Skip to content

Commit 3ca2b25

Browse files
GoryudyumaGoryudyuma
authored
Merge branch 'develop' into add_actions-workflow-metrics
2 parents 90ffdb6 + 3e85f3b commit 3ca2b25

23 files changed

Lines changed: 982 additions & 1192 deletions

‎.github/workflows/add-to-task-list.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
steps:
1616
- name: Generate a token
1717
id: generate_token
18-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
18+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
1919
with:
2020
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
2121
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}

‎.github/workflows/deploy-hato-bot.yml‎

Lines changed: 18 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ jobs:
2323
runs-on: ubuntu-latest
2424
permissions:
2525
contents: write
26+
packages: read
2627
pull-requests: write
2728
steps:
2829
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -35,8 +36,9 @@ jobs:
3536
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3637
run: bash "${GITHUB_WORKSPACE}/scripts/deploy_hato_bot/update_uv_version/get_uv_version.sh"
3738
env:
39+
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
3840
HEAD_REF: ${{github.head_ref || github.event.release.tag_name}}
39-
- uses: dev-hato/actions-diff-pr-management@b446497d139ed3eadc62ec1dd90dd27960ad1a0c # v2.2.4
41+
- uses: dev-hato/actions-diff-pr-management@5cd3792bc98beed11cda90898bc81af6bfa199af # v2.2.5
4042
with:
4143
github-token: ${{secrets.GITHUB_TOKEN}}
4244
branch-name-prefix: fix-uv-version
@@ -62,40 +64,40 @@ jobs:
6264
- name: Set .env
6365
run: cp .env.example .env
6466
- name: Login to GitHub Container Registry
65-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
67+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
6668
with:
6769
registry: ghcr.io
6870
username: ${{ github.actor }}
6971
password: ${{ secrets.GITHUB_TOKEN }}
7072
- name: Set up QEMU
71-
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
73+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
7274
- name: Set up Docker Buildx
7375
id: buildx
74-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
76+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
7577
- run: echo "TAG_NAME=${HEAD_REF//\//-}" >> "$GITHUB_ENV"
7678
env:
7779
HEAD_REF: ${{github.head_ref}}
7880
if: ${{ github.event_name == 'pull_request' }}
7981
- run: echo 'TAG_NAME=${{ github.event.release.tag_name }}' >> "$GITHUB_ENV"
8082
if: ${{ github.event_name == 'release' }}
8183
- name: Build and push (build)
82-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
84+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
8385
env:
8486
DOCKER_CONTENT_TRUST: 1
8587
with:
8688
push: true
8789
files: build.docker-compose.yml
8890
source: .
8991
- name: Build and push (main)
90-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
92+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
9193
env:
9294
DOCKER_CONTENT_TRUST: 1
9395
with:
9496
push: true
9597
files: docker-compose.yml
9698
source: .
9799
- name: Build and push (dev)
98-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
100+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
99101
env:
100102
DOCKER_CONTENT_TRUST: 1
101103
with:
@@ -105,7 +107,7 @@ jobs:
105107
- run: echo 'TAG_NAME=latest' >> "$GITHUB_ENV"
106108
if: ${{ github.event_name == 'release' }}
107109
- name: Build and push (build) (latest)
108-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
