This is an automated email from the ASF dual-hosted git repository.
GitToTheHub pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-docs.git
The following commit(s) were added to refs/heads/master by this push:
new 4ba74e576c chore: action workflow updates & add dependabot (#1521)
4ba74e576c is described below
commit 4ba74e576c83996a75ce9f0e4b91c2e80d72d23c
Author: エリス <[email protected]>
AuthorDate: Thu Aug 27 01:43:54 2026 +0900
chore: action workflow updates & add dependabot (#1521)
* chore(dependabot): add configurations
* chore(workflow): release-audit
* chore(workflow): update actions
* chore(workflow): disable apache-rat-action & remove licence_checker.yml
config
---
.github/{workflows/ci.yml => dependabot.yml} | 68 +++++++++++++------------
.github/workflows/ci.yml | 5 +-
.github/workflows/deploy-prod.yml | 5 +-
.github/workflows/deploy-stage.yml | 5 +-
.github/workflows/{ci.yml => release-audit.yml} | 42 ++++++++-------
5 files changed, 69 insertions(+), 56 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/dependabot.yml
similarity index 52%
copy from .github/workflows/ci.yml
copy to .github/dependabot.yml
index b503a840e0..609ac46134 100644
--- a/.github/workflows/ci.yml
+++ b/.github/dependabot.yml
@@ -15,36 +15,38 @@
# specific language governing permissions and limitations
# under the License.
-name: build test
-
-on:
- pull_request:
- branches:
- - '*'
-
-jobs:
- build:
- runs-on: ubuntu-latest
-
- permissions:
- contents: read
-
- steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
- with:
- persist-credentials: false
-
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
- with:
- node-version: 24.x
-
- - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 #
v1.316.0
- with:
- ruby-version: 2.7
- bundler-cache: true
-
- - name: Run npm install-ci-test (cit)
- run: npm install-ci-test
-
- - name: Run dev build
- run: npm run build
+version: 2
+
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ gh-actions-patch-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ - "minor"
+
+ - package-ecosystem: "npm"
+ directory: "/"
+ cooldown:
+ default-days: 5
+ semver-major-days: 14
+ schedule:
+ interval: "weekly" # Every Monday
+ groups:
+ npm-patch:
+ patterns:
+ - "*"
+ update-types:
+ - "patch"
+ npm-minor:
+ patterns:
+ - "*"
+ update-types:
+ - "minor"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b503a840e0..5fa3ad7df3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,11 +30,12 @@ jobs:
contents: read
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
+ fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24.x
diff --git a/.github/workflows/deploy-prod.yml
b/.github/workflows/deploy-prod.yml
index dba7158317..5e44e881a2 100644
--- a/.github/workflows/deploy-prod.yml
+++ b/.github/workflows/deploy-prod.yml
@@ -27,12 +27,13 @@ jobs:
contents: write
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
+ fetch-depth: 1
ref: master
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24.x
diff --git a/.github/workflows/deploy-stage.yml
b/.github/workflows/deploy-stage.yml
index 7c8122df08..07197f4b2b 100644
--- a/.github/workflows/deploy-stage.yml
+++ b/.github/workflows/deploy-stage.yml
@@ -32,12 +32,13 @@ jobs:
contents: write
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
+ fetch-depth: 1
ref: master
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24.x
diff --git a/.github/workflows/ci.yml b/.github/workflows/release-audit.yml
similarity index 53%
copy from .github/workflows/ci.yml
copy to .github/workflows/release-audit.yml
index b503a840e0..84d8d97540 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/release-audit.yml
@@ -15,36 +15,44 @@
# specific language governing permissions and limitations
# under the License.
-name: build test
+name: Release Auditing
on:
+ push:
+ branches-ignore:
+ - 'dependabot/**'
pull_request:
branches:
- '*'
+permissions:
+ contents: read
+
jobs:
- build:
+ test:
+ name: Audit Licenses
runs-on: ubuntu-latest
-
- permissions:
- contents: read
-
steps:
- - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ # Checkout project
+ - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
+ fetch-depth: 1
- - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
- with:
- node-version: 24.x
+ # TODO: Add license headers
+ # Check license headers
+ # - uses:
erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0
- - uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 #
v1.316.0
+ # Setup environment with node
+ - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
- ruby-version: 2.7
- bundler-cache: true
+ node-version: 24
- - name: Run npm install-ci-test (cit)
- run: npm install-ci-test
+ # Install node packages
+ - name: npm install packages
+ run: npm ci
- - name: Run dev build
- run: npm run build
+ # Check node package licenses
+ - uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
+ with:
+ include-asf-category-a: true
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
