Skip to content

Commit b352ce1

Browse files
authored
Merge branch 'develop' into release_v302
2 parents 5036baf + 5806c47 commit b352ce1

29 files changed

Lines changed: 932 additions & 848 deletions

.github/workflows/add-to-task-list.yml

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,8 +12,13 @@ jobs:
1212
runs-on: ubuntu-latest
1313
if: github.event_name == 'issues' || github.repository == github.event.pull_request.head.repo.full_name
1414
steps:
15-
- uses: dev-hato/actions-add-to-projects@v0.0.57
15+
- name: Generate a token
16+
id: generate_token
17+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
1618
with:
17-
github_app_id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
18-
github_app_private_key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
19+
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
20+
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
21+
- uses: dev-hato/actions-add-to-projects@dcafd4eb5253d6ae0f4f29cff0dc46fd29bb5128 # v0.0.60
22+
with:
23+
github-token: ${{steps.generate_token.outputs.token}}
1924
project-url: https://github.com/orgs/dev-hato/projects/1

.github/workflows/codeql-analysis.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,14 +43,14 @@ jobs:
4343
- name: Checkout repository
4444
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4545
- name: Set up Python
46-
uses: actions/setup-python@v5.0.0
46+
uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
4747
if: matrix.language == 'python'
4848
with:
4949
python-version-file: .python-version
5050
cache: pipenv
5151
# Initializes the CodeQL tools for scanning.
5252
- name: Initialize CodeQL
53-
uses: github/codeql-action/init@v3
53+
uses: github/codeql-action/init@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1
5454
with:
5555
languages: ${{ matrix.language }}
5656
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
6262
# For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
6363
# queries: security-extended,security-and-quality
6464

65-
uses: github/codeql-action/autobuild@v3
65+
uses: github/codeql-action/autobuild@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1
6666
# - run: |
6767
# echo "Run, Build Application using script"
6868
# ./location_of_script_within_repo/buildscript.sh
@@ -72,7 +72,7 @@ jobs:
7272

7373
# If the Autobuild fails above, remove it and uncomment the following three lines.
7474
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
75-
uses: github/codeql-action/analyze@v3
75+
uses: github/codeql-action/analyze@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1
7676
with:
7777
category: "/language:${{matrix.language}}"
7878
concurrency:

.github/workflows/deploy-hato-bot.yml

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -32,38 +32,38 @@ jobs:
3232
- name: Set .env
3333
run: cp .env.example .env
3434
- name: Login to GitHub Container Registry
35-
uses: docker/login-action@v3.0.0
35+
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
3636
with:
3737
registry: ghcr.io
3838
username: ${{ github.actor }}
3939
password: ${{ secrets.GITHUB_TOKEN }}
4040
- name: Set up QEMU
41-
uses: docker/setup-qemu-action@v3.0.0
41+
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
4242
- name: Set up Docker Buildx
4343
id: buildx
44-
uses: docker/setup-buildx-action@v3.0.0
44+
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
4545
- run: echo "TAG_NAME=${HEAD_REF//\//-}" >> "$GITHUB_ENV"
4646
env:
4747
HEAD_REF: ${{github.head_ref}}
4848
if: ${{ github.event_name == 'pull_request' }}
4949
- run: echo 'TAG_NAME=${{ github.event.release.tag_name }}' >> "$GITHUB_ENV"
5050
if: ${{ github.event_name == 'release' }}
5151
- name: Build and push (build)
52-
uses: docker/bake-action@v4.1.0
52+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
5353
env:
5454
DOCKER_CONTENT_TRUST: 1
5555
with:
5656
push: true
5757
files: build.docker-compose.yml
5858
- name: Build and push (main)
59-
uses: docker/bake-action@v4.1.0
59+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
6060
env:
6161
DOCKER_CONTENT_TRUST: 1
6262
with:
6363
push: true
6464
files: docker-compose.yml
6565
- name: Build and push (dev)
66-
uses: docker/bake-action@v4.1.0
66+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
6767
env:
6868
DOCKER_CONTENT_TRUST: 1
6969
with:
@@ -72,23 +72,23 @@ jobs:
7272
- run: echo 'TAG_NAME=latest' >> "$GITHUB_ENV"
7373
if: ${{ github.event_name == 'release' }}
7474
- name: Build and push (build) (latest)
75-
uses: docker/bake-action@v4.1.0
75+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
7676
if: ${{ github.event_name == 'release' }}
7777
env:
7878
DOCKER_CONTENT_TRUST: 1
7979
with:
8080
push: true
8181
files: build.docker-compose.yml
8282
- name: Build and push (main) (latest)
83-
uses: docker/bake-action@v4.1.0
83+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
8484
if: ${{ github.event_name == 'release' }}
8585
env:
8686
DOCKER_CONTENT_TRUST: 1
8787
with:
8888
push: true
8989
files: docker-compose.yml
9090
- name: Build and push (dev) (latest)
91-
uses: docker/bake-action@v4.1.0
91+
uses: docker/bake-action@849707117b03d39aba7924c50a10376a69e88d7d # v4.1.0
9292
if: ${{ github.event_name == 'release' }}
9393
env:
9494
DOCKER_CONTENT_TRUST: 1
@@ -122,7 +122,7 @@ jobs:
122122
run: bash "${GITHUB_WORKSPACE}/scripts/deploy_hato_bot/update_version_python_version/get_python_version.sh"
123123
env:
124124
HEAD_REF: ${{github.head_ref || github.event.release.tag_name}}
125-
- uses: dev-hato/actions-diff-pr-management@v1.1.9
125+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
126126
with:
127127
github-token: ${{secrets.GITHUB_TOKEN}}
128128
branch-name-prefix: fix-version-python-version
@@ -135,7 +135,7 @@ jobs:
135135
with:
136136
fetch-depth: 0
137137
ref: ${{ github.event.pull_request.head.sha }}
138-
- uses: dev-hato/actions-update-dockle@v0.0.76
138+
- uses: dev-hato/actions-update-dockle@c92b0e505cc4ed6dc1b4c2c6851193d02ce5fcba # v0.0.81
139139
with:
140140
github-token: ${{secrets.GITHUB_TOKEN}}
141141
dockle:

.github/workflows/format-json-yml.yml

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,21 @@ jobs:
1818
format-json-yml:
1919
runs-on: ubuntu-latest
2020
steps:
21+
- name: Generate a token
22+
id: generate_token
23+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
24+
with:
25+
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
26+
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
2127
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
2228
if: github.event_name != 'pull_request' || github.event.action != 'closed'
2329
with:
2430
fetch-depth: 0
2531
ref: ${{ github.event.pull_request.head.sha }}
26-
token: ${{secrets.CREATE_WORKFLOW_CI_TOKEN}}
27-
- uses: dev-hato/actions-format-json-yml@v0.0.56
32+
token: ${{steps.generate_token.outputs.token}}
33+
- uses: dev-hato/actions-format-json-yml@8bc54d29568af8a0ef93d36db8fc559a8f76fd73 # v0.0.61
2834
with:
29-
github-token: ${{secrets.GITHUB_TOKEN}}
35+
github-token: ${{steps.generate_token.outputs.token}}
3036
concurrency:
3137
group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
3238
cancel-in-progress: true

.github/workflows/github-actions-cache-cleaner.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
16-
- uses: dev-hato/github-actions-cache-cleaner@v0.0.35
16+
- uses: dev-hato/github-actions-cache-cleaner@8631f246ce2cc3142a954ada28c9c6671d4655ca # v0.0.37
1717
with:
1818
github-token: ${{secrets.GITHUB_TOKEN}}
1919
concurrency:

.github/workflows/pr-check-npm.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,15 +26,15 @@ jobs:
2626
with:
2727
fetch-depth: 0
2828
ref: ${{ github.event.pull_request.head.sha }}
29-
- uses: actions/setup-node@v4.0.1
29+
- uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
3030
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3131
with:
3232
cache: npm
3333
- name: Get npm version
3434
id: get_npm_version
3535
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3636
run: bash "${GITHUB_WORKSPACE}/scripts/pr_check_npm/pr_update_version/get_npm_version.sh"
37-
- uses: dev-hato/actions-diff-pr-management@v1.1.9
37+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
3838
with:
3939
github-token: ${{secrets.GITHUB_TOKEN}}
4040
branch-name-prefix: fix-version
@@ -52,14 +52,14 @@ jobs:
5252
fetch-depth: 0
5353
ref: ${{ github.event.pull_request.head.sha }}
5454
- name: Set up Node.js
55-
uses: actions/setup-node@v4.0.1
55+
uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
5656
if: github.event_name != 'pull_request' || github.event.action != 'closed'
5757
with:
5858
cache: npm
5959
- name: Install dependencies
6060
if: github.event_name != 'pull_request' || github.event.action != 'closed'
6161
run: bash "${GITHUB_WORKSPACE}/scripts/pr_check_npm/npm_install.sh"
62-
- uses: dev-hato/actions-diff-pr-management@v1.1.9
62+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
6363
with:
6464
github-token: ${{secrets.GITHUB_TOKEN}}
6565
branch-name-prefix: npm

.github/workflows/pr-copy-ci-hato-bot.yml

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,17 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
13-
- uses: actions/github-script@v7.0.1
13+
- name: Generate a token
14+
id: generate_token
15+
uses: actions/create-github-app-token@f4c6bf6752984b3a29fcc135a5e70eb792c40c6b # v1.8.0
1416
with:
15-
github-token: ${{secrets.SUDDEN_DEATH_CI_TOKEN}}
17+
app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
18+
private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
19+
owner: ${{ github.repository_owner }}
20+
repositories: "sudden-death"
21+
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
22+
with:
23+
github-token: ${{steps.generate_token.outputs.token}}
1624
script: |
1725
const script = require(`${process.env.GITHUB_WORKSPACE}/scripts/pr_copy_ci_hato_bot/pr_copy_ci/dispatch_event.js`)
1826
await script({ github, context })

.github/workflows/pr-format.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
fetch-depth: 0
2828
ref: ${{ github.event.pull_request.head.sha }}
2929
- name: Set up Python
30-
uses: actions/setup-python@v5.0.0
30+
uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
3131
id: setup_python
3232
if: github.event_name != 'pull_request' || github.event.action != 'closed'
3333
with:
@@ -48,7 +48,7 @@ jobs:
4848
id: format
4949
if: github.event_name != 'pull_request' || github.event.action != 'closed'
5050
run: bash "${GITHUB_WORKSPACE}/scripts/pr_format/pr_format/format.sh"
51-
- uses: dev-hato/actions-diff-pr-management@v1.1.9
51+
- uses: dev-hato/actions-diff-pr-management@128afc4203b4e391e03868be91c987b2ddba7ea5 # v1.1.12
5252
if: success() || failure()
5353
with:
5454
github-token: ${{secrets.GITHUB_TOKEN}}

.github/workflows/pr-merge-develop-hato-bot.yml

Lines changed: 2 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -13,28 +13,17 @@ jobs:
1313
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
1414
with:
1515
fetch-depth: 0
16-
- name: Set org name
17-
uses: actions/github-script@v7.0.1
18-
id: set_org_name
19-
with:
20-
github-token: ${{secrets.GITHUB_TOKEN}}
21-
result-encoding: string
22-
script: return process.env.GITHUB_REPOSITORY.split('/')[0]
2316
- name: Get PullRequests
24-
uses: actions/github-script@v7.0.1
17+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2518
id: get_pull_requests
26-
env:
27-
ORG_NAME: ${{steps.set_org_name.outputs.result}}
2819
with:
2920
github-token: ${{secrets.GITHUB_TOKEN}}
3021
script: |
3122
const script = require(`${process.env.GITHUB_WORKSPACE}/scripts/get_pull_requests_hato_bot.js`)
3223
return await script({github, context})
3324
- name: Create PullRequest
34-
uses: actions/github-script@v7.0.1
25+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
3526
if: ${{ steps.get_pull_requests.outputs.result == 0 }}
36-
env:
37-
ORG_NAME: ${{steps.set_org_name.outputs.result}}
3827
with:
3928
github-token: ${{secrets.GITHUB_TOKEN}}
4029
script: |

.github/workflows/pr-release-hato-bot.yml

Lines changed: 2 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -15,29 +15,18 @@ jobs:
1515
- name: Get diff
1616
id: get_diff
1717
run: bash "${GITHUB_WORKSPACE}/scripts/pr_release_hato_bot/pr_release/get_diff.sh"
18-
- name: Set org name
19-
uses: actions/github-script@v7.0.1
20-
id: set_org_name
21-
with:
22-
github-token: ${{secrets.GITHUB_TOKEN}}
23-
result-encoding: string
24-
script: return process.env.GITHUB_REPOSITORY.split('/')[0]
2518
- name: Get PullRequests
26-
uses: actions/github-script@v7.0.1
19+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2720
if: ${{ steps.get_diff.outputs.result != '' }}
2821
id: get_pull_requests
29-
env:
30-
ORG_NAME: ${{steps.set_org_name.outputs.result}}
3122
with:
3223
github-token: ${{secrets.GITHUB_TOKEN}}
3324
script: |
3425
const script = require(`${process.env.GITHUB_WORKSPACE}/scripts/get_pull_requests_hato_bot.js`)
3526
return await script({github, context})
3627
- name: Create PullRequest
37-
uses: actions/github-script@v7.0.1
28+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
3829
if: ${{ steps.get_diff.outputs.result != '' && steps.get_pull_requests.outputs.result == 0 }}
39-
env:
40-
ORG_NAME: ${{steps.set_org_name.outputs.result}}
4130
with:
4231
github-token: ${{secrets.GITHUB_TOKEN}}
4332
script: |

0 commit comments

Comments
 (0)