Merge pull request #39 from trueberryless-org/update-template-files · trueberryless.org/starlight-sidebar-topics-dropdown@aabad07

+31

.github/renovate.json5

··· 1 + { 2 + $schema: "https://docs.renovatebot.com/renovate-schema.json", 3 + extends: [ 4 + ":disableDependencyDashboard", 5 + ":semanticPrefixFixDepsChoreOthers", 6 + ":ignoreModulesAndTests", 7 + "workarounds:all", 8 + "helpers:pinGitHubActionDigestsToSemver", 9 + "docker:disable", 10 + ], 11 + rangeStrategy: "bump", 12 + ignorePaths: ["**/node_modules/**"], 13 + packageRules: [ 14 + { 15 + groupName: "github-actions", 16 + matchManagers: ["github-actions"], 17 + }, 18 + { 19 + matchManagers: ["npm"], 20 + groupName: "dependencies", 21 + matchDepTypes: ["devDependencies", "dependencies", "peerDependencies"], 22 + enabled: false, 23 + }, 24 + { 25 + description: "Disable package manager version updates", 26 + matchPackageNames: ["pnpm"], 27 + matchDepTypes: ["packageManager"], 28 + enabled: false, 29 + }, 30 + ], 31 + }

+19 -19

.github/workflows/deployment.yaml

··· 23 23 docs: ${{ steps.filter.outputs.docs }} 24 24 steps: 25 25 - name: Check out the repo 26 - uses: actions/checkout@v4 26 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 27 27 28 - - uses: dorny/paths-filter@v3 28 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 29 29 id: filter 30 30 with: 31 31 filters: | ··· 43 43 steps: 44 44 - name: Generate GitHub App token 45 45 id: generate_token 46 - uses: tibdex/github-app-token@v2.1.0 46 + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 47 47 with: 48 48 app_id: ${{ secrets.BOT_APP_ID }} 49 49 private_key: ${{ secrets.BOT_PRIVATE_KEY }} 50 50 51 51 - name: Checkout Repo 52 - uses: actions/checkout@v4 52 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 53 53 54 54 - name: Setup PNPM 55 - uses: pnpm/action-setup@v3 55 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 56 56 57 57 - name: Setup Node 58 - uses: actions/setup-node@v4 58 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 59 59 with: 60 60 node-version: ${{ env.NODE_VERSION }} 61 61 cache: "pnpm" ··· 64 64 run: pnpm i 65 65 66 66 - name: Create Release Pull Request 67 - uses: changesets/action@v1 67 + uses: changesets/action@06245a4e0a36c064a573d4150030f5ec548e4fcc # v1.4.10 68 68 id: changesets 69 69 with: 70 70 version: pnpm run version ··· 90 90 IMAGE_TAG: ${{ env.IMAGE_TAG }} 91 91 steps: 92 92 - name: Check out the repo 93 - uses: actions/checkout@v4 93 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 94 94 95 95 - name: Read version from package.json 96 96 id: get_version ··· 114 114 contents: write 115 115 steps: 116 116 - name: Check out the repo 117 - uses: actions/checkout@v4 117 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 118 118 with: 119 119 fetch-depth: 0 120 120 121 121 - name: Setup PNPM 122 - uses: pnpm/action-setup@v3 122 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 123 123 with: 124 124 package_json_file: ./docs/package.json 125 125 126 126 - name: Setup Node 127 - uses: actions/setup-node@v4 127 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 128 128 with: 129 129 node-version: ${{ env.NODE_VERSION }} 130 130 cache: pnpm ··· 141 141 working-directory: ./docs 142 142 143 143 - name: Set up Docker Buildx 144 - uses: docker/setup-buildx-action@v3 144 + uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0 145 145 146 146 - name: Log in to Docker Hub 147 - uses: docker/login-action@v3 147 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 148 148 with: 149 149 username: ${{ secrets.DOCKER_USERNAME }} 150 150 password: ${{ secrets.DOCKER_PASSWORD }} 151 151 152 152 - name: Extract metadata (tags, labels) for Docker 153 153 id: meta 154 - uses: docker/metadata-action@v5 154 + uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0 155 155 with: 156 156 images: ${{ env.REGISTRY }}/${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }} 157 157 158 158 - name: Build and push Docker image 159 - uses: docker/build-push-action@v6 159 + uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0 160 160 with: 161 161 context: . 162 162 push: true ··· 169 169 run: | 170 170 yq eval '.spec.template.spec.containers[0].image = "${{ env.IMAGE_OWNER }}/${{ env.IMAGE_NAME }}:${{ needs.image-tag.outputs.IMAGE_TAG }}"' -i manifest/deployment.yaml 171 171 172 - - uses: stefanzweifel/git-auto-commit-action@v4 172 + - uses: stefanzweifel/git-auto-commit-action@e348103e9026cc0eee72ae06630dbe30c8bf7a79 # v5.1.0 173 173 with: 174 174 commit_message: update deployment.json container image (automated) 175 175 ··· 181 181 contents: write 182 182 steps: 183 183 - name: Check out the repo 184 - uses: actions/checkout@v4 184 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 185 185 186 186 - id: extract-changelog 187 - uses: sean0x42/markdown-extract@v2.1.0 187 + uses: sean0x42/markdown-extract@7b185cbe85263116bbf741e739e7198ba86465dc # v2.1.0 188 188 with: 189 189 file: docs/CHANGELOG.md 190 190 pattern: ${{ needs.image-tag.outputs.IMAGE_TAG }} ··· 210 210 if: env.RELEASE_SKIPPED == 'false' 211 211 env: 212 212 DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_URL }} 213 - uses: Ilshidur/action-discord@0.3.2 213 + uses: Ilshidur/action-discord@0c4b27844ba47cb1c7bee539c8eead5284ce9fa9 # 0.3.2 214 214 with: 215 215 args: | 216 216 # ${{ env.IMAGE_NAME }}@${{ needs.image-tag.outputs.IMAGE_TAG }}

