-
Notifications
You must be signed in to change notification settings - Fork 12
Deploy release v0.46.0 #808
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
35 commits
Select commit
Hold shift + click to select a range
b7ea3ab
chore: Trigger Git Commit Linter when a draft PR is ready for review
jtrobles-cdd dd85540
chore: Add GitHub Actions workflow to release and deploy
jtrobles-cdd 54609f9
Merge pull request #790 from cordada/ci-cd-task-release-and-deploy
jtrobles-cdd c18c644
chore(deps): Bump the development-dependencies group with 5 updates
dependabot[bot] 9eb5cfa
Merge pull request #792 from cordada/dependabot/pip/development-depen…
jtrobles-cdd 5d70460
chore(deps): Bump setuptools from 75.3.0 to 78.1.0
dependabot[bot] 6d7dc9f
Merge pull request #794 from cordada/dependabot/pip/setuptools-78.1.0
jtrobles-cdd 07937d3
chore: Bump the production-dependencies group with 5 updates
dependabot[bot] 4da863c
Merge pull request #797 from cordada/dependabot/github_actions/produc…
acofre-cdd f2612ef
chore(deps): Bump djangorestframework from 3.15.2 to 3.16.0
dependabot[bot] 238d1f2
Merge pull request #793 from cordada/dependabot/pip/djangorestframewo…
svillegas-cdd f6cb4dd
chore(deps): Bump pytz from 2025.1 to 2025.2
dependabot[bot] 158f5d5
Merge pull request #795 from cordada/dependabot/pip/pytz-2025.2
svillegas-cdd 1a71733
chore(deps): Bump pydantic from 2.10.6 to 2.11.2
dependabot[bot] f0559a1
Merge pull request #796 from cordada/dependabot/pip/pydantic-2.11.1
svillegas-cdd 76cf838
chore: Bump the production-dependencies group with 3 updates
dependabot[bot] f9e3555
Merge pull request #798 from cordada/dependabot/github_actions/produc…
svillegas-cdd 1acd135
chore: Bump django from 4.2.20 to 4.2.21
dependabot[bot] 127a64a
Merge pull request #804 from cordada/dependabot/pip/django-4.2.21
jtrobles-cdd f8e4dcb
chore: Bump setuptools from 78.1.0 to 78.1.1
dependabot[bot] 6c7158d
Merge pull request #805 from cordada/dependabot/pip/setuptools-78.1.1
jtrobles-cdd de0dca0
chore(deps): Bump importlib-metadata from 8.6.1 to 8.7.0
dependabot[bot] 047552b
Merge pull request #802 from cordada/dependabot/pip/importlib-metadat…
jtrobles-cdd d677aec
chore(deps): Bump djangorestframework from 3.15.2 to 3.16.0
dependabot[bot] ae5c4f2
Merge pull request #799 from cordada/dependabot/pip/djangorestframewo…
jtrobles-cdd 117033d
chore(deps): Bump lxml from 5.3.1 to 5.4.0
dependabot[bot] 37099e9
Merge pull request #803 from cordada/dependabot/pip/lxml-5.4.0
jtrobles-cdd dce36db
chore(deps): Uninstall Python package `types-pyOpenSSL`
jtrobles-cdd e75e454
chore(deps): Install Python package `types-setuptools`
jtrobles-cdd 4241a70
Merge pull request #806 from cordada/uninstall-types-pyopenssl
jtrobles-cdd be595fb
chore(deps): Bump cryptography from 44.0.1 to 44.0.3
dependabot[bot] cd8bcde
Merge pull request #801 from cordada/dependabot/pip/cryptography-44.0.2
jtrobles-cdd b9b148e
chore: Update history for new version
jtrobles-cdd 8e1df76
chore: Bump version from 0.45.0 to 0.46.0
jtrobles-cdd 3c36be3
Merge pull request #807 from cordada/release/v0.46.0
jtrobles-cdd File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -8,6 +8,7 @@ on: | |
| - opened | ||
| - reopened | ||
| - synchronize | ||
| - ready_for_review | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,75 @@ | ||
| # GitHub Actions Workflow for 'Release and Deploy' Task | ||
|
|
||
| name: "Task: Release and Deploy" | ||
|
|
||
| on: | ||
| pull_request: | ||
| types: | ||
| - closed | ||
| branches: # Base reference | ||
| - develop | ||
|
|
||
| permissions: {} | ||
|
|
||
| jobs: | ||
| deploy: | ||
| name: Deploy | ||
| if: ${{ github.event.pull_request.merged == true && startsWith(github.head_ref, 'release/') }} | ||
| runs-on: ubuntu-22.04 | ||
|
|
||
| permissions: | ||
| contents: write | ||
| pull-requests: write | ||
|
