chore(deps): update slackapi/slack-github-action action to v3.0.4 (ma… #100739
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - next | |
| - maint/** | |
| pull_request: | |
| types: | |
| - opened | |
| - synchronize | |
| - reopened | |
| - ready_for_review | |
| merge_group: | |
| workflow_dispatch: | |
| inputs: | |
| dryRun: | |
| description: 'Dry-Run' | |
| default: 'true' | |
| required: false | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.number || github.ref }} | |
| cancel-in-progress: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }} | |
| env: | |
| # are we on a release branch? | |
| DO_RELEASE: ${{ github.ref_name == github.event.repository.default_branch || github.ref_name == 'next' || startsWith(github.ref_name, 'maint/')}} | |
| NODE_VERSION: 24 | |
| DRY_RUN: true | |
| TEST_LEGACY_DECRYPTION: true | |
| SPARSE_CHECKOUT: |- | |
| .github/actions/ | |
| data/ | |
| patches/ | |
| tools/ | |
| package.json | |
| pnpm-workspace.yaml | |
| pnpm-lock.yaml | |
| jobs: | |
| setup: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| os-matrix: ${{ steps.os-matrix.outputs.os-matrix }} | |
| os-matrix-is-full: ${{ steps.os-matrix-is-full.outputs.os-matrix-is-full }} | |
| os-matrix-prefetch: ${{ steps.os-matrix-prefetch.outputs.matrix }} | |
| test-shard-matrix: ${{ steps.schedule-test-shards.outputs.test-shard-matrix }} | |
| test-matrix-empty: ${{ steps.schedule-test-shards.outputs.test-matrix-empty }} | |
| steps: | |
| - name: Calculate `os-matrix-is-full` output | |
| id: os-matrix-is-full | |
| env: | |
| IS_FULL: >- | |
| ${{ | |
| ( | |
| github.event_name != 'pull_request' || | |
| contains(github.event.pull_request.labels.*.name, 'ci:fulltest') | |
| ) && 'true' || '' | |
| }} | |
| run: | | |
| echo 'OS_MATRIX_IS_FULL=${{ env.IS_FULL }}' >> "$GITHUB_ENV" | |
| echo 'os-matrix-is-full=${{ env.IS_FULL }}' >> "$GITHUB_OUTPUT" | |
| - name: Calculate `os-matrix` output | |
| id: os-matrix | |
| env: | |
| OS_ALL: '["ubuntu-latest", "macos-latest", "windows-latest"]' | |
| OS_LINUX_ONLY: '["ubuntu-latest"]' | |
| run: | | |
| echo 'os-matrix=${{ | |
| env.OS_MATRIX_IS_FULL && env.OS_ALL || env.OS_LINUX_ONLY | |
| }}' >> "$GITHUB_OUTPUT" | |
| - name: Detect changed files | |
| if: ${{ github.event_name == 'pull_request' }} | |
| id: changed-files | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| GH_REPO: ${{ github.event.repository.full_name }} | |
| PR_URL: >- | |
| https://api.github.com/repos/{owner}/{repo}/compare/${{ | |
| github.event.pull_request.base.sha | |
| }}...${{ | |
| github.event.pull_request.head.sha | |
| }} | |
| JQ_FILTER: >- | |
| "changed-files=" + ([.files[].filename] | tostring) | |
| run: gh api ${{ env.PR_URL }} | jq -rc '${{ env.JQ_FILTER }}' >> "$GITHUB_OUTPUT" | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| filter: blob:none # we don't need all blobs | |
| sparse-checkout: ${{ env.SPARSE_CHECKOUT }} | |
| show-progress: false | |
| - name: Calculate matrix for `node_modules` prefetch | |
| uses: ./.github/actions/calculate-prefetch-matrix | |
| id: os-matrix-prefetch | |
| with: | |
| repo: ${{ github.event.repository.full_name }} | |
| token: ${{ github.token }} | |
| node-version: ${{ env.NODE_VERSION }} | |
| - name: Prefetch test modules for `ubuntu-latest` | |
| id: setup-node | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| os: ${{ runner.os }} | |
| save-cache: true | |
| - name: Schedule test shards | |
| id: schedule-test-shards | |
| env: | |
| ALL_PLATFORMS: ${{ env.OS_MATRIX_IS_FULL }} | |
| FILTER_SHARDS: ${{ github.event.pull_request.draft && 'true' || '' }} | |
| CHANGED_FILES: ${{ steps.changed-files.outputs.changed-files }} | |
| run: | | |
| pnpm -s schedule-test-shards >> "$GITHUB_OUTPUT" | |
| setup-build: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| node-version: ${{ steps.setup-outputs.outputs.node-version }} | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| filter: blob:none # we don't need all blobs | |
| sparse-checkout: ${{ env.SPARSE_CHECKOUT }} | |
| show-progress: false | |
| - name: Setup outputs | |
| id: setup-outputs | |
| run: | | |
| echo "node-version=${{ env.NODE_VERSION }}" >> "$GITHUB_OUTPUT" | |
| - name: Prefetch build modules for `ubuntu-latest` | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| os: ${{ runner.os }} | |
| save-cache: true | |
| prefetch: | |
| needs: [setup] | |
| # We can't check `needs.setup.outputs.os-matrix-is-full` here, | |
| # as it will lead to further complications that aren't solvable | |
| # with current GitHub Actions feature set. | |
| # | |
| # Although this job sometimes may act as short-lived `no-op`, | |
| # it's actually the best option available. | |
| # | |
| # However, in draft mode we can skip this step. | |
| if: | | |
| !(github.event.pull_request.draft == true && | |
| needs.setup.outputs.test-matrix-empty == 'true') | |
| strategy: | |
| matrix: | |
| os: ${{ fromJSON(needs.setup.outputs.os-matrix-prefetch) }} | |
| runs-on: ${{ matrix.os }} | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Checkout code | |
| if: needs.setup.outputs.os-matrix-is-full && runner.os != 'Linux' | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| filter: blob:none # we don't need all blobs | |
| sparse-checkout: ${{ env.SPARSE_CHECKOUT }} | |
| show-progress: false | |
| - name: Setup Node.js | |
| if: needs.setup.outputs.os-matrix-is-full && runner.os != 'Linux' | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| os: ${{ runner.os }} | |
| save-cache: true | |
| lint-oxlint: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Lint with oxlint | |
| run: pnpm oxlint -f github | |
| - name: Lint with biome | |
| run: pnpm biome-ci | |
| lint-prettier: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 7 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Restore prettier cache | |
| uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 | |
| with: | |
| path: .cache/prettier | |
| # we need to add the hash because prettier cache doesn't detect plugin changes | |
| key: prettier-cache-${{ hashFiles('pnpm-lock.yaml', 'package.json') }} | |
| restore-keys: prettier-cache-${{ hashFiles('pnpm-lock.yaml', 'package.json') }}- | |
| - name: Lint | |
| run: | | |
| pnpm prettier-fix --cache-location .cache/prettier | |
| git diff --quiet || { | |
| echo "[ERROR] Please apply the changes prettier suggests:" | |
| git diff --color=always | |
| exit 1 | |
| } | |
| - name: Save prettier cache | |
| if: github.event_name == 'push' | |
| uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 | |
| with: | |
| path: .cache/prettier | |
| key: prettier-cache-${{ hashFiles('pnpm-lock.yaml', 'package.json') }}-${{ github.run_id }}-${{ github.run_attempt }} | |
| lint-docs: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 7 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Lint markdown | |
| run: pnpm markdown-lint | |
| - name: Generate JSON schema | |
| run: pnpm create-json-schema | |
| - name: Lint fenced code blocks | |
| run: pnpm doc-fence-check | |
| - name: Lint documentation | |
| run: pnpm lint-documentation | |
| - name: Markdown lint | |
| run: pnpm markdown-lint | |
| lint-other: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 7 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Restore tsbuildinfo cache | |
| uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 | |
| with: | |
| path: .cache/tsbuildinfo | |
| key: tsbuildinfo-${{ hashFiles('pnpm-lock.yaml') }} | |
| restore-keys: tsbuildinfo-${{ hashFiles('pnpm-lock.yaml') }}- | |
| - name: Type check | |
| run: pnpm type-check | |
| - name: Save tsbuildinfo cache | |
| if: github.event_name == 'push' | |
| uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 | |
| with: | |
| path: .cache/tsbuildinfo | |
| key: tsbuildinfo-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.run_attempt }} | |
