-
Notifications
You must be signed in to change notification settings - Fork 394
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
#10531 - Use non-deprecated Github Actions #10532
Changes from all commits
8a71f66
28b37de
76bac72
0325b33
ea23028
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
version: 2 | ||
updates: | ||
|
||
- package-ecosystem: "github-actions" | ||
directory: "/" | ||
schedule: | ||
# Check for updates to GitHub Actions every week | ||
interval: "weekly" | ||
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -21,7 +21,7 @@ jobs: | |
runs-on: ubuntu-latest | ||
steps: | ||
# check out the repo to get the script downloaded | ||
- uses: actions/checkout@v3 | ||
- uses: actions/checkout@v4 | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is good, of course. Any preference to using the full SHA instead of a tag? Is that safer/preferred? There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Github official actions are safe to pin to a major tag. |
||
# gets the current PR and stores it in a variable | ||
- uses: jwalton/gh-find-current-pr@v1 | ||
id: findPr | ||
|
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -20,9 +20,9 @@ jobs: | |
- 'src/EnergyPlus' | ||
- 'tst/EnergyPlus/unit' | ||
steps: | ||
- uses: actions/checkout@v3 | ||
- uses: actions/checkout@v4 | ||
- name: Run clang-format style check for C/C++ programs. | ||
uses: jidicula/clang-format-action@v4.10.1 | ||
uses: jidicula/clang-format-action@v4.13.0 | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. One of two deps that aren't github official that I bumped There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Sounds good. Same question about using the full SHA for resilience/safety? Probably not important, just asking. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. This is a "community" maintained action, so pinning to a minor/patch isn't a bad idea. |
||
with: | ||
clang-format-version: '10' | ||
check-path: ${{ matrix.path }} |
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -9,7 +9,7 @@ jobs: | |
runs-on: ubuntu-latest | ||
steps: | ||
- name: Verify PR label action | ||
uses: mheap/github-action-required-labels@v3 | ||
uses: mheap/github-action-required-labels@v5 | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Other of two deps that aren't github official that I bumped |
||
with: | ||
mode: minimum | ||
count: 1 | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This might need tweaking to be less annoying (filtering on semver:major only maybe), we'll see. I'll do it as needed.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Filtering to semver:major does seem pretty reasonable. But also...maybe weekly isn't too bad regardless. Is there a dependabot or whatever that can open PRs automatically to take the weekly pain down a bit?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this will open PRs yes. https://docs.github.com/en/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates#about-dependabot-pull-requests