Commit Graph
42 Commits
Author SHA1 Message Date
dependabot[bot] 4fc73c39cd Bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 18:49:07 +00:00
David Sangrey 50cc49da10 Merge pull request #2480 from EDCD/dependabot/github_actions/develop/actions/checkout-5
Bump actions/checkout from 4 to 5
2025-10-16 16:23:41 -04:00
dependabot[bot] 3de147862e Bump actions/github-script from 7 to 8
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 17:01:02 +00:00
dependabot[bot] 232cc9e2e2 Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-02 06:53:56 +00:00
Athanasius 214bed27ee .github: workflows: Guard any shell $VAR with "..."
This is with regards to what happened to another project, ref:

<https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining>

Basically, do NOT trust that things like branch names don't contain any
attempt at executing shell code if referenced in a workflow segment that
runs a shell command.
2024-12-09 21:43:47 +00:00
David Sangrey 631b7f93d3 Merge branch 'beta' 2023-12-20 22:20:21 -05:00
David Sangrey b5311b4a6e [Minor] Sync Submodule Document 2023-12-20 22:03:30 -05:00
dependabot[bot] 7902610d10 build(deps): bump actions/github-script from 6 to 7
Bumps [actions/github-script](https://github.com/actions/github-script) from 6 to 7.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-01 17:36:48 +00:00
David Sangrey 70c019e7d8 [Minor] Add Manual Trigger for submodule-update.yml 2023-11-30 13:30:59 -05:00
David Sangrey f14fdd7e4f [Minor] Rollback submodule-update.yml 2023-11-30 13:27:04 -05:00
David Sangrey f4866a7a2b [Minor] Temporarily Suppress Submodule Schedule 2023-11-30 13:00:52 -05:00
dependabot[bot] 3b663c18ff build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-01 17:22:33 +00:00
David Sangrey b75b6be23f #1443 Update GitHub Workflow Submodules 2023-08-03 17:56:09 -04:00
Athanasius 41505736ac Change the submodule GH workflow back to on-push to develop 2023-04-16 11:05:21 +01:00
Athanasius a9695aa1ee github/submodule-update: Direct actions/checkout to use develop 2022-12-18 13:10:45 +00:00
Athanasius ceed5886a8 github/submodule-update: Disable push/develop trigger 2022-12-17 13:02:48 +00:00
Athanasius 6ec68c5034 github/submodule-update: Reference env as a context thing. 2022-12-17 12:59:20 +00:00
Athanasius f27d0bf74d github/submodule-update: Tweak reference to PR_AGAINST_BRANCH 2022-12-17 12:56:11 +00:00
Athanasius c3100b1fd5 github/submodule-update: Also run on develop pushes 2022-12-17 12:50:48 +00:00
Athanasius 273962e679 github/submodule-update: Move back to using our defined env
We need to run against `develop`, even when on `main` using a cron, so
actually use the environment vars we define.
2022-12-17 12:50:13 +00:00
Athanasius 414f9d8dae github/submodule-update: Use single 0 in cron spec
Just in case that `00` was the issue.  It ran fine with `10 * * * *`.
2022-12-17 12:50:12 +00:00
Athanasius 06d83399c0 Revert "github/submodule-update: Run *every* hour for test purposes"
This reverts commit ee1c739ee1.
2022-12-17 12:50:11 +00:00
Athanasius de16284b25 github/submodule-update: Run *every* hour for test purposes 2022-12-17 12:50:11 +00:00
Athanasius 70a9c7d8ab github/submodule-update: Run every day at mid-day. 2022-12-17 11:30:56 +00:00
Athanasius 640223472b github/submodule-update: Remove unused 'Add labels' step
1. This was commented out.
2. It's not necessarily up to date with what *works*, so just delete it.
2022-12-17 11:26:51 +00:00
Athanasius 8fab1fa811 github/submodule-update: Make better branch names 2022-12-17 11:25:16 +00:00
Athanasius 130bda0cc9 github/submodule-update: Try to use git status output in PR body 2022-12-17 11:21:03 +00:00
Athanasius 424e9754b1 github/submodule-update: Let's try github contexts 2022-12-17 11:14:18 +00:00
Athanasius a68c23e525 github/submodule-update: Fix process.env syntax ? 2022-12-17 09:59:17 +00:00
Athanasius 8831d15220 github/submodule-update: Switch to process.env for owner, repo, base 2022-12-17 09:56:40 +00:00
Athanasius e0f6f35311 github/submodule-update: Change to secrets.GITHUB_TOKEN
That works in the windows-build.yml workflow.
2022-12-17 09:48:21 +00:00
Athanasius acbb8b2294 github/submodule-update: Switch to 'environment' style
As per <https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#setting-an-output-parameter>
2022-12-17 09:42:22 +00:00
Athanasius ede69a9012 github/submodule-update: steps.check_for_changes condition not working
* Now I'm guessing at what the syntax needs to be, but the bare
  `steps.check_for_changes.outputs.changes` results in it being considerd
  `null` for the check.
2022-12-17 09:34:33 +00:00
Athanasius 859fe81d71 github/submodule-update: Ensure exit 0 on the update check
I *think* the `exit 0` is to ensure the 'Check for changes' isn't considered
failed due to `git` exit code.
2022-12-16 17:27:13 +00:00
Athanasius 3e0da4b537 github/submodule-update: Needs an 'else' to actually work
* Somehow this had been left in a state where it would always signal
  "no changes".
2022-12-16 17:24:11 +00:00
dependabot[bot] 4ea1609f36 build(deps): bump actions/checkout from 2.4.0 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.4.0...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-02 17:04:05 +00:00
dependabot[bot] c57bbe878a build(deps): bump actions/github-script from 5 to 6
Bumps [actions/github-script](https://github.com/actions/github-script) from 5 to 6.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-11 17:03:46 +00:00
Athanasius 6963a24728 github: submodules-update: Port in all the releasehub code & tweak
We want to *check* if there are any changes and only make a branch and add
commits if so.  The upstream code has no option for this, so use it as
a starting point instead.

Specifically this is based on:

https://github.com/releasehub-com/github-action-create-pr-parent-submodule/blob/main/action.yml
aff9d0978a9bbcbc2961d621d5b108c4b46db5e7

* We need 'success' from the *step* to be when there ARE changes, and that
  is in the special github output.
* In order for the whole job *not* to fail in the 'step check_for_changes
  says it failed' case we need it to have `continue-on-error: true`.
2022-02-07 17:31:47 +00:00
Athanasius c93df877bb github: submodules-update: Actually it's all submodules, not only FDevIDs 2022-02-07 15:25:16 +00:00
Athanasius 3a362d6a10 github: submodules-check: Use GITHUB_SECRET
Perhaps this will be sufficient, if not we'll need to tweak the permissions
*for that token* **for this action**.
2022-02-07 15:18:45 +00:00
Athanasius a77618f762 github: Fix org(/repo) case in submodule-updates.yml 2022-02-07 14:46:53 +00:00
Athanasius 2bf199f129 github: Add submodule-updates workflow
It's time to start tracking `master/head` of coriolis-data, and this should
trigger a PR making that so.
2022-02-07 14:45:00 +00:00