| - name: Lint project file structure | |
| run: pnpm ls-lint | |
| - name: Check git version | |
| run: pnpm git-check | |
| - name: Test schema | |
| run: pnpm test-schema | |
| - name: Lint other | |
| run: pnpm lint-other | |
| lint-actions: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 7 | |
| permissions: | |
| security-events: write | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| sparse-checkout: .github/workflows | |
| - name: Check workflow files | |
| uses: docker://rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667 | |
| with: | |
| args: -color -ignore "invalid activity type \"destroyed\" for \"merge_group\" Webhook event. available types are \"checks_requested\"" | |
| - name: Run zizmor | |
| uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 | |
| with: | |
| version: 1.26.1 | |
| test: | |
| needs: [setup, prefetch] | |
| if: | | |
| !(github.event.pull_request.draft == true && | |
| needs.setup.outputs.test-matrix-empty == 'true') | |
| name: ${{ matrix.name }} | |
| runs-on: ${{ matrix.os }} | |
| timeout-minutes: ${{ matrix.runner-timeout-minutes }} | |
| permissions: | |
| id-token: write # required for codecov OIDC | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: ${{ fromJSON(needs.setup.outputs.test-shard-matrix) }} | |
| steps: | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| os: ${{ runner.os }} | |
| - name: Cache vitest | |
| uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 | |
| with: | |
| path: .cache/vitest | |
| key: | | |
| vitest-cache-${{ | |
| runner.os | |
| }}-${{ | |
| env.NODE_VERSION | |
| }}-${{ | |
| hashFiles('pnpm-lock.yaml') | |
| }}-${{ | |
| matrix.cache-key | |
| }} | |
| - name: Unit tests | |
| shell: bash | |
| run: | | |
| for shard in ${{ matrix.shards }}; | |
| do | |
| TEST_SHARD="$shard" pnpm vitest \ | |
| --test-timeout ${{ matrix.test-timeout-milliseconds }} \ | |
| --coverage ${{ matrix.coverage }} | |
| done | |
| - name: Codecov Test | |
| if: github.event_name != 'merge_group' && !cancelled() | |
| uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6.0.2 | |
| with: | |
| use_oidc: true | |
| report_type: test_results | |
| directory: ./coverage/shard | |
| # TODO: compute proper flags per job | |
| # flags: ${{ matrix.name }} | |
| verbose: true | |
| - name: Move coverage files | |
| if: success() && github.event.pull_request.draft != true && matrix.coverage | |
| run: | | |
| mkdir -p ./coverage/lcov | |
| mkdir -p ./coverage/json | |
| for shard in ${{ matrix.shards }}; | |
| do | |
| mv ./coverage/shard/$shard/lcov.info ./coverage/lcov/$shard.lcov | |
| mv ./coverage/shard/$shard/coverage-final.json ./coverage/json/$shard.json | |
| done | |
| - name: Save coverage artifacts | |
| if: success() && github.event.pull_request.draft != true && matrix.coverage | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: ${{ matrix.upload-artifact-name }} | |
| path: | | |
| ./coverage/lcov | |
| ./coverage/json | |
| codecov: | |
| needs: [test] | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 3 | |
| if: success() && github.event_name != 'merge_group' && github.event.pull_request.draft != true | |
| permissions: | |
| id-token: write # required for codecov OIDC | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| filter: blob:none # we don't need all blobs | |
| show-progress: false | |
| - name: Download coverage reports | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| pattern: coverage-* | |
| path: coverage | |
| merge-multiple: true | |
| - name: Codecov Coverage | |
| if: github.event_name != 'merge_group' | |
| uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6.0.2 | |
| with: | |
| use_oidc: true | |
| directory: coverage/lcov | |
| fail_ci_if_error: github.event_name != 'pull_request' | |
| verbose: true | |
| coverage-threshold: | |
| needs: | |
| - test | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 3 | |
