Skip to content

whuppi/ci 2.2.0

Choose a tag to compare

View all tags
@chaudharydeepanshu chaudharydeepanshu released this 24 Jul 03:43
v2.2.0
bb46a1e
  • Added a reusable renovate.yml — self-hosted Renovate that each consumer calls
    from a thin wrapper (same shape as upgrade-check.yml), running against the
    calling repo. It reads composite action.yml
    (dependabot-core#6704
    blind spot), so it keeps whuppi/ci refs uniform and bumps third-party actions
    hidden in composites. Needs a RENOVATE_TOKEN org secret (Contents + Workflows +
    Pull-requests + Issues: write) — Renovate must write .github/workflows/, which
    GITHUB_TOKEN can't.
  • secrets.sh gained an org scope for org-wide secrets (set org/KEY).
  • Removed the whuppi-ci-refs job from upgrade-check.yml. Renovate replaces it:
    the sweep needed a Workflows-scope token GITHUB_TOKEN couldn't provide, and
    Renovate reads composites natively. Consumers migrate to the renovate.yml
    wrapper and drop their Dependabot github-actions + pub config.
Commits since v2.1.0 (4)
  • bb46a1e release: v2.2.0
  • 7679737 ci: release 2.2.0 — Renovate replaces the whuppi-ci-refs sweep (#34)
  • bd10d2e ci: add central Renovate runner + renovate secrets env (#33)
  • a8ce7d6 chore: bump pinned versions (#31)
Assets 2
Loading