diff --git a/.github/workflows/auto-close.yml b/.github/workflows/auto-close.yml index 150d284..064aa7a 100644 --- a/.github/workflows/auto-close.yml +++ b/.github/workflows/auto-close.yml @@ -1,29 +1,29 @@ ---- -# SPDX-FileCopyrightText: (C) 2025 Intel Corporation -# SPDX-License-Identifier: Apache-2.0 - -name: Stale Pull Requests -permissions: - contents: read - pull-requests: write - -# After 30 days of no activity on a PR, the PR should be marked as stale, -# a comment made on the PR informing the author of the new status, -# and closed after 15 days if there is no further activity from the change to stale state. -on: - schedule: - - cron: '30 1 * * *' # run every day - workflow_dispatch: {} - -jobs: - stale-auto-close: - runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} - steps: - - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 #v9.1.1 - with: - repo-token: ${{ secrets.GITHUB_TOKEN }} - stale-pr-message: 'This pull request is stale because it has been open 30 days with no activity. Make a comment or update the PR to avoid closing PR after 15 days.' - days-before-pr-stale: 30 - days-before-pr-close: 15 - remove-pr-stale-when-updated: 'true' - close-pr-message: 'This pull request was automatically closed due to inactivity' \ No newline at end of file +--- +# SPDX-FileCopyrightText: (C) 2025 Intel Corporation +# SPDX-License-Identifier: Apache-2.0 + +name: Stale Pull Requests +permissions: + contents: read + pull-requests: write + +# After 30 days of no activity on a PR, the PR should be marked as stale, +# a comment made on the PR informing the author of the new status, +# and closed after 15 days if there is no further activity from the change to stale state. +on: + schedule: + - cron: '30 1 * * *' # run every day + workflow_dispatch: {} + +jobs: + stale-auto-close: + runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }} + steps: + - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v9.1.1 + with: + repo-token: ${{ secrets.GITHUB_TOKEN }} + stale-pr-message: 'This pull request is stale because it has been open 30 days with no activity. Make a comment or update the PR to avoid closing PR after 15 days.' + days-before-pr-stale: 30 + days-before-pr-close: 15 + remove-pr-stale-when-updated: 'true' + close-pr-message: 'This pull request was automatically closed due to inactivity' diff --git a/.github/workflows/auto-update.yml b/.github/workflows/auto-update.yml index daf8826..9f60568 100644 --- a/.github/workflows/auto-update.yml +++ b/.github/workflows/auto-update.yml @@ -1,39 +1,39 @@ -# SPDX-FileCopyrightText: (C) 2025 Intel Corporation -# SPDX-License-Identifier: Apache-2.0 - ---- - -name: Auto Update PR - -# On push to the main branch and support branches, update any branches that are out of date -# and have auto-merge enabled. If the branch is currently out of date with the base branch, -# it must be first manually updated and then will be kept up to date on future runs. -on: - push: - branches: - - main - - release-* - -permissions: {} - -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true - -jobs: - update-pull-requests: - permissions: - contents: read - pull-requests: write - runs-on: ubuntu-latest - - steps: - - name: Checkout repository +# SPDX-FileCopyrightText: (C) 2025 Intel Corporation +# SPDX-License-Identifier: Apache-2.0 + +--- + +name: Auto Update PR + +# On push to the main branch and support branches, update any branches that are out of date +# and have auto-merge enabled. If the branch is currently out of date with the base branch, +# it must be first manually updated and then will be kept up to date on future runs. +on: + push: + branches: + - main + - release-* + +permissions: {} + +concurrency: + group: ${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +jobs: + update-pull-requests: + permissions: + contents: read + pull-requests: write + runs-on: ubuntu-latest + + steps: + - name: Checkout repository uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - with: - persist-credentials: false - - - name: Update pull requests + with: + persist-credentials: false + + - name: Update pull requests uses: open-edge-platform/orch-ci/.github/actions/pr_updater@e4fa54613527cfaad83ba8b625fd845a4ab8409d # 0.1.53 - with: - github_token: ${{ secrets.SYS_ORCH_GITHUB }} \ No newline at end of file + with: + github_token: ${{ secrets.SYS_ORCH_GITHUB }} diff --git a/.github/workflows/pre-merge.yml b/.github/workflows/pre-merge.yml index 1e59f11..2c35a12 100644 --- a/.github/workflows/pre-merge.yml +++ b/.github/workflows/pre-merge.yml @@ -23,14 +23,14 @@ jobs: outputs: filtered_projects: ${{ steps.filter-changes.outputs.filtered_projects }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: persist-credentials: false - name: "Verify Branch Name" - uses: open-edge-platform/orch-ci/verify-branch-name@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 + uses: open-edge-platform/orch-ci/verify-branch-name@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 - name: "Discover Changed Subfolders" id: discover-changes - uses: open-edge-platform/orch-ci/discover-changed-subfolders@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 + uses: open-edge-platform/orch-ci/discover-changed-subfolders@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 - name: "Filter Out Unwanted Changed Subfolders" id: filter-changes run: | @@ -44,7 +44,7 @@ jobs: if: ${{ needs.pre-checks.outputs.filtered_projects != '[]' }} strategy: fail-fast: false - uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 + uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@e4fa54613527cfaad83ba8b625fd845a4ab8409d # v0.1.53 with: run_security_scans: true run_version_check: true @@ -58,7 +58,7 @@ jobs: run_artifact: false project_folder: ${{ matrix.project_folder }} secrets: - inherit # zizmor: ignore[secrets-inherit] + inherit # zizmor: ignore[secrets-inherit] final-check: runs-on: ubuntu-latest if: ${{ always() }}