dependabot[bot]
316b848d18
build(deps): bump the all group across 1 directory with 11 updates
...
Bumps the all group with 6 updates in the /Library/Homebrew directory:
| Package | From | To |
| --- | --- | --- |
| [rubocop](https://github.com/rubocop/rubocop ) | `1.78.0` | `1.79.2` |
| [parallel_tests](https://github.com/grosser/parallel_tests ) | `5.3.1` | `5.4.0` |
| [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura ) | `2.1.0` | `3.0.0` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ) | `0.5.12357` | `0.5.12389` |
| [spoom](https://github.com/Shopify/spoom ) | `1.7.5` | `1.7.6` |
| [ruby-lsp](https://github.com/Shopify/ruby-lsp ) | `0.25.0` | `0.26.1` |
Updates `rubocop` from 1.78.0 to 1.79.2
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.78.0...v1.79.2 )
Updates `parallel_tests` from 5.3.1 to 5.4.0
- [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md )
- [Commits](https://github.com/grosser/parallel_tests/compare/v5.3.1...v5.4.0 )
Updates `simplecov-cobertura` from 2.1.0 to 3.0.0
- [Release notes](https://github.com/jessebs/simplecov-cobertura/releases )
- [Commits](https://github.com/jessebs/simplecov-cobertura/compare/v2.1.0...v3.0.0 )
Updates `sorbet-static-and-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `spoom` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/Shopify/spoom/releases )
- [Commits](https://github.com/Shopify/spoom/compare/v1.7.5...v1.7.6 )
Updates `ruby-lsp` from 0.25.0 to 0.26.1
- [Release notes](https://github.com/Shopify/ruby-lsp/releases )
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.25.0...v0.26.1 )
Updates `sorbet-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `json` from 2.13.0 to 2.13.2
- [Release notes](https://github.com/ruby/json/releases )
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md )
- [Commits](https://github.com/ruby/json/compare/v2.13.0...v2.13.2 )
Updates `regexp_parser` from 2.10.0 to 2.11.2
- [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ammar/regexp_parser/compare/v2.10.0...v2.11.2 )
Updates `sorbet` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
build(deps): bump the all group with 6 updates
Bumps the all group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.2.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.3.0` | `5.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.29.4` | `3.29.9` |
| [actions/cache](https://github.com/actions/cache ) | `4.2.3` | `4.2.4` |
| [docker/login-action](https://github.com/docker/login-action ) | `3.4.0` | `3.5.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) | `2.0.6` | `2.1.1` |
Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8
)
Updates `actions/download-artifact` from 4.3.0 to 5.0.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4.3.0...634f93cb2916e3fdff6788551b99b062d0335ce0 )
Updates `github/codeql-action` from 3.29.4 to 3.29.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.29.4...df559355d593797519d70b90fc8edd5db049e7a2 )
Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](5a3ec84eff...0400d5f644
)
Updates `docker/login-action` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](74a5d14239...184bdaa072
)
Updates `actions/create-github-app-token` from 2.0.6 to 2.1.1
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](df432ceedc...a8d6161485
)
---
updated-dependencies:
- dependency-name: rubocop
dependency-version: 1.79.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: parallel_tests
dependency-version: 5.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: simplecov-cobertura
dependency-version: 3.0.0
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: all
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.5.12389
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: spoom
dependency-version: 1.7.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: ruby-lsp
dependency-version: 0.26.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.5.12389
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: json
dependency-version: 2.13.2
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: regexp_parser
dependency-version: 2.11.2
dependency-type: indirect
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.5.12389
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.5.12389
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: actions/download-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: github/codeql-action
dependency-version: 3.29.9
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: actions/cache
dependency-version: 4.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: docker/login-action
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: actions/create-github-app-token
dependency-version: 2.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-13 19:15:31 +00:00
Mike McQuaid
aaefb351b4
workflows/vendor-gems: push to PRs from dependabot.
...
This should avoid maintainers needing to run with `workflow_dispatch`
for dependabot PRs.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-07-29 08:23:48 +01:00
Mike McQuaid
be6cee3006
Use Homebrew/actions/*@main in Actions workflows
...
We've migrated Homebrew/actions to use the `main` branch now so let's
update these references.
2025-06-13 14:22:09 +01:00
Mike McQuaid
7bd8642bfc
Tweak GitHub Actions workflows
...
- prepare to use `main` instead of `master`.
- use synced `actionlint.yml` to simplify Homebrew/.github sync logic.
- fix some broken workflow PR opening logic.
