Skip to content

Commit 048e2f4

Browse files
dependabot[bot]neilime
dependabot[bot]
authored and
neilime
committed
chore(deps): bump the github-actions-dependencies group with 9 updates
Bumps the github-actions-dependencies group with 9 updates: --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-nodejs dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-publish dependency-version: 0.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>
1 parent e33b9c2 commit 048e2f4

File tree

13 files changed

+646
-81
lines changed

13 files changed

+646
-81
lines changed

‎.devcontainer/devcontainer.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,8 @@
22
"name": "Node.js & TypeScript",
33
"image": "mcr.microsoft.com/devcontainers/typescript-node:1-22-bookworm",
44
"features": {
5-
"ghcr.io/devcontainers/features/docker-in-docker:2": {}
5+
"ghcr.io/devcontainers/features/docker-in-docker:2": {},
6+
"ghcr.io/devcontainers/features/node:1": {}
67
},
78
"forwardPorts": [3000],
89
"customizations": {

‎.github/workflows/__shared-ci.yml‎

Lines changed: 33 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,18 +2,24 @@ name: Common Continuous Integration tasks
22

33
on:
44
workflow_call:
5+
outputs:
6+
build-artifact-id:
7+
description: "The artifact ID of the build output"
8+
value: ${{ jobs.nodejs.outputs.build-artifact-id }}
9+
package-tarball-artifact-id:
10+
description: "The artifact ID of the uploaded package tarball"
11+
value: ${{ jobs.package-theme.outputs.package-tarball-artifact-id }}
512

6-
permissions:
7-
actions: read
8-
contents: read
9-
security-events: write
10-
statuses: write
11-
# FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
12-
id-token: write
13+
permissions: {}
1314

1415
jobs:
1516
linter:
16-
uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
17+
uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@5e8d0e6d1e76d8577a070db6d0128a91b1c9d5ad # 0.30.2
18+
permissions:
19+
actions: read
20+
contents: read
21+
security-events: write
22+
statuses: write
1723
with:
1824
linter-env: |
1925
FILTER_REGEX_EXCLUDE=packages/theme/lib/**/*,packages/docs/build/**/*
@@ -23,7 +29,13 @@ jobs:
2329
VALIDATE_CSS=false
2430
2531
nodejs:
26-
uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@23af54bc615d657aa9c13c472ae701445c1811a6 # 0.17.1
32+
uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@e96599d869b66887c4c9dc18dd40b59249ad9cd0 # 0.20.2
33+
permissions:
34+
contents: read
35+
id-token: write
36+
packages: read
37+
pull-requests: write
38+
security-events: write
2739
with:
2840
build: |
2941
{
@@ -34,14 +46,22 @@ jobs:
3446
name: Package and verify Docusaurus theme
3547
needs: [linter, nodejs]
3648
runs-on: ubuntu-latest
49+
outputs:
50+
package-tarball-artifact-id: ${{ steps.upload-package-tarball.outputs.artifact-id }}
51+
permissions:
52+
contents: read
3753
steps:
38-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
54+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
55+
with:
56+
persist-credentials: false
57+
3958
- name: Setup Node.js
40-
uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@23af54bc615d657aa9c13c472ae701445c1811a6 # 0.17.1
59+
uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@e96599d869b66887c4c9dc18dd40b59249ad9cd0 # 0.20.2
60+
4161
- name: Download build artifacts
4262
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
4363
with:
44-
name: build
64+
artifact-ids: ${{ needs.nodejs.outputs.build-artifact-id }}
4565
path: /
4666

4767
- name: Create package tarball
@@ -63,6 +83,7 @@ jobs:
6383
npm run build
6484
6585
- name: Upload package tarball
86+
id: upload-package-tarball
6687
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
6788
with:
6889
name: package-tarball

‎.github/workflows/greetings.yml‎

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,12 @@ on:
66
pull_request_target:
77
branches: [main]
88

9-
permissions:
10-
contents: read
11-
issues: write
12-
pull-requests: write
9+
permissions: {}
1310

1411
jobs:
1512
greetings:
16-
uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
13+
uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@5e8d0e6d1e76d8577a070db6d0128a91b1c9d5ad # 0.30.2
14+
permissions:
15+
contents: read
16+
issues: write
17+
pull-requests: write

‎.github/workflows/main-ci.yml‎

Lines changed: 9 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,7 @@ on:
55
branches: [main]
66
tags: ["*"]
77

8-
permissions:
9-
actions: read
10-
contents: read
11-
id-token: write
12-
pages: write
13-
security-events: write
14-
statuses: write
8+
permissions: {}
159

1610
concurrency:
1711
group: ${{ github.workflow }}-${{ github.ref }}
@@ -24,10 +18,11 @@ jobs:
2418
permissions:
2519
actions: read
2620
contents: read
21+
packages: read
22+
pull-requests: write
23+
id-token: write
2724
security-events: write
2825
statuses: write
29-
# FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
30-
id-token: write
3126

3227
npm-publish:
3328
needs: ci
@@ -37,14 +32,14 @@ jobs:
3732
contents: read
3833
id-token: write
3934
steps:
40-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
35+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
4136
- name: Setup Node.js
42-
uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@23af54bc615d657aa9c13c472ae701445c1811a6 # 0.17.1
37+
uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@e96599d869b66887c4c9dc18dd40b59249ad9cd0 # 0.20.2
4338

4439
- name: Download package tarball
4540
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
4641
with:
47-
name: package-tarball
42+
artifact-ids: ${{ needs.ci.outputs.package-tarball-artifact-id }}
4843
path: .
4944
- name: Publish CLI to npm
5045
run: |
@@ -72,7 +67,7 @@ jobs:
7267
page-url: ${{ steps.deployment.outputs.url }}
7368
steps:
7469
- id: deployment
75-
uses: hoverkraft-tech/ci-github-publish/actions/deploy/github-pages@38963f37ef5be0b6ae84147f542d96d9eb02802b # 0.14.0
70+
uses: hoverkraft-tech/ci-github-publish/actions/deploy/github-pages@667d05650cefbf57afe043737ba5948601d76ec8 # 0.15.1
7671
with:
7772
build-path: packages/docs/build
78-
build-artifact-name: build
73+
build-artifact-id: ${{ needs.ci.outputs.build-artifact-id }}

‎.github/workflows/need-fix-to-issue.yml‎

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,17 +15,14 @@ on:
1515
before it; to go back further, enter an earlier SHA here"
1616
required: false
1717

18-
permissions:
19-
contents: read
20-
issues: write
21-
22-
concurrency:
23-
group: ${{ github.workflow }}-${{ github.ref }}
24-
cancel-in-progress: true
18+
permissions: {}
2519

2620
jobs:
2721
main:
28-
uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
22+
uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@5e8d0e6d1e76d8577a070db6d0128a91b1c9d5ad # 0.30.2
23+
permissions:
24+
contents: read
25+
issues: write
2926
with:
3027
manual-commit-ref: ${{ inputs.manual-commit-ref }}
3128
manual-base-ref: ${{ inputs.manual-base-ref }}

‎.github/workflows/pull-request-ci.yml‎

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -5,13 +5,7 @@ on:
55
pull_request:
66
branches: [main]
77

8-
permissions:
9-
actions: read
10-
contents: read
11-
security-events: write
12-
statuses: write
13-
# FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
14-
id-token: write
8+
permissions: {}
159

1610
concurrency:
1711
group: ${{ github.workflow }}-${{ github.ref }}
@@ -20,4 +14,12 @@ concurrency:
2014
jobs:
2115
ci:
2216
uses: ./.github/workflows/__shared-ci.yml
17+
permissions:
18+
actions: read
19+
contents: read
20+
packages: read
21+
pull-requests: write
22+
id-token: write
23+
security-events: write
24+
statuses: write
2325
secrets: inherit

‎.github/workflows/semantic-pull-request.yml‎

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,10 +7,11 @@ on:
77
- edited
88
- synchronize
99

10-
permissions:
11-
contents: write
12-
pull-requests: write
10+
permissions: {}
1311

1412
jobs:
1513
main:
16-
uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
14+
uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@5e8d0e6d1e76d8577a070db6d0128a91b1c9d5ad # 0.30.2
15+
permissions:
16+
contents: write
17+
pull-requests: write

‎.github/workflows/stale.yml‎

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,11 @@ on:
44
schedule:
55
- cron: "30 1 * * *"
66

7-
permissions:
8-
issues: write
9-
pull-requests: write
7+
permissions: {}
108

119
jobs:
1210
main:
13-
uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
11+
uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@5e8d0e6d1e76d8577a070db6d0128a91b1c9d5ad # 0.30.2
12+
permissions:
13+
issues: write
14+
pull-requests: write

‎Makefile‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ test: ## Run tests
3131
ci: ## Run tests in CI mode
3232
$(MAKE) prepare
3333
$(MAKE) lint-fix
34+
npm audit fix
3435
$(MAKE) build
3536
$(MAKE) test
3637

0 commit comments

Comments
 (0)