colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
616,173 Commits 121 Branches 0 Tags 3.2 GiB
db9627d934
Commit Graph

45 Commits

Author SHA1 Message Date
Jörg Thalheim
d6e4440a98
Merge pull request #305980 from NixOS/dependabot/github_actions/peter-evans/create-pull-request-6.0.4 
build(deps): bump peter-evans/create-pull-request from 6.0.2 to 6.0.4
 2024-04-23 15:52:06 +02:00
dependabot[bot]
8533a6f3f8
build(deps): bump peter-evans/create-pull-request from 6.0.2 to 6.0.4 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.2 to 6.0.4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](70a41aba78...9153d834b6)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-22 11:31:58 +00:00
dependabot[bot]
6bc4e63f5f
build(deps): bump actions/checkout from 4.1.1 to 4.1.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...1d96c772d19495a3b5c517cd2bc0cb401ea0529f)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-22 11:31:52 +00:00
Martin Weinelt
f9cedd883a
Merge pull request #296887 from NixOS/dependabot/github_actions/actions/checkout-4.1.2 
build(deps): bump actions/checkout from 4.1.1 to 4.1.2
 2024-03-18 15:33:51 +01:00
dependabot[bot]
b6ed496a0a
build(deps): bump peter-evans/create-pull-request from 6.0.1 to 6.0.2 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](a4f52f8033...70a41aba78)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-03-18 11:50:35 +00:00
dependabot[bot]
677b0f82c7
build(deps): bump actions/checkout from 4.1.1 to 4.1.2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](b4ffde65f4...9bb56186c3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-03-18 11:50:32 +00:00
dependabot[bot]
1fb53efbbf
build(deps): bump cachix/install-nix-action from 25 to 26 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 25 to 26.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](6004951b18...8887e596b4)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-03-11 11:39:15 +00:00
dependabot[bot]
33386e9f4b
build(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.1 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5.0.2 to 6.0.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](153407881e...a4f52f8033)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-03-04 11:03:26 +00:00
dependabot[bot]
7a6810eb0f
build(deps): bump cachix/install-nix-action from 24 to 25 (#281120) 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 24 to 25.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](7ac1ec2549...6004951b18)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-18 17:08:54 +01:00
zowoq
f63903a90f .github/workflows/update-terraform-providers.yml: use opentofu instead of terraform 
terraform is unfree and can't be built on ofborg
 2023-12-08 12:47:35 +10:00
dependabot[bot]
e3e5f288bf
build(deps): bump cachix/install-nix-action from 23 to 24 (#272011) 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 23 to 24.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](6a9a9e84a1...7ac1ec2549)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-05 01:52:38 +01:00
Victor Engmark
4177297b14 ci: pin third party actions 
For reproducibility.

Command:

```shell
for file in .github/workflows/*.y*ml; do
    npx pin-github-action --comment=' {ref}' "$file"
done
```

Then had to manually replace all the versions with accurate specifiers
(for example, "v4" → "v4.1.1" in case of `actions/checkout`).
 2023-11-29 09:51:22 +01:00
dependabot[bot]
9a70b1e242 build(deps): bump actions/checkout from 3 to 4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-11 13:55:35 +02:00
dependabot[bot]
1d179cbc67
build(deps): bump cachix/install-nix-action from 22 to 23 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 22 to 23.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v22...v23)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-09-05 14:26:48 +00:00
zowoq
76ae447f06 .github/workflows/update-terraform-providers.yml: re-enable workflow_dispatch 2023-09-01 12:35:23 +10:00
zowoq
926db2b144 .github/workflows/update-terraform-providers.yml: disable 2023-09-01 11:16:27 +10:00
dependabot[bot]
a8972d1910
build(deps): bump cachix/install-nix-action from 21 to 22 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 21 to 22.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v21...v22)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-19 12:08:45 +00:00
dependabot[bot]
9db2a09001 build(deps): bump cachix/install-nix-action from 20 to 21 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 20 to 21.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v20...v21)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-30 16:23:52 +10:00
dependabot[bot]
7a9db6efd7 build(deps): bump peter-evans/create-pull-request from 4 to 5 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4 to 5.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-11 07:54:22 +10:00
zowoq
ab69305066 .github/workflows/update-terraform-providers.yml: various 
- removed outdated permissions comment

- add failed updates step

- add failed updates and ofborg rebuild to PR body
 2023-03-25 12:41:02 +10:00
zowoq
9df748f599 Revert "workflows: pin install-nix-action to use nix 2.13.3" 
This reverts commit 3563c178ca.