2025-06-11 16:39:03 +01:00
dependabot[bot]
bc2808310a
build(deps): bump actions/create-github-app-token from 2.0.3 to 2.0.6
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.0.3 to 2.0.6.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](30bf6253fa...df432ceedc
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-05 18:33:58 +00:00
dependabot[bot]
fec6f7676d
build(deps): bump actions/create-github-app-token from 2.0.2 to 2.0.3
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](3ff1caaa28...30bf6253fa
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-05-02 00:45:39 +00:00
dependabot[bot]
9327644397
build(deps): bump actions/create-github-app-token from 1.12.0 to 2.0.2
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.12.0 to 2.0.2.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](d72941d797...3ff1caaa28
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 16:30:10 +00:00
Patrick Linnane
b6cad3be14
workflows: remove no-op ssh signing value
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-03-31 16:09:20 -07:00
dependabot[bot]
f29901daec
build(deps): bump actions/create-github-app-token from 1.11.7 to 1.12.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.7 to 1.12.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](af35edadc0...d72941d797
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-31 19:54:34 +00:00
dependabot[bot]
f77cdb21cf
build(deps): bump actions/create-github-app-token from 1.11.6 to 1.11.7
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.6 to 1.11.7.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](21cfef2b49...af35edadc0
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 19:04:10 +00:00
dependabot[bot]
e02884e8af
build(deps): bump actions/create-github-app-token from 1.11.5 to 1.11.6
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.5 to 1.11.6.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](0d564482f0...21cfef2b49
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-03 18:04:50 +00:00
dependabot[bot]
c3f1ec89a0
build(deps): bump actions/create-github-app-token from 1.11.3 to 1.11.5
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.3 to 1.11.5.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](67e27a7eb7...0d564482f0
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 18:39:36 +00:00
dependabot[bot]
d4d4e17085
build(deps): bump actions/create-github-app-token from 1.11.2 to 1.11.3
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.2 to 1.11.3.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](136412a57a...67e27a7eb7
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-09 00:11:37 +00:00
Patrick Linnane
53f058d0ac
Merge pull request #19229 from Homebrew/dependabot/github_actions/actions/create-github-app-token-1.11.2
...
build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2
2025-02-04 14:51:35 +00:00
William Woodruff
3ec71d8acc
ci: switch to SSH signing everywhere
...
Signed-off-by: William Woodruff <william@yossarian.net>
2025-02-03 21:56:57 +01:00
dependabot[bot]
63dd807354
build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.1 to 1.11.2.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](c1a285145b...136412a57a
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-03 18:43:05 +00:00
dependabot[bot]
a26d885e19
build(deps): bump actions/create-github-app-token from 1.11.0 to 1.11.1
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.11.0 to 1.11.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](5d869da34e...c1a285145b
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-12-21 16:56:57 +00:00
Patrick Linnane
56e41319f2
workflows: use full version numbers
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-12-12 21:26:46 -08:00
Mike McQuaid
8dc9e117f3
github/workflows: use macos-15 GitHub Actions runners.
...
- Let's use this instead of macOS 14/latest when possible.
- Keep around macOS 13 to ensure we're still testing x86_64.
2024-09-30 09:02:23 +01:00
Carlo Cabrera
40567115a3
workflows: use set -xeuo pipefail
globally
...
This makes it easier to avoid subtle shell script bugs.
2024-09-22 19:56:20 +08:00
dependabot[bot]
b013f2d94b
build(deps): bump actions/create-github-app-token from 1.10.4 to 1.11.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.10.4 to 1.11.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](3378cda945...5d869da34e
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-12 17:02:58 +00:00
dependabot[bot]
d79c6c90d4
build(deps): bump actions/create-github-app-token from 1.10.3 to 1.10.4
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 1.10.3 to 1.10.4.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](31c86eb3b3...3378cda945
)
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-04 16:53:25 +00:00
Ruoyu Zhong
41c43dcd9f
workflows/vendor-gem: simplify condition
2024-07-14 10:44:43 -04:00
Mike McQuaid
652eafc966
workflows/vendor-gem: remove use of pull_request target.
...
Maintainers no longer need this run on their forks and maintainers can
manually run this from `workflow_dispatch` after reviewing the changes
if needed.
2024-07-14 10:38:31 -04:00
Ruoyu Zhong
5d6be12732
workflows/vendor-gems: handle input string more robustly
...
See also: Homebrew/actions#562 .
2024-07-13 14:10:18 -04:00
Thierry Moisan
e2e9565984
workflows: pin actions
2024-07-13 10:50:43 -04:00
Mike McQuaid
2be2aa0dc8
workflows: use macos-14 runner.
...
- Use `macos-14` instead of `macos-13` most of the time.
- For `tests` and `test default formula` builds: run on both
macOS 13 x86_64 and macOS 14 arm64
- Pretend `macos-14` is a self-hosted runner until a new version of
`actionlint` is released which doesn't error on `macos-14`.
2024-02-04 12:12:12 +01:00
Bo Anderson
ed6d4f9710
workflows: move vendor version check to separate workflow
2023-11-29 18:23:06 +00:00
Bo Anderson
41d60e54a1
workflows/vendor-gems: trial using GitHub App token
2023-11-22 17:02:26 +00:00
Bo Anderson
582049454f
vendor/bundle/ruby: cleanup unneeded files
2023-09-26 18:39:57 +01:00
Mike McQuaid
5121567a9a
workflows: improve setup-homebrew and API usage.
...
- `HOMEBREW_NO_INSTALL_FROM_API` was passed in a few places
unnecessarily
- https://github.com/Homebrew/actions/pull/393 will change the default
behaviour of setup-homebrew so let's be explicit to speed things up
and avoid changes when it's merged
2023-07-06 16:54:06 +01:00
Ruoyu Zhong
381cbe5f74
workflows/vendor-gems: run on macos-13
2023-04-25 11:23:18 +08:00
Douglas Eichelberger
f52cbbb9da
Vendor mechanize gem outside Gemfile
...
We only need a single file and it avoids pulling in e.g. `nokogiri`
which is vulnerable.
Allow updating it using `brew vendor-gems`.
2023-04-24 14:03:55 +01:00
Carlo Cabrera
329a21e80b
workflows/vendor-gems: fix actionlint errors
2023-04-11 00:09:13 +08:00
Bo Anderson
496736a199
Improve sorbet & vendor gem workflow testing
2023-04-10 14:40:57 +01:00
Bo Anderson
dc2f41cb8d
workflows: set working directory to repo location
2023-01-27 01:48:26 +00:00
Douglas Eichelberger
a2ed0f8eb9
Fix URL in vendor-gems.yml
2023-01-18 11:41:50 -08:00
Bo Anderson
3867038ab7
workflows: migrate from deprecated set-output
2022-10-11 20:11:15 +01:00
Mike McQuaid
4aa765fafe
Cleanup and fix CI jobs
...
- use macOS 12 or Ubuntu 22.04 wherever appropriate
- don't append `(Linux)` to job names
- use specific Ubuntu 22.04 and Ubuntu 18.04 jobs
We may want to consider more Ubuntu 18.04 jobs in future, too.
2022-09-27 10:30:08 +01:00
Mike McQuaid
af6165aab7
Automate sponsors updates
...
- Add sponsors updating to the existing man/completion/maintainer update workflow
- Hide/deprecated --fail-if-not-changed arguments and make them default behaviour
- Rename man-completions workflow to sponsors-maintainers-man-completions for consistency
- Make output and exit codes more consistent between these updating commands
- Fix maintainers updates not always being committed correctly
2022-09-02 08:24:33 +01:00
Bo Anderson
00932556bf
workflow/vendor-gems: re-add erroneously removed output
2022-05-17 20:04:24 +01:00
Bo Anderson
7e07f66e47
Use sorbet-static-and-runtime
2022-05-17 04:15:50 +01:00
Bo Anderson
f7185f1454
workflows: remove outdated Xcode switch
2021-12-06 18:28:53 +00:00
Bo Anderson
e3b760289f
Merge pull request #12063 from Homebrew/workflow-permissions
...
workflows: reduce GITHUB_TOKEN permissions
2021-09-16 15:15:55 +01:00
Bo Anderson
f38a3239e6
workflows: reduce GITHUB_TOKEN permissions
2021-09-15 15:10:11 +01:00
XuehaiPan
3f96d963f7
style: fix inconsistent code style for shell scripts
2021-09-15 14:59:01 +08:00
Mike McQuaid
d837d5cdf4
Use GITHUB_TOKEN more consistently.
...
https://docs.github.com/en/actions/reference/authentication-in-a-workflow#permissions-for-the-github_token
This provides enough permissions for almost everything we want to do.
When it's not enough (e.g. for `brew update-maintainers`): generate a
dedicated, repo-specific token for when increased scopes are needed and
setup a new organisation-wide token on the new PAT format.
2021-04-06 12:18:52 +01:00
nandahkrishna
bf55ced33b
workflows: fix commit signing
2021-03-29 13:59:54 +05:30
nandahkrishna
1b674cdfec
workflows: enable commit signing for BrewTestBot
2021-03-25 02:08:20 +05:30
Markus Reiter
e9a5ef8916
Re-enable vendor-gems
for pull requests.
2021-02-05 03:09:48 +01:00