mirror of
https://github.com/rosenpass/rosenpass.git
synced 2025-12-12 15:49:22 -08:00
This commits changes the CI for dependabot PRs such that initially, only the exemptions for cargo vet are regenerated and pushed to the PR. Only after that, all other workflows are triggered. This ensures that the CI result for dependabot PRs is properly presented on github.
70 lines
2.1 KiB
YAML
70 lines
2.1 KiB
YAML
name: Dependent Issues
|
|
|
|
on:
|
|
issues:
|
|
types:
|
|
- opened
|
|
- edited
|
|
- closed
|
|
- reopened
|
|
pull_request_target:
|
|
types:
|
|
- opened
|
|
- edited
|
|
- closed
|
|
- reopened
|
|
# Makes sure we always add status check for PRs. Useful only if
|
|
# this action is required to pass before merging. Otherwise, it
|
|
# can be removed.
|
|
- synchronize
|
|
workflow_run:
|
|
workflows: [Regenerate cargo-vet exemptions for dependabot-PRs]
|
|
types:
|
|
- completed
|
|
|
|
# Schedule a daily check. Useful if you reference cross-repository
|
|
# issues or pull requests. Otherwise, it can be removed.
|
|
schedule:
|
|
- cron: "0 0 * * *"
|
|
|
|
jobs:
|
|
check:
|
|
# Only run this for dependabot PRs if it's triggered by the workflow to regenerate cargo-vet exemptions
|
|
if: ${{ github.actor != 'dependabot[bot]' || github.event_name == 'workflow_run' }}
|
|
permissions:
|
|
issues: write
|
|
pull-requests: write
|
|
statuses: write
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: z0al/dependent-issues@v1
|
|
env:
|
|
# (Required) The token to use to make API calls to GitHub.
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
# (Optional) The token to use to make API calls to GitHub for remote repos.
|
|
GITHUB_READ_TOKEN: ${{ secrets.GITHUB_READ_TOKEN }}
|
|
|
|
with:
|
|
# (Optional) The label to use to mark dependent issues
|
|
label: dependent
|
|
|
|
# (Optional) Enable checking for dependencies in issues.
|
|
# Enable by setting the value to "on". Default "off"
|
|
check_issues: off
|
|
|
|
# (Optional) Ignore dependabot PRs.
|
|
# Enable by setting the value to "on". Default "off"
|
|
ignore_dependabot: off
|
|
|
|
# (Optional) A comma-separated list of keywords. Default
|
|
# "depends on, blocked by"
|
|
keywords: depends on, blocked by
|
|
|
|
# (Optional) A custom comment body. It supports `{{ dependencies }}` token.
|
|
comment: >
|
|
This PR/issue depends on:
|
|
|
|
{{ dependencies }}
|
|
|
|
By **[Dependent Issues](https://github.com/z0al/dependent-issues)** (🤖). Happy coding!
|