fixed in cachix/install-nix-action@v20
 2023-03-01 16:17:36 +10:00
zowoq
6a174c65c2 .github/workflows: update cachix/install-nix-action to v20 2023-03-01 16:16:57 +10:00
pennae
3563c178ca workflows: pin install-nix-action to use nix 2.13.3 
same reasoning as #218858, only now for an action we depend on and can't
fix quite as easily. cachix-action also uses nix-env and will thus not
work correctly, so pin the nix version used to the last known good one.
 2023-03-01 07:08:14 +10:00
dependabot[bot]
f1787f39a5 build(deps): bump cachix/install-nix-action from 18 to 19 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 18 to 19.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v18...v19)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-14 08:10:43 +10:00
zowoq
9fde2b66f8 terraform-providers: add github token to update-providers 2023-01-02 13:48:28 +10:00
zowoq
298378f8c3 .github/workflows: replace deprecated set-output 
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
 2022-10-16 07:41:12 +10:00
zowoq
c9ac816a70 .github/workflows/update-terraform-providers.yml: add link to run log 
also move git clean to separate step
 2022-10-14 15:51:46 +10:00
dependabot[bot]
d2e6195f5b build(deps): bump cachix/install-nix-action from 17 to 18 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 17 to 18.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v17...v18)
 2022-10-13 09:15:41 +10:00
zowoq
41173fb24d .github/workflows/update-terraform-providers.yml: set max-workers to 2 
also add git clean so logs aren't committed
 2022-10-08 06:00:07 +10:00
zowoq
98390bef9e .github/workflows/update-terraform-providers.yml: bypass interactive prompt 2022-10-07 19:38:55 +10:00
zowoq
a8d8d9fee5 .github/workflows/update-terraform-providers.yml: re-enable 
- run daily with updateScript, will create a commit for each provider update
- drop wip label and failure comment
 2022-10-04 13:01:16 +10:00
zowoq
d3270d6b32 .github/workflows/update-terraform-providers.yml: add nixpkgs-unstable for nix-shell 
nix_path was removed from the update scripts in 3e63fa279f
 2022-09-21 14:43:03 +10:00
zowoq
5fabd2ba5a .github/workflows/update-terraform-providers.yml: disable scheduled update 
try nixpkgs-update with passthru.updateScript
 2022-09-15 06:00:33 +10:00
zowoq
bbe49339b8 .github/workflows: fix permissions 
the merge actions comment on pull requests, seems this was broken by 2c71278a23

also:
- fix permissions on new manual rendering action
- drop unnecessary issues permission from the terraform action
 2022-09-12 15:34:35 +10:00
zowoq
25b464c8b3
terraform-full: remove (#184649) 
* terraform-full: remove

* .github/workflows/update-terraform-providers.yml: switch to terraform.full
 2022-08-02 19:45:05 +02:00
github-actions[bot]
33be3debd5 terraform-providers: update 2022-07-10 2022-07-10 16:20:44 +10:00
nathannaveen
5deff9583c chore: Set permissions for GitHub actions 
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
 2022-07-04 01:09:50 +00:00
dependabot[bot]
646ed065e5 build(deps): bump peter-evans/create-pull-request from 3 to 4 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4)
 2022-04-29 17:58:49 +10:00
zowoq
c19e9b776d .github/workflows/update-terraform-providers.yml: minor fixes 
- simplify comment
- move `ofborg` command into block for clickable copying
 2022-04-28 08:13:24 +10:00
dependabot[bot]
23e9e781e2 build(deps): bump cachix/install-nix-action from 16 to 17 
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 16 to 17.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v16...v17)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-04-08 17:59:26 +10:00
dependabot[bot]
180dada3ed build(deps): bump peter-evans/create-or-update-comment from 1 to 2 
Bumps [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) from 1 to 2.
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](https://github.com/peter-evans/create-or-update-comment/compare/v1...v2)

---
updated-dependencies:
- dependency-name: peter-evans/create-or-update-comment
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-03-23 08:23:37 +01:00
dependabot[bot]
3f2c2d0afa
build(deps): bump actions/checkout from 2 to 3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
 2022-03-02 05:13:13 +01:00
zowoq
215002fb9f terraform-providers: update scripts 
- add flag to skip building updated providers
- have the github action skip building providers so we don't need to handle build failures in the script
- remove outdated `vendor` flag, all providers use `buildGoModule`
 2022-02-07 12:02:36 +10:00
zowoq
fc7fb0d528 .github/workflows/update-terraform-providers.yml: minor fixes 
- change ofborg command into a comment
- use WIP label instead of draft so codeowner notification works
 2022-01-04 18:18:48 +10:00
zowoq
bcd238a027 .github/workflows/update-terraform-providers.yml: init 
weekly update of terraform providers which can also be run manually
 2022-01-04 11:00:15 +10:00