Mirror of
ci: update GitHub template files
+73
-32
+31
.github/renovate.json5
+31
.github/renovate.json5
···
1
+
{
2
+
$schema: "https://docs.renovatebot.com/renovate-schema.json",
3
+
extends: [
4
+
":disableDependencyDashboard",
5
+
":semanticPrefixFixDepsChoreOthers",
6
+
":ignoreModulesAndTests",
7
+
"workarounds:all",
8
+
"helpers:pinGitHubActionDigestsToSemver",
9
+
"docker:disable",
10
+
],
11
+
rangeStrategy: "bump",
12
+
ignorePaths: ["**/node_modules/**"],
13
+
packageRules: [
14
+
{
15
+
groupName: "github-actions",
16
+
matchManagers: ["github-actions"],
17
+
},
18
+
{
19
+
matchManagers: ["npm"],
20
+
groupName: "dependencies",
21
+
matchDepTypes: ["devDependencies", "dependencies", "peerDependencies"],
22
+
enabled: false,
23
+
},
24
+
{
25
+
description: "Disable package manager version updates",
26
+
matchPackageNames: ["pnpm"],
27
+
matchDepTypes: ["packageManager"],
28
+
enabled: false,
29
+
},
30
+
],
31
+
}
+29
-19
.github/workflows/deployment.yaml
+29
-19
.github/workflows/deployment.yaml
···
27
27
steps:
28
28
- name: Generate GitHub App token
29
29
id: generate_token
30
-
uses: tibdex/github-app-token@v2.1.0
30
+
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
31
31
with:
32
32
app_id: ${{ secrets.BOT_APP_ID }}
33
33
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
34
34
35
35
- name: Checkout Repo
36
-
uses: actions/checkout@v4
36
+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
37
37
38
38
- name: Setup PNPM
39
-
uses: pnpm/action-setup@v3
39
+
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
40
40
41
41
- name: Setup Node
42
-
uses: actions/setup-node@v4
42
+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
43
43
with:
44
44
node-version: ${{ env.NODE_VERSION }}
45
45
cache: "pnpm"
···
48
48
run: pnpm i
49
49
50
50
- name: Create Release Pull Request
51
+
uses: changesets/action@e0145edc7d9d8679003495b11f87bd8ef63c0cba # v1.5.3
51
52
id: changesets
52
-
uses: changesets/action@v1
53
53
with:
54
-
commit: "[ci] release"
55
-
title: "[ci] release"
54
+
version: pnpm run version
55
+
commit: "ci: release"
56
+
title: "ci: release [skip netlify]"
56
57
env:
57
-
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
58
+
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token}}
58
59
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
59
60
61
+
- name: Get published version
62
+
if: steps.changesets.outputs.hasChangesets == 'true'
63
+
run: |
64
+
git checkout changeset-release/main
65
+
VERSION=$(node -p "require('./app/package.json').version")
66
+
NAME=$(node -p "require('./app/package.json').name")
67
+
git commit --amend -m "ci: release $NAME v$VERSION" --no-edit
68
+
git push origin changeset-release/main:changeset-release/main --force
69
+
60
70
image-tag:
61
71
name: Image Tag
62
72
runs-on: ubuntu-latest
···
64
74
IMAGE_TAG: ${{ env.IMAGE_TAG }}
65
75
steps:
66
76
- name: Check out the repo
67
-
uses: actions/checkout@v4
77
+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
68
78
69
79
- name: Read version from package.json
70
80
id: get_version
···
79
89
needs.changesets.outputs.hasChangesets == 'false' &&
80
90
(
81
91
contains(github.event.head_commit.message, 'deploy') ||
82
-
contains(github.event.head_commit.message, '[ci] release')
92
+
contains(github.event.head_commit.message, 'release')
83
93
)
84
94
) ||
85
95
github.event_name == 'workflow_dispatch'
···
88
98
contents: write
89
99
steps:
90
100
- name: Check out the repo
91
-
uses: actions/checkout@v4
101
+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
92
102
with:
93
103
fetch-depth: 0
94
104
95
105
- name: Set up Docker Buildx
96
-
uses: docker/setup-buildx-action@v3
106
+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
97
107
98
108
- name: Log in to Docker Hub
99
-
uses: docker/login-action@v3
109
+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
100
110
with:
101
111
username: ${{ secrets.DOCKER_USERNAME }}
102
112
password: ${{ secrets.DOCKER_PASSWORD }}
103
113
104
114
- name: Extract metadata (tags, labels) for Docker
105
115
id: meta
106
-
uses: docker/metadata-action@v5
116
+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
107
117
with:
108
118
images: ${{ env.REGISTRY }}/${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }}
109
119
110
120
- name: Build and push Docker image
111
-
uses: docker/build-push-action@v6
121
+
uses: docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17.0
112
122
with:
113
123
context: ./app
114
124
push: true
···
121
131
run: |
122
132
yq eval '.spec.template.spec.containers[0].image = "${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }}:${{ needs.image-tag.outputs.IMAGE_TAG }}"' -i manifest/deployment.yaml
123
133
124
-
- uses: stefanzweifel/git-auto-commit-action@v4
134
+
- uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
125
135
with:
126
136
commit_message: update deployment.json container image (automated)
127
137
···
133
143
contents: write
134
144
steps:
135
145
- name: Check out the repo
136
-
uses: actions/checkout@v4
146
+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
137
147
138
148
- id: extract-changelog
139
-
uses: sean0x42/markdown-extract@v2.1.0
149
+
uses: sean0x42/markdown-extract@7b185cbe85263116bbf741e739e7198ba86465dc # v2.1.0
140
150
with:
141
151
file: app/CHANGELOG.md
142
152
pattern: ${{ needs.image-tag.outputs.IMAGE_TAG }}
···
162
172
if: env.RELEASE_SKIPPED == 'false'
163
173
env:
164
174
DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_URL }}
165
-
uses: Ilshidur/action-discord@0.3.2
175
+
uses: Ilshidur/action-discord@0c4b27844ba47cb1c7bee539c8eead5284ce9fa9 # 0.3.2
166
176
with:
167
177
args: |
168
178
# ${{ env.IMAGE_NAME }}@${{ needs.image-tag.outputs.IMAGE_TAG }}
+5
-5
.github/workflows/format.yaml
+5
-5
.github/workflows/format.yaml
···
10
10
autofix:
11
11
runs-on: ubuntu-latest
12
12
steps:
13
-
- uses: actions/checkout@v4
13
+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
14
14
15
15
- name: Setup PNPM
16
-
uses: pnpm/action-setup@v3
16
+
uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
17
17
18
18
- name: Setup Node
19
-
uses: actions/setup-node@v4
19
+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
20
20
with:
21
21
node-version: 20
22
22
cache: "pnpm"
···
32
32
- name: Run pngquant
33
33
run: |
34
34
shopt -s globstar
35
-
find . -name '*.png' -exec pngquant --ext .png --force 256 {} \;
35
+
find . -name '*.png' -exec pngquant --ext .png 256 {} \;
36
36
37
-
- uses: autofix-ci/action@ff86a557419858bb967097bfc916833f5647fa8c
37
+
- uses: autofix-ci/action@551dded8c6cc8a1054039c8bc0b8b48c51dfc6ef
+3
-3
.github/workflows/labeler.yaml
+3
-3
.github/workflows/labeler.yaml
···
11
11
steps:
12
12
- name: Generate GitHub App token
13
13
id: generate_token
14
-
uses: tibdex/github-app-token@v2.1.0
14
+
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
15
15
with:
16
16
app_id: ${{ secrets.BOT_APP_ID }}
17
17
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
18
18
19
-
- uses: actions/checkout@v4
19
+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
20
20
- name: Ensure labels exist
21
21
env:
22
22
GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
···
49
49
gh label create "🏯 styles" --description "Stylesheets or design updates" --color "550F5A" --force
50
50
gh label create "🔒 wontfix" --description "This will not be worked on" --color "FFFFFF" --force
51
51
52
-
- uses: actions/labeler@v5
52
+
- uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5
53
53
with:
54
54
configuration-path: .github/labeler.yaml
55
55
sync-labels: true
+3
-3
.github/workflows/welcome-bot.yaml
+3
-3
.github/workflows/welcome-bot.yaml
···
15
15
steps:
16
16
- name: Generate GitHub App token
17
17
id: generate_token
18
-
uses: tibdex/github-app-token@v2.1.0
18
+
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
19
19
with:
20
20
app_id: ${{ secrets.BOT_APP_ID }}
21
21
private_key: ${{ secrets.BOT_PRIVATE_KEY }}
22
22
23
-
- uses: actions/checkout@v4
23
+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
24
24
- name: Convert Repository Name to Title Case
25
25
id: convert_repo_name
26
26
run: |
27
27
REPO_NAME="${{ github.event.repository.name }}"
28
28
TITLE_CASE_REPO_NAME=$(echo "$REPO_NAME" | sed 's/-/ /g' | awk '{for(i=1;i<=NF;i++) $i=toupper(substr($i,1,1)) tolower(substr($i,2))} 1')
29
29
echo "title_case_repo_name=$TITLE_CASE_REPO_NAME" >> $GITHUB_ENV
30
-
- uses: zephyrproject-rtos/action-first-interaction@7e6446f8439d8b4399169880c36a3a12b5747699
30
+
- uses: zephyrproject-rtos/action-first-interaction@58853996b1ac504b8e0f6964301f369d2bb22e5c
31
31
with:
32
32
repo-token: ${{ steps.generate_token.outputs.token }}
33
33
pr-opened-message: |
+1
-1
app/package.json
+1
-1
app/package.json