|
||
| env: | ||
| CREATE_RELEASE_VCS_REVISION_ID: ${{ github.sha }} # Merge commit in base branch. | ||
| PREPARE_RELEASE_GITHUB_PULL_REQUEST_HTML_URL: ${{ github.event.pull_request.html_url }} | ||
| PREPARE_RELEASE_GITHUB_PULL_REQUEST_TITLE: ${{ github.event.pull_request.title }} | ||
| PREPARE_RELEASE_GITHUB_VCS_REF: ${{ github.event.pull_request.head.ref }} | ||
| RELEASE_ASSIGNEE: ${{ github.event.pull_request.assignee.login }} | ||
| RELEASE_VCS_REF: refs/heads/master | ||
|
|
||
| steps: | ||
| - name: Check Out VCS Repository | ||
| uses: actions/checkout@v4.2.2 | ||
| with: | ||
| ref: ${{ env.CREATE_RELEASE_VCS_REVISION_ID }} | ||
|
|
||
| - name: Prepare Git | ||
| run: | | ||
| echo 'Adding Git aliases…' | ||
| git config alias.publish \ | ||
| 'push --set-upstream origin HEAD' | ||
| - name: Prepare Pull Request for Deployment | ||
| run: | | ||
| create_release_vcs_branch_name="${PREPARE_RELEASE_GITHUB_VCS_REF:?}" | ||
| create_release_vcs_branch_name="${create_release_vcs_branch_name/release/deploy}" | ||
| echo "Creating release creation VCS branch '$create_release_vcs_branch_name'…" | ||
| git checkout -b "${create_release_vcs_branch_name:?}" -- | ||
| git publish --verbose | ||
| create_release_vcs_ref="refs/heads/${create_release_vcs_branch_name:?}" | ||
| echo "CREATE_RELEASE_VCS_REF=${create_release_vcs_ref:?}" >> "$GITHUB_ENV" | ||
| create_release_github_pull_request_title="${PREPARE_RELEASE_GITHUB_PULL_REQUEST_TITLE:?}" | ||
| create_release_github_pull_request_title="deploy ${create_release_github_pull_request_title,,}" | ||
| create_release_github_pull_request_title="${create_release_github_pull_request_title@u}" | ||
| echo "CREATE_RELEASE_GITHUB_PULL_REQUEST_TITLE=${create_release_github_pull_request_title:?}" >> "$GITHUB_ENV" | ||
| create_release_github_pull_request_description="Ref: ${PREPARE_RELEASE_GITHUB_PULL_REQUEST_HTML_URL:?}" | ||
| echo "CREATE_RELEASE_GITHUB_PULL_REQUEST_DESCRIPTION=${create_release_github_pull_request_description:?}" >> "$GITHUB_ENV" | ||
|
Comment on lines
+45
to
+61
Check warningCode scanning / CodeQL Environment variable built from user-controlled sources Medium
Potential environment variable injection in [create_release_vcs_branch_name="${PREPARE_RELEASE_GITHUB_VCS_REF:?}"
create_release_vcs_branch_name="${create_release_vcs_branch_name/release/deploy}" echo "Creating release creation VCS branch '$create_release_vcs_branch_name'…" git checkout -b "${create_release_vcs_branch_name:?}" -- git publish --verbose create_release_vcs_ref="refs/heads/${create_release_vcs_branch_name:?}" echo "CREATE_RELEASE_VCS_REF=${create_release_vcs_ref:?}" >> "$GITHUB_ENV" create_release_github_pull_request_title="${PREPARE_RELEASE_GITHUB_PULL_REQUEST_TITLE:?}" create_release_github_pull_request_title="deploy ${create_release_github_pull_request_title,,}" create_release_github_pull_request_title="${create_release_github_pull_request_title@u}" echo "CREATE_RELEASE_GITHUB_PULL_REQUEST_TITLE=${create_release_github_pull_request_title:?}" >> "$GITHUB_ENV" create_release_github_pull_request_description="Ref: ${PREPARE_RELEASE_GITHUB_PULL_REQUEST_HTML_URL:?}" echo "CREATE_RELEASE_GITHUB_PULL_REQUEST_DESCRIPTION=${create_release_github_pull_request_description:?}" >> "$GITHUB_ENV"](1), which may be controlled by an external user. |
||
| - name: Create GitHub Pull Request for Deployment | ||
| run: | | ||
| gh pr create \ | ||
| --base "$RELEASE_VCS_REF" \ | ||
| --head "$CREATE_RELEASE_VCS_REF" \ | ||
| --draft \ | ||
| --title "$CREATE_RELEASE_GITHUB_PULL_REQUEST_TITLE" \ | ||
| --body "$CREATE_RELEASE_GITHUB_PULL_REQUEST_DESCRIPTION" \ | ||
| --assignee "$RELEASE_ASSIGNEE" \ | ||
| --label 'task' \ | ||
| --label 'kind: deploy' | ||
| env: | ||
| GH_TOKEN: ${{ github.token }} | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium