From e7be25a045b1e0b3e688f150e06c6a5ea06be0ee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 30 Jan 2025 09:05:02 +0000 Subject: [PATCH 1/5] chore(deps): Bump github/codeql-action from 3.28.1 to 3.28.6 (#3467) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.6.
Release notes

Sourced from github/codeql-action's releases.

v3.28.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

See the full CHANGELOG.md for more information.

v3.28.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

See the full CHANGELOG.md for more information.

v3.28.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

See the full CHANGELOG.md for more information.

v3.28.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.28.6 - 27 Jan 2025

3.28.5 - 24 Jan 2025

3.28.4 - 23 Jan 2025

No user facing changes.

3.28.3 - 22 Jan 2025

3.28.2 - 21 Jan 2025

No user facing changes.

3.28.1 - 10 Jan 2025

3.28.0 - 20 Dec 2024

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

3.27.7 - 10 Dec 2024

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.28.1&new-version=3.28.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 047922c950..63db06dbe1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,10 +28,10 @@ jobs: language: [javascript] steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 + - uses: github/codeql-action/init@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6 with: languages: ${{ matrix.language }} - - uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 - - uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 + - uses: github/codeql-action/autobuild@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6 + - uses: github/codeql-action/analyze@17a820bf2e43b47be2c72b39cc905417bc1ab6d0 # v3.28.6 with: category: '/language:${{matrix.language}}' From a62714db70a4124ab419425475c558ee426ab324 Mon Sep 17 00:00:00 2001 From: John Cowen Date: Thu, 30 Jan 2025 09:46:56 +0000 Subject: [PATCH 2/5] feat(tools): adds "execute on all workspaces" Makefile decorator (#3486) This target calls a Makefile target on all packages within the workspace: i.e. `make ws/lint` will run `make lint` on all packages. If the target doesn't exist, the command will fail only for that sub-package. Signed-off-by: John Cowen --- Makefile | 1 + packages/config/src/mk/decorators.mk | 5 +++++ 2 files changed, 6 insertions(+) create mode 100644 packages/config/src/mk/decorators.mk diff --git a/Makefile b/Makefile index 7ed2d7890c..852963ea09 100644 --- a/Makefile +++ b/Makefile @@ -11,6 +11,7 @@ MK := $(KUMAHQ_CONFIG)/src/mk .DEFAULT_GOAL := help include $(MK)/help.mk +include $(MK)/decorators.mk include $(MK)/install.mk include $(MK)/check.mk diff --git a/packages/config/src/mk/decorators.mk b/packages/config/src/mk/decorators.mk new file mode 100644 index 0000000000..16d3b196e2 --- /dev/null +++ b/packages/config/src/mk/decorators.mk @@ -0,0 +1,5 @@ +.PHONY: ws/% +ws/%: ## Dev: Run the same command in every package in the workspace i.e. `make ws/lint` + @for dir in $(shell npm query .workspace | jq -r '.[].location'); do \ + $(MAKE) -C $(NPM_WORKSPACE_ROOT)/$$dir $(subst ws/,,$@); \ + done From 40fa242cb61fc8eb598ce111010ec28c85fe5983 Mon Sep 17 00:00:00 2001 From: John Cowen Date: Thu, 30 Jan 2025 12:19:16 +0000 Subject: [PATCH 3/5] fix: removes extra padding adding via kongponents update (#3493) Several people have reported issue with being able to click on our tab component i.e. you have to click exactly on the text instead of being able to click on the entire button. A recent kongponent update (https://github.com/Kong/kongponents/pull/2532) changed the padding of certain HTML elements, which removed the padding from our anchor links and added it to the surrounding div instead, meaning whilst it looked like you could click on the entire button to click the anchor, you where actually clicking the div, meaning the anchor wasn't navigating. Also see https://github.com/Kong/kongponents/pull/2532/files#diff-01f83cc2092a263bfd47c1d0a4ba5e96dea98264d85282662a63f4fa18c44dedR177 This PR rearranges the padding using some overwrites to return the anchor its previous padded state. There is still a little unclickable area between the button and the bottom border, but I think this is intentional form the kongponents authors. The additional difference with this area is that at least you don't see a pointer cursor when hovering over it. Signed-off-by: John Cowen --- packages/kuma-gui/src/app/x/components/x-tabs/XTabs.vue | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/packages/kuma-gui/src/app/x/components/x-tabs/XTabs.vue b/packages/kuma-gui/src/app/x/components/x-tabs/XTabs.vue index 71c32509d7..efd1d89808 100644 --- a/packages/kuma-gui/src/app/x/components/x-tabs/XTabs.vue +++ b/packages/kuma-gui/src/app/x/components/x-tabs/XTabs.vue @@ -82,13 +82,16 @@ watch(() => slots, () => { })