Skip to content

GitHub Pull Requests 0.0.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 15:04
· 14 commits to master since this release
v0.0.2
7c52694
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • A GitHub token setting, optional and secret, in the desktop app only: with your own token
    GitHub allows 5,000 requests an hour instead of 60. The desktop keeps it in its encrypted
    secret vault on the device and the plugin sends it only to api.github.com; the web app has
    no secret settings, so the plugin runs without a token there. A saved token that is not valid
    stops every fetch, and the panel asks to paste it again or clear it. The panel's foot opens
    the settings. No new permission is asked for.

Changed

  • When GitHub's hourly limit is used up, the message says how to add a token in the desktop
    app, or that the saved one could not be read while the desktop's secret vault is locked. A
    token GitHub rejects is named as the reason instead of an error per repository.

Install

Install from link (Settings → Plugins):

https://github.com/rim-platform/plugin-github-prs/releases/download/v0.0.2/chat.rim.github-prs-0.0.2.rimbundle#sha256=e180467d85dc82fcb130361fe5538251836e7e03f8c29bed80018fdb62fe4234

The desktop app fetches this link itself. GitHub serves release assets without CORS
headers, so the web app cannot fetch it: in the browser, install through a workspace
registry or from a host that sends CORS headers.

Install from git URL (Settings → Plugins, on the desktop):
https://github.com/rim-platform/plugin-github-prs.git installs the built plugin on master.

Verify the bundle

e180467d85dc82fcb130361fe5538251836e7e03f8c29bed80018fdb62fe4234  chat.rim.github-prs-0.0.2.rimbundle

The bundle has a build provenance attestation from this repository's release workflow.
Next to the downloaded files:

sha256sum --check SHA256SUMS
gh attestation verify chat.rim.github-prs-0.0.2.rimbundle --repo rim-platform/plugin-github-prs

The maintainer attaches chat.rim.github-prs-0.0.2.rimsig.json, the publisher's signed
statement for this bundle, by hand after the release. A workspace adds it to its plugin
registry with Workspace settings → Plugins → Add from files, together with the bundle.

Assets 4
Loading