chore: Separate federation tests to separate package (#543) #97
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release-plz | |
| permissions: {} | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| release-plz-release: | |
| name: Release-plz release | |
| environment: release | |
| runs-on: ubuntu-latest | |
| if: github.repository_owner == 'openstack-experimental' | |
| permissions: | |
| contents: read | |
| id-token: write # Required for trusted publishing | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Install Rust toolchain | |
| run: rustup update stable | |
| # Generating a GitHub token, so that PRs and tags created by | |
| # the release-plz-action can trigger actions workflows. | |
| - name: Generate GitHub token | |
| uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 | |
| id: generate-token | |
| with: | |
| app-id: ${{ secrets.RELEASE_PLZ_APP_ID }} # <-- GitHub App ID secret name | |
| private-key: ${{ secrets.RELEASE_PLZ_PRIVATE_KEY }} # <-- GitHub App private key secret name | |
| # pull-requests permission is not needed for the `release` command, so restricting it to contents only | |
| permission-contents: write | |
| - name: Run release-plz | |
| uses: release-plz/action@d529f731ae3e89610ada96eda34e5c6ba3b12214 # v0.5.118 | |
| with: | |
| command: release | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }} | |
| release-plz-pr: | |
| name: Release-plz PR | |
| runs-on: ubuntu-latest | |
| if: ${{ github.repository_owner == 'openstack-experimental' }} | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: release-plz-${{ github.ref }} | |
| cancel-in-progress: false | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - name: Checkout repository | |
| uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - name: Install Rust toolchain | |
| run: rustup update stable | |
| # Generating a GitHub token, so that PRs and tags created by | |
| # the release-plz-action can trigger actions workflows. | |
| - name: Generate GitHub token | |
| uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 | |
| id: generate-token | |
| with: | |
| app-id: ${{ secrets.RELEASE_PLZ_APP_ID }} | |
| private-key: ${{ secrets.RELEASE_PLZ_PRIVATE_KEY }} | |
| permission-contents: write | |
| permission-pull-requests: write | |
| - name: Run release-plz | |
| uses: release-plz/action@d529f731ae3e89610ada96eda34e5c6ba3b12214 # v0.5.118 | |
| with: | |
| command: release-pr | |
| env: | |
| GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }} |