github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1
10593 commits 10 branches 71 tags 33 MiB
Commit graph

325 commits

Author SHA1 Message Date
Kelvin M. Klann
491b46cfa3
docs: always use full path to program in examples (#6963) 
And add it to the bug report template checklist.

To avoid potential issues due to firejail-in-firejail.

Commands used to search and replace:

    perl -pi -e '
      s/(firejail)( .*)? (blobby|dig|firefox|galculator|gedit|gimp|handbrake|icecat|iceweasel|mc|openbox|transmission|vlc|warzone2100|wget|xed|xterm)/$1$2 \/usr\/bin\/$3/;
    ' README.md src/firejail/usage.c src/man/*.in
    perl -pi -e 's/^\s*(firefox \\?-)/\/usr\/bin\/$1/' \
      src/man/firejail.1.in

Note: Some parts were edited manually.

Note: Most tests still use the program basename.

Relates to #2877.
 2025-11-16 08:39:05 +00:00
Kelvin M. Klann
be065d1301
docs: clarify that only latest and dev versions are supported (#6965) 
To avoid wasting time due to (for example):

* Bugs that were already fixed
* Old versions with different/missing verbosity in the output
* Behavior that only affects (or differs in) old versions
* Copying and pasting profile lines which contain commands that are
  unsupported in old versions (or that depend on other changes to
  profiles in the current version)

This is a follow-up to #6964.
 2025-11-15 04:53:08 +00:00
dependabot[bot]
f0b8d485b4 build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3599b3baa1...0499de31b9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-01 10:52:22 +00:00
dependabot[bot]
f6b666d9d5 build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](ec9f2d5744...f4a75cfd61)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-01 22:48:14 +00:00
dependabot[bot]
fc2ffe73d7 build(deps): bump github/codeql-action from 3.29.11 to 3.30.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.11 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3c3833e0f8...3599b3baa1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-01 22:43:00 +00:00
dependabot[bot]
d3e5ef823a build(deps): bump github/codeql-action from 3.29.7 to 3.29.11 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.7 to 3.29.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](51f77329af...3c3833e0f8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-04 11:34:21 +00:00
dependabot[bot]
b67b2db74e build(deps): bump actions/checkout from 4.2.2 to 5.0.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11bd71901b...08c6903cd8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-04 11:33:37 +00:00
netblue30
062f5d871e
Merge pull request #6873 from kmk3/ci-codespell-ubuntu-2404 
ci: codespell: upgrade ubuntu-22.04 to ubuntu-24.04
 2025-08-20 06:55:59 -04:00
Kelvin M. Klann
ebb368780d ci: cppcheck: upgrade ubuntu-22.04 to ubuntu-24.04 
Relevant software changes:

* cppcheck 2.7 -> 2.13

This is a follow-up to #6873.

See also [1] and [2].

Fixes CI breakage in #6856[3]:

    $ cppcheck --version
    Cppcheck 2.7
    $ make cppcheck
    cppcheck -q -j '4' --force --error-exitcode=1 --enable=warning,performance \
      --max-ctu-depth=40 \
      -i src/firejail/checkcfg.c \
      -i src/firejail/main.c \
      -i src/lib/syscall.c \
      .
    src/firemon/procevent.c:306:6: error: syntax error [syntaxError]
         debug_prctl("event fork\n");
         ^
    make: *** [Makefile:379: cppcheck] Error 1

[1] https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md
[2] https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md
[3] https://github.com/netblue30/firejail/actions/runs/17047583642/job/48327251189
 2025-08-20 07:18:17 -03:00
Kelvin M. Klann
d145db7522 ci: codespell: upgrade ubuntu-22.04 to ubuntu-24.04 
Relevant software changes:

* codespell 2.1.0 -> 2.2.6

See also [1] and [2].

[1] https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md
[2] https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md
 2025-08-20 07:02:54 -03:00
Kelvin M. Klann
dbf4b9a22b ci: drop apt dependencies from main build 
Disable apparmor/selinux and use the default compiler version (currently
gcc 11.4.0-1ubuntu1~22.04).

Note that these configuration options are are still enabled in the
`build-gcc` job, so the code coverage should remain unaffected.

This allows dropping the apt-get update/install commands, which can take
a significant amount of time (sometimes even most of the job runtime),
depending on the state of the CI infrastructure.

For a relatively recent example of this, see the build of commit
a31f74165 ("bugfix: fix "Not enforcing Landlock" message always being
printed (#6806)", 2025-07-10) [1]:

* `apt-get update`: 12s
* `apt-get install`: 64s
* `make`: 40s

When comparing master (8bccd686f) [2] [3] [4] to this commit [5] [6] [7]
using 3 consecutive builds each, the average build time goes down from
77s to 21s (a ~72% reduction), making the CI feedback much quicker,
which is especially helpful when iterating on a branch in general and
when trying to debug CI build failures.

[1] https://github.com/netblue30/firejail/actions/runs/16141617993/job/45550207173
[2] https://github.com/netblue30/firejail/actions/runs/17019049268/job/48245518988
[3] https://github.com/netblue30/firejail/actions/runs/17019049268/job/48245547046
[4] https://github.com/netblue30/firejail/actions/runs/17019049268/job/48245579009
[5] https://github.com/netblue30/firejail/actions/runs/17019030502/job/48245478097
[6] https://github.com/netblue30/firejail/actions/runs/17019030502/job/48245617867
[7] https://github.com/netblue30/firejail/actions/runs/17019030502/job/48245626724
 2025-08-18 05:00:36 -03:00
Kelvin M. Klann
47811cb6da ci: run main build in parallel 
To make it faster.

See also commit 500d8f2d6 ("ci: run make in parallel where applicable",
2023-08-14) / PR #5960.
 2025-08-18 05:00:36 -03:00
Kelvin M. Klann
0d2b949a85 ci: copy build to build-gcc & remove --enable-analyzer 
Changes:

* Copy the `build` job from build.yml to `build-gcc` in build-extra.yml
* Remove `--enable-analyzer` in the main build

`-fanalyzer` increases the chance of false positives (compared to using
just the normal warning flags), so leave it just in build-extra to make
it clearer why the main build fails (that is, build errors, normal
warnings or analyzer warnings).
 2025-08-18 05:00:36 -03:00
Kelvin M. Klann
8bccd686fd
ci: standardize "apt-get install" step name (#6862) 
For consistency and simplicity, name the `apt-get install` step just
"install dependencies" in all jobs.

Affected jobs:

* check-c.yml: scan-build
* check-c.yml: cppcheck

Related commits:

* 94e2ce275 ("Create build.yml (#3651)", 2020-10-01)
* 0fa11826b ("build: test build with apparmor and selinux in CI",
  2020-10-01)
 2025-08-16 13:47:34 +00:00
Kelvin M. Klann
c902890cd1
docs: github: clarify how to attach logs (#6858) 
Link to the GitHub docs for attaching a file[1].

This should be more straightforward in most cases and would avoid
polluting the user profile with gists unnecessarily (which might get in
the way of using/managing other gists), especially over time when
dealing with many projects/issues/comments.

Keep the gist as a fallback option just in case the file attachment
feature randomly gets broken for an extended period of time, as the
GitHub web UI overall keeps getting slower and jankier over time.

Note: It seems that in both cases (attachment/gist), the file size limit
in the web UI is 25MB[2].

Relates to #5398.

Misc: This was noticed on #5611.

