Skip to content

Regenerate gradle test#405

Closed
github-actions[bot] wants to merge 7 commits into
mainfrom
regenerate-test-gradle-1773090782
Closed

Regenerate gradle test#405
github-actions[bot] wants to merge 7 commits into
mainfrom
regenerate-test-gradle-1773090782

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Mar 9, 2026

This PR regenerates the gradle test file.

Test regenerated: tests/smoke-gradle.yaml

dependabot-core PR: dependabot/dependabot-core#14399

The test was regenerated using dependabot test to update it with the latest dependency information.

Please review the changes to ensure they are expected.

kbukum1 and others added 7 commits March 6, 2026 16:25
Add an optional 'core-branch' input to the Regenerate Test workflow that
lets developers specify a dependabot-core branch name. The workflow
resolves the branch to a commit SHA, maps the test name to the correct
ecosystem image suffix, and passes --updater-image to the CLI.

This enables developers to regenerate smoke tests against their
dependabot-core PR before it merges to main.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Accept fork branches in 'owner:branch' format (e.g. edgarrmondragon:uv-0.10.9)
by resolving the SHA from the fork repo instead of dependabot/dependabot-core.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Without the cache, the updater cannot reach package registries and
produces empty output, wiping the test's output section.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- core-branch: for internal dependabot-core branches (resolves branch
  head SHA)
- core-pr-number: for contributor/fork PRs (resolves PR head SHA via
  the pulls API, matching how images-branch.yml tags images)

Also adds proxy cache download and --cache flag to produce correct
output during regeneration.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
images-branch.yml tags images with github.sha which for pull_request
events is the merge commit SHA, not the branch head SHA. This fixes
the image resolution to use refs/pull/N/merge which matches the actual
image tag.

Also adds:
- GHCR login for authenticated image pulls
- Image existence validation before running the test
- Output validation to prevent silently wiping test files
- Write to temp file first, only copy if output section exists
- 20m timeout matching the smoke workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Instead of resolving SHA tags and pulling pre-built images from GHCR
(which requires PR approval via images-branch.yml), check out the
dependabot-core branch/PR and build the updater image locally using
script/build — the same approach used in dependabot-core's own smoke
pipeline.

This removes the approval requirement and SHA resolution complexity.
Works with any branch or PR (including forks via core-pr-number).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot requested a review from a team as a code owner March 9, 2026 21:13
@kbukum1
Copy link
Copy Markdown
Contributor

kbukum1 commented Mar 16, 2026

Created for test purposes

@kbukum1 kbukum1 closed this Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant