Skip to content

Fix Docker dependency PR automation #143

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fqjony merged 3 commits into from
Jun 24, 2026
Merged

Fix Docker dependency PR automation #143

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
43bec4c
ci: gate manual releases and dependency PR flow
fqjony Jun 24, 2026
2c9cdab
Fix Docker dependency PR automation
fqjony Jun 24, 2026
6fbe86d
Use major tag for create-pull-request action
fqjony Jun 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 13 additions & 5 deletions .github/workflows/docker-dependency-updater.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,11 @@
REPORT_PATH: docker-dependency-report.json
UPDATE_BRANCH: docker-dependency-updates
PR_TITLE: "chore(deps): docker dependency upgrade"
PR_AUTO_MERGE: "true"
PR_TEAM_REVIEWER: worker
PR_LABELS: |-
docker
dependencies
PR_AUTO_MERGE: "false"
PR_MERGE_METHOD: squash
COMMIT_MESSAGE: "chore(deps): update Docker dependency pins"
COPILOT_PROMPT_PARTS: >-
Expand Down Expand Up @@ -55,7 +59,7 @@

steps:
- name: Checkout repository
uses: actions/checkout@v6
uses: actions/checkout@v7

- name: Load dependency updater defaults
id: config
Expand Down Expand Up @@ -141,11 +145,12 @@

permissions:
contents: write
issues: write
pull-requests: write

steps:
- name: Checkout repository
uses: actions/checkout@v6
uses: actions/checkout@v7
with:
ref: ${{ github.ref }}

Expand Down Expand Up @@ -374,14 +379,17 @@
- name: Create pull request
id: create-pr
if: steps.changes.outputs.changed == 'true'
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1
uses: peter-evans/create-pull-request@v8

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow or composite action Medium

Unpinned 3rd party Action 'udx-automation / dependency upgrade' step
Uses Step: create-pr
Loading
uses 'peter-evans/create-pull-request' with ref 'v8', not a pinned commit hash
Comment thread
fqjony marked this conversation as resolved.
Dismissed
timeout-minutes: 5
with:
token: ${{ secrets.GH_TOKEN }}
commit-message: ${{ needs.config.outputs.commit_message }}
title: ${{ needs.config.outputs.pr_title }}
body-path: docker-dependency-pr-body.md
branch: ${{ needs.config.outputs.update_branch }}
add-paths: ${{ needs.config.outputs.dockerfile }}
labels: ${{ env.PR_LABELS }}
team-reviewers: ${{ env.PR_TEAM_REVIEWER }}
draft: false
delete-branch: true

Expand Down Expand Up @@ -409,7 +417,7 @@
esac

env:
GH_TOKEN: ${{ github.token }}
GH_TOKEN: ${{ secrets.GH_TOKEN }}
MERGE_METHOD: ${{ needs.config.outputs.pr_merge_method }}
PR_URL: ${{ steps.create-pr.outputs.pull-request-url }}

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/docker-ops.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:
contents: read
steps:
- name: Checkout code
uses: actions/checkout@v6
uses: actions/checkout@v7

- name: Build worker image
run: make build IMAGE_NAME=worker-runtime-output TAG="${GITHUB_SHA}"
Expand Down
Loading