| if: success() && github.event.pull_request.draft != true | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| filter: blob:none # we don't need all blobs | |
| sparse-checkout: ${{ env.SPARSE_CHECKOUT }} | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Download coverage reports | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| pattern: coverage-* | |
| path: coverage | |
| merge-multiple: true | |
| - name: Merge coverage reports | |
| run: pnpm nyc merge ./coverage/json ./coverage/nyc/coverage.json | |
| - name: Report coverage | |
| run: pnpm nyc report -t ./coverage/nyc --skip-full -r text -r text-summary | |
| - name: Check coverage threshold | |
| run: | | |
| pnpm nyc check-coverage -t ./coverage/nyc \ | |
| --statements 99.88 \ | |
| --branches 97.84 \ | |
| --functions 99.96 \ | |
| --lines 99.87 \ | |
| # Catch-all required check for test matrix and coverage | |
| test-success: | |
| needs: | |
| - setup | |
| - test | |
| - codecov | |
| - coverage-threshold | |
| - lint-actions | |
| - build-docker | |
| - build-docs | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 1 | |
| if: always() | |
| steps: | |
| - name: Fail for failed or cancelled tests | |
| if: | | |
| needs.test.result == 'failure' || | |
| needs.test.result == 'cancelled' | |
| run: exit 1 | |
| - name: Fail for skipped tests when PR is ready for review | |
| if: | | |
| github.event_name == 'pull_request' && | |
| github.event.pull_request.draft != true && | |
| needs.test.result == 'skipped' | |
| run: exit 1 | |
| - name: Fail for failed or cancelled codecov | |
| if: | | |
| needs.codecov.result == 'failure' || | |
| needs.codecov.result == 'cancelled' | |
| run: exit 1 | |
| - name: Fail for skipped codecov when PR is ready for review | |
| if: | | |
| github.event_name == 'pull_request' && | |
| github.event.pull_request.draft != true && | |
| needs.codecov.result == 'skipped' | |
| run: exit 1 | |
| - name: Fail for failed or cancelled coverage-threshold | |
| if: | | |
| needs.coverage-threshold.result == 'failure' || | |
| needs.coverage-threshold.result == 'cancelled' | |
| run: exit 1 | |
| - name: Fail for skipped coverage-threshold when PR is ready for review | |
| if: | | |
| github.event_name == 'pull_request' && | |
| github.event.pull_request.draft != true && | |
| needs.coverage-threshold.result == 'skipped' | |
| run: exit 1 | |
| - name: Fail for failed or cancelled Actions linting | |
| if: | | |
| needs.lint-actions.result == 'failure' || | |
| needs.lint-actions.result == 'cancelled' | |
| run: exit 1 | |
| - name: Fail for skipped Actions linting when PR is ready for review | |
| if: | | |
| github.event_name == 'pull_request' && | |
| github.event.pull_request.draft != true && | |
| needs.lint-actions.result == 'skipped' | |
| run: exit 1 | |
| - name: Fail for failed or cancelled docs build | |
| if: | | |
| needs.build-docs.result == 'failure' || | |
| needs.build-docs.result == 'cancelled' | |
| run: exit 1 | |
| - name: Fail for skipped docs build when PR is ready for review | |
| if: | | |
| github.event_name == 'pull_request' && | |
| github.event.pull_request.draft != true && | |
| needs.build-docs.result == 'skipped' | |
| run: exit 1 | |
| - name: Fail for skipped or failed docker build when needed | |
| if: | | |
| ( | |
| github.event_name != 'pull_request' || | |
| (github.event.pull_request.draft != true && contains(github.event.pull_request.labels.*.name, 'ci:fulltest')) | |
| ) && | |
| (needs.build-docker.result == 'skipped' || needs.build-docker.result == 'failure') | |
| run: exit 1 | |
| build: | |
| needs: | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| if: github.event.pull_request.draft != true | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Build | |
| run: pnpm build | |
| - name: Upload dist | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: renovate-dist | |
| path: dist/ | |
| build-docker: | |
| needs: | |
| - setup-build # we need the outputs | |
| - build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 15 | |
| if: github.event_name != 'pull_request' || (github.event.pull_request.draft != true && contains(github.event.pull_request.labels.*.name, 'ci:fulltest')) | |
| steps: | |
| - run: df -h | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Docker | |
| uses: ./.github/actions/setup-docker | |
| - name: Download dist | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: renovate-dist | |
| path: dist/ | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Build docker | |
| run: pnpm build:docker build --platform linux/amd64,linux/arm64 --tries=3 --args '--load' | |
| env: | |
| LOG_LEVEL: debug | |
| - name: Test docker | |
| run: docker run -e LOG_LEVEL=debug --rm renovate/renovate --version | |
| - name: dry-run | |
| if: github.event_name == 'merge_group' || github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && env.DO_RELEASE != 'true') | |
| run: docker run -e LOG_LEVEL=debug -e RENOVATE_TOKEN --rm renovate/renovate --dry-run=lookup ${{ github.repository }} | |
| env: | |
| RENOVATE_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - run: df -h | |
| build-docs: | |
| needs: | |
| - lint-docs | |
| - setup-build | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| if: github.event.pull_request.draft != true | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Setup uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| version: 0.11.28 | |
| enable-cache: true | |
| cache-python: true | |
| - name: Install uv dependencies | |
| run: uv sync --locked | |
| - name: Build | |
| run: pnpm build:docs | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| SKIP_GITHUB_ISSUES: ${{ (github.event_name == 'pull_request' || github.event_name == 'merge_group' || github.event.repository.has_issues == false) && 'true' || '' }} | |
| - name: Test docs | |
| run: pnpm test:docs | |
| - name: Upload | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: docs | |
| path: tmp/docs/ | |
| - name: Build mkdocs | |
| run: pnpm mkdocs build --no-build | |
| test-e2e: | |
| needs: | |
| - setup-build | |
| - build | |
| runs-on: 'ubuntu-latest' | |
| timeout-minutes: 7 | |
| if: github.event.pull_request.draft != true | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| show-progress: false | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Download dist | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: renovate-dist | |
| path: dist/ | |
| - name: Pack | |
| run: pnpm test-e2e:pack | |
| - name: Install dependencies | |
| run: pnpm test-e2e:install | |
| - name: E2E Test | |
| run: pnpm test-e2e:run | |
| release: | |
| needs: | |
| - setup-build | |
| - build-docker | |
| - lint-oxlint | |
| - lint-prettier | |
| - lint-docs | |
| - lint-other | |
| - test-e2e | |
| - test-success | |
| - build-docs | |
| - codecov | |
| - coverage-threshold | |
| if: github.repository == 'renovatebot/renovate' && github.event_name != 'pull_request' | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| concurrency: | |
| group: ${{ github.workflow }}-release-${{ github.ref }} | |
| # never cancel a release that has already started, as it may have started pushing artifacts | |
| cancel-in-progress: false | |
| permissions: | |
| actions: write | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| id-token: write | |
| packages: write | |
| steps: | |
| # right at the start of the job, make sure we're not seeing another commit that's landed | |
| - name: Check for newer commits | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| GH_REPO: renovatebot/renovate | |
| REF_NAME: ${{ github.ref_name }} | |
| EXPECTED_SHA: ${{ github.sha }} | |
| RUN_ID: ${{ github.run_id }} | |
| run: | | |
| latest_sha=$(git ls-remote https://github.com/renovatebot/renovate "refs/heads/$REF_NAME" | cut -f1) | |
| if [[ "$latest_sha" != "$EXPECTED_SHA" ]]; then | |
