pq/freemkv-keysources
1
Fork 0
mirror of https://github.com/freemkv/freemkv-keysources.git synced 2026-10-07 18:13:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: monthly grouped dependabot; actions/checkout 7

Browse Source 
Dependabot runs monthly with grouped version updates.
actions/checkout 5 -> 7 in ci, qa and release (#13).
This commit is contained in:
Matthew Jackson
2026-10-03 11:16:01 -07:00
parent 1662345b7e
commit 473f629d13
4 changed files with 47 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yml
+13 -32
View File
@@ -1,52 +1,33 @@
# Version updates are monthly and grouped into one PR per ecosystem.
# Security updates are separate and run whenever an advisory is published.
version: 2 version: 2
# Dependency updates land on `dev`, never on `main`.
#
# `main` here is a RELEASE POINTER that freemkv's release-orchestrate.yml
# moves to each tag. A bot commit on it would put work there that no tag
# contains, which is exactly the state that aborted the 1.6.2 cascade at the
# last step -- so pointing Dependabot at main would recreate that failure on a
# schedule.
updates: updates:
- package-ecosystem: cargo - package-ecosystem: cargo
directory: / directory: /
target-branch: dev target-branch: dev
schedule: schedule:
interval: weekly interval: monthly
open-pull-requests-limit: 5 open-pull-requests-limit: 5
# One PR per week for the routine bumps instead of one per crate.
groups: groups:
minor-and-patch: all:
update-types: patterns:
- minor - '*'
- patch
ignore: ignore:
# The freemkv crates depend on each other by GIT TAG, re-pinned by
# release-orchestrate.yml in the release commit. A bot bump would fight
# the release cascade and could pin a tag that does not exist yet.
- dependency-name: freemkv-unlock - dependency-name: freemkv-unlock
- dependency-name: libfreemkv - dependency-name: libfreemkv
- dependency-name: freemkv-keysources - dependency-name: freemkv-keysources
- dependency-name: freemkv-i18n - dependency-name: freemkv-i18n
- dependency-name: freemkv-engine - dependency-name: freemkv-engine
- package-ecosystem: github-actions
- package-ecosystem: github-actions
directory: / directory: /
target-branch: dev target-branch: dev
schedule: schedule:
interval: weekly interval: monthly
open-pull-requests-limit: 5 open-pull-requests-limit: 5
groups: groups:
actions: all:
update-types: patterns:
- minor - '*'
- patch
ignore: ignore:
# Versioned by the Rust release it installs; CI picks the toolchain via
# `toolchain:` on @master/@stable. Dependabot proposes Rust versions that
# do not exist. Toolchain bumps are a deliberate all-repo change.
- dependency-name: dtolnay/rust-toolchain - dependency-name: dtolnay/rust-toolchain
# The org's own reusable workflows/actions. @v1 and @v2 are independent - dependency-name: freemkv/.github*
# moving tags (v2 is only the comment guard), not semver releases: a
# "bump" from v1 to v2 would move a caller onto an OLDER guard.
- dependency-name: "freemkv/.github*"
.github/workflows/ci.yml
+8 -8
View File
@@ -53,7 +53,7 @@ jobs:
outputs: outputs:
v: ${{ steps.msrv.outputs.v }} v: ${{ steps.msrv.outputs.v }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- id: msrv - id: msrv
shell: bash shell: bash
run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT" run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT"
@@ -67,7 +67,7 @@ jobs:
changelog: changelog:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- name: Require a CHANGELOG entry for the crate version on main - name: Require a CHANGELOG entry for the crate version on main
shell: bash shell: bash
run: | run: |
@@ -88,7 +88,7 @@ jobs:
needs: resolve-msrv needs: resolve-msrv
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -119,7 +119,7 @@ jobs:
needs: resolve-msrv needs: resolve-msrv
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -143,7 +143,7 @@ jobs:
deny: deny:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -176,7 +176,7 @@ jobs:
if: github.ref_name == 'qa' || github.ref_name == 'main' if: github.ref_name == 'qa' || github.ref_name == 'main'
runs-on: macos-latest runs-on: macos-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -203,7 +203,7 @@ jobs:
needs: resolve-msrv needs: resolve-msrv
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -244,7 +244,7 @@ jobs:
if: github.ref_name == 'qa' || github.ref_name == 'main' if: github.ref_name == 'qa' || github.ref_name == 'main'
runs-on: windows-latest runs-on: windows-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
.github/workflows/qa.yml
+5 -5
View File
@@ -37,7 +37,7 @@ jobs:
outputs: outputs:
v: ${{ steps.msrv.outputs.v }} v: ${{ steps.msrv.outputs.v }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- id: msrv - id: msrv
shell: bash shell: bash
run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT" run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT"
@@ -61,7 +61,7 @@ jobs:
permissions: permissions:
contents: write contents: write
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Stamp the next rc - name: Stamp the next rc
@@ -90,7 +90,7 @@ jobs:
os: ['ubuntu-latest', 'macos-latest'] os: ['ubuntu-latest', 'macos-latest']
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -113,7 +113,7 @@ jobs:
cross-lint: cross-lint:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
@@ -139,7 +139,7 @@ jobs:
needs: resolve-msrv needs: resolve-msrv
runs-on: windows-latest runs-on: windows-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
with: with:
path: freemkv-keysources path: freemkv-keysources
- uses: freemkv/.github/.github/actions/checkout-siblings@v1 - uses: freemkv/.github/.github/actions/checkout-siblings@v1
.github/workflows/release.yml
+3 -3
View File
@@ -17,7 +17,7 @@ jobs:
verify: verify:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- name: Verify Cargo.toml version matches tag - name: Verify Cargo.toml version matches tag
run: | run: |
CARGO_VER="v$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')" CARGO_VER="v$(grep '^version' Cargo.toml | head -1 | sed 's/.*"\(.*\)"/\1/')"
@@ -41,7 +41,7 @@ jobs:
needs: verify needs: verify
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- id: msrv - id: msrv
shell: bash shell: bash
run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT" run: echo "v=$(grep -m1 '^rust-version' Cargo.toml | sed -E 's/.*\"([^\"]+)\".*/\1/')" >> "$GITHUB_OUTPUT"
@@ -62,7 +62,7 @@ jobs:
needs: verify needs: verify
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v5 - uses: actions/checkout@v7
- name: Create GitHub Release - name: Create GitHub Release
uses: softprops/action-gh-release@v3 uses: softprops/action-gh-release@v3
with: with: