8 Commits

Include renames

Author	SHA1	Message	Date
bashonly	8cdf4fea48	[build] Fix armv7l executable verification (#17886) ... Authored by: bashonly	2026-10-21 21:35:14 +00:00
bashonly	3a12be701c	[cleanup] Misc (#16630) ... * Fix PyPy dependency issue with cffi * Export requirements files from dependency groups * Simplify bundle targets & rework build flow * Code cleanup & type annotation fixes * Update FFmpeg-Builds status in README Authored by: bashonly	2026-05-05 22:00:57 +00:00
bashonlyandSimon Sawicki	87eaf886f5	[build] Harden build/release workflows (#16358) ... Authored by: bashonly, Grub4K Co-authored-by: Simon Sawicki <contact@grub4k.dev>	2026-03-28 00:10:58 +00:00
bashonly	ab3ff2d5dd	[build] Harden CI/CD pipeline (#15387) ... * NOTE: the release workflows' new handling of secrets may be a breaking change for forks that are using any secrets other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN. Previously, the release workflow would try to resolve a token secret name based on the `target` or `source` input, e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN, and then fall back to using the ARCHIVE_REPO_TOKEN secret if the resolved token secret name was not found in the repository. This behavior has been replaced by the release workflow always using the ARCHIVE_REPO_TOKEN secret as the token for publishing releases to any external archive repository. * Add zizmor CI job for auditing workflows * Pin all actions to commit hashes instead of symbolic references * Explicitly set GITHUB_TOKEN permissions at the job level * Use actions/checkout with `persist-credentials: false` whenever possible * Remove/replace template expansions in workflow scripts * Remove all usage of actions/cache from build/release workflows * Remove the cache-warmer.yml workflow * Remove the unused download.yml workflow * Set concurrency limits for any workflows that are triggered by PRs * Avoid loading the entire secrets context * Replace usage of `secrets: inherit` with explicit `secrets:` blocks * Pin all external docker images to hash that are used by the build workflow * Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail * Ensure any pwsh steps will fail on non-zero exit codes Authored by: bashonly	2025-12-30 21:05:10 +00:00
bashonly	e2d37bcc8e	[build] Refactor Linux build jobs (#14275) ... Authored by: bashonly	2025-09-13 21:20:28 +00:00
bashonly	cd94e70040	[build] Post-release workflow cleanup (#14250) ... Authored by: bashonly	2025-09-06 05:41:43 +00:00
bashonly	50136eeeb3	[build] Overhaul Linux builds and refactor release workflow (#13997) ... - Use `manylinux-shared` images for Linux builds - Discontinue `yt-dlp_linux_armv7l`/`linux_armv7l_exe` release binary - Add `yt-dlp_linux_armv7l.zip`/`linux_armv7l_dir` release binary - Add `yt-dlp_musllinux` and `yt-dlp_musllinux_aarch64` release binaries - Migrate `linux_exe` build strategy from staticx+musl to manylinux2014/glibc2.17 - Rewrite release.yml's "unholy bash monstrosity" as devscripts/setup_variables.py Closes #10072, Closes #10630, Closes #10578, Closes #13976, Closes #13977, Closes #14106 Authored by: bashonly	2025-09-05 22:38:20 +00:00
Simon Sawickiandbashonly	ac817bc83e	[build] Migrate linux_exe to static musl builds (#9811) ... Authored by: Grub4K, bashonly Co-authored-by: bashonly <88596187+bashonly@users.noreply.github.com>	2024-04-28 22:19:25 +00:00