mirror of
https://github.com/go-gitea/gitea.git
synced 2026-05-06 04:01:05 +09:00
99cd4f6b22
Replaces Dependabot with Renovate. The new setup: - One PR per ecosystem (GitHub Actions, Go modules + Makefile go-tool pins, npm, Python via uv, Nix flake), opened weekly on Mondays with a 5-day release-age cooldown. Vulnerability PRs ship next-day via daily cron + Renovate's `vulnerabilityAlerts` schedule bypass. - All `uses:` action refs SHA-pinned with patch-level version comments (same format as #36971, which this supersedes); `helpers:pinGitHubActionDigests` keeps future bumps in that format. - `renovatebot/github-action` runtime image pinned via the upstream-recommended `RENOVATE_VERSION` env + magic comment + `customManagers:githubActionsVersions` preset, so Renovate keeps the pin updated. - Custom regex manager tracks the `*_PACKAGE ?= <import-path>@<version>` lines in `Makefile` (golangci-lint, swagger, actionlint, etc.) and groups them into the same Go PR via `matchDatasources: ["go"]`. - Post-upgrade tasks regenerate `assets/go-licenses.json` (`make tidy`) and the SVG sprite (`make svg`), gated by an env-level command allowlist. - Replaces the standalone `cron-flake-updater` workflow — Renovate's nix manager tracks `flake.nix` inputs and produces the same `flake.lock` bump PRs on the regular weekly schedule. - npm and gomod-replace pins live in `renovate.json5` only; `updates@17.16.3` reads them from there too, so the standalone `updates.config.ts` is gone and one source of truth covers both tools. Fixes: https://github.com/go-gitea/gitea/issues/33386 Signed-off-by: silverwind <me@silverwind.io> Signed-off-by: TheFox0x7 <thefox0x7@gmail.com> Co-authored-by: Claude (Opus 4.6) <noreply@anthropic.com> Co-authored-by: TheFox0x7 <thefox0x7@gmail.com> Co-authored-by: Nicolas <bircni@icloud.com> Co-authored-by: Giteabot <teabot@gitea.io>
118 lines
3.3 KiB
YAML
118 lines
3.3 KiB
YAML
name: files-changed
|
|
|
|
on:
|
|
workflow_call:
|
|
outputs:
|
|
backend:
|
|
value: ${{ jobs.detect.outputs.backend }}
|
|
frontend:
|
|
value: ${{ jobs.detect.outputs.frontend }}
|
|
docs:
|
|
value: ${{ jobs.detect.outputs.docs }}
|
|
actions:
|
|
value: ${{ jobs.detect.outputs.actions }}
|
|
templates:
|
|
value: ${{ jobs.detect.outputs.templates }}
|
|
docker:
|
|
value: ${{ jobs.detect.outputs.docker }}
|
|
swagger:
|
|
value: ${{ jobs.detect.outputs.swagger }}
|
|
yaml:
|
|
value: ${{ jobs.detect.outputs.yaml }}
|
|
json:
|
|
value: ${{ jobs.detect.outputs.json }}
|
|
e2e:
|
|
value: ${{ jobs.detect.outputs.e2e }}
|
|
|
|
jobs:
|
|
detect:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 3
|
|
permissions:
|
|
contents: read
|
|
outputs:
|
|
backend: ${{ steps.changes.outputs.backend }}
|
|
frontend: ${{ steps.changes.outputs.frontend }}
|
|
docs: ${{ steps.changes.outputs.docs }}
|
|
actions: ${{ steps.changes.outputs.actions }}
|
|
templates: ${{ steps.changes.outputs.templates }}
|
|
docker: ${{ steps.changes.outputs.docker }}
|
|
swagger: ${{ steps.changes.outputs.swagger }}
|
|
yaml: ${{ steps.changes.outputs.yaml }}
|
|
json: ${{ steps.changes.outputs.json }}
|
|
e2e: ${{ steps.changes.outputs.e2e }}
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
|
|
id: changes
|
|
with:
|
|
filters: |
|
|
backend:
|
|
- "**/*.go"
|
|
- "templates/**/*.tmpl"
|
|
- "assets/emoji.json"
|
|
- "go.mod"
|
|
- "go.sum"
|
|
- "Makefile"
|
|
- ".golangci.yml"
|
|
- ".editorconfig"
|
|
- "options/locale/locale_en-US.json"
|
|
|
|
frontend:
|
|
- "*.js"
|
|
- "*.ts"
|
|
- "web_src/**"
|
|
- "tools/*.js"
|
|
- "tools/*.ts"
|
|
- "assets/emoji.json"
|
|
- "package.json"
|
|
- "pnpm-lock.yaml"
|
|
- "Makefile"
|
|
- ".eslintrc.cjs"
|
|
- ".npmrc"
|
|
|
|
docs:
|
|
- "**/*.md"
|
|
- ".markdownlint.yaml"
|
|
- "package.json"
|
|
- "pnpm-lock.yaml"
|
|
|
|
actions:
|
|
- ".github/workflows/*"
|
|
- "Makefile"
|
|
|
|
templates:
|
|
- "tools/lint-templates-*.js"
|
|
- "templates/**/*.tmpl"
|
|
- "pyproject.toml"
|
|
- "uv.lock"
|
|
|
|
docker:
|
|
- ".github/workflows/pull-docker-dryrun.yml"
|
|
- "Dockerfile"
|
|
- "Dockerfile.rootless"
|
|
- "docker/**"
|
|
- "Makefile"
|
|
|
|
swagger:
|
|
- "templates/swagger/v1_json.tmpl"
|
|
- "templates/swagger/v1_input.json"
|
|
- "Makefile"
|
|
- "package.json"
|
|
- "pnpm-lock.yaml"
|
|
- ".spectral.yaml"
|
|
|
|
yaml:
|
|
- "**/*.yml"
|
|
- "**/*.yaml"
|
|
- ".yamllint.yaml"
|
|
- "pyproject.toml"
|
|
|
|
json:
|
|
- "**/*.json"
|
|
|
|
e2e:
|
|
- "tests/e2e/**"
|
|
- "tools/test-e2e.sh"
|
|
- "playwright.config.ts"
|