269 Commits

Author SHA1 Message Date
Igor
3497c83452 Discord announcement: push only when label "Needs review" is set (#7075)
* Discord annoucement: push only when label "Needs review" is set

* Change to label triggering

* actions: Add run-name to `pr-announce` workflow

---------

Co-authored-by: ColorfulRhino <131405023+ColorfulRhino@users.noreply.github.com>
2024-09-13 09:02:20 +08:00
ColorfulRhino
74d115bef5 actions: forked-helper: Run only if secret is set
The workflow ran regardless whether `ARMBIAN_SELF_DISPATCH_TOKEN` was set or not, generating errors if the secret could not be found.

In addition, simplify and beautify the workflow.
2024-09-13 09:02:20 +08:00
Werner
53d6c2f883 attempt to fix pr announce for all contributors (#7081)
The earlier attempt seem to limit announces to repository members for some reason.
This attempt limits to the repo only, therefore forks should not be affected.
Not sure if it works, but there is only one way to find out.
2024-09-13 09:02:20 +08:00
dependabot[bot]
bb8df05866 build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](89ef406dd8...834a144ee9)
2024-09-13 09:02:20 +08:00
Igor
e12cea8ee2 Prevent running announce script in forks (#7073)
* Prevent running announce script in forks
* Add description
* fix typo
---------

Co-authored-by: Werner <EvilOlaf@users.noreply.github.com>
2024-09-13 09:02:20 +08:00
Werner
9d184640a0 fix pr being announce multiple times (#7070)
by limiting action to pr opening.
2024-09-13 09:02:20 +08:00
Werner
ca0f9b6f5c fix link for pr 2024-09-13 09:02:20 +08:00
Werner
44356e28a9 Send summaries of PR and merges to main chat (#7060)
* Create pr-announce.yml

* Rename pr-announce.yml to pr-announce.yml

* Create merge-announce.yml
2024-09-13 08:58:35 +08:00
dependabot[bot]
92c4626b7a build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.4 to 4.3.5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](0b2256b8c0...89ef406dd8)
2024-09-13 08:58:35 +08:00
dependabot[bot]
36e01f2f9a build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.3 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)
2024-08-06 17:13:31 +08:00
ColorfulRhino
e4268f927a actions: Create workflow to update shell tools via auto-PR
Some of our scripts download tools from a repo. These can't be bumped by dependabot, so this workflow is a self-created dependabot to bump versions of those tools to stay up-to-date.
This workflow only creates a PR if the version was actually updated.

Tools currently supported:
- Shellcheck (in 2 different files)
- Shellfmt
- oci-oras
- Bat
2024-08-06 16:51:57 +08:00
ColorfulRhino
369af7dc92 actions: forked-helper: Don't escape multiline strings
Not needed anymore with GITHUB_OUTPUT.
See https://github.com/orgs/community/discussions/26288#discussioncomment-3876281

Instead, use the `toJSON` function that Actions offers to convert the `event` object to JSON.
2024-08-06 16:51:57 +08:00
Igor Pecovnik
e9d67e9a8e actions: Remove deprecated action script command rebase
Not needed as it was integrated by GitHub
2024-08-06 16:51:56 +08:00
ColorfulRhino
f0001417ed actions: Run YAML formatter over all workflow files 2024-08-06 16:51:56 +08:00
ColorfulRhino
c530b437e4 actions: Small naming changes for some steps 2024-08-06 16:51:56 +08:00
ColorfulRhino
3e3e33b236 actions: Introduce run names for all workflows
This should make viewing the Action runs in the web UI more pleasant.
2024-08-06 16:51:56 +08:00
ColorfulRhino
b145481c6a actions: Add names to auto-labeler jobs 2024-08-06 16:51:56 +08:00
ColorfulRhino
aa5042d865 actions: Fix GITHUB_OUTPUT variables 2024-08-06 16:51:56 +08:00
dependabot[bot]
71fd44b656 build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](65462800fd...0b2256b8c0)
2024-08-06 16:51:56 +08:00
ColorfulRhino
46fe1ff927 actions: Rename PR-specific workflows with "pr-" prefix 2024-06-16 11:28:55 +08:00
ColorfulRhino
4a0271081e actions: Combine PR labeling jobs into a single workflow 2024-06-16 11:28:55 +08:00
ColorfulRhino
006452c730 actions: Don't run shellcheck if PR message or title was updated
Also fix typos.
2024-06-16 11:28:55 +08:00
ColorfulRhino
483d26cd50 actions: Don't start build workflow on PR 'reviewer_requested' trigger
The PR build workflow does not need to be started every time a single
reviwer is added, since requesting a review does not change the build.
If the 'Build' label was already added earlier, the build workflow will
have been started already.
2024-06-16 11:28:55 +08:00
ColorfulRhino
dd6a98bd0b actions: Move concurrency canceling to 2nd job for PR build
On every PR, a workflow is started to check if artifacts should be
built. This happens not only once, but many times, e.g. for every
selected reviewer. Since the workflow has `cancel-in-progress`
enabled, workflows are started and immediately cancelled by the
next one, resulting in many notifications.
Move the `cancel-in-progress` concurrency policy to the second job
which starts only after a check is done if the 'Build' label is even
active on the PR. This should greatly reduce "Workflow cancelled"
notifications via GitHub and email (if enabled by the user).

