Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions .github/workflows/autofix.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
name: autofix.ci
concurrency:
group: ${{ github.workflow }}-${{ github.event.number }}-${{ github.event.ref }}
cancel-in-progress: true

on: # yamllint disable-line rule:truthy
# We only do this on PRs to avoid the (admittedly unlikely) scenario that
# we run, green, wait, merge, then the build on `main` could fail because conda
# has updated during the "green" and then the "build on `main`" steps
pull_request:
branches: ["*"]

jobs:
build:
runs-on: ubuntu-latest
name: Rebuild dist
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with:
python-version: "3.12"
- run: npm install
- run: npm i -g @vercel/ncc
- run: ncc build index.js
env:
NODE_OPTIONS: "--openssl-legacy-provider"
- uses: autofix-ci/action@551dded8c6cc8a1054039c8bc0b8b48c51dfc6ef
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would say we should pin the latest 1.3.1 hash as only the readme changed since then.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Their official docs suggest to use this hash, so maybe better to follow that?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think dependabot would pick up hash changes (without tag changes), so I would open a PR for their readme. (At least following the readme change history I didn't get the notion of them indeed suggesting to tag to individual hashes unassociated with any release)

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ahh I didn't look at their readme just https://autofix.ci/ and https://autofix.ci/setup

7 changes: 5 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,10 @@ customization options.

## Contributing

Make sure you have done `npm install` to get all dependencies and used
`ncc build index.js` before committing and opening a PR. On Ubuntu you might
Make any changes needed to `package-lock.json` and `index.js` and open a PR.These changes will automatically be compiled into `dist/index.js` by the
[autofix.ci bot](https://autofix.ci/).

If you want to do the same work locally as the bot, use `npm install` to get
all dependencies and then call `ncc build index.js`. On Ubuntu you might
need to `export NODE_OPTIONS=--openssl-legacy-provider` before the `ncc build`
step.
Loading