mirror of
https://github.com/carbon-language/carbon-lang.git
synced 2026-11-10 12:28:25 +00:00
dependabot[bot]
4e4b35e6e7
- `actions/cache` 5.0.3 -> 6.1.0 (major) - `actions/checkout` 6.0.2 -> 7.0.1 (major) - `actions/configure-pages` 5.0.0 -> 6.0.0 (major) - `actions/deploy-pages` 4.0.5 -> 5.0.1 (major) - `actions/stale` 9.0.0 -> 11.0.0 (major) - `actions/upload-pages-artifact` 4.0.0 -> 5.0.0 (major) - `astral-sh/setup-uv` 8.1.0 -> 10.3.3 (major) - `dorny/paths-filter` 3.0.2 -> 4.0.3 (major) - `jlumbroso/free-disk-space` 1.3.1 -> 2.0.0 (major) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
57 lines
1.8 KiB
YAML
57 lines
1.8 KiB
YAML
# Part of the Carbon Language project, under the Apache License v2.0 with LLVM
|
|
# Exceptions. See /LICENSE for license information.
|
|
# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
|
|
name: 'Check Dependent PRs'
|
|
on:
|
|
pull_request_target:
|
|
types: [opened, synchronize, ready_for_review, closed]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
statuses: write
|
|
|
|
jobs:
|
|
check_dependent_prs:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3
|
|
with:
|
|
disable-sudo: true
|
|
egress-policy: block
|
|
allowed-endpoints: >
|
|
api.github.com:443 github.com:443 pypi.org:443
|
|
files.pythonhosted.org:443 raw.githubusercontent.com:443
|
|
releases.astral.sh:443
|
|
|
|
# Note: pull_request_target checks out the base branch by default.
|
|
# This is safe as it avoids running untrusted code from the PR branch.
|
|
- name: Checkout code
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Set up uv
|
|
uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
|
|
with:
|
|
enable-cache: true
|
|
version: '0.11.15'
|
|
|
|
- name: Check Dependent PR
|
|
run: |
|
|
if [ "$EVENT_ACTION" = "closed" ]; then
|
|
./github_tools/check_dependent_pr.py --scan
|
|
else
|
|
./github_tools/check_dependent_pr.py --pr-number "${PR_NUMBER}"
|
|
fi
|
|
env:
|
|
GITHUB_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
PR_NUMBER: ${{ github.event.pull_request.number }}
|
|
EVENT_ACTION: ${{ github.event.action }}
|