about summary refs log tree commit diff
path: root/.github/workflows
AgeCommit message (Collapse)AuthorFilesLines
2022-09-10workflows: add check for docbook/md manual equalitypennae2-0/+84
we want to make sure that rendering the manual from markdown without going through docbook produces (semantically) the same output as with going through docbook. to ensure this we'll build the manual twice, run each manual through html-tidy to generate a normalized form and diff the normalized forms. we don't want to compare raw output because that exposes us to a lot of whitespace we'd have to reproduce exactly in the MD render. this check may be relaxed even further in the future, but hopefully not by much.
2022-09-10workflows: check that nixos manual does not use docbook option docspennae1-1/+9
the nixos manual should not use docbook for module option documentation, only markdown, to make future transition to a markdown-only world easier and less painful. this check will ensure that all options documentation (even plain text that would not be interpreted specially by neither markdown nor docbook) is declared as being markdown.
2022-08-02terraform-full: remove (#184649)zowoq1-1/+1
* terraform-full: remove * .github/workflows/update-terraform-providers.yml: switch to terraform.full
2022-07-24Revert "backport-action: 0.0.5 -> 0.0.8"Winter1-1/+6
2022-07-24backport-action: 0.0.5 -> 0.0.8Winter1-6/+1
2022-07-10terraform-providers: update 2022-07-10github-actions[bot]1-1/+1
2022-07-08ci: Add GitHub token permissions for workflowsVarun Sharma7-0/+36
Signed-off-by: Varun Sharma <varunsh@stepsecurity.io>
2022-07-06workflows/nixos-manual: Add command to run to error messageRobert Hensing1-1/+9
2022-07-04workflows: Remove 21.11 mergesJanne Heß1-4/+0
Channel is EOL
2022-07-04chore: Set permissions for GitHub actionsnathannaveen2-0/+12
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
2022-05-23workflows: Replace 21.05 with 22.05Janne Heß1-4/+4
2022-04-29build(deps): bump peter-evans/create-pull-request from 3 to 4dependabot[bot]1-1/+1
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 4. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4)
2022-04-28.github/workflows/update-terraform-providers.yml: minor fixeszowoq1-4/+5
- simplify comment - move `ofborg` command into block for clickable copying
2022-04-08build(deps): bump cachix/install-nix-action from 16 to 17dependabot[bot]6-6/+6
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 16 to 17. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v16...v17) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-01.github/workflows/basic-eval.yml: only run if manually triggeredArtturin1-8/+9
ofborg should have obsoleted this with https://github.com/NixOS/ofborg/pull/588#issuecomment-1078451552 https://github.com/NixOS/nixpkgs/pull/166599#issuecomment-1085069938 this is still useful to have around for act usage
2022-03-27Merge pull request #165397 from Mic92/create-or-update-commentSandro3-3/+3
2022-03-23build(deps): bump peter-evans/commit-comment from 1 to 2dependabot[bot]1-1/+1
Bumps [peter-evans/commit-comment](https://github.com/peter-evans/commit-comment) from 1 to 2. - [Release notes](https://github.com/peter-evans/commit-comment/releases) - [Commits](https://github.com/peter-evans/commit-comment/compare/v1...v2) --- updated-dependencies: - dependency-name: peter-evans/commit-comment dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-03-23build(deps): bump peter-evans/create-or-update-comment from 1 to 2dependabot[bot]3-3/+3
Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 1 to 2. - [Release notes](https://github.com/peter-evans/create-or-update-comment/releases) - [Commits](https://github.com/peter-evans/create-or-update-comment/compare/v1...v2) --- updated-dependencies: - dependency-name: peter-evans/create-or-update-comment dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2022-03-21ci: add warning to actions with writeable GITHUB_TOKENJörg Thalheim3-0/+16
Co-authored-by: ckie <25263210+ckiee@users.noreply.github.com>
2022-03-14.github/workflows/basic-eval.yml: add cachix cachezowoq1-0/+5
Avoids rebuilding nix in every PR if it hasn't been build on hydra yet.
2022-03-14.github/workflows: update cachix cache commentzowoq2-2/+2
2022-03-02Merge pull request #162450 from Mic92/actions-labelerJörg Thalheim1-1/+1
build(deps): bump actions/labeler from 3 to 4
2022-03-02build(deps): bump actions/checkout from 2 to 3dependabot[bot]9-9/+9
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3)
2022-03-02build(deps): bump actions/labeler from 3 to 4dependabot[bot]1-1/+1
Bumps [actions/labeler](https://github.com/actions/labeler) from 3 to 4. - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/v3...v4)
2022-02-07terraform-providers: update scriptszowoq1-1/+1
- add flag to skip building updated providers - have the github action skip building providers so we don't need to handle build failures in the script - remove outdated `vendor` flag, all providers use `buildGoModule`
2022-01-04.github/workflows/update-terraform-providers.yml: minor fixeszowoq1-2/+2
- change ofborg command into a comment - use WIP label instead of draft so codeowner notification works
2022-01-04.github/workflows/update-terraform-providers.yml: initzowoq1-0/+47
weekly update of terraform providers which can also be run manually
2021-12-16.github/workflows/editorconfig.yml: 2.3.5 -> 2.4.0zowoq1-1/+2
2021-12-03.github/workflows/editorconfig.yml: allow PRs to skip checkzowoq1-1/+1
Intended for treewide reformatting PRs so we don't hit the API ratelimit.
2021-12-02.github/workflows/editorconfig.yml: write changed files to diskzowoq1-9/+5
This avoids errors when exporting long lists to $GITHUB_ENV. Co-authored-by: Moritz Hedtke <Moritz.Hedtke@t-online.de>
2021-11-30Revert ".github/workflows/editorconfig.yml: Don't use GitHub API for PR diff."zowoq1-15/+18
This reverts commit 4db84ed126a16e226c5f1a3f13c7bee92fa0a3a4. Causing CI errors.
2021-11-30.github/workflows/editorconfig.yml: Don't use GitHub API for PR diff.Moritz Hedtke1-18/+15
This caused ratelimits for large PRs (reformatting PRs)
2021-11-28.github/workflows/periodic-merge: configure 21.11 releaseMartin Weinelt1-0/+4
2021-11-23build(deps): bump cachix/install-nix-action from 15 to 16dependabot[bot]5-5/+5
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 15 to 16. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v15...v16) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-11-13build(deps): bump cachix/install-nix-action from 14 to 15dependabot[bot]5-5/+5
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 14 to 15. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v14...v15) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-10-31Revert "build(deps): bump zeebe-io/backport-action from 0.0.5 to 0.0.6 ↵Domen Kožar1-1/+6
(#140848)" This reverts commit 50341b0cd8c5acba28ad63c9d1ff29ec3d66c173. It breaks the backport action.
2021-10-31Revert "backport-action: 0.0.6 -> 0.0.7"Domen Kožar1-1/+1
This reverts commit 7e3ba3e88b02c8b780075f87a3c6282eace0878e. It breaks the backport.
2021-10-29backport-action: 0.0.6 -> 0.0.7Domen Kožar1-1/+1
2021-10-28build(deps): bump zeebe-io/backport-action from 0.0.5 to 0.0.6 (#140848)Jörg Thalheim1-6/+1
* build(deps): bump zeebe-io/backport-action from 0.0.5 to 0.0.6 Bumps [zeebe-io/backport-action](https://github.com/zeebe-io/backport-action) from 0.0.5 to 0.0.6. - [Release notes](https://github.com/zeebe-io/backport-action/releases) - [Commits](https://github.com/zeebe-io/backport-action/compare/v0.0.5...v0.0.6) --- updated-dependencies: - dependency-name: zeebe-io/backport-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update .github/workflows/backport.yml * Update .github/workflows/backport.yml Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Domen Kožar <domen@enlambda.com>
2021-10-05.github/workflows/periodic-merge: move stable merges to 24h cycleMartin Weinelt2-4/+4
2021-09-09build(deps): bump cachix/install-nix-action from 13 to 14dependabot[bot]5-5/+5
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 13 to 14. - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](https://github.com/cachix/install-nix-action/compare/v13...v14) --- updated-dependencies: - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-09-02build(deps): bump devmasx/merge-branch from 1.3.1 to 1.4.0dependabot[bot]2-2/+2
Bumps [devmasx/merge-branch](https://github.com/devmasx/merge-branch) from 1.3.1 to 1.4.0. - [Release notes](https://github.com/devmasx/merge-branch/releases) - [Changelog](https://github.com/devmasx/merge-branch/blob/master/CHANGELOG.md) - [Commits](https://github.com/devmasx/merge-branch/compare/v1.3.1...1.4.0) --- updated-dependencies: - dependency-name: devmasx/merge-branch dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2021-07-25build(deps): bump zeebe-io/backport-action (#131466)Jörg Thalheim1-2/+2
* build(deps): bump zeebe-io/backport-action Bumps [zeebe-io/backport-action](https://github.com/zeebe-io/backport-action) from 2b994724142df0774855690db56bc6308fb99ffa to 0.0.5. This release includes the previously tagged commit. - [Release notes](https://github.com/zeebe-io/backport-action/releases) - [Commits](https://github.com/zeebe-io/backport-action/compare/2b994724142df0774855690db56bc6308fb99ffa...e5d4d7c39c94b65670847d11d259b2f574fa3d30) --- updated-dependencies: - dependency-name: zeebe-io/backport-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: zowoq <59103226+zowoq@users.noreply.github.com>
2021-07-25build(deps): bump cachix/cachix-action from 9 to 10dependabot[bot]2-2/+2
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action) from 9 to 10. - [Release notes](https://github.com/cachix/cachix-action/releases) - [Commits](https://github.com/cachix/cachix-action/compare/v9...v10) --- updated-dependencies: - dependency-name: cachix/cachix-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
2021-07-21ci: add no-channel check (#109543)Jonas Chevalier1-0/+21
* ci: add no-channel check * Update .github/workflows/no-channel.yml Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com> Co-authored-by: Cole Helbling <cole.e.helbling@outlook.com>
2021-07-07GHA: add basic eval checksDomen Kožar1-0/+20
2021-07-01workflows: fix documentation for periodic 24 hours mergeDennis Gosnell1-1/+1
2021-07-01.github/workflows/periodic-merge-*: Tiny improvementsMalte Brandy2-3/+3
2021-06-30.github/workflows/periodic-merge: generalize from merge-stagingMartin Weinelt3-41/+104
By generalizing the previous merge-staging action we can support a large number of branch pairs that need to be merged periodically. Provide two intervals, daily and every six hours, to accomodate different needs. Co-Authored-By: Malte Brandy <malte.brandy@maralorn.de>
2021-06-26CONTRIBUTING.md: Move to repo root, where it is more visible.Niklas Hambüchen1-1/+1
We found that many users found it difficult to locate this document. Github supports it in the root, see: https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/setting-guidelines-for-repository-contributors