| echo "Newer commit detected on $REF_NAME ($latest_sha), cancelling release run" | |
| gh run cancel "$RUN_ID" | |
| sleep 5 | |
| fi | |
| - run: df -h | |
| - name: check for old vm with low disk space | |
| id: check | |
| run: | | |
| if [[ -e /dev/sdb1 ]]; then | |
| echo "::warning::We're on old vm, running cleanup" | |
| echo "do-cleanup=true" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "::notice::We're on new vm, no cleanup required" | |
| echo "do-cleanup=false" >> "$GITHUB_OUTPUT" | |
| fi | |
| # Some runner vm's are smaller than others for unknown reasons | |
| # https://github.com/orgs/community/discussions/199328 | |
| # To avoid disk space issues when performing a release, we can clear up some disk space ahead of time | |
| - name: Free Disk Space | |
| if: ${{ steps.check.outputs.do-cleanup == 'true' }} | |
| uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 | |
| with: | |
| # we're likely already using some of the globally installed tools | |
| tool-cache: false | |
| # there are no images by default | |
| docker-images: false | |
| # but we're definitely not using these | |
| android: true | |
| dotnet: true | |
| haskell: true | |
| # there is no swap storage anymore | |
| swap-storage: false | |
| large-packages: true # breaks docker cross platform support | |
| - run: df -h | |
| if: ${{ steps.check.outputs.do-cleanup == 'true' }} | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| fetch-depth: 0 # zero stands for full checkout, which is required for semantic-release | |
| filter: blob:none # we don't need all blobs, only the full tree | |
| show-progress: false | |
| - name: Setup Docker | |
| uses: ./.github/actions/setup-docker | |
| - name: Setup Node.js | |
| uses: ./.github/actions/setup-node | |
| with: | |
| node-version: ${{ needs.setup-build.outputs.node-version }} | |
| os: ${{ runner.os }} | |
| - name: Install newer npm if needed | |
| run: 'dpkg --compare-versions "$(npm -v)" lt 11.5.1 && (npm update -g npm; echo "updated npm to: $(npm -v)") || echo "npm is new enough: $(npm -v)"' | |
| - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 | |
| - name: Docker registry login | |
| run: | | |
| echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin | |
| echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.repository_owner }} --password-stdin | |
| - name: Setup uv | |
| uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 | |
| with: | |
| version: 0.11.28 | |
| enable-cache: true | |
| cache-python: true | |
| - name: Install uv dependencies | |
| run: uv sync --locked | |
| - name: Check dry run | |
| run: | | |
| if [[ "${{github.event_name}}" == "workflow_dispatch" && "${{ github.event.inputs.dryRun }}" != "true" ]]; then | |
| echo "DRY_RUN=false" >> "$GITHUB_ENV" | |
| elif [[ "${{env.DO_RELEASE}}" == "true" ]]; then | |
| echo "DRY_RUN=false" >> "$GITHUB_ENV" | |
| fi | |
| # and one final check, in case preparing the environment has taken long enough for new commits | |
| - name: Check for newer commits | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| REF_NAME: ${{ github.ref_name }} | |
| EXPECTED_SHA: ${{ github.sha }} | |
| RUN_ID: ${{ github.run_id }} | |
| run: | | |
| latest_sha=$(git ls-remote https://github.com/renovatebot/renovate "refs/heads/$REF_NAME" | cut -f1) | |
| if [[ "$latest_sha" != "$EXPECTED_SHA" ]]; then | |
| echo "Newer commit detected on $REF_NAME ($latest_sha), cancelling release run" | |
| gh run cancel "$RUN_ID" | |
| sleep 5 | |
| fi | |
| - name: semantic-release | |
| run: | | |
| pnpm semantic-release --dry-run ${{env.DRY_RUN}} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| LOG_LEVEL: debug | |
| - name: Build mkdocs site for deployment | |
| if: github.ref_name == 'main' | |
| run: | | |
| # Always rebuild the docs site with the announcement bar for deployment to GitHub Pages, including the announcement bar (which isn't included when preparing a release's docs) | |
| latest_tag=$(gh release view --json tagName -q .tagName) | |
| pnpm mkdocs build --version "$latest_tag" | |
| mkdir -p tmp | |
| tar -czf tmp/mkdocs-site.tgz -C tools/mkdocs/site . | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| MKDOCS_INCLUDE_ANNOUNCEMENT: 'true' | |
| - name: Upload docs artifact for deployment | |
| if: github.ref_name == 'main' | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: mkdocs-site | |
| path: tmp/mkdocs-site.tgz | |
| retention-days: 1 | |
| - run: df -h | |
| if: ${{ !cancelled() }} | |
| deploy-docs-site: | |
| if: ${{ github.repository == 'renovatebot/renovate' && github.ref_name == 'main' && github.event_name == 'push' }} | |
| needs: | |
| - setup-build | |
| - release | |
| permissions: | |
| pages: write | |
| id-token: write | |
| environment: | |
| name: github-pages | |
| url: ${{ steps.deployment.outputs.page_url }} | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Download mkdocs site from release | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: mkdocs-site | |
| path: tmp | |
| - name: Extract docs site | |
| run: | | |
| mkdir -p tools/mkdocs/site | |
| tar -xzf tmp/mkdocs-site.tgz -C tools/mkdocs/site | |
| # Per https://github.com/renovatebot/helm-charts/issues/3752, when we migrated the docs site from renovatebot/renovatebot.github.io to renovatebot/renovate, the `/helm-charts/` repository would no longer work as a subdomain, due to a known GitHub Pages limitation | |
| - name: Mirror helm-charts/index.yaml from helm-charts' GitHub Pages site | |
| run: | | |
| mkdir tools/mkdocs/site/helm-charts | |
| curl --retry 5 --silent https://renovatebot.github.io/helm-charts/index.yaml -o tools/mkdocs/site/helm-charts/index.yaml | |
| - name: Upload GitHub Pages artifact | |
| uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 | |
| with: | |
| path: tools/mkdocs/site | |
| - name: Deploy to GitHub Pages | |
| id: deployment | |
| uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 | |
| notify-release-failure: | |
| runs-on: ubuntu-latest | |
| if: ${{ always() && (github.repository == 'renovatebot/renovate' && github.ref_name == 'main' && github.event_name == 'push') && (needs.release.result == 'failure' || needs.release.result == 'timed_out') }} | |
| needs: | |
| - release | |
| steps: | |
| - name: Post to Slack | |
| id: slack | |
| uses: slackapi/slack-github-action@fc46ded2fc4d7f11bfa62864526f920cf1a1167d # v3.0.4 | |
| with: | |
| webhook: ${{ secrets.RENOVATEBOT_SLACK_WEBHOOK_MAIN_FAILURES }} | |
| webhook-type: incoming-webhook | |
| payload: | | |
| text: "*Release from `main` failed*:\nAction Run: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}\nCommit: ${{ github.event.head_commit.url }}" | |
| blocks: | |
| - type: "section" | |
| text: | |
| type: "mrkdwn" | |
| text: "*Release from `main` failed*:\nAction Run: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}\nCommit: ${{ github.event.head_commit.url }}" | |
| notify-docs-failure: | |
| runs-on: ubuntu-latest | |
| if: ${{ always() && (github.repository == 'renovatebot/renovate' && github.ref_name == 'main' && github.event_name == 'push') && (needs.deploy-docs-site.result == 'failure' || needs.deploy-docs-site.result == 'timed_out') }} | |
| needs: | |
| - deploy-docs-site | |
| steps: | |
| - name: Post to Slack | |
| id: slack | |
| uses: slackapi/slack-github-action@fc46ded2fc4d7f11bfa62864526f920cf1a1167d # v3.0.4 | |
| with: | |
| webhook: ${{ secrets.RENOVATEBOT_SLACK_WEBHOOK_MAIN_FAILURES }} | |
| webhook-type: incoming-webhook | |
| payload: | | |
| text: "*Docs build from `main` failed*:\nAction Run: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}\nCommit: ${{ github.event.head_commit.url }}" | |
| blocks: | |
| - type: "section" | |
| text: | |
| type: "mrkdwn" | |
| text: "*Docs build from `main` failed*:\nAction Run: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}\nCommit: ${{ github.event.head_commit.url }}" |