Skip to content

Commit 33efaab

Browse files
nextcloud-botnextcloud-bot
committed
ci: update all workflow templates from organization template repository
Signed-off-by: Nextcloud bot <bot@nextcloud.com>
1 parent 003530a commit 33efaab

9 files changed

Lines changed: 61 additions & 23 deletions

‎.github/workflows/block-unconventional-commits.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,10 +27,10 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
30+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3131
with:
3232
persist-credentials: false
3333

34-
- uses: webiny/action-conventional-commits@8bc41ff4e7d423d56fa4905f6ff79209a78776c7 # v1.3.0
34+
- uses: webiny/action-conventional-commits@7f91b1595ca1951cdb671ddc9f07a49081ec5b69 # v1.4.2
3535
with:
3636
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/dependabot-approve-merge.yml‎

Lines changed: 41 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
if: github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'renovate[bot]'
2828
runs-on: ubuntu-latest
2929
permissions:
30-
# for hmarr/auto-approve-action to approve PRs
30+
# for auto-approve step to work
3131
pull-requests: write
3232
# for alexwilson/enable-github-automerge-action to approve PRs
3333
contents: write
@@ -44,15 +44,51 @@ jobs:
4444
with:
4545
repo-token: ${{ secrets.GITHUB_TOKEN }}
4646

47-
# GitHub actions bot approve
48-
- uses: hmarr/auto-approve-action@f0939ea97e9205ef24d872e76833fa908a770363 # v4.0.0
47+
- name: Dependabot metadata
48+
id: metadata
4949
if: startsWith(steps.branchname.outputs.branch, 'dependabot/')
50+
uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
5051
with:
5152
github-token: ${{ secrets.GITHUB_TOKEN }}
5253

54+
- name: Check for ignored dependencies in the PR
55+
id: validate
56+
if: startsWith(steps.branchname.outputs.branch, 'dependabot/')
57+
env:
58+
IGNORE_PATTERN: ${{ env.IGNORE_PATTERN }}
59+
DEPENDENCY_NAMES: ${{ steps.metadata.outputs.dependency-names }}
60+
run: |
61+
if [[ -z ${IGNORE_PATTERN} ]]; then
62+
echo "ignore=false" >> "$GITHUB_OUTPUT"
63+
elif [[ -z ${DEPENDENCY_NAMES} ]]; then
64+
echo "ignore=false" >> "$GITHUB_OUTPUT"
65+
elif [[ ${DEPENDENCY_NAMES} =~ ${IGNORE_PATTERN} ]]; then
66+
echo "ignore=true" >> "$GITHUB_OUTPUT"
67+
fi
68+
69+
- name: GitHub actions bot approve
70+
id: auto_approve
71+
if: ${{
72+
startsWith(steps.branchname.outputs.branch, 'dependabot/')
73+
&& steps.validate.outputs.ignore != 'true'
74+
}}
75+
run: gh pr review --approve "$PR_URL"
76+
env:
77+
PR_URL: ${{ github.event.pull_request.html_url }}
78+
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
79+
5380
# Enable GitHub auto merge
5481
- name: Auto merge
55-
uses: alexwilson/enable-github-automerge-action@56e3117d1ae1540309dc8f7a9f2825bc3c5f06ff # v2.0.0
56-
if: startsWith(steps.branchname.outputs.branch, 'dependabot/')
82+
uses: alexwilson/enable-github-automerge-action@2c32e18a76e0726ffe7a573bfff2d42a20885126 # 3.0.0
83+
if: ${{
84+
startsWith(steps.branchname.outputs.branch, 'dependabot/')
85+
&& steps.auto_approve.conclusion == 'success'
86+
&& (github.event.action == 'opened' || github.event.action == 'reopened')
87+
&& (
88+
steps.metadata.outputs.update-type == 'version-update:semver-patch'
89+
|| (fromJSON(env.ALLOW_MINOR) && steps.metadata.outputs.update-type == 'version-update:semver-minor')
90+
|| (fromJSON(env.ALLOW_MAJOR) && steps.metadata.outputs.update-type == 'version-update:semver-major')
91+
)
92+
}}
5793
with:
5894
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/documentation.yml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
name: Build and deploy
2424
steps:
2525
- name: Checkout
26-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
26+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2727
with:
2828
persist-credentials: false
2929

@@ -32,9 +32,10 @@ jobs:
3232
id: versions
3333

3434
- name: Set up node
35-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
35+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
3636
with:
3737
node-version: ${{ steps.versions.outputs.node-version }}
38+
package-manager-cache: false
3839

3940
- name: Set up npm
4041
run: npm i -g 'npm@${{ steps.versions.outputs.package-manager-version }}'
@@ -50,7 +51,7 @@ jobs:
5051
- name: Deploy
5152
# Only deploy on release
5253
if: github.event.release
53-
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
54+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
5455
with:
5556
github_token: ${{ secrets.GITHUB_TOKEN }}
5657
publish_dir: ./dist/doc

‎.github/workflows/lint-eslint.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout
28-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
28+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2929
with:
3030
persist-credentials: false
3131

@@ -34,7 +34,7 @@ jobs:
3434
id: versions
3535

3636
- name: Set up node
37-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
37+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
3838
with:
3939
node-version: ${{ steps.versions.outputs.node-version }}
4040

‎.github/workflows/lint-typescript.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
33+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3434
with:
3535
persist-credentials: false
3636

@@ -39,7 +39,7 @@ jobs:
3939
id: versions
4040

4141
- name: Set up node
42-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
42+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4343
with:
4444
node-version: ${{ steps.versions.outputs.node-version }}
4545

‎.github/workflows/node-test.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
33+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3434
with:
3535
persist-credentials: false
3636

@@ -39,7 +39,7 @@ jobs:
3939
id: versions
4040

4141
- name: Set up node
42-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
42+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4343
with:
4444
node-version: ${{ steps.versions.outputs.node-version }}
4545

@@ -60,7 +60,7 @@ jobs:
6060
run: npm run test:coverage --if-present
6161

6262
- name: Collect coverage
63-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
63+
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
6464
with:
6565
files: ./coverage/lcov.info
6666
env:

‎.github/workflows/npm-audit-fix.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
steps:
3232
- name: Checkout
3333
id: checkout
34-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
34+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3535
with:
3636
persist-credentials: false
3737
ref: ${{ matrix.branches }}
@@ -42,7 +42,7 @@ jobs:
4242
id: versions
4343

4444
- name: Set up node
45-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
45+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4646
with:
4747
node-version: ${{ steps.versions.outputs.node-version }}
4848

@@ -63,7 +63,7 @@ jobs:
6363
6464
- name: Create Pull Request
6565
if: steps.checkout.outcome == 'success'
66-
uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
66+
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
6767
with:
6868
token: ${{ secrets.COMMAND_BOT_PAT }}
6969
commit-message: 'fix(deps): Fix npm audit'

‎.github/workflows/npm-publish.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
steps:
2626
- name: Checkout
27-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
27+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2828
with:
2929
persist-credentials: false
3030

@@ -33,9 +33,10 @@ jobs:
3333
id: versions
3434

3535
- name: Set up node
36-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
36+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
3737
with:
3838
node-version: ${{ steps.versions.outputs.node-version }}
39+
package-manager-cache: false
3940
registry-url: https://registry.npmjs.org
4041

4142
- name: Set up npm

‎.github/workflows/reuse.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: Checkout
22-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
22+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2323
with:
2424
persist-credentials: false
2525

0 commit comments

Comments
 (0)