[1] https://docs.github.com/en/get-started/writing-on-github/working-with-advanced-formatting/attaching-files
[2] https://docs.github.com/en/repositories/working-with-files/managing-large-files/about-large-files-on-github#file-size-limits
 2025-08-16 11:42:58 +00:00
dependabot[bot]
ada8475dc9 build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.2 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](181d5eefc2...51f77329af)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-01 08:09:17 +00:00
dependabot[bot]
8120e87d48 build(deps): bump step-security/harden-runner from 2.12.2 to 2.13.0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.2 to 2.13.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](6c439dc8bd...ec9f2d5744)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-01 08:09:01 +00:00
Kelvin M. Klann
ab605f26e2
ci: allow new github domain for codeql download (#6845) 
The `codeql-cpp` CI job for #6844 is failing[1]:

    ##[group]Setup CodeQL tools
    [...]
    Did not find CodeQL tools version 2.22.2 in the toolcache.
    Using CodeQL CLI version 2.22.2 sourced from https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.22.2/codeql-bundle-linux64.tar.zst .
    Downloading CodeQL tools from https://github.com/github/codeql-action/releases/download/codeql-bundle-v2.22.2/codeql-bundle-linux64.tar.zst . This may take a while.
    Streaming the extraction of the CodeQL bundle.
    node:events:502
          throw er; // Unhandled 'error' event
          ^

    Error: connect ECONNREFUSED 54.185.253.63:443
        at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1611:16)
    [...]
      errno: -111,
      code: 'ECONNREFUSED',
      syscall: 'connect',
      address: '54.185.253.63',
      port: 443
    }

    Node.js v20.19.3
    Post job cleanup.
    [...]

Allow `release-assets.githubusercontent.com:443`, which is what the
download link above resolves to.

[1] https://github.com/netblue30/firejail/actions/runs/16638865345/job/47085091964
 2025-07-31 05:22:52 +00:00
dependabot[bot]
4505abf1b8 build(deps): bump step-security/harden-runner from 2.12.0 to 2.12.2 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.0 to 2.12.2.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](0634a2670c...6c439dc8bd)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-07 18:52:03 +00:00
dependabot[bot]
9bc9b8af4e build(deps): bump github/codeql-action from 3.28.18 to 3.29.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ff0a06e83c...181d5eefc2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-07-01 12:53:01 +00:00
dependabot[bot]
8fb210bb7c build(deps): bump github/codeql-action from 3.28.16 to 3.28.18 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](28deaeda66...ff0a06e83c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-01 20:37:57 +00:00
dependabot[bot]
2f1b51ab35 build(deps): bump step-security/harden-runner from 2.11.0 to 2.12.0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.11.0 to 2.12.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](4d991eb9b9...0634a2670c)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-02 07:56:13 +00:00
dependabot[bot]
c95f036476 build(deps): bump github/codeql-action from 3.28.13 to 3.28.16 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.13 to 3.28.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1b549b9259...28deaeda66)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-02 07:56:04 +00:00
dependabot[bot]
c66588df8a build(deps): bump github/codeql-action from 3.28.10 to 3.28.13 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.10 to 3.28.13.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b56ba49b26...1b549b9259)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-01 16:03:11 +00:00
Kelvin M. Klann
e98395b9aa
build: remove cppcheck-old target/job (#6676) 
To avoid CI failures.

From the first run of `cppcheck_old` on commit 8f69e9841 ("bugfix:
firecfg: check full filename in check_profile() (#6674)", 2025-03-04)
[1]:

> This is a scheduled Ubuntu 20.04 brownout. Ubuntu 20.04 LTS runner
> will be removed on 2025-04-01. For more details, see
> https://github.com/actions/runner-images/issues/11101

The target depends on the cppcheck version from Ubuntu 20.04 in order to
work properly and this distribution will become EOL next month (April
2025), so just remove the target.

Added on commit 53f0b3950 ("CI: keep old cppcheck job and ignore two
files in new job that take too long to check", 2022-07-26).

