b5ce39b536
chore: Set permissions for GitHub actions ( #3225 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2 years ago
7101c5ecf2
GH workflow: add Python 3.11
2 years ago
46aaa57cfe
GH workflow: use actions/cache@v3
...
Also cache ./.nvm and ./node_modules
2 years ago
bc1278d25e
GH workflow: use actions/setup-python@v4
...
GitHub displays this warning with the actions/setup-python@2 :
Warning: The `set-output` command is deprecated and will be disabled soon.
Please upgrade to using Environment Files.
For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2 years ago
fc9986de0a
Merge pull request #1905 from searxng/update_data_update_ahmia_blacklist.py
...
Update searx.data - update_ahmia_blacklist.py
2 years ago
3f1d594c23
Merge pull request #1906 from searxng/update_data_update_external_bangs.py
...
Update searx.data - update_external_bangs.py
2 years ago
a9deead102
Merge pull request #1907 from searxng/update_data_update_firefox_version.py
...
Update searx.data - update_firefox_version.py
2 years ago
d49ccb54ea
Merge pull request #1908 from searxng/update_data_update_wikidata_units.py
...
Update searx.data - update_wikidata_units.py
2 years ago
fa59ff9b78
Merge pull request #1909 from searxng/update_data_update_currencies.py
...
Update searx.data - update_currencies.py
2 years ago
d653534fe1
Merge pull request #1910 from searxng/update_data_update_engine_descriptions.py
...
Update searx.data - update_engine_descriptions.py
2 years ago
e70589c598
Update searx.data - update_engine_descriptions.py
2 years ago
985a2a87a6
Update searx.data - update_currencies.py
2 years ago
c0ecc2f865
Update searx.data - update_wikidata_units.py
2 years ago
c24abc2f8c
Update searx.data - update_firefox_version.py
2 years ago
f0c7898445
Update searx.data - update_external_bangs.py
2 years ago
799c5270ae
Update searx.data - update_ahmia_blacklist.py
2 years ago
5a181ea1f5
Merge pull request #1901 from searxng/dependabot/npm_and_yarn/searx/static/themes/simple/master/svgo-3.0.0
...
Bump svgo from 2.8.0 to 3.0.0 in /searx/static/themes/simple
2 years ago
d913f0d8aa
[build] /static
2 years ago
5db4ed5d2b
Merge pull request #1902 from searxng/translations_update
...
Update translations
2 years ago
c26fa335ac
Merge pull request #1900 from searxng/dependabot/pip/master/pylint-2.15.5
...
Bump pylint from 2.15.4 to 2.15.5
2 years ago
bc3db6fd16
[translations] update from Weblate
...
bf52cdbcfbb36c7618cc8a367314d2b6b25147b9d39ade65cb835cdc563f4e0ba698a2e9df5ce28155b369a33eddf243edd3871d5aab9f7b0b2cfe68732b7865d652c20f0bcaaa8d6fd87821618f213c30d38ee9a934ce3bb696c22e6ee1efe2
2 years ago
3cade9a7eb
Bump svgo from 2.8.0 to 3.0.0 in /searx/static/themes/simple
...
Bumps [svgo](https://github.com/svg/svgo ) from 2.8.0 to 3.0.0.
- [Release notes](https://github.com/svg/svgo/releases )
- [Changelog](https://github.com/svg/svgo/blob/main/CHANGELOG-old.md )
- [Commits](https://github.com/svg/svgo/compare/v2.8.0...v3.0.0 )
---
updated-dependencies:
- dependency-name: svgo
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
37d166a01b
Bump pylint from 2.15.4 to 2.15.5
...
Bumps [pylint](https://github.com/PyCQA/pylint ) from 2.15.4 to 2.15.5.
- [Release notes](https://github.com/PyCQA/pylint/releases )
- [Commits](https://github.com/PyCQA/pylint/compare/v2.15.4...v2.15.5 )
---
updated-dependencies:
- dependency-name: pylint
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
affd8f751d
Merge pull request #1872 from searxng/dependabot/pip/master/sphinx-5.3.0
...
Bump sphinx from 5.2.3 to 5.3.0
2 years ago
8f7fe20ceb
Bump sphinx from 5.2.3 to 5.3.0
...
Bumps [sphinx](https://github.com/sphinx-doc/sphinx ) from 5.2.3 to 5.3.0.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v5.2.3...v5.3.0 )
---
updated-dependencies:
- dependency-name: sphinx
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
4783d6c9f4
Merge pull request #1886 from return42/linuxdoc-20221025
...
[upd] linuxdoc from v20211220 to v20221025
2 years ago
3cc0222801
[upd] linuxdoc from v20211220 to v20221025
...
linuxdoc v20221025 fixes an issue with the flat-table directive and adds
:align: & :width: options to flat-table directive.
[1] https://github.com/return42/linuxdoc/pull/18
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2 years ago
710a3a001f
Merge pull request #1873 from searxng/translations_update
...