+5 -5

.github/workflows/format.yaml

··· 10 10 autofix: 11 11 runs-on: ubuntu-latest 12 12 steps: 13 - - uses: actions/checkout@v4 13 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 14 14 15 15 - name: Setup PNPM 16 - uses: pnpm/action-setup@v3 16 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 17 17 18 18 - name: Setup Node 19 - uses: actions/setup-node@v4 19 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 20 20 with: 21 21 node-version: 20 22 22 cache: "pnpm" ··· 32 32 - name: Run pngquant 33 33 run: | 34 34 shopt -s globstar 35 - find . -name '*.png' -exec pngquant --ext .png --force 256 {} \; 35 + find . -name '*.png' -exec pngquant --ext .png 256 {} \; 36 36 37 - - uses: autofix-ci/action@ff86a557419858bb967097bfc916833f5647fa8c 37 + - uses: autofix-ci/action@551dded8c6cc8a1054039c8bc0b8b48c51dfc6ef

+3 -3

.github/workflows/labeler.yaml

··· 11 11 steps: 12 12 - name: Generate GitHub App token 13 13 id: generate_token 14 - uses: tibdex/github-app-token@v2.1.0 14 + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 15 15 with: 16 16 app_id: ${{ secrets.BOT_APP_ID }} 17 17 private_key: ${{ secrets.BOT_PRIVATE_KEY }} 18 18 19 - - uses: actions/checkout@v4 19 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 20 20 - name: Ensure labels exist 21 21 env: 22 22 GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} ··· 49 49 gh label create "🏯 styles" --description "Stylesheets or design updates" --color "550F5A" --force 50 50 gh label create "🔒 wontfix" --description "This will not be worked on" --color "FFFFFF" --force 51 51 52 - - uses: actions/labeler@v5 52 + - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5 53 53 with: 54 54 configuration-path: .github/labeler.yaml 55 55 sync-labels: true

