dependabot[bot]
e8bad6615d
build(deps): bump actions/github-script from 6.4.1 to 7.0.1
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 6.4.1 to 7.0.1.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](d7906e4ad0...60a0d83039
)
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-01 14:47:23 +00:00
dependabot[bot]
1ce2075fde
build(deps): bump actions/labeler from 4.2.0 to 4.3.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](0967ca812e...ac9175f8a1
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-08-01 14:18:15 +00:00
dependabot[bot]
6cc0fd0044
build(deps): bump actions/labeler from 4.0.4 to 4.2.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.0.4 to 4.2.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](0776a67936...0967ca812e
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-01 10:37:11 +00:00
dependabot[bot]
c9401e6c6d
build(deps): bump actions/labeler from 4.0.3 to 4.0.4
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](ba790c862c...0776a67936
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 12:21:34 +02:00
dependabot[bot]
882235d581
build(deps): bump actions/github-script from 6.4.0 to 6.4.1
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 6.4.0 to 6.4.1.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](98814c53be...d7906e4ad0
)
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-05-11 09:30:48 +02:00
dependabot[bot]
ca8444d471
build(deps): bump actions/labeler from 4.0.2 to 4.0.3
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](5c7539237e...ba790c862c
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-04-01 18:07:58 +02:00
dependabot[bot]
17d4646ed8
build(deps): bump actions/labeler from 4.0.1 to 4.0.2
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](e54e5b338f...5c7539237e
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-01 13:14:53 +00:00
Jan Macku
96893d0937
ci(labeler): fix missing emoji in dont-merge
label
2023-02-11 20:23:46 +09:00
Jan Macku
f8b7d483f5
ci(labeler): fix missing emoji in quick-review
label
2023-02-11 20:23:46 +09:00
Jan Macku
9779079b53
ci: Add names to steps in labeler workflow
...
This makes it easier to see what step failed/was skipped in the GitHub
Actions UI. It also makes future debugging easier.
2023-02-08 22:37:10 +09:00
Jan Macku
de95bb2a98
ci: remove if: github.event.issue.pull_request
from labeler.yml
...
`github.event.issue.pull_request` is an object, not a boolean.
This is the root cause of why the step that is supposed to remove labels
is always skipped. Having this condition in place is not necessary since
the workflow is run on the `pull_request_target` event.
2023-02-07 16:00:49 +01:00
Jan Macku
d709b92ef1
ci: fix missing quotes in labeler.yml
2023-02-07 15:39:37 +01:00
dependabot[bot]
b8565f93e9
build(deps): bump actions/github-script from 6.3.3 to 6.4.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 6.3.3 to 6.4.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](d556feaca3...98814c53be
)
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-02-01 09:15:44 +00:00
Daan De Meyer
da2a4f6a2e
ci: Fix PR labeling
...
Make sure we only add labels to open pull request and remove labels
from closed pull requests.
2023-01-12 11:42:16 +01:00
Daan De Meyer
81315baa68
ci: Remove a bunch of labels when a PR is merged
2023-01-10 14:52:53 +01:00
Daan De Meyer
52c602d4c6
ci: Labeler improvements
...
- Mention "/please-review" in the contributing guide
- Remove "needs-rebase" on push
- Don't add "please-review" if a green label is set
- Don't add please-review label to draft PRs
- Add please-review when a PR moves out of draft
2022-12-09 15:37:43 +01:00
Daan De Meyer
8fc78e6845
ci: Add/Drop labels on pull request activity and comment
...
When a pull request is opened/updated, add "please-review" and
remove a few other labels.
When a comment is made with /please-review on a PR. Add the
"please-review" label to the PR.
2022-12-09 04:50:13 +09:00
dependabot[bot]
e316ab5747
build(deps): bump actions/labeler from 4.0.0 to 4.0.1
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](9fd24f1f9d...e54e5b338f
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-10-01 13:04:34 +02:00
Luca Boccassi
df16869660
shellcheck/labeler: disable on systemd-security
2022-09-01 00:53:46 +09:00
dependabot[bot]
b6ab9d7ade
build(deps): bump actions/labeler from 3.1.0 to 4
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 3.1.0 to 4.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](3d612d72e6...9fd24f1f9d
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-04-01 21:41:06 +00:00
dependabot[bot]
8b94bcbd04
build(deps): bump actions/labeler from 3.0.2 to 3.1.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 3.0.2 to 3.1.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](69da01b8e0...3d612d72e6
)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-02 11:56:24 +00:00
Evgeny Vereshchagin
510afa460a
ci: tighten codeql and labeler even more
...
by moving the read permissions to the top level and
granting additional permissions to the specific jobs.
It should help to prevent new jobs that could be added
there eventually from having write access to resources they
most likely would never need.
2021-11-14 10:51:07 +00:00
Evgeny Vereshchagin
311956ccd9
ci: tighten several GHActions a bit more
...
with https://docs.github.com/en/actions/learn-github-actions/workflow-syntax-for-github-actions#permissions
2021-11-13 22:17:21 +03:00
Evgeny Vereshchagin
5570313421
ci: pin labeler
...
Turns out GHActions where `pull_request_target` is used are capable
of pwning repositories: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
labeler doesn't check out the source code or build anything so
it's safe in its current form but to avoid surprises let's just pin
it to the latest version. It's annoying to manage dependencies like this
manually so additionally dependabot.yml is introduced to make it
easier to keep GHActions up to date more or less automatically:
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/keeping-your-actions-up-to-date-with-dependabot
2021-11-11 10:19:06 +00:00
Zbigniew Jędrzejewski-Szmek
186b9041ae
ci: use LGPLv2+ for all our ci configuration
2021-10-01 14:45:00 +02:00
Zbigniew Jędrzejewski-Szmek
43d6fcc09f
github: use the same headers on yaml files
...
Also adjust the mention of location of mkosi files,
follow-up for d55ad7fe96eb1edf438a7a41a465723bd29d4b10.
2021-10-01 14:45:00 +02:00
Jameer Pathan
63f48ab3fa
GH Actions: Fix labeler bot
2021-02-19 14:51:59 +09:00
Jameer Pathan
292420ce4b
Add Pull Request Labeler
2020-12-14 09:43:38 +09:00