Skip to content

修复 Dependabot 上传误报，保留 Diffview 迁移门禁 #43

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tiye merged 1 commit into from
Oct 21, 2026
Merged

修复 Dependabot 上传误报，保留 Diffview 迁移门禁 #43

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/upload.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ jobs:
node --test scripts/upgrade.test.mjs

- name: Upload static assets to COS
if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
if: github.event_name == 'push' || (github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.user.login != 'dependabot[bot]')
uses: worktools/cos-upload-action@06d6027dcca6413c5936e04a9b6e9f0d5ef71ba0 # v1.2.0
with:
source-dir: dist
Expand Down
3 changes: 2 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ Released COS action v1.2.0 validates HTML references and verifies public uploads
no extra CDN checker is needed. Existing external fonts and server paths remain
unchanged.
Each PR run uses its own preview prefix (`pr/<number>/<run-id>/<attempt>/`).
Fork and Dependabot PRs retain all checks and builds but do not upload previews; ordinary Actions deployment secrets are not provided to Dependabot.
Runs queue per PR and separately for production, without cancelling uploads.
The six existing runtime checks cover diff behavior, not CDN verification.

Expand All @@ -28,7 +29,7 @@ entry/all-public checks, toolchain verification and the existing business tests.
与 Map 存档均经过检查恢复；新存档以同字段 Map 保存，不包含 Reel 调试历史。
预览 COS、生产 CDN 和原服务器路径不变，仍只使用 action 自带上传校验。

正式 0.30.1 release 尚无 CLI 资产，故明确使用已发布的配对候选；Respo
正式 0.30.1 的 CLI/npm 配对尚未完成发布，故明确使用已完整发布的配对候选；Respo
0.16.122、Reel 0.6.39、UI 0.7.41 均为正式模块 tag，移除旧 alpha 模块依赖。
业务 StoreData 配合 Reel `State<Enum,StoreData>`，不再强转 Reel store。
文本和组件游标在写入前检查，DOM、键盘及存储使用真实宿主边界。
Expand Down