CI updates

This is done by the automated script named upgrade-c2cciutils-to-1.7

.github/renovate.json5

@@ -54,15 +54,18 @@
       matchPackageNames: ['shellcheck-py/shellcheck-py'],
       versioning: 'regex:^v(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)\\.(?<build>\\d+)$',
     },
-    /** Auto merge the GitHub action and pre-commit updates */
+    /** Auto merge updates on CI files */
     {
-      matchDatasources: ['github-actions', 'pre-commit'],
+      matchPaths: ['^\\.pre-commit-config\\.yaml$', '^\\.github/.*', '^ci/.*'],
       automerge: true,
     },
-    /** Auto merge updates on CI files */
+    /** Group and auto merge the CI dependencies */
     {
-      matchPaths: ['^\\.pre-commit-config\\.yaml$', '^\\.github/.*', '^ci/.*'],
+      matchFileNames: ['.github/**', '.pre-commit-config.yaml', 'ci/**'],
+      groupName: 'CI dependencies',
       automerge: true,
+      separateMajorMinor: false,
+      separateMinorPatch: false,
     },
   ],
 }

.github/workflows/delete-old-workflows-run.yaml

@@ -9,9 +9,9 @@ env:
 
 jobs:
   build:
+    name: Delete old workflow runs
     runs-on: ubuntu-22.04
     timeout-minutes: 25
-    name: Delete old workflow runs
 
     steps:
       - name: Delete old workflow runs

.github/workflows/main.yaml

@@ -56,7 +56,6 @@ jobs:
         if: failure()
       - name: Print environment information
         run: c2cciutils-env
-
         env:
           GITHUB_EVENT: ${{ toJson(github) }}
 
@@ -86,8 +85,6 @@ jobs:
         if: matrix.helm == 'latest'
 
       - name: Trigger changelog workflow
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         uses: actions/github-script@v7
         with:
           script: |-
@@ -99,3 +96,5 @@ jobs:
                     event_type: 'changelog',
                 });
             }
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-checks.yaml

@@ -5,8 +5,6 @@ on:
     types:
       - opened
       - reopened
-      - labeled
-      - unlabeled
       - edited
       - synchronize
 

.github/workflows/pull-request-automation.yaml

@@ -0,0 +1,110 @@
+name: Auto reviews, merge and close pull requests
+
+on:
+  pull_request:
+    types:
+      - opened
+      - reopened
+      - closed
+  pull_request_target:
+    types:
+      - closed
+
+jobs:
+  auto-merge:
+    name: Auto reviews, merge and close pull requests
+    runs-on: ubuntu-22.04
+    timeout-minutes: 5
+
+    steps:
+      - name: Print event
+        run: echo "${GITHUB}" | jq
+        env:
+          GITHUB: ${{ toJson(github) }}
+      - name: Print context
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            console.log(context);
+      - name: Auto reviews Renovate updates
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            github.rest.pulls.createReview({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              event: 'APPROVE',
+            })
+        if: |-
+          github.event.pull_request.user.login == 'renovate[bot]'
+          && (github.event.action == 'opened'
+            || github.event.action == 'reopened')
+      - name: Auto review and merge snyk auto fix
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            github.rest.pulls.createReview({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              event: 'APPROVE',
+            });
+            github.graphql(`
+              mutation {
+                enablePullRequestAutoMerge(input: {
+                  pullRequestId: "${context.payload.pull_request.node_id}",
+                  mergeMethod: SQUASH,
+                }) {
+                  pullRequest {
+                    autoMergeRequest {
+                      enabledAt
+                    }
+                  }
+                }
+              }
+            `)
+        if: |-
+          github.event.pull_request.user.login == 'c2c-bot-gis-ci'
+          && startsWith(github.head_ref, 'snyk-fix/')
+          && (github.event.action == 'opened'
+            || github.event.action == 'reopened')
+      - name: Restart audit workflow
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            let runs = await github.rest.actions.listWorkflowRuns({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              workflow_id: 'audit.yaml',
+              per_page: 1,
+            });
+            runs = runs.data.workflow_runs;
+            if (runs.length == 1 && runs[0].status != 'success') {
+              console.log(`Rerun workflow ${runs[0].id} ${runs[0].status}`);
+              github.rest.actions.reRunWorkflowFailedJobs({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                run_id: runs[0].id,
+              });
+            }
+        if: |-
+          github.event.pull_request.user.login == 'c2c-bot-gis-ci'
+          && (startsWith(github.head_ref, 'snyk-fix/')
+            || startsWith(github.head_ref, 'dpkg-update/'))
+          && github.event.action == 'closed'
+          && github.event.pull_request.merged == true
+      - name: Auto close pre-commit.ci autoupdate
+        uses: actions/github-script@v7
+        with:
+          script: |-
+            github.rest.pulls.update({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: context.payload.pull_request.number,
+              state: 'closed',
+            });
+        if: |-
+          github.event.pull_request.user.login == 'pre-commit-ci'
+          && (github.event.action == 'opened'
+            || github.event.action == 'reopened')