datadog-agent/.github/workflows/update-dependencies.yml at main · DataDog/datadog-agent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
name: Update golang.org/x/... dependencies
on:
  schedule:
    # Run every 10th of the month, as it seems golang.org/x/... packages are usually
    # released at the beginning of the month.
    # Run at 6AM UTC so that it's ready at the beginning of the day CET.
    - cron: "0 6 10 * *"

  # allow triggering the workflow manually
  workflow_dispatch:

permissions: {}

jobs:
  backport:
    name: Update golang.org/x/... dependencies
    runs-on: ubuntu-latest
    permissions:
      id-token: write # This is required for getting the required OIDC token from GitHub
    environment:
      name: main
    steps:
      - uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
        id: octo-sts
        with:
          scope: DataDog/datadog-agent
          policy: self.update-dependencies.create-pr
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          # credentials are needed to create the PR at the end of the workflow
          persist-credentials: true
      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
        with:
          go-version-file: ".go-version"
      - name: Install dda
        uses: ./.github/actions/install-dda
        with:
          features: legacy-tasks
      - name: Set up Bazel cache
        uses: ./.github/actions/bazel-cache
      - name: Update every golang.org/x/... package
        run: |
          go get -u golang.org/x/arch golang.org/x/crypto \
                    golang.org/x/lint golang.org/x/mod \
                    golang.org/x/net golang.org/x/sync \
                    golang.org/x/sys golang.org/x/term \
                    golang.org/x/text golang.org/x/time \
                    golang.org/x/xerrors golang.org/x/tools \
                    golang.org/x/exp golang.org/x/oauth2
          # run tidy twice because the first one doesn't always clean everything
          # depending on module order
          dda inv -- -e tidy
          dda inv -- -e tidy
      - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
        name: Create pull request
        with:
          commit-message: "chore(deps): update all golang.org/x/... dependencies"
          branch: update-golang-org-x-${{ github.run_id }}-${{ github.run_attempt }}
          token: ${{ steps.octo-sts.outputs.token }}
          sign-commits: true
          title: "[automated] Update golang.org/x/... dependencies"
          body: |
            ### What does this PR do?
            Update all \`golang.org/x/...\` dependencies.

            ### Motivation
            Keep dependencies up-to-date, benefit from bug fixes and new features.

            ### Describe how you validated your changes
            CI is considered enough to validate changes.
          team-reviewers: agent-runtimes
          labels: team/agent-runtimes,qa/done,changelog/no-changelog