mirror of
				https://hub.gitmirror.com/https://github.com/gradle/actions.git
				synced 2025-10-30 17:40:03 +08:00 
			
		
		
		
	![dependabot[bot]](/assets/img/avatar_default.png) 28a61d1167
			
		
	
	
		28a61d1167
		
			
		
	
	
	
	
		
			
			Bumps the github-actions group with 3 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [github/codeql-action](https://github.com/github/codeql-action) and [actions/github-script](https://github.com/actions/github-script). Bumps the github-actions group with 1 update in the /.github/actions/build-dist directory: [actions/setup-node](https://github.com/actions/setup-node). Updates `actions/setup-node` from 4.4.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](49933ea528...a0853c2454) Updates `github/codeql-action` from 3.30.0 to 3.30.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](2d92b76c45...f1f6e5f6af) Updates `actions/github-script` from 7.0.1 to 8.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](60a0d83039...ed597411d8) Updates `actions/setup-node` from 4.4.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](49933ea528...a0853c2454) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 3.30.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
		
			
				
	
	
		
			76 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			76 lines
		
	
	
		
			2.4 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
| name: CI-update-dist
 | |
| 
 | |
| on:
 | |
|   workflow_dispatch:
 | |
|   push:
 | |
|     branches:
 | |
|     - 'main'
 | |
|     - 'prerelease/**'
 | |
|     - 'release/**'
 | |
|     paths-ignore:
 | |
|     - 'dist/**'
 | |
| 
 | |
| permissions:
 | |
|   contents: read
 | |
| 
 | |
| jobs:
 | |
|   update-dist:
 | |
|     # Only run for the Gradle repository; otherwise when users create pull requests from their `main` branch
 | |
|     # it would erroneously update `dist` on their branch (and the pull request)
 | |
|     if: github.repository == 'gradle/actions'
 | |
|     permissions:
 | |
|       contents: write
 | |
|     runs-on: ubuntu-latest
 | |
| 
 | |
|     steps:
 | |
|     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 | |
|       with:
 | |
|         token: ${{ secrets.BOT_GITHUB_TOKEN }}
 | |
| 
 | |
|     - name: Set up Node.js
 | |
|       uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
 | |
|       with:
 | |
|         node-version: 20
 | |
|         cache: npm
 | |
|         cache-dependency-path: sources/package-lock.json
 | |
| 
 | |
|     - name: Install npm dependencies
 | |
|       run: |
 | |
|         npm clean-install
 | |
|       working-directory: sources
 | |
| 
 | |
|     - name: Build distribution
 | |
|       run: |
 | |
|         npm run check
 | |
|         npm run compile
 | |
|       working-directory: sources
 | |
|       env:
 | |
|         NODE_OPTIONS: '-r @gradle-tech/develocity-agent/preload'
 | |
|         DEVELOCITY_URL: 'https://ge.solutions-team.gradle.com'
 | |
|         DEVELOCITY_ACCESS_KEY: '${{ secrets.DV_SOLUTIONS_ACCESS_KEY }}'
 | |
| 
 | |
|     - name: Copy the generated sources/dist directory to the top-level dist
 | |
|       run: |
 | |
|         cp -r sources/dist .
 | |
| 
 | |
|     - name: Import GPG key to sign commits
 | |
|       uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
 | |
|       with:
 | |
|         gpg_private_key: ${{ secrets.GH_BOT_PGP_PRIVATE_KEY }}
 | |
|         passphrase: ${{ secrets.GH_BOT_PGP_PASSPHRASE }}
 | |
|         git_user_signingkey: true
 | |
|         git_commit_gpgsign: true
 | |
|         git_config_global: true
 | |
| 
 | |
|     # Commit and push changes; has no effect if the files did not change
 | |
|     # Important: The push event will not trigger any other workflows, see
 | |
|     # https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
 | |
|     - name: Commit & push changes
 | |
|       uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6.0.1
 | |
|       with:
 | |
|         commit_author: bot-githubaction <bot-githubaction@gradle.com>
 | |
|         commit_user_name: bot-githubaction
 | |
|         commit_user_email: bot-githubaction@gradle.com
 | |
|         commit_message: '[bot] Update dist directory'
 | |
|         file_pattern: dist
 |