-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge remote-tracking branch 'origin/develop' into develop
- Loading branch information
Showing
7 changed files
with
1,591 additions
and
578 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,79 @@ | ||
| # Compares the version in package.json to tags on the repo. If the tag doesn't exist, a new tag is created, which | ||
| # then triggers the normal "on tag" release automation in the build job | ||
| name: Auto Tag RC | ||
|
|
||
| on: | ||
| push: | ||
| branches: | ||
| - develop | ||
|
|
||
| concurrency: | ||
| group: rc-release-check | ||
|
|
||
| jobs: | ||
| release-dev: | ||
| name: Release rc version | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout current branch | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| # Need REPO_COMMIT token so when the tag is created, the tag automation runs | ||
| token: ${{ secrets.REPO_COMMIT }} | ||
| fetch-depth: 0 | ||
|
|
||
| - name: Setup commit signing for ChiaAutomation | ||
| uses: Chia-Network/actions/commit-sign/gpg@main | ||
| with: | ||
| gpg_private_key: ${{ secrets.CHIA_AUTOMATION_PRIVATE_GPG_KEY }} | ||
| passphrase: ${{ secrets.CHIA_AUTOMATION_PRIVATE_GPG_PASSPHRASE }} | ||
|
|
||
| - name: Check for current version tag. Create if it doesn't exist | ||
| env: | ||
| GH_TOKEN: ${{ github.token }} | ||
| run: | | ||
| stable_version=$(gh release list --limit 1 --order desc --exclude-pre-releases --json tagName --jq ".[].tagName") | ||
| echo "Latest release is $stable_version" | ||
| rc_version=$(gh release list --json tagName --jq ".[] | select(.tagName | test(\"${version}-rc*\")) | .tagName") | ||
| echo "Latest release candidate is $rc_version" | ||
| if [[ -z ${rc_version} ]]; then | ||
| # Extract the major, minor, and patch versions | ||
| IFS='.' read -r major minor patch <<< "$stable_version" | ||
| # Increment the patch version | ||
| new_patch=$((patch + 1)) | ||
| # Construct the new version string | ||
| version="$major.$minor.$new_patch-rc1" | ||
| echo "New version: $version" | ||
| else | ||
| # Extract the major, minor, patch, and rc parts | ||
| IFS='.-' read -r major minor patch rc <<< "$rc_version" | ||
| # Extract just the number of the rc | ||
| rc_number="${rc#rc}" | ||
| # Increment the rc number | ||
| rc_number=$((rc_number +1)) | ||
| # Construct the new version string | ||
| version="$major.$minor.$patch-rc$rc_number" | ||
| echo "New version: $version" | ||
| fi | ||
| if [ $(git tag -l "$version") ]; then | ||
| echo "$version tag exists, deleting..." | ||
| git tag -d $version | ||
| git push --delete origin $version | ||
| fi | ||
| echo "Tag does not exist. Creating and pushing tag" | ||
| rm -f CHANGELOG.md | ||
| npx conventional-changelog-cli -p angular -i CHANGELOG.md -s -r 0 | ||
| changes=$(npx conventional-changelog-cli -r 1 | tail -n +2) | ||
| git tag $version -m "Release $version $changes" | ||
| git push origin $version |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| name: 🚨 Check commit signing | ||
|
|
||
| on: | ||
| push: | ||
| branches: | ||
| - long_lived/** | ||
| - main | ||
| - release/** | ||
| pull_request: | ||
| branches: | ||
| - "**" | ||
|
|
||
| concurrency: | ||
| group: ${{ github.event_name == 'pull_request' && format('{0}-{1}', github.workflow_ref, github.event.pull_request.number) || github.run_id }} | ||
| cancel-in-progress: true | ||
|
|
||
| jobs: | ||
| check-commit-signing: | ||
| name: Check commit signing | ||
| runs-on: [ubuntu-latest] | ||
| timeout-minutes: 5 | ||
|
|
||
| steps: | ||
| - name: Checkout Code | ||
| uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: 0 | ||
|
|
||
| - uses: chia-network/actions/check-commit-signing@main |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| # Managed by repo-content-updater | ||
| # Dependency Review Action | ||
| # | ||
| # This Action will scan dependency manifest files that change as part of a Pull Request, surfacing known-vulnerable versions of the packages declared or updated in the PR. Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable packages will be blocked from merging. | ||
| # | ||
| # Source repository: https://github.com/actions/dependency-review-action | ||
| # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement | ||
| name: "🚨 Dependency Review" | ||
| on: [pull_request] | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| dependency-review: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: "Checkout Repository" | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: "Dependency Review" | ||
| uses: actions/dependency-review-action@v4 | ||
| with: | ||
| allow-dependencies-licenses: pkg:pypi/pyinstaller | ||
| deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-1.0-or-later, AGPL-3.0-or-later, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later |
Oops, something went wrong.