+14 -14

.github/workflows/publish.yaml

··· 24 24 starlight-sidebar-topics-dropdown: ${{ steps.filter.outputs.starlight-sidebar-topics-dropdown }} 25 25 steps: 26 26 - name: Check out the repo 27 - uses: actions/checkout@v4 27 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 28 28 29 - - uses: dorny/paths-filter@v3 29 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 30 30 id: filter 31 31 with: 32 32 filters: | ··· 44 44 steps: 45 45 - name: Generate GitHub App token 46 46 id: generate_token 47 - uses: tibdex/github-app-token@v2.1.0 47 + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 48 48 with: 49 49 app_id: ${{ secrets.BOT_APP_ID }} 50 50 private_key: ${{ secrets.BOT_PRIVATE_KEY }} 51 51 52 52 - name: Checkout Repo 53 - uses: actions/checkout@v4 53 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 54 54 55 55 - name: Setup PNPM 56 - uses: pnpm/action-setup@v3 56 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 57 57 58 58 - name: Setup Node 59 - uses: actions/setup-node@v4 59 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 60 60 with: 61 61 node-version: ${{ env.NODE_VERSION }} 62 62 cache: "pnpm" ··· 66 66 67 67 - name: Create Release Pull Request 68 68 id: changesets 69 - uses: changesets/action@v1 69 + uses: changesets/action@06245a4e0a36c064a573d4150030f5ec548e4fcc # v1.4.10 70 70 with: 71 71 commit: "[ci] release" 72 72 title: "[ci] release" ··· 81 81 IMAGE_TAG: ${{ env.IMAGE_TAG }} 82 82 steps: 83 83 - name: Check out the repo 84 - uses: actions/checkout@v4 84 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 85 85 86 86 - name: Read version from package.json 87 87 id: get_version ··· 105 105 contents: write 106 106 id-token: write 107 107 steps: 108 - - uses: actions/checkout@v4 108 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 109 109 110 110 - name: Setup PNPM 111 - uses: pnpm/action-setup@v3 111 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 112 112 113 113 - name: Setup Node 114 - uses: actions/setup-node@v4 114 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 115 115 with: 116 116 node-version: ${{ env.NODE_VERSION }} 117 117 cache: "pnpm" ··· 134 134 contents: write 135 135 steps: 136 136 - name: Check out the repo 137 - uses: actions/checkout@v4 137 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 138 138 139 139 - id: extract-changelog 140 - uses: sean0x42/markdown-extract@v2.1.0 140 + uses: sean0x42/markdown-extract@7b185cbe85263116bbf741e739e7198ba86465dc # v2.1.0 141 141 with: 142 142 file: packages/starlight-sidebar-topics-dropdown/CHANGELOG.md 143 143 pattern: ${{ needs.image-tag.outputs.IMAGE_TAG }} ··· 163 163 if: env.RELEASE_SKIPPED == 'false' 164 164 env: 165 165 DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_URL }} 166 - uses: Ilshidur/action-discord@0.3.2 166 + uses: Ilshidur/action-discord@0c4b27844ba47cb1c7bee539c8eead5284ce9fa9 # 0.3.2 167 167 with: 168 168 args: | 169 169 # ${{ env.IMAGE_NAME }}@${{ needs.image-tag.outputs.IMAGE_TAG }}

+2 -2

.github/workflows/welcome-bot.yaml

··· 15 15 steps: 16 16 - name: Generate GitHub App token 17 17 id: generate_token 18 - uses: tibdex/github-app-token@v2.1.0 18 + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 19 19 with: 20 20 app_id: ${{ secrets.BOT_APP_ID }} 21 21 private_key: ${{ secrets.BOT_PRIVATE_KEY }} 22 22 23 - - uses: actions/checkout@v4 23 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 24 24 - name: Convert Repository Name to Title Case 25 25 id: convert_repo_name 26 26 run: |

Configure Feed

Configure Feed