Skip to content

chore(deps): bump helm.sh/helm/v4 from 4.1.3 to 4.1.4 (#1908) #400

chore(deps): bump helm.sh/helm/v4 from 4.1.3 to 4.1.4 (#1908)

chore(deps): bump helm.sh/helm/v4 from 4.1.3 to 4.1.4 (#1908) #400

name: "Flake.nix vendorHash updater"
on:
workflow_dispatch:
push:
branches:
- main
paths:
- go.mod
- go.sum
jobs:
updateVendorHash:
runs-on: ubuntu-latest
permissions:
id-token: write
contents: write
steps:
- name: Generate token
id: generate_token
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v2
with: # OCMBot
app-id: ${{ secrets.OCMBOT_APP_ID }}
private-key: ${{ secrets.OCMBOT_PRIV_KEY }}
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
token: ${{ steps.generate_token.outputs.token }}
- name: Install Nix
uses: DeterminateSystems/nix-installer-action@ef8a148080ab6020fd15196c2084a2eea5ff2d25 # v22
with:
nix-package-url: https://releases.nixos.org/nix/nix-2.31.0/nix-2.31.0-x86_64-linux.tar.xz
- name: Update flake.lock
run: nix flake update
- name: Update ocm vendor hash
run: nix run .#nixpkgs.nix-update -- --flake --version=skip ocm
- name: Check diff and create action summary
id: diff
run: |
diff=$(git diff)
if [[ -z "$diff" ]]; then
echo "Everything is tidy."
exit 0
else
echo "exists=true" >> "$GITHUB_OUTPUT"
fi
cat << EOF >> "${GITHUB_STEP_SUMMARY}"
Updates the vendorHash in \`flake.nix\`
\`\`\`bash
nix run .#nixpkgs.nix-update -- --flake --version=skip ocm
\`\`\`
produced:
\`\`\`diff
${diff}
\`\`\`
EOF
- name: Create Pull Request
uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
with:
token: ${{ steps.generate_token.outputs.token }}
title: "chore: update 'flake.nix'"
commit-message: "[github-actions] auto update vendor hash"
branch: nix/flake
delete-branch: true
sign-commits: true
labels: |
kind/skip-release-notes
kind/chore
body: |
Update OCM CLI vendor hash (see: .github/workflows/flake_vendorhash.yaml)