
kwburns-kong
812611c38d
chore: applied PoLP to workflows ( #9840 )
2026-04-22 16:56:10 +00:00
Ryan Willis
bbf8150091
chore: bump GHA steps to latest major ( #9745 )
2026-03-24 15:59:58 -07:00
Ryan Willis
e6c51d59c1
chore: upgrade to electron 41.0.3 and node 24.14.0 ( #9734 )
...
* chore: upgrade to electron 41.0.3 and node 24.14.0
2026-03-24 15:05:41 -07:00
Balu George
15bafdfb44
Bump container image scan action to v6.1.0 ( #9690 )
2026-03-04 08:13:58 +00:00
Balu George
b553c62a63
Modify client cert path
2025-12-12 22:14:36 +05:30
Balu George
1562c71aa7
Hardcode cert path for release
2025-12-12 19:08:48 +05:30
Balu George
92b186510c
Decrypt keypair before trust manager setup ( #9478 )
2025-12-12 14:41:51 +05:30
Balu George
7f0ff46f8d
Fix Insomnia windows build signing and path for inso.exe signing ( #9474 )
...
* Fix incorrect path for inso.exe
* Fix windows build
2025-12-12 14:12:06 +05:30
Balu George
12b54b0ae7
Modify the windows app signing process to use the new certificate ( #9472 )
2025-12-12 07:33:00 +00:00
Curry Yang
24b4251ad1
fix: nuget version
2025-11-14 16:25:04 +08:00
Curry Yang
0990a46f6a
feat: add squirrel windows sign check - [INS-1338] ( #9361 )
...
* feat: add windows sign check
* fix: dir
* feat: sign check in CI
* add comment
* fix
2025-11-14 11:38:08 +08:00
Curry Yang
bec951ee5d
fix: sentry sourcemap - [INS-1255] ( #9249 )
...
* fix: sentry sourcemap
* fix: publish sentry
* use Wildcard Pattern for sub path
2025-10-16 16:17:57 +02:00
Jay Wu
219c27d41d
increase timeout to 45 minutes for building artifacts ( #9238 )
2025-10-10 14:47:33 +08:00
Curry Yang
6aea08bee5
chore: use ce artifacts for publishing-[INS-1095] ( #8964 )
...
* chore: use ce artifacts for publishing
* delete release create step
* add workflow_dispatch
* DEBUG
* upload publish flow for vault plugin
* verify image and provenance
* add permission
* verify
* verify
* remove debug code
2025-08-14 10:26:18 +00:00
Kent Wang and jackkav
2eca4de150
feat: External vault separation and bundle plugin support for Insomnia & Inso ( #8864 )
...
* Move vault related UI code
* Support bundle plugin for app & inso and backend integration (#8857 )
* Update Github actions
* spike: bundle plugin installation alternatives (#8899 )
* installation alternative by optional dependency
* Refine plugins api
* feat: Execute vault plugin tag in web worker (#8934 )
* update bundle test
* fix issues from comment
---------
Co-authored-by: jackkav <jackkav@gmail.com >
2025-08-07 14:06:41 +00:00
Ryan Willis and Curry Yang
e9b75c02bc
feat: allow choosing install dir with NSIS - [INS-5109] ( #8456 )
...
* feat: allow choosing install dir with NSIS
* inject file
* write file to package
* read nsis flag file
* add publish config
* add publish config
* comment wrapper
* nsis auto-update
* auto update
* update
* fix nsh
* update nsh script
* update config
* fix: lint error
* fix lint
* fix: can not read or write file
* fix: did not generate app-update.yml
* use different wrapper logic
* modify comment
* fix: simplify code
* feat: add version into origin exe name
---------
Co-authored-by: Curry Yang <1019yanglu@gmail.com >
2025-06-23 16:31:13 +08:00
Bingbing
69c08ec0ad
fix: specify bash as shell to ensure INSO_VERSION can be read on Windows ( #8704 )
2025-05-13 03:13:18 +00:00
Jack Kavanagh
b30978e33b
Full-prettier-run ( #8605 )
...
* prettier
* remove markdown linting
2025-04-11 13:37:19 +02:00
Jack Kavanagh
7ce03af046
bump electron-build and add fuse ( #8602 )
...
* bump electron-build and add fuse
* ts
* fix ts issue
* js
* re-enable notarize
* update notarize step
* fix jsdoc
2025-04-11 13:10:42 +02:00
Balu George
4e45c7b505
Trigger docker/login-action only on linux runners ( #8564 )
2025-04-01 16:21:10 +05:30
Balu George
bc64e15a05
Add Docker Hub login to avoid build failures due to image pull rate limit ( #8561 )
2025-04-01 15:20:22 +05:30
Jack Kavanagh
10e1ded7dc
bump/security-actions ( #8510 )
2025-03-25 17:03:09 +01:00
Ryan Willis
05d15b4abf
securely wrap execution ( #8451 )
...
* test using a wrapper that sets security context before invoking the main application
* add build step to pr ci
* try with diff ver string
* statically link the standard libraries for portability
* more static linking
* prior version string
* remove pr substring from version
* try using a different version string
2025-03-25 08:57:53 -07:00
Balu George
8d1e6b21c4
Pin all external github actions to their corresponding commit SHAs ( #8511 )
2025-03-24 11:11:26 +00:00
Filipe Freire
f473bad2f3
arm64 linux build targets
2025-02-07 15:54:22 +00:00
hexchain
b7e959758b
chore: also build appimage for arm64 linux ( #8331 )
2025-01-30 00:00:35 +01:00
Filipe Freire
9e38909f07
exclude inso docker from arm build
2025-01-28 16:58:34 +00:00
jackkav
cc0cdb66ce
use ubuntu 22
2025-01-28 13:41:28 +01:00
jackkav
c4b77f39c5
only tag.gz for arm
2025-01-28 13:41:17 +01:00
Jack Kavanagh
0c7c50c4af
make runners conventional ( #8325 )
...
* make runners conventional
* use 24 explicitly until latest alias is available for arm
* arm64 need snapcraft
2025-01-28 13:11:01 +01:00
hexchain
e5c49f8d38
Build Linux aarch64 packages using the new GH runner ( #8306 )
...
* chore: upgrade @getinsomnia/node-libcurl to 2.33.7
* chore: add arch into AppImage name template
* chore: run release workflows on aarch64 linux runner
* fix: also consider process.arch when determining insomnia binary path
* fix: lift unprivileged userns restrictions for linux
Ubuntu 24.04 introduced this new restriction so we just lift it for all
Linux runners now to avoid confusion in the future.
* chore: remove hardcoded platform in inso Dockerfile
* chore: add architecture id into inso artifact name
* feat: modify workflows to support multi-arch
2025-01-28 10:55:25 +01:00
Ryan Willis
2a9ffac2ac
feat(github): github app [INS-3090] ( #8254 )
2024-12-17 13:35:01 +00:00
Filipe Freire
8703b889f5
spike: improve release PR warning ( #8196 )
2024-11-22 15:53:18 +00:00
Filipe Freire
4e8e7a268b
skip_cis_scan: true
2024-10-23 16:15:28 +01:00
Filipe Freire
bfb2f4567f
fix: use different security-actions version
2024-10-23 15:54:59 +01:00
Filipe Freire
8ddff9d50e
fix: windows code signing ( #8084 )
2024-10-16 06:47:16 -07:00
Ryan Willis
9734d1e117
fix(build): set correct inso version during windows build ( #7940 )
2024-09-11 14:06:55 +00:00
Filipe Freire
432b30cf80
chore: cleanup after v10 beta.1 [no-ticket] ( #7918 )
2024-09-05 12:14:39 +01:00
Filipe Freire
5ea1261563
debug
2024-09-05 10:50:32 +01:00