Skip to content

Commit 0d6c29d

Browse files
authored
Merge branch 'master' into push-ymquuwqtoswx
2 parents b5c5930 + c0d51bb commit 0d6c29d

33 files changed

Lines changed: 1185 additions & 226 deletions

.github/workflows/add_issue_to_project.yaml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,13 +3,12 @@ on:
33
issues:
44
types:
55
- opened
6-
76
jobs:
87
add-to-project:
98
name: Add issue to Updatecli project
109
runs-on: ubuntu-latest
1110
steps:
12-
- uses: actions/add-to-project@v1.0.2
11+
- uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
1312
with:
1413
project-url: https://github.com/orgs/updatecli/projects/2
1514
github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}

.github/workflows/build.yaml

Lines changed: 25 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -1,47 +1,36 @@
11
name: Build
2-
32
on:
43
merge_group:
54
branches: master
65
push:
76
branches: master
87
pull_request:
9-
108
jobs:
119
build:
1210
runs-on: ubuntu-latest
13-
1411
steps:
15-
- uses: actions/checkout@v4
16-
17-
- name: Use Node.js
18-
uses: actions/setup-node@v4.4.0
19-
with:
20-
node-version: 20
21-
22-
- name: Install Hugo
23-
uses: peaceiris/actions-hugo@v3
24-
with:
25-
hugo-version: 0.157.0
26-
extended: true
27-
28-
- name: Install Bundler
29-
uses: ruby/setup-ruby@v1
30-
with:
31-
ruby-version: 2.7
32-
bundler-cache: true
33-
34-
- name: Install asciidoctor
35-
run: gem install asciidoctor
36-
37-
- name: Show Hugo Version
38-
run: hugo version
39-
40-
- name: Install dependencies
41-
run: npm install
42-
43-
- name: Run Hyas test script
44-
run: npm test
45-
46-
- name: Build production website
47-
run: npm run build
12+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
13+
- name: Use Node.js
14+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
15+
with:
16+
node-version: 24
17+
- name: Install Hugo
18+
uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0
19+
with:
20+
hugo-version: 0.160.0
21+
extended: true
22+
- name: Install Bundler
23+
uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1
24+
with:
25+
ruby-version: 2.7
26+
bundler-cache: true
27+
- name: Install asciidoctor
28+
run: gem install asciidoctor
29+
- name: Show Hugo Version
30+
run: hugo version
31+
- name: Install dependencies
32+
run: npm install
33+
- name: Run Hyas test script
34+
run: npm test
35+
- name: Build production website
36+
run: npm run build

.github/workflows/codeql-analysis.yml

Lines changed: 26 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,6 @@
44
# You may wish to alter this file to override the set of languages analyzed,
55
# or to provide custom queries or build logic.
66
name: "CodeQL"
7-
87
on:
98
merge_group:
109
branches: master
@@ -15,12 +14,10 @@ on:
1514
branches: [master]
1615
schedule:
1716
- cron: '0 11 * * 5'
18-
1917
jobs:
2018
analyze:
2119
name: Analyze
2220
runs-on: ubuntu-latest
23-
2421
strategy:
2522
fail-fast: false
2623
matrix:
@@ -29,36 +26,30 @@ jobs:
2926
language: ['javascript']
3027
# Learn more...
3128
# https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
32-
3329
steps:
34-
- name: Checkout repository
35-
uses: actions/checkout@v4
36-
37-
# Initializes the CodeQL tools for scanning.
38-
- name: Initialize CodeQL
39-
uses: github/codeql-action/init@v3
40-
with:
41-
languages: ${{ matrix.language }}
42-
# If you wish to specify custom queries, you can do so here or in a config file.
43-
# By default, queries listed here will override any specified in a config file.
44-
# Prefix the list here with "+" to use these queries and those in the config file.
45-
# queries: ./path/to/local/query, your-org/your-repo/queries@main
46-
47-
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
48-
# If this step fails, then you should remove it and run the build manually (see below)
49-
- name: Autobuild
50-
uses: github/codeql-action/autobuild@v3
51-
52-
# ℹ️ Command-line programs to run using the OS shell.
53-
# 📚 https://git.io/JvXDl
54-
55-
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
56-
# and modify them (or add more) to build your code if your project
57-
# uses a compiled language
58-
59-
#- run: |
60-
# make bootstrap
61-
# make release
62-
63-
- name: Perform CodeQL Analysis
64-
uses: github/codeql-action/analyze@v3
30+
- name: Checkout repository
31+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
32+
# Initializes the CodeQL tools for scanning.
33+
- name: Initialize CodeQL
34+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
35+
with:
36+
languages: ${{ matrix.language }}
37+
# If you wish to specify custom queries, you can do so here or in a config file.
38+
# By default, queries listed here will override any specified in a config file.
39+
# Prefix the list here with "+" to use these queries and those in the config file.
40+
# queries: ./path/to/local/query, your-org/your-repo/queries@main
41+
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
42+
# If this step fails, then you should remove it and run the build manually (see below)
43+
- name: Autobuild
44+
uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
45+
#- run: |
46+
# make bootstrap
47+
# make release
48+
- name: Perform CodeQL Analysis
49+
# ℹ️ Command-line programs to run using the OS shell.
50+
# 📚 https://git.io/JvXDl
51+
52+
# ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
53+
# and modify them (or add more) to build your code if your project
54+
# uses a compiled language
55+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