Update translations
2 years ago
18ba8628dd
[translations] update from Weblate
...
c7fddee3f559a626fe7af6628a7c3da9a84dad5c9ee1ac8bb91bedc4dff99ef4cd639f6c49507a60ad30558219e9707597581f70fcd52cea
2 years ago
1a5b096578
Merge pull request #1860 from dalf/fix-startpage
...
[fix] startpage engine
2 years ago
035bc507ec
[fix] startpage engine
2 years ago
096d9defa6
Merge pull request #1847 from searxng/dependabot/pip/master/typing-extensions-4.4.0
...
Bump typing-extensions from 4.3.0 to 4.4.0
2 years ago
e2dd5a80bb
Merge pull request #1831 from searxng/dependabot/pip/master/sphinx-5.2.3
...
Bump sphinx from 5.1.1 to 5.2.3
2 years ago
4d4dfc58d4
Merge pull request #1858 from searxng/dependabot/pip/master/pylint-2.15.4
...
Bump pylint from 2.15.3 to 2.15.4
2 years ago
2eb817011c
Merge pull request #1529 from dalf/network_trust_env
...
searx.network: use SSL_CERT_FILE and SSL_CERT_DIR when they are defined
2 years ago
32e8c2cf09
searx.network: add "verify" option to the networks
...
Each network can define a verify option:
* false to disable certificate verification
* a path to existing certificate.
SearXNG uses SSL_CERT_FILE and SSL_CERT_DIR when they are defined
see https://www.python-httpx.org/environment_variables/#ssl_cert_file
2 years ago
72f6367e23
Merge pull request #1859 from searxng/translations_update
...
Update translations
2 years ago
6e86f33342
[translations] update from Weblate
...
eee3d5e2c4eb981827423f5b9e8b7f861203aa6a22c78af56a4776f8c00bdc7de5a39537e3fad460da5f0bc35704a98bf3ef3ebb620636c1767b3bb260d38c87
2 years ago
adf559fefd
Bump pylint from 2.15.3 to 2.15.4
...
Bumps [pylint](https://github.com/PyCQA/pylint ) from 2.15.3 to 2.15.4.
- [Release notes](https://github.com/PyCQA/pylint/releases )
- [Commits](https://github.com/PyCQA/pylint/compare/v2.15.3...v2.15.4 )
---
updated-dependencies:
- dependency-name: pylint
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
a733761288
Merge pull request #1853 from return42/sort_osm_keys
...
[fix] update_osm_keys_tags.py: sort JSON dump
2 years ago
23d797ee6f
Update searx.data - update_osm_keys_tags.py
...
Patch was generated by::
./manage pyenv.cmd searxng_extra/update/update_osm_keys_tags.py
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2 years ago
9933155a2e
[fix] update_osm_keys_tags.py: sort JSON dump
...
To get meaningful diff, the keys in JSON dump needs to be sorted.
Signed-off-by: Markus Heiser <markus.heiser@darmarit.de>
2 years ago
666cd1f635
Merge pull request #1846 from searxng/dependabot/pip/master/black-22.10.0
...
Bump black from 22.8.0 to 22.10.0
2 years ago
84f61af839
Merge pull request #1848 from searxng/translations_update
...
Update translations
2 years ago
325eadfd04
[translations] update from Weblate
...
70909b19acf1f0aa94ce447f59959050e27a5c792c05470f53644516
2 years ago
37b47e74be
Bump typing-extensions from 4.3.0 to 4.4.0
...
Bumps [typing-extensions](https://github.com/python/typing_extensions ) from 4.3.0 to 4.4.0.
- [Release notes](https://github.com/python/typing_extensions/releases )
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md )
- [Commits](https://github.com/python/typing_extensions/compare/4.3.0...4.4.0 )
---
updated-dependencies:
- dependency-name: typing-extensions
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
f723c67e95
Bump black from 22.8.0 to 22.10.0
...
Bumps [black](https://github.com/psf/black ) from 22.8.0 to 22.10.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/compare/22.8.0...22.10.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
901143f056
Merge pull request #1830 from MohamedElashri/master
...
Use official sci-hub mirrors
2 years ago
1ad14c8c07
Bump sphinx from 5.1.1 to 5.2.3
...
Bumps [sphinx](https://github.com/sphinx-doc/sphinx ) from 5.1.1 to 5.2.3.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/5.x/CHANGES )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v5.1.1...v5.2.3 )
---
updated-dependencies:
- dependency-name: sphinx
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
14d0fb2cd4
Merge pull request #1823 from searxng/dependabot/pip/master/selenium-4.5.0
...
Bump selenium from 4.4.3 to 4.5.0
2 years ago
nathannaveen
Alexandre FLAMENT
Markus Heiser
dalf
searxng-bot
dependabot[bot]
Alexandre Flament