110+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
109111
if: ${{ github.event_name == 'release' }}
110112
env:
111113
DOCKER_CONTENT_TRUST: 1
@@ -114,7 +116,7 @@ jobs:
114116
files: build.docker-compose.yml
115117
source: .
116118
- name: Build and push (main) (latest)
117-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
119+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
118120
if: ${{ github.event_name == 'release' }}
119121
env:
120122
DOCKER_CONTENT_TRUST: 1
@@ -123,7 +125,7 @@ jobs:
123125
files: docker-compose.yml
124126
source: .
125127
- name: Build and push (dev) (latest)
126-
uses: docker/bake-action@5be5f02ff8819ecd3092ea6b2e6261c31774f2b4 # v6.10.0
128+
uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
127129
if: ${{ github.event_name == 'release' }}
128130
env:
129131
DOCKER_CONTENT_TRUST: 1
@@ -159,7 +161,7 @@ jobs:
159161
run: bash "${GITHUB_WORKSPACE}/scripts/deploy_hato_bot/update_version_python_version/get_python_version.sh"
160162
env:
161163
HEAD_REF: ${{github.head_ref || github.event.release.tag_name}}
162-
- uses: dev-hato/actions-diff-pr-management@b446497d139ed3eadc62ec1dd90dd27960ad1a0c # v2.2.4
164+
- uses: dev-hato/actions-diff-pr-management@5cd3792bc98beed11cda90898bc81af6bfa199af # v2.2.5
163165
with:
164166
github-token: ${{secrets.GITHUB_TOKEN}}
165167
branch-name-prefix: fix-version-pyproject
@@ -178,7 +180,7 @@ jobs:
178180
fetch-depth: 0
179181
ref: ${{ github.event.pull_request.head.sha }}
180182
persist-credentials: false
181-
- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
183+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
182184
if: github.event_name != 'pull_request' || github.event.action != 'closed'
183185
with:
184186
cache: npm
@@ -191,7 +193,7 @@ jobs:
191193
run: bash "${GITHUB_WORKSPACE}/scripts/deploy_hato_bot/pr_update_version/get_npm_version.sh"
192194
env:
193195
HEAD_REF: ${{github.head_ref || github.event.release.tag_name}}
194-
- uses: dev-hato/actions-diff-pr-management@b446497d139ed3eadc62ec1dd90dd27960ad1a0c # v2.2.4
196+
- uses: dev-hato/actions-diff-pr-management@5cd3792bc98beed11cda90898bc81af6bfa199af # v2.2.5
195197
with:
196198
github-token: ${{secrets.GITHUB_TOKEN}}
197199
branch-name-prefix: fix-version
@@ -210,7 +212,7 @@ jobs:
210212
ref: ${{ github.event.pull_request.head.sha }}
211213
persist-credentials: false
212214
- name: Set up Node.js
213-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
215+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
214216
if: github.event_name != 'pull_request' || github.event.action != 'closed'
215217
with:
216218
cache: npm
@@ -220,7 +222,7 @@ jobs:
220222
- name: Install dependencies
221223
if: github.event_name != 'pull_request' || github.event.action != 'closed'
222224
run: npm install
223-
- uses: dev-hato/actions-diff-pr-management@b446497d139ed3eadc62ec1dd90dd27960ad1a0c # v2.2.4
225+
- uses: dev-hato/actions-diff-pr-management@5cd3792bc98beed11cda90898bc81af6bfa199af # v2.2.5
224226
with:
225227
github-token: ${{secrets.GITHUB_TOKEN}}
226228
branch-name-prefix: npm
@@ -234,7 +236,7 @@ jobs:
234236
fetch-depth: 0
235237
ref: ${{ github.event.pull_request.head.sha }}
236238
persist-credentials: false
237-
- uses: dev-hato/actions-update-dockle@d6cb859354f29327d2ba10c5aa61f1d7c83128df # v0.0.134
239+
- uses: dev-hato/actions-update-dockle@40e8299e04f55c10ed1ede2ff2dc03a604e90960 # v0.0.135
238240
with:
239241
github-token: ${{secrets.GITHUB_TOKEN}}
240242
dockle:

‎.github/workflows/format-json-yml.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,11 +29,11 @@ jobs:
2929
persist-credentials: false
3030
- name: Generate a token
3131
id: generate_token
32-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
32+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
3333
with:
3434
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
3535
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
36-
- uses: dev-hato/actions-format-json-yml@b77f69e2402f84dafed16e7c3954dbc812592ce3 # v0.0.99
36+
- uses: dev-hato/actions-format-json-yml@e26bb75bab9841682281db76bb3f11b9f29a29f0 # v0.0.100
3737
with:
3838
github-token: ${{steps.generate_token.outputs.token}}
3939
concurrency:

‎.github/workflows/osv-scanner.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ permissions: {}
2323
jobs:
2424
scan-scheduled:
2525
if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }}
26-
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@2a387edfbe02a11d856b89172f6e978100177eb4" # v2.3.2
26+
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@c51854704019a247608d928f370c98740469d4b5" # v2.3.5
2727
permissions:
2828
actions: read
2929
# Require writing security events to upload SARIF file to security tab
@@ -38,7 +38,7 @@ jobs:
3838
./
3939
scan-pr:
4040
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
41-
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@2a387edfbe02a11d856b89172f6e978100177eb4" # v2.3.2
41+
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@c51854704019a247608d928f370c98740469d4b5" # v2.3.5
4242
permissions:
4343
actions: read
4444
# Require writing security events to upload SARIF file to security tab

‎.github/workflows/pr-copy-ci-hato-bot.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,15 @@ jobs:
1414
with:
1515
persist-credentials: false
1616
- name: Set up Node.js
17-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
17+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1818
with:
1919
cache: npm
2020
node-version-file: package.json
2121
- run: npm install -g "$(yq -r '.packageManager' package.json)"
2222
- run: npm ci
2323
- name: Generate a token
2424
id: generate_token
25-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
25+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
2626
with:
2727
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
2828
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}

‎.github/workflows/pr-format.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
ref: ${{ github.event.pull_request.head.sha }}
3333
persist-credentials: false
3434
- name: Set up uv
35-
uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
35+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
3636
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3737
with:
3838
enable-cache: true
@@ -42,7 +42,7 @@ jobs:
4242
- name: Generate a token
4343
id: generate_token
4444
if: success() || failure()
45-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
45+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
4646
with:
4747
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
4848
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
@@ -52,7 +52,7 @@ jobs:
5252
id: format
5353
if: github.event_name != 'pull_request' || github.event.action != 'closed'
5454
run: bash "${GITHUB_WORKSPACE}/scripts/pr_format/pr_format/format.sh"
55-
- uses: dev-hato/actions-diff-pr-management@b446497d139ed3eadc62ec1dd90dd27960ad1a0c # v2.2.4
55+
- uses: dev-hato/actions-diff-pr-management@5cd3792bc98beed11cda90898bc81af6bfa199af # v2.2.5
5656
if: success() || failure()
5757
with:
5858
github-token: ${{steps.generate_token.outputs.token}}

‎.github/workflows/pr-merge-develop-hato-bot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
fetch-depth: 0
1717
persist-credentials: false
1818
- name: Set up Node.js
19-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
19+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2020
with:
2121
cache: npm
2222
node-version-file: package.json

‎.github/workflows/pr-release-hato-bot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
fetch-depth: 0
1616
persist-credentials: false
1717
- name: Set up Node.js
18-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
18+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1919
with:
2020
cache: npm
2121
node-version-file: package.json

‎.github/workflows/pr-test-hato-bot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
submodules: "recursive"
2222
persist-credentials: false
2323
- name: Set up uv
24-
uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
24+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2525
with:
2626
enable-cache: true
2727
- name: Install dependencies

‎.github/workflows/pr-test.yml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ jobs:
1414
pr-super-lint:
1515
runs-on: ubuntu-latest
1616
permissions:
17+
pull-requests: write
1718
statuses: write
1819
steps:
1920
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -22,7 +23,7 @@ jobs:
2223
fetch-depth: 0
2324
persist-credentials: false
2425
- name: Set up uv
25-
uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
26+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2627
with:
2728
enable-cache: true
2829
- name: Install uv
@@ -32,15 +33,15 @@ jobs:
3233
DEST_PATH: "/home/runner/work/_temp/_github_workflow/.venv"
3334
run: bash "${GITHUB_WORKSPACE}/scripts/pr_test/pr_super_lint/set_venv_path.sh"
3435
- name: Set up Node.js
35-
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
36+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
3637
with:
3738
cache: npm
3839
node-version-file: package.json
3940
- run: npm install -g "$(yq -r '.packageManager' package.json)"
4041
- name: Install dependencies
4142
run: bash "${GITHUB_WORKSPACE}/scripts/pr_test/pr_super_lint/npm_ci.sh"
4243
- name: Lint files
43-
uses: super-linter/super-linter/slim@12562e48d7059cf666c43a4ecb0d3b5a2b31bd9e # v8.4.0
44+
uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
4445
env:
4546
VALIDATE_ALL_CODEBASE: true
4647
VALIDATE_SQLFLUFF: false

0 commit comments

Comments
 (0)