.github/workflows/typos.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,6 @@ jobs:
99
contents: read
1010
steps:
1111
- name: Checkout Actions Repository
12-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
12+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1313
- name: Check spelling of file.txt
14-
uses: crate-ci/typos@v1.42.0
14+
uses: crate-ci/typos@02ea592e44b3a53c302f697cddca7641cd051c3d # v1.45.0

.github/workflows/updatecli.yaml

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,21 @@
1+
---
12
name: Updatecli
23
on:
34
release:
45
workflow_dispatch:
56
schedule:
67
# Run at 12:00 every Saterday every 14 days
78
- cron: "0 12 */14 * *"
8-
99
jobs:
1010
updatecli:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: "Checkout"
14-
uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
15-
14+
uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
1615
- name: "Setup updatecli"
17-
uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
16+
uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
1817
with:
19-
version: "v0.114.0"
20-
18+
version: "v0.115.0"
2119
- name: "Run updatecli"
2220
run: updatecli compose apply --clean-git-branches=true --experimental
2321
env:

.github/workflows/updatecli_release.yaml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -9,37 +9,37 @@ on:
99
repository_dispatch:
1010
types:
1111
- "updatecli-release"
12+
permissions: {}
1213
jobs:
1314
updatecli:
1415
runs-on: ubuntu-latest
16+
permissions:
17+
contents: write
18+
pull-requests: write
1519
steps:
1620
- name: "Checkout"
17-
uses: "actions/checkout@v4"
18-
21+
uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
1922
- name: "Install Updatecli"
20-
uses: "updatecli/updatecli-action@v2.96.0"
23+
uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
2124
with:
22-
version: "v0.114.0"
23-
25+
version: "v0.115.0"
2426
# releasepost is required by the Updatecli
2527
# * policy ghcr.io/updatecli/policies/releasepost/releasepost
2628
- name: "Install Releasepost"
27-
uses: "updatecli/releasepost-action@v0.5.0"
28-
29+
uses: "updatecli/releasepost-action@864390bddae97db06ee881ab4a08d159b4464643" # v0.5.0
2930
- name: "Run updatecli only on release pipelines"
30-
run: updatecli compose apply --clean-git-branches=true --labels="event:release" --experimental
31+
run: updatecli compose apply --clean-git-branches=true --labels="release:updatecli" --experimental
3132
env:
3233
UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
3334
UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
3435
UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}
3536
UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }}
3637
UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }}
3738
UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }}
38-
3939
- name: "Run updatecli"
4040
run: "updatecli compose apply --file updatecli-compose-release.yaml --experimental"
4141
env:
42-
RELEASEPOST_GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
42+
RELEASEPOST_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4343
UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
4444
UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
4545
UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}

.github/workflows/updatecli_test.yaml

Lines changed: 3 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,18 @@
11
name: Updatecli Test
2-
32
on:
43
pull_request:
5-
64
permissions:
75
contents: read
8-
96
jobs:
107
updatecli:
118
runs-on: ubuntu-latest
129
steps:
1310
- name: "Checkout"
14-
uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
15-
11+
uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
1612
- name: "Setup updatecli"
17-
uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
13+
uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
1814
with:
19-
version: "v0.114.0"
20-
15+
version: "v0.115.0"
2116
- name: "Test updatecli in dry-run mode"
2217
run: "updatecli compose diff --experimental"
2318
env:

.github/workflows/updatecli_update.yaml

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,32 +1,29 @@
1+
---
12
name: Updatecli - Update
23
on:
34
workflow_dispatch:
45
push:
56
branches:
67
- main
7-
88
jobs:
99
updatecli:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: "Checkout"
13-
uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
14-
13+
uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
1514
- name: "Setup updatecli"
16-
uses: "updatecli/updatecli-action@5ca36367fadc6ad94d590984fd9c696e783ec635" # v2.96.0
15+
uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
1716
with:
18-
version: "v0.114.0"
19-
17+
version: "v0.115.0"
2018
- name: "Run updatecli only on monitored pipelines"
21-
run: updatecli compose apply --clean-git-branches=true --labels="monitoring:enabled" --experimental
19+
run: updatecli compose apply --clean-git-branches=true --labels="monitor:active" --experimental
2220
env:
2321
UPDATECLI_GITHUB_APP_CLIENT_ID: ${{ secrets.UPDATECLIBOT_APP_ID }}
2422
UPDATECLI_GITHUB_APP_PRIVATE_KEY: ${{ secrets.UPDATECLIBOT_APP_PRIVKEY }}
2523
UPDATECLI_GITHUB_APP_INSTALLATION_ID: ${{ secrets.UPDATECLIBOT_APP_INSTALLATION_ID }}
2624
UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }}
2725
UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }}
2826
UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }}
29-
3027
- name: "Run updatecli only on existing pipelines"
3128
run: updatecli compose apply --clean-git-branches=true --existing-only=true --experimental
3229
env:

.github/zizmor.yaml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
2+
rules:
3+
secrets-outside-env:
4+
disable: true

assets/code_example/docs/guides/npm/package-lock.json

Lines changed: 12 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)