dependabot[bot]
12f6e7c2d1
build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](4cec3d8aa0...ea165f8d65 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-26 10:07:09 +01:00
Igor Pecovnik
d4022fbbbb
Change to different method of getting changed files
...
Addressing security issue: https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
2025-03-15 16:25:27 +01:00
dependabot[bot]
ddc137de23
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-24 20:40:40 +01:00
dependabot[bot]
a872d94778
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](65c4c4a1dd...4cec3d8aa0 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-24 20:40:28 +01:00
Koichi Murase
1fdd801908
actions(update-tools): avoid notifying our outdated deps everywhere
...
In the current main branch, workflow update-tools includes the content
of the upstream release notes in the created GitHub Issue. This
triggers a notification to every upstream contributor mentioned in the
release note. This also creates a cross-reference link to our GitHub
Issue (reporting that our dependency is not up-to-date) in every
upstream issue and pull request. The information that we need to
update our dependency is not relavant to the upstream contributors,
issues, and pull requests at all. We should avoid this situation.
In the first place, we do not need to include a copy of the upstream
release note. We can just put a link to the upstream release note.
Currently, we anyway hide the content in the <details> tag and require
the reader to press the button. The user experience is not so
different from pressing a link and visiting the upstream release note.
2025-01-21 13:26:44 +01:00
dependabot[bot]
3edb905b71
build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](6f51ac03b9...65c4c4a1dd )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-01-19 20:23:06 +01:00
dependabot[bot]
48ad33ed22
build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.3 to 4.5.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](b4b15b8c7c...6f51ac03b9 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-24 14:29:11 +01:00
Igor Pecovnik
52548e408a
GitHub Actions: add log cleaner, adjust names, fix labelling on approve
2024-11-03 21:39:25 +01:00
Igor Pecovnik
6954f12531
GHA conditions syntay fix
2024-11-01 09:01:28 +01:00
Igor Pecovnik
d355c17dc3
Change pull request trigger in order to get permissions back in order
2024-11-01 08:27:49 +01:00
dependabot[bot]
7e2bc69479
build(deps): bump pascalgn/size-label-action from 0.5.4 to 0.5.5
...
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action ) from 0.5.4 to 0.5.5.
- [Release notes](https://github.com/pascalgn/size-label-action/releases )
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.4...v0.5.5 )
---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-28 20:15:37 +01:00
dependabot[bot]
27129cfce6
build(deps): bump peter-evans/create-pull-request from 6 to 7
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6 to 7.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-28 20:15:25 +01:00
Igor Pecovnik
bede7c121e
Limit default labelling to opened, reopened and synchronize PR
...
Also remove "Ready to merge" in case PR is changed / fresh
2024-10-25 23:39:50 +02:00
Igor Pecovnik
01c83b4639
Label approved pull requests with "Ready to merge"
2024-10-25 22:37:15 +02:00
Igor Pecovnik
466a0cd346
Move maintainers update function from https://github.com/armbian/scripts
...
- we don't need to use PAT anymore as its within same repository
- cosmetic fixes
2024-10-25 21:48:58 +02:00
dependabot[bot]
749aea39e4
build(deps): bump actions/upload-artifact from 4.4.1 to 4.4.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.1 to 4.4.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](604373da63...b4b15b8c7c )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-15 15:55:59 +02:00
dependabot[bot]
692a282716
build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.0 to 4.4.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](50769540e7...604373da63 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-10-09 19:52:29 +02:00
dependabot[bot]
cabed2ad7d
build(deps): bump peter-evans/create-pull-request from 6 to 7
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 6 to 7.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-10 21:58:13 +02:00
dependabot[bot]
7fd33a404f
build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.6 to 4.4.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](834a144ee9...50769540e7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-09-03 15:02:31 +02:00
dependabot[bot]
dc4301c390
build(deps): bump tj-actions/changed-files from 44 to 45
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 44 to 45.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v44...v45 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-27 21:32:47 +02:00
dependabot[bot]
741418e238
build(deps): bump pascalgn/size-label-action from 0.5.2 to 0.5.4
...
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action ) from 0.5.2 to 0.5.4.
- [Release notes](https://github.com/pascalgn/size-label-action/releases )
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.2...v0.5.4 )
---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-27 21:32:35 +02:00
Igor
e4d75f29ba
Discord announcement: push only when label "Needs review" is set ( #7075 )
...
* Discord annoucement: push only when label "Needs review" is set
* Change to label triggering
* actions: Add run-name to `pr-announce` workflow
---------
Co-authored-by: ColorfulRhino <131405023+ColorfulRhino@users.noreply.github.com >
2024-08-20 12:04:51 +02:00
ColorfulRhino
7678009f60
actions: forked-helper: Run only if secret is set
...
The workflow ran regardless whether `ARMBIAN_SELF_DISPATCH_TOKEN` was set or not, generating errors if the secret could not be found.
In addition, simplify and beautify the workflow.
2024-08-18 10:40:09 +02:00
Werner
da899b2c93
attempt to fix pr announce for all contributors ( #7081 )
...
The earlier attempt seem to limit announces to repository members for some reason.
This attempt limits to the repo only, therefore forks should not be affected.
Not sure if it works, but there is only one way to find out.
2024-08-13 17:41:10 +02:00
dependabot[bot]
a9e2c0b322
build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](89ef406dd8...834a144ee9 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-13 12:20:02 +02:00
Igor
869a6615c4
Prevent running announce script in forks ( #7073 )
...
* Prevent running announce script in forks
* Add description
* fix typo
---------
Co-authored-by: Werner <EvilOlaf@users.noreply.github.com >
2024-08-13 09:21:40 +02:00
Werner
ac01365708
fix pr being announce multiple times ( #7070 )
...
by limiting action to pr opening.
2024-08-12 19:04:25 +02:00
Werner
80873d368e
fix link for pr
2024-08-12 17:44:12 +02:00
Werner
77e6c9c8ef
Send summaries of PR and merges to main chat ( #7060 )
...
* Create pr-announce.yml
* Rename pr-announce.yml to pr-announce.yml
* Create merge-announce.yml
2024-08-11 09:29:12 +02:00
dependabot[bot]
48128c869f
build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.4 to 4.3.5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](0b2256b8c0...89ef406dd8 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-05 20:38:00 +02:00
dependabot[bot]
8ec78921e1
build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-02 17:22:58 +02:00
ColorfulRhino
b6b8a89f10
actions: Create workflow to update shell tools via auto-PR
...
Some of our scripts download tools from a repo. These can't be bumped by dependabot, so this workflow is a self-created dependabot to bump versions of those tools to stay up-to-date.
This workflow only creates a PR if the version was actually updated.
Tools currently supported:
- Shellcheck (in 2 different files)
- Shellfmt
- oci-oras
- Bat
2024-07-18 11:54:02 +02:00
ColorfulRhino
28e859f7ce
actions: forked-helper: Don't escape multiline strings
...
Not needed anymore with GITHUB_OUTPUT.
See https://github.com/orgs/community/discussions/26288#discussioncomment-3876281
Instead, use the `toJSON` function that Actions offers to convert the `event` object to JSON.
2024-07-18 11:43:38 +02:00
Igor Pecovnik
10be812ae6
actions: Remove deprecated action script command rebase
...
Not needed as it was integrated by GitHub
2024-07-11 18:02:32 +02:00
ColorfulRhino
6f664c92fd
actions: Run YAML formatter over all workflow files
2024-07-11 18:02:32 +02:00
ColorfulRhino
2a27fdd4d0
actions: Small naming changes for some steps
2024-07-11 18:02:32 +02:00
ColorfulRhino
3fff477855
actions: Introduce run names for all workflows
...
This should make viewing the Action runs in the web UI more pleasant.
2024-07-11 18:02:32 +02:00
ColorfulRhino
f0ac613ebd
actions: Add names to auto-labeler jobs
2024-07-11 18:02:32 +02:00
ColorfulRhino
a001fefc57
actions: Fix GITHUB_OUTPUT variables
2024-07-11 18:02:32 +02:00
dependabot[bot]
718aa52b17
build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](65462800fd...0b2256b8c0 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-09 06:19:56 +02:00
ColorfulRhino
0e7e76dcb1
actions: Rename PR-specific workflows with "pr-" prefix
2024-06-09 16:30:45 +00:00
ColorfulRhino
1129cf42be
actions: Combine PR labeling jobs into a single workflow
2024-06-09 16:30:45 +00:00
ColorfulRhino
ce73634bf6
actions: Don't run shellcheck if PR message or title was updated
...
Also fix typos.
2024-06-09 16:30:45 +00:00
ColorfulRhino
5d7637ca0e
actions: Don't start build workflow on PR 'reviewer_requested' trigger
...
The PR build workflow does not need to be started every time a single
reviwer is added, since requesting a review does not change the build.
If the 'Build' label was already added earlier, the build workflow will
have been started already.
2024-06-09 16:30:45 +00:00
ColorfulRhino
bc515b0cc3
actions: Move concurrency canceling to 2nd job for PR build
...
On every PR, a workflow is started to check if artifacts should be
built. This happens not only once, but many times, e.g. for every
selected reviewer. Since the workflow has `cancel-in-progress`
enabled, workflows are started and immediately cancelled by the
next one, resulting in many notifications.
Move the `cancel-in-progress` concurrency policy to the second job
which starts only after a check is done if the 'Build' label is even
active on the PR. This should greatly reduce "Workflow cancelled"
notifications via GitHub and email (if enabled by the user).
Also make wording more clear.
2024-06-09 16:30:45 +00:00
dependabot[bot]
9fa690c203
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-05-14 06:12:51 +01:00
dependabot[bot]
327a6664a4
build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](5d5d22a312...65462800fd )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-23 03:05:07 +08:00
dependabot[bot]
2987f3c23c
build(deps): bump pascalgn/size-label-action from 0.5.0 to 0.5.2
...
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action ) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/pascalgn/size-label-action/releases )
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.0...v0.5.2 )
---
updated-dependencies:
- dependency-name: pascalgn/size-label-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-23 03:04:51 +08:00
dependabot[bot]
41c909194f
build(deps): bump tj-actions/changed-files from 43 to 44
...
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files ) from 43 to 44.
- [Release notes](https://github.com/tj-actions/changed-files/releases )
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md )
- [Commits](https://github.com/tj-actions/changed-files/compare/v43...v44 )
---
updated-dependencies:
- dependency-name: tj-actions/changed-files
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-04-01 20:46:29 +02:00
ColorfulRhino
03c51a301a
GH Actions: Beautify kernel hardening analysis
...
GitHub job summaries do not support colored output, but the kernel hardening script is using colored output. Thus, the job summary in the Actions panel is littered with ugly characters. This commit replaces them with emojis to enhance visibility.
2024-03-26 23:26:36 +01:00