Commit Graph
93 Commits
Author SHA1 Message Date
Jay WuandClaude Sonnet 5.5 d94f8dbf72 ci: apply macOS stapling workaround before packaging app (#10661)
The pfctl rule that blocks QUIC (UDP 443) was only applied before the
Inso CLI stapling step. The app packaging step also staples through
https://api.apple-cloudkit.com and hits the same issue, so run the
workaround before "Package app (MacOS only)" instead.

Ref: actions/runner-images#14924

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-27 06:03:42 +00:00
Jay Wu 61922aea77 fix(ci): work around macOS stapling issue in release build (#10647)
Block outgoing UDP on port 443 before stapling the Inso CLI installer,
as a workaround for actions/runner-images[#14924](https://github.com/actions/runner-images/issues/14924).
2026-10-22 21:56:08 +08:00
kwburns-kong 20b29355b3 fix: set persist-credentials: false on non-pushing actions/checkout steps (#10447)
actions/checkout steps across CI workflows leaves GITHUB_TOKEN persisted in git config after checkout. None of these steps perform a git push using that persisted credential, disable credential persistence on the actions.
2026-09-01 14:28:44 +00:00
Jay WuandVivek Thuravupala afaaec6f8d fix(build): macos latest (#10400)
* Revert "fix: revert electron-builder to previous version to fix macos build (#10394)"

This reverts commit 34c5010a81.

* use macos-15-large

---------

Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com>
2026-08-14 06:26:12 -07:00
kwburns-kong a45f9688dd Add harden-runner to all CI workflows (#10300) 2026-08-04 19:18:10 +02:00
Jay Wu 01dacacd6b fix(ci): change release build workflow to manual trigger (#10139) 2026-06-23 17:56:46 +08:00
Vivek Thuravupala 4d0901f111 chore: bump/inline actions off of Node 20 runtime (#9983)
* chore: bump easily bumpable actions off of Node 20 runtime

* chore: bump remaining actions or replace with inline logic where Node 24 versions are unavailable

* refactor: remove variable interpolation in run blocks as flagged by Semgrep
2026-06-09 06:16:27 +00:00
Ryan Willis 7f609226ac fix: packaged inso segfault patch via pkg-safe consola reporter (#10035) 2026-06-08 19:30:58 +00:00
Jay Wu d61526496e fix(e2e): run e2e for release branches (#10004) 2026-06-03 00:40:24 +00:00
Jay Wu 40282dea66 chore: comment out smctl credentials save in workflow (#9898)
the command is no longer executed while keeping it in place for future reference.
2026-05-06 17:42:58 -07:00
Ryan Willis d109903243 chore: resolve GHA warning annotations and reduce CI time [INS-2312] (#9839) 2026-04-22 10:44:47 -07:00
kwburns-kong 812611c38d chore: applied PoLP to workflows (#9840) 2026-04-22 16:56:10 +00:00
Ryan Willis bbf8150091 chore: bump GHA steps to latest major (#9745) 2026-03-24 15:59:58 -07:00
Ryan Willis e6c51d59c1 chore: upgrade to electron 41.0.3 and node 24.14.0 (#9734)
* chore: upgrade to electron 41.0.3 and node 24.14.0
2026-03-24 15:05:41 -07:00
Balu George 15bafdfb44 Bump container image scan action to v6.1.0 (#9690) 2026-03-04 08:13:58 +00:00
Balu George b553c62a63 Modify client cert path 2025-12-12 22:14:36 +05:30
Balu George 1562c71aa7 Hardcode cert path for release 2025-12-12 19:08:48 +05:30
Balu George 92b186510c Decrypt keypair before trust manager setup (#9478) 2025-12-12 14:41:51 +05:30
Balu George 7f0ff46f8d Fix Insomnia windows build signing and path for inso.exe signing (#9474)
* Fix incorrect path for inso.exe

* Fix windows build
2025-12-12 14:12:06 +05:30
Balu George 12b54b0ae7 Modify the windows app signing process to use the new certificate (#9472) 2025-12-12 07:33:00 +00:00
Curry Yang 24b4251ad1 fix: nuget version 2025-11-14 16:25:04 +08:00
Curry Yang 0990a46f6a feat: add squirrel windows sign check - [INS-1338] (#9361)
* feat: add windows sign check

* fix: dir

* feat: sign check in CI

* add comment

* fix
2025-11-14 11:38:08 +08:00
Curry Yang bec951ee5d fix: sentry sourcemap - [INS-1255] (#9249)
* fix: sentry sourcemap

* fix: publish sentry

* use Wildcard Pattern for sub path
2025-10-16 16:17:57 +02:00
Jay Wu 219c27d41d increase timeout to 45 minutes for building artifacts (#9238) 2025-10-10 14:47:33 +08:00
Curry Yang 6aea08bee5 chore: use ce artifacts for publishing-[INS-1095] (#8964)
* chore: use ce artifacts for publishing

* delete release create step

* add workflow_dispatch

* DEBUG

* upload publish flow for vault plugin

* verify image and provenance

* add permission

* verify

* verify

* remove debug code
2025-08-14 10:26:18 +00:00
Kent Wangandjackkav 2eca4de150 feat: External vault separation and bundle plugin support for Insomnia & Inso (#8864)
* Move vault related UI code
* Support bundle plugin for app & inso and backend integration (#8857)
* Update Github actions
* spike: bundle plugin installation alternatives (#8899)
* installation alternative by optional dependency
* Refine plugins api
* feat: Execute vault plugin tag in web worker (#8934)
* update bundle test
* fix issues from comment

---------

Co-authored-by: jackkav <jackkav@gmail.com>
2025-08-07 14:06:41 +00:00
Ryan WillisandCurry Yang e9b75c02bc feat: allow choosing install dir with NSIS - [INS-5109] (#8456)
* feat: allow choosing install dir with NSIS

* inject file

* write file to package

* read nsis flag file

* add publish config

* add publish config

* comment wrapper

* nsis auto-update

* auto update

* update

* fix nsh

* update nsh script

* update config

* fix: lint error

* fix lint

* fix: can not read or write file

* fix: did not generate app-update.yml

* use different wrapper logic

* modify comment

* fix: simplify code

* feat: add version into origin exe name

---------

Co-authored-by: Curry Yang <1019yanglu@gmail.com>
2025-06-23 16:31:13 +08:00
Bingbing 69c08ec0ad fix: specify bash as shell to ensure INSO_VERSION can be read on Windows (#8704) 2025-05-13 03:13:18 +00:00
Jack Kavanagh b30978e33b Full-prettier-run (#8605)
* prettier

* remove markdown linting
2025-04-11 13:37:19 +02:00
Jack Kavanagh 7ce03af046 bump electron-build and add fuse (#8602)
* bump electron-build and add fuse

* ts

* fix ts issue

* js

* re-enable notarize

* update notarize step

* fix jsdoc
2025-04-11 13:10:42 +02:00
Balu George 4e45c7b505 Trigger docker/login-action only on linux runners (#8564) 2025-04-01 16:21:10 +05:30
Balu George bc64e15a05 Add Docker Hub login to avoid build failures due to image pull rate limit (#8561) 2025-04-01 15:20:22 +05:30
Jack Kavanagh 10e1ded7dc bump/security-actions (#8510) 2025-03-25 17:03:09 +01:00
Ryan Willis 05d15b4abf securely wrap execution (#8451)
* test using a wrapper that sets security context before invoking the main application

* add build step to pr ci

* try with diff ver string

* statically link the standard libraries for portability

* more static linking

* prior version string

* remove pr substring from version

* try using a different version string
2025-03-25 08:57:53 -07:00
Balu George 8d1e6b21c4 Pin all external github actions to their corresponding commit SHAs (#8511) 2025-03-24 11:11:26 +00:00
Filipe Freire f473bad2f3 arm64 linux build targets 2025-02-07 15:54:22 +00:00
hexchain b7e959758b chore: also build appimage for arm64 linux (#8331) 2025-01-30 00:00:35 +01:00
Filipe Freire 9e38909f07 exclude inso docker from arm build 2025-01-28 16:58:34 +00:00
jackkav cc0cdb66ce use ubuntu 22 2025-01-28 13:41:28 +01:00
jackkav c4b77f39c5 only tag.gz for arm 2025-01-28 13:41:17 +01:00
Jack Kavanagh 0c7c50c4af make runners conventional (#8325)
* make runners conventional

* use 24 explicitly until latest alias is available for arm

* arm64 need snapcraft
2025-01-28 13:11:01 +01:00
hexchain e5c49f8d38 Build Linux aarch64 packages using the new GH runner (#8306)
* chore: upgrade @getinsomnia/node-libcurl to 2.33.7

* chore: add arch into AppImage name template

* chore: run release workflows on aarch64 linux runner

* fix: also consider process.arch when determining insomnia binary path

* fix: lift unprivileged userns restrictions for linux

Ubuntu 24.04 introduced this new restriction so we just lift it for all
Linux runners now to avoid confusion in the future.

* chore: remove hardcoded platform in inso Dockerfile

* chore: add architecture id into inso artifact name

* feat: modify workflows to support multi-arch
2025-01-28 10:55:25 +01:00
Ryan Willis 2a9ffac2ac feat(github): github app [INS-3090] (#8254) 2024-12-17 13:35:01 +00:00
Filipe Freire 8703b889f5 spike: improve release PR warning (#8196) 2024-11-22 15:53:18 +00:00
Filipe Freire 4e8e7a268b skip_cis_scan: true 2024-10-23 16:15:28 +01:00
Filipe Freire bfb2f4567f fix: use different security-actions version 2024-10-23 15:54:59 +01:00
Filipe Freire 8ddff9d50e fix: windows code signing (#8084) 2024-10-16 06:47:16 -07:00
Ryan Willis 9734d1e117 fix(build): set correct inso version during windows build (#7940) 2024-09-11 14:06:55 +00:00
Filipe Freire 432b30cf80 chore: cleanup after v10 beta.1 [no-ticket] (#7918) 2024-09-05 12:14:39 +01:00
Filipe Freire 5ea1261563 debug 2024-09-05 10:50:32 +01:00