[1] https://github.com/netblue30/firejail/actions/runs/13658953453/job/38185280665
 2025-03-07 03:54:19 +00:00
dependabot[bot]
0bb0c808a2 build(deps): bump github/codeql-action from 3.28.8 to 3.28.10 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.8 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](dd746615b3...b56ba49b26)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-01 13:24:41 +00:00
dependabot[bot]
c7b7478ad3 build(deps): bump step-security/harden-runner from 2.10.4 to 2.11.0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.4 to 2.11.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](cb605e52c2...4d991eb9b9)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-01 13:24:28 +00:00
dependabot[bot]
5a6e52d936 build(deps): bump step-security/harden-runner from 2.10.2 to 2.10.4 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.2 to 2.10.4.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](0080882f6c...cb605e52c2)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-01 14:26:08 +00:00
dependabot[bot]
d009b83d5a build(deps): bump github/codeql-action from 3.28.0 to 3.28.8 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](48ab28a6f5...dd746615b3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-01 14:26:01 +00:00
Kelvin M. Klann
15e1f79a52
ci: check-c: run all checks in parallel mode (#6627) 
This considerably speeds up the execution of the relevant steps, most
noticeably on scan-build:

* scan-build:  121s to 55s (-54.5%)
* cppcheck:     51s to 30s (-41.2%)
* cppcheck-old: 21s to 11s (-47.6%)

Note: The above uses the average time of 3 runs on master (commit
bd946e359 ("Merge pull request #6624 from
powerjungle/chore/update-security-md", 2025-01-21)) [1] [2] [3] and 3
runs on this commit[4] [5] [6].

Note: This considers only the steps themselves, as the total time of
each job varies a lot between runs, mostly due to the apt-get
update/install steps.  For example, the same `apt-get install` command
took 3 seconds on one scan-build job run[7] and 132 seconds on another
scan-build job run[8].

Related commits:

* 500d8f2d6 ("ci: run make in parallel where applicable", 2023-08-14) /
  PR #5960
* 5b1bd33c7 ("build: use full paths on compile/link targets",
  2023-07-02) /
  PR #6158

[1] https://github.com/netblue30/firejail/actions/runs/12928036246
[2] https://github.com/netblue30/firejail/actions/runs/12928180264
[3] https://github.com/netblue30/firejail/actions/runs/12928238010
[4] https://github.com/netblue30/firejail/actions/runs/12927984482/attempts/2
[5] https://github.com/netblue30/firejail/actions/runs/12927984482/attempts/3
[6] https://github.com/netblue30/firejail/actions/runs/12927984482/attempts/4
[7] https://github.com/netblue30/firejail/actions/runs/12928180264/job/36054893393
[8] https://github.com/netblue30/firejail/actions/runs/12881736117/job/35912783635
 2025-01-25 09:11:22 +00:00
Kelvin M. Klann
1a576d15a9
build: rename print-version target to installcheck (#6620) 
To make it consistent with the standard GNU make targets.

From the manual of GNU Make (version 4.4.1-2):

> 'installcheck'
>      Perform installation tests (if any).  The user must build and
>      install the program before running the tests.  You should not
>      assume that '$(bindir)' is in the search path.

Commands used to search and replace:

    $ git grep -Ilz print-version |
      xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \
        's/print-version/installcheck/g' '{}')\" >'{}'"
    $ git grep -Ilz 'print version' .github/workflows |
      xargs -0 -I '{}' sh -c "printf '%s\n' \"\$(sed \
        's/print version/make installcheck/g' '{}')\" >'{}'"

Added on commit c9531d95e ("build: add print-version target and use in
CI", 2024-02-22) / #6230.
 2025-01-18 04:48:56 +00:00
Kelvin M. Klann
1d4bbd1c51
docs: github: add program name/version to bug_report.md (#6607) 
See also commit 9bccccfa7 ("docs: github: streamline environment in
issue templates (#6471)", 2024-09-13).
 2025-01-15 10:22:04 +00:00
Kelvin M. Klann
92137f8087 ci: check-profiles: fix git diff not running 
This amends commit c222b7f69 ("build: sort.py: fix whitespace in entire
profile (#6593)", 2024-12-28).
 2025-01-06 20:39:45 -03:00
dependabot[bot]
db1ea0bdcf build(deps): bump github/codeql-action from 3.27.5 to 3.28.0 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f09c1c0a94...48ab28a6f5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-01 15:00:06 +00:00
Kelvin M. Klann
c222b7f692
build: sort.py: fix whitespace in entire profile (#6593) 
Changes:

* Strip whitespace at the beginning
* Strip whitespace at the end
* Ensure exactly one newline at the end
* Strip extraneous newlines

Also, for clarity print the git diff in the sort.py ci job, since the
specific lines changed are not printed by the sort.py script in this
case (as whitespace is fixed in the entire profile at once).

