Skip to content

chore: use mdsf action and stable schema#1858

Closed
alexandear wants to merge 1 commit into
stretchr:masterfrom
alexandear-org:chore/mdsf-stable-schema
Closed

chore: use mdsf action and stable schema#1858
alexandear wants to merge 1 commit into
stretchr:masterfrom
alexandear-org:chore/mdsf-stable-schema

Conversation

@alexandear
Copy link
Copy Markdown
Contributor

@alexandear alexandear commented Mar 9, 2026

Summary

Use mdsf action instead of installing via npm.
Use the latest available schema for mdsf (see hougesen/mdsf#1524).

Changes

  • Replace npm install -g mdsf-cli with hougesen/mdsf@v0.12.0.
  • Update $schema in mdsf.json.

Motivation

Because of supply chain security concerns.

This allows referencing a stable URL schema without needing to update it every time a new version is released.

Related issues

#1687

ccoVeille
ccoVeille previously approved these changes Mar 9, 2026
@alexandear
Copy link
Copy Markdown
Contributor Author

@dolmen this PR was already approved. Could you take a look? Thank you.

@dolmen
Copy link
Copy Markdown
Collaborator

dolmen commented May 11, 2026

I would prefer to have a pure-Go solution than to dependend on mdsf. npm install -g mdsf-cli in .github/workflow/main.yml is a supply chain security concern.

@alexandear alexandear force-pushed the chore/mdsf-stable-schema branch from 7664a67 to 8deeec5 Compare May 11, 2026 07:59
@alexandear alexandear changed the title chore: use stable schema for mdsf chore: use mdsf action and stable schema May 11, 2026
@dolmen
Copy link
Copy Markdown
Collaborator

dolmen commented May 11, 2026

#1889 drops mdsf.

@dolmen dolmen closed this May 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants