mirror of
https://github.com/Swatinem/rust-cache
synced 2026-02-02 17:16:17 +00:00
05706e59aa
Bumps the actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [taiki-e/install-action](https://github.com/taiki-e/install-action), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `actions/setup-node` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](395ad32622...6044e13b5d) Updates `taiki-e/install-action` from 2.63.3 to 2.66.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](d850aa8169...542cebaaed) Updates `dependabot/fetch-metadata` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](08eff52bf6...21025c705c) Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.4.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](e639db9933...135698455d) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.66.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
65 lines
2.7 KiB
YAML
65 lines
2.7 KiB
YAML
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enabling-automerge-on-a-pull-request
|
|
|
|
name: Dependabot Automation
|
|
on: pull_request
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
automerge:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write # for pushing commits
|
|
pull-requests: write # for merging PRs
|
|
if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'Swatinem/rust-cache'
|
|
steps:
|
|
- name: Fetch metadata
|
|
id: metadata
|
|
uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a # v2.5.0
|
|
with:
|
|
github-token: "${{ secrets.GITHUB_TOKEN }}"
|
|
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
|
|
with:
|
|
fetch-depth: 2
|
|
persist-credentials: false
|
|
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
|
|
- name: Check if package-lock.json has been changed
|
|
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
|
|
id: npm
|
|
env:
|
|
PR_URL: ${{github.event.pull_request.html_url}}
|
|
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
|
|
run: |
|
|
if ! git diff --quiet HEAD~1.. -- package-lock.json; then
|
|
echo "changed=true" >> $GITHUB_OUTPUT
|
|
echo "changed=true, checking out $PR_URL to allow amend"
|
|
gh pr checkout "$PR_URL"
|
|
fi
|
|
- name: Setup node if necessary
|
|
if: steps.npm.outputs.changed != ''
|
|
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
|
|
with:
|
|
node-version: 20.x
|
|
cache: npm
|
|
- name: Re-generate and commit dist/ if changed
|
|
id: amend
|
|
if: steps.npm.outputs.changed != ''
|
|
run: |
|
|
npm ci
|
|
npm run prepare
|
|
if ! git diff --quiet dist/*/index.js; then
|
|
echo "dist/ changed, amending last commit"
|
|
export $(git log -1 --pretty=format:'GIT_COMMITTER_NAME=%cn GIT_COMMITTER_EMAIL=%ce GIT_AUTHOR_NAME=%an GIT_AUTHOR_EMAIL=%ae')
|
|
git fetch --unshallow
|
|
echo "Before amend:" && git show --name-only --pretty=
|
|
git commit --amend --no-edit --no-reset-author -- dist/*/index.js
|
|
echo "After amend:" && git show --name-only --pretty=
|
|
git push --force-with-lease origin HEAD
|
|
echo "changed=true" >> $GITHUB_OUTPUT
|
|
fi
|
|
- name: Auto-merge Patch PRs
|
|
if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
|
|
run: gh pr merge --auto --merge "$PR_URL"
|
|
env:
|
|
PR_URL: ${{github.event.pull_request.html_url}}
|
|
GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
|