Command used to search and replace:

    ./contrib/sort.py etc/inc/*.inc etc/profile*/*.profile

This is a follow-up to #6556.

Update contrib/sort.py
 2024-12-28 16:00:14 +00:00
dependabot[bot]
28512d16ea build(deps): bump step-security/harden-runner from 2.10.1 to 2.10.2 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.1 to 2.10.2.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](91182cccc0...0080882f6c)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-01 08:19:01 +00:00
dependabot[bot]
9ddba6a09e build(deps): bump github/codeql-action from 3.27.0 to 3.27.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.0 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](662472033e...f09c1c0a94)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-01 08:18:52 +00:00
dependabot[bot]
4ded6b7774 build(deps): bump github/codeql-action from 3.26.10 to 3.27.0 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.10 to 3.27.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e2b3eafc8d...662472033e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-01 16:41:26 +00:00
dependabot[bot]
d1ffe4532a build(deps): bump actions/checkout from 4.2.0 to 4.2.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...11bd71901b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-01 16:41:18 +00:00
netblue30
c926850b5b
Merge pull request #6494 from netblue30/dependabot/github_actions/github/codeql-action-3.26.10 
build(deps): bump github/codeql-action from 3.26.6 to 3.26.10
 2024-10-01 10:47:32 -04:00
netblue30
0c470aa6c5
Merge pull request #6495 from netblue30/dependabot/github_actions/actions/checkout-4.2.0 
build(deps): bump actions/checkout from 4.1.7 to 4.2.0
 2024-10-01 10:47:14 -04:00
dependabot[bot]
a7918b0575
build(deps): bump step-security/harden-runner from 2.9.1 to 2.10.1 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.9.1 to 2.10.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](5c7944e73c...91182cccc0)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-01 06:51:41 +00:00
dependabot[bot]
65fd5bbaaa
build(deps): bump actions/checkout from 4.1.7 to 4.2.0 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...d632683dd7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-01 06:51:37 +00:00
dependabot[bot]
6a6d493260
build(deps): bump github/codeql-action from 3.26.6 to 3.26.10 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.6 to 3.26.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4dd16135b6...e2b3eafc8d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-01 06:51:33 +00:00
Kelvin M. Klann
508394fbd8 docs: github: improve kernel headers item in build_issue.md 
Relates to #6423 #6471.
 2024-09-13 05:16:11 -03:00
Kelvin M. Klann
9bccccfa77
docs: github: streamline environment in issue templates (#6471) 
Changes:

* Sync bug_report.md with build_issue.md (reword items and add Linux
  kernel item)
* Add a colon to the end of every item (to clarify where to add the
  information)
* Add the Environment section to feature_request.md

The last item is intended as a basic sanity check, as users using an
outdated version of firejail may request something that was already
implemented (for example, see #6461).

Relates to #4515 #6423.
 2024-09-13 08:16:09 +00:00
dependabot[bot]
897f12dd88 build(deps): bump step-security/harden-runner from 2.9.0 to 2.9.1 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.9.0 to 2.9.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](0d381219dd...5c7944e73c)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-01 16:21:50 +00:00
dependabot[bot]
00fe9ce335 build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.15 to 3.26.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](afb54ba388...4dd16135b6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-01 16:21:39 +00:00
Kelvin M. Klann
7299f832fb
docs: add build_issue.md issue template (#6423) 
Based on `.github/ISSUE_TEMPLATE/bug_report.md`.

Relates to #6417.
 2024-08-07 16:24:09 +00:00
dependabot[bot]
7031de4f54 build(deps): bump step-security/harden-runner from 2.8.1 to 2.9.0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.8.1 to 2.9.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](17d0e2bd7d...0d381219dd)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-05 08:40:08 +00:00