diff --git a/.github/workflows/pr-automerge-dependabot.yml b/.github/workflows/pr-automerge-dependabot.yml index 8fbbf23..b21035b 100644 --- a/.github/workflows/pr-automerge-dependabot.yml +++ b/.github/workflows/pr-automerge-dependabot.yml @@ -22,6 +22,6 @@ jobs: permissions: contents: write # enablePullRequestAutoMerge requires it. pull-requests: write # Arm or disarm auto-merge on the PR. - uses: melodic-software/ci-workflows/.github/workflows/pr-automerge-dependabot.yml@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/workflows/pr-automerge-dependabot.yml@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: runner: ubuntu-24.04 diff --git a/.github/workflows/pr-require-checks.yml b/.github/workflows/pr-require-checks.yml index a09bbc0..61ab581 100644 --- a/.github/workflows/pr-require-checks.yml +++ b/.github/workflows/pr-require-checks.yml @@ -88,7 +88,7 @@ jobs: with: persist-credentials: false - name: Lint Markdown - uses: melodic-software/ci-workflows/.github/actions/markdownlint@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/markdownlint@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .markdownlint-cli2.jsonc @@ -103,7 +103,7 @@ jobs: with: persist-credentials: false - name: Lint shell - uses: melodic-software/ci-workflows/.github/actions/shellcheck@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/shellcheck@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: rcfile: .shellcheckrc @@ -118,7 +118,7 @@ jobs: with: persist-credentials: false - name: Check shell formatting - uses: melodic-software/ci-workflows/.github/actions/shfmt@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/shfmt@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 typos: name: Spelling @@ -131,7 +131,7 @@ jobs: with: persist-credentials: false - name: Check spelling - uses: melodic-software/ci-workflows/.github/actions/typos@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/typos@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: _typos.toml @@ -146,7 +146,7 @@ jobs: with: persist-credentials: false - name: Check EditorConfig conformance - uses: melodic-software/ci-workflows/.github/actions/editorconfig-checker@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/editorconfig-checker@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .editorconfig-checker.json @@ -162,7 +162,7 @@ jobs: fetch-depth: 0 persist-credentials: false - name: Scan for secrets - uses: melodic-software/ci-workflows/.github/actions/gitleaks@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/gitleaks@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .gitleaks.toml @@ -177,7 +177,7 @@ jobs: with: persist-credentials: false - name: Check local links and anchors - uses: melodic-software/ci-workflows/.github/actions/lychee-offline@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/lychee-offline@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: lychee.toml @@ -192,7 +192,7 @@ jobs: with: persist-credentials: false - name: Scan comment hygiene - uses: melodic-software/ci-workflows/.github/actions/check-comment-markers@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-comment-markers@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 actionlint: name: Actionlint @@ -205,7 +205,7 @@ jobs: with: persist-credentials: false - name: Lint workflows - uses: melodic-software/ci-workflows/.github/actions/actionlint@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/actionlint@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 jsonschema: name: JSON schemas @@ -218,12 +218,12 @@ jobs: with: persist-credentials: false - name: Validate Dependabot configuration - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.dependabot files: .github/dependabot.yml - name: Validate workflows - uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: builtin-schema: vendor.github-workflows files: .github/workflows/*.yml @@ -239,7 +239,7 @@ jobs: with: persist-credentials: false - name: Check executable bits - uses: melodic-software/ci-workflows/.github/actions/check-exec-bit@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-exec-bit@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 check-machine-paths: name: Machine-specific paths @@ -252,7 +252,7 @@ jobs: with: persist-credentials: false - name: Check machine-specific paths - uses: melodic-software/ci-workflows/.github/actions/check-machine-paths@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-machine-paths@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: # These files assert the official image's fixed in-container runner # home. They contain no host/user path; keep the exception exact. @@ -275,7 +275,7 @@ jobs: with: persist-credentials: false - name: Check index-level EOL drift - uses: melodic-software/ci-workflows/.github/actions/check-line-endings@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/check-line-endings@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 pr-audit-workflows: name: Zizmor @@ -287,7 +287,7 @@ jobs: # workflows cannot elevate. Lane stays annotations-only # (upload-sarif defaults false); grant write so the job can start. security-events: write # Mandatory match for the reusable's own grant; see above. - uses: melodic-software/ci-workflows/.github/workflows/pr-audit-workflows.yml@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/workflows/pr-audit-workflows.yml@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: paths: . @@ -321,7 +321,7 @@ jobs: if: ${{ !(github.event.pull_request.head.repo.full_name == github.repository && (contains(fromJSON('["labeled","unlabeled"]'), github.event.action) || (github.event.action == 'edited' && !github.event.changes.base))) }} permissions: contents: read - uses: melodic-software/ci-workflows/.github/workflows/pr-run-checks-go.yml@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/workflows/pr-run-checks-go.yml@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: config: .golangci.yml @@ -500,7 +500,7 @@ jobs: statuses: write # Records and reads back the `ci-lanes` commit status. steps: - name: Check the pull-request contract - uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/check-contract@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/check-contract@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: token: ${{ github.token }} # Dependabot and the standards sync open pull requests that close no @@ -516,7 +516,7 @@ jobs: # aggregation: the job still fails on the contract step's exit code, and # the `ci-lanes` status is on the SHA for the next contract-only run. if: ${{ !cancelled() }} - uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/aggregate-results@cf316d12b4a14fbdb96a339b7ad00ce935a8cad4 # v0.38.2 + uses: melodic-software/ci-workflows/.github/actions/pr-require-checks/aggregate-results@6ba73b97b058602c4dd2bb6e2cce234d11011787 # v0.39.0 with: results: >- ${{ needs.markdownlint.result }} diff --git a/release/dependencies.json b/release/dependencies.json index 89b79c5..4f7161f 100644 --- a/release/dependencies.json +++ b/release/dependencies.json @@ -127,8 +127,8 @@ "repositoryPins": [ { "repository": "melodic-software/ci-workflows", - "commit": "cf316d12b4a14fbdb96a339b7ad00ce935a8cad4", - "source": "https://github.com/melodic-software/ci-workflows/tree/cf316d12b4a14fbdb96a339b7ad00ce935a8cad4" + "commit": "6ba73b97b058602c4dd2bb6e2cce234d11011787", + "source": "https://github.com/melodic-software/ci-workflows/tree/6ba73b97b058602c4dd2bb6e2cce234d11011787" } ], "reusableWorkflows": []