From dabfe35fc1190bcc250e33c91ffae06a2cb9560d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Brunner?= Date: Mon, 30 Sep 2024 11:18:57 +0200 Subject: [PATCH] CI updates This is done by the automated script named upgrade-c2cciutils-to-1.7 --- .github/renovate.json5 | 5 +++++ .github/workflows/audit.yaml | 5 ----- .pre-commit-config.yaml | 15 ++++----------- 3 files changed, 9 insertions(+), 16 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 5ce7ad57d..fdd72924e 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -133,5 +133,10 @@ automerge: true, schedule: 'at any time', }, + /** Packages published very recently are not pushed to stabilization branches for security reasons */ + { + matchBaseBranches: ['/^[0-9]+\\.[0-9]+$/'], + minimumReleaseAge: '7 days', + }, ], } diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml index d1d0832da..0233edbb7 100644 --- a/.github/workflows/audit.yaml +++ b/.github/workflows/audit.yaml @@ -58,8 +58,3 @@ jobs: uses: andstor/file-existence-action@v3 with: files: ci/dpkg-versions.yaml - - name: Update dpkg packages versions - run: ~/.venv/bin/c2cciutils-docker-versions-update --branch=${{ matrix.branch }} - env: - GITHUB_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }} - if: steps.dpkg-versions.outputs.files_exists == 'true' diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 9db8b3d1d..eb822b691 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,14 +1,3 @@ -ci: - autoupdate_schedule: quarterly - skip: - - copyright - - poetry-check - - poetry-lock - - ripsecrets - - jsonschema-gentypes - - jsonschema2md - - - jsonschema-validator repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v4.6.0 @@ -142,3 +131,7 @@ repos: hooks: - id: jsonschema-validator files: ^ci/config\.yaml$ + - repo: https://github.com/renovatebot/pre-commit-hooks + rev: 37.428.1 + hooks: + - id: renovate-config-validator