Also make wording more clear.
2024-06-16 11:28:55 +08:00
dependabot[bot]
92270ec6ea build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3)
2024-06-16 11:26:39 +08:00
dependabot[bot]
bd5f7af2ef build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](5d5d22a312...65462800fd)
2024-06-16 11:25:36 +08:00
dependabot[bot]
255e3ae52d build(deps): bump pascalgn/size-label-action from 0.5.0 to 0.5.2
Bumps [pascalgn/size-label-action](https://github.com/pascalgn/size-label-action) from 0.5.0 to 0.5.2.
- [Release notes](https://github.com/pascalgn/size-label-action/releases)
- [Commits](https://github.com/pascalgn/size-label-action/compare/v0.5.0...v0.5.2)
2024-06-16 11:25:36 +08:00
dependabot[bot]
6144d035c0 build(deps): bump tj-actions/changed-files from 43 to 44
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 43 to 44.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v43...v44)
2024-06-16 11:15:34 +08:00
ColorfulRhino
a86b77364a GH Actions: Beautify kernel hardening analysis GitHub job summaries do not support colored output, but the kernel hardening script is using colored output. Thus, the job summary in the Actions panel is littered with ugly characters. This commit replaces them with emojis to enhance visibility. 2024-06-16 11:15:34 +08:00
dependabot[bot]
28ebf12e20 build(deps): bump tj-actions/changed-files from 42 to 43
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 42 to 43.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v42...v43)
2024-06-16 11:14:37 +08:00
ColorfulRhino
eb42154261 GH Actions: Kernel hardening analysis: Exclude RISC-V configs
RISC-V is not yet supported by kernel-hardening-checker. See https://github.com/a13xp0p0v/kernel-hardening-checker/issues/56
2024-06-16 11:14:37 +08:00
ColorfulRhino
32667ed161 GH Actions: Update README.md on how to create and use ARMBIAN_SELF_DISPATCH_TOKEN 2024-06-16 11:01:46 +08:00
ColorfulRhino
215e0c6b21 GH Actions: forked-helper: Fix deprecated ::set-output, fix 404 link
::set-output has been deprecated in 2022: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2024-06-16 11:01:46 +08:00
Igor Pecovnik
a73367a352 GH actions: Kernel hardening analysis path and name of a tool has been changed 2024-06-16 11:01:46 +08:00
dependabot[bot]
fa3c79675a
build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 (#6273)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.0 to 4.3.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](26f96dfa69...5d5d22a312)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-12 20:06:16 +01:00
Igor Pecovnik
940793f908
Enable workflow_dispatch command for labels regenerate 2024-01-30 13:17:39 +01:00
Igor Pecovnik
03299d7843 Labeler workflow fails due to insufficient permissions
https://github.com/crazy-max/ghaction-github-labeler/issues/184
2024-01-30 13:13:28 +01:00
dependabot[bot]
b148000043 build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](694cdabd8b...26f96dfa69)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 19:42:54 +01:00
dependabot[bot]
7a3babc042 build(deps): bump peter-evans/repository-dispatch from 2 to 3
Bumps [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) from 2 to 3.
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases)
- [Commits](https://github.com/peter-evans/repository-dispatch/compare/v2...v3)

---
updated-dependencies:
- dependency-name: peter-evans/repository-dispatch
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-29 19:42:37 +01:00
dependabot[bot]
ff463e9745 build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](1eb3cb2b3e...694cdabd8b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 21:16:12 +01:00
dependabot[bot]
7cef257a55 build(deps): bump tj-actions/changed-files from 41 to 42
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 41 to 42.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v41...v42)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 21:16:03 +01:00
dependabot[bot]
705aff9f98 build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](c7d193f32e...1eb3cb2b3e)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-17 22:44:26 +01:00
dependabot[bot]
1f94d714a9
build(deps): bump tj-actions/changed-files from 40 to 41 (#6089)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 40 to 41.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v40...v41)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-27 11:52:55 +01:00
dependabot[bot]
f782eb9647 build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](a8a3f3ad30...c7d193f32e)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-24 09:15:42 +01:00
dependabot[bot]
656f0128f8 build(deps): bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-24 09:15:34 +01:00
Igor
3611f6ebbe
Fix automatic labeling system due to upstream breaking change (#6011) 2023-12-05 12:10:35 +01:00
dependabot[bot]
bbdec2dd6e build(deps): bump actions/labeler from 4 to 5
Bumps [actions/labeler](https://github.com/actions/labeler) from 4 to 5.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-05 00:04:35 +01:00
Gunjan Gupta
4702c9f772 Fix pr-size-labeler again as its still not working 2023-11-25 20:19:29 +01:00
Gunjan Gupta
931831622e pr-size-labeler: add permissions to fix failure 2023-11-22 22:27:24 +01:00
Igor Pecovnik
ff198109e0 We don't need to restart kernel recompilation upon PR text changes 2023-11-21 20:22:39 +01:00