Bump bundler #648
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build a middleman project with bundle | |
| name: Build and Publish | |
| on: | |
| push: | |
| branches: | |
| - master | |
| # Push events to branches matching refs/heads/release-* | |
| - 'release-*' | |
| permissions: | |
| id-token: write | |
| contents: write | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| env: | |
| RUN_EXTERNAL_CHECKS: true | |
| jobs: | |
| complete_build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| - name: Set up Ruby | |
| uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771 # v1.278.0 | |
| with: | |
| bundler-cache: true # would run bundle install | |
| - name: Run the build | |
| run: bundle exec middleman build | |
| push_to_gh_pages: | |
| needs: complete_build | |
| runs-on: ubuntu-latest | |
| env: | |
| GITHUB_PASSWORD: "${{ secrets.GITHUB_TOKEN }}" | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Ruby | |
| uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771 # v1.278.0 | |
| with: | |
| bundler-cache: true # would run bundle install | |
| - name: Set up user in git config | |
| run: | | |
| git config --global user.name "github-actions" | |
| git config --global user.email "[email protected]" | |
| - name: Set up upstream and publish to gh pages | |
| run: | | |
| git remote add upstream 'https://github-actions:${GITHUB_PASSWORD}@github.com/gocd/plugin-api.go.cd' | |
| bundle exec rake publish --trace | |
| env: | |
| REMOTE_NAME: "upstream" | |
| ALLOW_DIRTY: true | |
| sync_to_s3: | |
| needs: push_to_gh_pages | |
| runs-on: ubuntu-latest | |
| env: | |
| S3_BUCKET: "${{ secrets.S3_BUCKET }}" | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Ruby | |
| uses: ruby/setup-ruby@4c24fa5ec04b2e79eb40571b1cee2a0d2b705771 # v1.278.0 | |
| with: | |
| bundler-cache: true # would run bundle install | |
| - name: Configure aws credentials | |
| uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1 | |
| with: | |
| role-to-assume: "${{ secrets.AWS_ROLE_TO_ASSUME }}" | |
| aws-region: "${{ secrets.AWS_REGION }}" | |
| - name: Upload to S3 | |
| run: bundle exec rake upload_to_s3 |