Skip to content

Commit 5ec43c7

Browse files
committed
Fix YAML syntax errors in workflow files (v2)
Removed heredoc syntax causing issues with GitHub Actions: - dependabot-auto-merge.yml: Simplified release notes to plain multi-line string - security-updates.yml: Changed PR body to use variable interpolation instead of heredoc - security-updates.yml: Simplified release notes to plain multi-line string The issue was mixing heredoc with GitHub Actions template variables and command substitution which caused YAML parsing errors. Version bumped to 2.2.2
1 parent 79d8856 commit 5ec43c7

3 files changed

Lines changed: 11 additions & 17 deletions

File tree

.github/workflows/dependabot-auto-merge.yml

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,10 +105,10 @@ jobs:
105105
git push
106106
107107
# Create GitHub release (this will trigger PyPI publish)
108+
PR_NUM="${{ github.event.pull_request.number }}"
108109
gh release create "v$NEW_VERSION" \
109110
--title "v$NEW_VERSION - Dependabot Security Update" \
110-
--notes "$(cat <<'EOF'
111-
## Automated Security Update from Dependabot
111+
--notes "## Automated Security Update from Dependabot
112112
113113
This release includes security updates from Dependabot.
114114

@@ -119,9 +119,7 @@ This release includes security updates from Dependabot.
119119
### Automated Process
120120
This release was automatically created after Dependabot's PR passed all tests.
121121

122-
Original PR: #${{ github.event.pull_request.number }}
123-
EOF
124-
)"
122+
Original PR: #${PR_NUM}"
125123

126124
echo "✅ Created release v$NEW_VERSION - PyPI publish triggered"
127125

.github/workflows/security-updates.yml

Lines changed: 7 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -134,10 +134,11 @@ jobs:
134134
BRANCH_NAME="security/auto-update-$(date +%Y%m%d)"
135135
NEW_VERSION="${{ steps.get_version.outputs.new_version }}"
136136
137+
SECURITY_REPORT=$(cat security-report.txt 2>/dev/null || echo "No detailed report available")
138+
137139
gh pr create \
138140
--title "🔒 Security Update v$NEW_VERSION" \
139-
--body "$(cat <<'EOF'
140-
## Automated Security Update
141+
--body "## Automated Security Update
141142
142143
This PR contains automated security dependency updates.
143144

@@ -148,7 +149,7 @@ This PR contains automated security dependency updates.
148149

149150
### Security Report
150151
\`\`\`
151-
$(cat security-report.txt)
152+
${SECURITY_REPORT}
152153
\`\`\`
153154

154155
### Test Results
@@ -161,9 +162,7 @@ $(cat security-report.txt)
161162
3. A new release will be automatically published to PyPI
162163

163164
---
164-
🤖 This PR was automatically generated by the security workflow
165-
EOF
166-
)" \
165+
🤖 This PR was automatically generated by the security workflow" \
167166
--base master \
168167
--head $BRANCH_NAME \
169168
--label "security,automated"
@@ -195,8 +194,7 @@ EOF
195194
# Create GitHub release (this will trigger PyPI publish)
196195
gh release create "v$NEW_VERSION" \
197196
--title "v$NEW_VERSION - Automated Security Update" \
198-
--notes "$(cat <<'EOF'
199-
## Automated Security Update
197+
--notes "## Automated Security Update
200198
201199
This release includes automated security dependency updates.
202200

@@ -211,9 +209,7 @@ This release was automatically created by the security workflow:
211209
2. Dependencies upgraded
212210
3. Tests passed
213211
4. PR merged
214-
5. Release published
215-
EOF
216-
)"
212+
5. Release published"
217213

218214
echo "✅ Released v$NEW_VERSION - PyPI publish triggered"
219215
fi
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
__version__ = '2.2.1'
1+
__version__ = '2.2.2'
22

0 commit comments

Comments
 (0)