mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 10:45:59 -10:00
yhh
4fe5caf8ce
The repository now describes the two lines the version roadmap announced (discussions/10748): 2.x on studio, 1.x on main-v2 in maintenance. - README (en, zh-CN): a Versions section and a Studio 2.x release badge. Install leads with Reasonix Studio 2.x from the studio-v* pre-releases, with the 1.x CLI and desktop app beside it as the stable line. The zh-CN build-from-source section gains the Studio build it lacked. - Issue forms offer 2.x / 1.x / 0.x, and the labeler maps them to v3 / v2 / v1, with the pasted version still overriding the dropdown. The forms link the roadmap. The PR template and CONTRIBUTING say which branch takes which changes. Issue forms, schedules and Dependabot are read from the default branch only, so these take effect when studio becomes it: - CodeQL scans pushes and PRs on both lines, and the weekly scan checks out each line and files results under its own ref, so 1.x keeps its security scanning. - v1-maintenance-schedule starts main-v2's nightly app-memory and diagnostic-overhead monitors, which measure the 1.x desktop app, on main-v2. - Dependabot drops /desktop/frontend and /site, which do not exist on studio, and covers /desktop/frontend-next and /desktop/electron. It also names main-v2 as a target for patch updates only.
64 lines
2.2 KiB
YAML
64 lines
2.2 KiB
YAML
name: CodeQL
|
|
|
|
on:
|
|
# Docs/release-notes/root-Markdown changes carry no analyzable code; the
|
|
# weekly cron keeps the full scan cadence regardless.
|
|
push:
|
|
branches: ["main-v2", "studio"]
|
|
paths-ignore:
|
|
- 'docs/**'
|
|
- 'release-notes/**'
|
|
- '*.md'
|
|
pull_request:
|
|
branches: ["main-v2", "studio"]
|
|
paths-ignore:
|
|
- 'docs/**'
|
|
- 'release-notes/**'
|
|
- '*.md'
|
|
# A schedule runs only from the default branch, so the weekly scan checks out
|
|
# both lines itself: 1.x is in maintenance, and security is part of it.
|
|
schedule:
|
|
- cron: "27 3 * * 1"
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze (${{ matrix.language }}${{ matrix.branch && format(', {0}', matrix.branch) || '' }})
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
security-events: write
|
|
packages: read
|
|
actions: read
|
|
contents: read
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
language: [go, javascript-typescript, actions]
|
|
# Empty means "the ref this event is about"; a scheduled run names each line.
|
|
branch: ${{ fromJSON(github.event_name == 'schedule' && '["main-v2", "studio"]' || '[""]') }}
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
ref: ${{ matrix.branch }}
|
|
- id: head
|
|
if: matrix.branch != ''
|
|
run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/[email protected]
|
|
with:
|
|
languages: ${{ matrix.language }}
|
|
build-mode: ${{ matrix.language == 'go' && 'autobuild' || 'none' }}
|
|
- name: Perform CodeQL Analysis
|
|
if: matrix.branch == ''
|
|
uses: github/codeql-action/[email protected]
|
|
with:
|
|
category: "/language:${{ matrix.language }}"
|
|
# Results from a checked-out line are filed under that line's ref, not the
|
|
# default branch the schedule happened to run from.
|
|
- name: Perform CodeQL Analysis (${{ matrix.branch }})
|
|
if: matrix.branch != ''
|
|
uses: github/codeql-action/[email protected]
|
|
with:
|
|
category: "/language:${{ matrix.language }}"
|
|
ref: refs/heads/${{ matrix.branch }}
|
|
sha: ${{ steps.head.outputs.sha }}
|