Skip to content

Actions: photostructure/node-sqlite

Actions

Build & Release

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
build.yml
291 workflow runs
291 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Build - docs(changelog): correct release dates to Pacific local time The dates in this file have always been the maintainer's local (America/Los_Angeles) dates, and they were right. I mistook that for a systematic off-by-one and back-filled five entries from npm view ... time, which reports UTC -- introducing two real errors, because those releases went out late evening Pacific after UTC had already rolled over: 1.2.0 2026-04-16 -> 2026-04-15 (published 18:49 PDT) 1.2.1 2026-04-28 -> 2026-04-2... Build & Release #317: Commit 7913f86 pushed by mceachen
24m 23s main
main
24m 23s
Build - docs(changelog): add release dates and repair version links The five newest versions (2.1.0, 2.0.0, 1.2.1, 1.2.0, 1.1.0) were undated and, more importantly, had no reference-link definitions -- so their Keep-a-Changelog [x.y.z] headings rendered as dead literal text instead of linking to the GitHub release. Meanwhile a [1.3.0] definition pointed at a release that never existed (no tag, no npm publish, no section). Dates are npm publish times, which match the git tag dates exactly. Every ve... Build & Release #316: Commit 88d246d pushed by mceachen
17m 26s main
main
17m 26s
Build - docs(security): document build hardening, amalgamation pinning, and CI analysis SECURITY.md understated the native security posture: it claimed only "official SQLite amalgamation with recommended security flags" and "analyzed with clang-tidy and ASAN". It now documents what we actually ship -- the per-platform OpenSSF hardening table, SHA3-256 verification of the vendored amalgamation, and the full detector set (ASan/LSan/UBSan, Valgrind, and clang-tidy gating on ownership/lifetime checks). Als... Build & Release #315: Commit 19798cf pushed by mceachen
15m 11s main
main
15m 11s
Build - build: update git-ssh-signing-action to v2.0.1 Build & Release #314: Commit 1456840 pushed by mceachen
17m 43s main
main
17m 43s
Build - docs(changelog): oops I typed "minor" not "patch" Build & Release #313: Commit 92eb69e pushed by mceachen
16m 24s main
main
16m 24s
Release - minor Build & Release #312: Manually run by mceachen
14m 51s main
main
14m 51s
Build - docs(changelog): add 2.0.1 entry for build hardening and the changeset UB fix Build & Release #311: Commit 2aaf6d6 pushed by mceachen
24m 27s main
main
24m 27s
Build - build(binding.gyp): add the OpenSSF compiler and linker hardening baseline POSIX builds shipped with almost no hardening: no stack protector, no FORTIFY, no format-string hardening, no RELRO/NX, no control-flow integrity. Windows was well covered; Linux and macOS were not. Adds, per the OpenSSF Compiler Options Hardening Guide: all POSIX -fstack-protector-strong, -D_FORTIFY_SOURCE=2, -Wformat -Wformat=2 -Werror=format-security Linux -fstack-clash-protection, -D_GLIBCXX_A... Build & Release #310: Commit 87684a6 pushed by mceachen
18m 56s main
main
18m 56s
Release - major Build & Release #309: Manually run by mceachen
21m 27s main
main
21m 27s
Build - docs(changelog): update changelog for new features, fixes, and performance improvements in version 2.0.0 Build & Release #308: Commit 993fd62 pushed by mceachen
17m 17s main
main
17m 17s
Build - style: apply clang-format/eslint autofixes Mechanical tooling output, no behavior change: clang-format reflows a BuildRow comment and adds a trailing newline; eslint's no-this-alias drops a redundant const self = this in the benchmark driver in favor of lexical this. Build & Release #307: Commit a19c837 pushed by mceachen
17m 49s main
main
17m 49s
Build - fix(memory-tracker): improve leak detection by requiring correlation threshold Build & Release #306: Commit 7bf805d pushed by mceachen
17m 33s main
main
17m 33s
Build - fix(sqlite_impl): preserve authorizer errors across SQLite calls Reject unsafe same-connection reentry and retain exact thrown values through serialization, sessions, changesets, and extension loading. Build & Release #305: Commit 0ca73aa pushed by mceachen
25m 35s main
main
25m 35s
Build - fix(benchmark): update README and benchmark scripts for clarity and accuracy Build & Release #304: Commit 2c13ff7 pushed by mceachen
16m 31s main
main
16m 31s
Build - chore: update Node.js compatibility and SQLite version in documentation Build & Release #303: Commit 6276082 pushed by mceachen
16m 56s main
main
16m 56s
Build - style(test): format synced node-compat test with prettier Build & Release #302: Commit 5764bae pushed by mceachen
22m 5s main
main
22m 5s
Build - chore: update OSV scanner and CodeQL action versions for improved security analysis Build & Release #301: Commit 308ecfc pushed by mceachen
19m 54s main
main
19m 54s
Release - patch Build & Release #300: Manually run by mceachen
30m 58s main
main
30m 58s
Build - chore(changelog): update for version 1.2.2 with backup teardown stability fix Build & Release #299: Commit e136b10 pushed by mceachen
23m 7s main
main
23m 7s
Build - fix(backup): close two teardown gaps flagged in code review Don't SetError("shutdown in progress") from Execute() during teardown. That routes through node-addon-api's parent OnWorkComplete, which constructs OnError(Error::New(env, _error)) inside WrapCallback - still a teardown-time napi touch whose failure mode is ThrowAsJavaScriptException. Return with empty _error instead so dispatch goes through OnOK, where the existing shutting_down_ guard short-circuits before deferred_. Stop reading pro... Build & Release #298: Commit 399c24d pushed by mceachen
33m 34s main
main
33m 34s
Build - fix(backup): make BackupJob safe across env teardown If a database.backup() was in flight when the Node env began teardown, deferred_.Reject/Resolve in OnOK/OnError could throw a C++ Napi::Error out of a libuv cleanup-hook frame and abort the process - same class of bug as the fs-metadata SIGABRT (Mac dump 2026-04-27). Have BackupJob's existing per-instance cleanup hook flip a shutting_down_ atomic so Execute()'s sqlite3_backup_step loop can exit promptly, and guard the deferred path in OnOK/On... Build & Release #297: Commit 7402c33 pushed by mceachen
40m 13s main
main
40m 13s
Build - fix: standardize environment variable assignment syntax in test setup Build & Release #296: Commit 6ce5824 pushed by mceachen
22m 50s main
main
22m 50s
Build - chore: update changelog for version 1.2.1 release Build & Release #295: Commit 6c6c439 pushed by mceachen
11m 39s main
main
11m 39s
Release - minor Build & Release #294: Manually run by mceachen
15m 26s main
main
15m 26s
Build - chore(release): prep v1.2.0 SQLite 3.52.0 → 3.53.0. Per the updated skill rule, SQLite minor bumps are at least MINOR for us: users reach new SQL functions, pragmas, and behavior changes (FP precision) through db.exec/db.prepare regardless of whether we expose a matching JS surface. Upstream sync: Node v25.x-staging ca2d6ea → ffa9b8f (fully contains v25.9.0). Skip test-sqlite-serialize.js — DatabaseSync.serialize() / deserialize() are not yet ported; the synced tests broke CI. Build & Release #293: Commit ddc7348 pushed by mceachen
21m 10s main
main
21m 10s