Skip to content

Automatically update Dependabot pull requests #3064

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mrtenz merged 7 commits into from
Feb 5, 2025
Merged

Automatically update Dependabot pull requests #3064

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
637820e
Automatically update Dependabot pull requests
Mrtenz Feb 5, 2025
06b5ec3
Call workflow from main workflow
Mrtenz Feb 5, 2025
2eeada3
Remove pull request trigger
Mrtenz Feb 5, 2025
5787d19
Forward secrets
Mrtenz Feb 5, 2025
4674c17
Add check-workflows as need
Mrtenz Feb 5, 2025
c6a515a
Remove GITHUB_TOKEN secret
Mrtenz Feb 5, 2025
1057c83
Remove GITHUB_TOKEN secret from workflow_call secrets as well
Mrtenz Feb 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,16 @@ jobs:
run: ${{ steps.download-actionlint.outputs.executable }} -color
shell: bash

update-pull-request:
name: Update pull request
needs: check-workflows
if: ${{ github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]' }}
uses: ./.github/workflows/update-pull-request.yml
with:
dependabot: true
secrets:
PULL_REQUEST_UPDATE_TOKEN: ${{ secrets.PULL_REQUEST_UPDATE_TOKEN }}

lint-build-test:
name: Build, lint, and test
needs: check-workflows
Expand Down
26 changes: 20 additions & 6 deletions .github/workflows/update-pull-request.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,15 @@ on:
issue_comment:
types:
- created
workflow_call:
secrets:
PULL_REQUEST_UPDATE_TOKEN:
Copy link
Member

@FrederikBolding FrederikBolding Feb 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where is this used?

Copy link
Member Author

@Mrtenz Mrtenz Feb 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mainly as token for actions/checkout@v4:

snaps/.github/workflows/update-pull-request.yml

Lines 196 to 198 in 1057c83

# Use PAT to ensure that the commit later can trigger status check
# workflows.
token: ${{ secrets.PULL_REQUEST_UPDATE_TOKEN }}

required: true
inputs:
dependabot:
type: boolean
required: false
default: false

jobs:
is-fork-pull-request:
Expand All @@ -24,9 +33,10 @@ jobs:
react-to-comment:
name: React to the comment
runs-on: ubuntu-latest
needs: is-fork-pull-request
needs:
- is-fork-pull-request
# Early exit if this is a fork, since later steps are skipped for forks.
if: ${{ needs.is-fork-pull-request.outputs.IS_FORK == 'false' }}
if: ${{ needs.is-fork-pull-request.outputs.IS_FORK == 'false' && inputs.dependabot == false }}
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand All @@ -46,7 +56,8 @@ jobs:
prepare:
name: Prepare dependencies
runs-on: ubuntu-latest
needs: is-fork-pull-request
needs:
- is-fork-pull-request
# Early exit if this is a fork, since later steps are skipped for forks.
if: ${{ needs.is-fork-pull-request.outputs.IS_FORK == 'false' }}
outputs:
Expand Down Expand Up @@ -203,10 +214,13 @@ jobs:
path: yarn.lock
key: cache-yarn-lock-${{ needs.prepare.outputs.COMMIT_SHA }}
fail-on-cache-miss: true
- name: Set commit prefix
if: ${{ inputs.dependabot == true }}
run: echo "COMMIT_PREFIX='[dependabot skip] '" >> "$GITHUB_ENV"
- name: Commit yarn.lock
run: |
git add yarn.lock
git commit -m "Deduplicate yarn.lock" || true
git commit -m "${COMMIT_PREFIX}Deduplicate yarn.lock" || true
- name: Restore LavaMoat policies
uses: actions/cache/restore@v4
with:
Expand All @@ -216,7 +230,7 @@ jobs:
- name: Commit LavaMoat policies
run: |
git add packages/snaps-execution-environments/lavamoat
git commit -m "Update LavaMoat policies" || true
git commit -m "${COMMIT_PREFIX}Update LavaMoat policies" || true
- name: Restore examples
uses: actions/cache/restore@v4
with:
Expand All @@ -226,6 +240,6 @@ jobs:
- name: Commit examples
run: |
git add packages/examples/packages
git commit -m "Update example snaps" || true
git commit -m "${COMMIT_PREFIX}Update example snaps" || true
- name: Push changes
run: git push
Loading