dependabot[bot]
121838ea38
.github: Bump actions/labeler from 6.2.0 to 7.0.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.2.0 to 7.0.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](b8dd2d9be0...bf12e9b00b )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-24 11:22:52 +00:00
Matt Sturgeon
e4a4855697
ci/pinned: bump nixpkgs ( #544224 )
2026-07-22 13:20:37 +00:00
Michael Daniels
4a45de05bd
workflows: appease zizmor by installing npm pkgs from lockfile
2026-07-21 19:30:53 -04:00
klea
9322705190
workflows: Node 24 is now the default
...
https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Says they updated the migration date to 2026-06-16.
2026-07-20 09:10:13 +00:00
dependabot[bot]
58b83392e9
.github: Bump actions/labeler from 6.1.0 to 6.2.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](f27b608878...b8dd2d9be0 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 11:22:52 +00:00
dependabot[bot]
d90a8da39f
.github: Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...df4cb1c069 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-05 11:22:54 +00:00
Martin Weinelt
1cf127e528
workflows: migrate from app-id to client-id
...
See https://github.com/actions/create-github-app-token/releases/tag/v3.1.0 .
2026-05-26 03:06:17 +02:00
Michael Daniels
8a89d7a286
ci/github-script: update npm versions
2026-05-17 14:41:57 -04:00
dependabot[bot]
8a91364b57
.github: Bump actions/create-github-app-token from 3.1.1 to 3.2.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](1b10c78c78...bcd2ba4921 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 11:25:37 +00:00
dependabot[bot]
79a640a7f1
.github: Bump actions/labeler from 6.0.1 to 6.1.0
...
Bumps [actions/labeler](https://github.com/actions/labeler ) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](634933edcd...f27b608878 )
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 11:27:27 +00:00
dependabot[bot]
a641fbe953
.github: Bump actions/create-github-app-token from 3.0.0 to 3.1.1
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.0.0 to 3.1.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](f8d387b68d...1b10c78c78 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 11:23:22 +00:00
dependabot[bot]
b7e66be21f
.github: Bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](ed597411d8...3a2844b7e9 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-10 11:23:10 +00:00
dependabot[bot]
c9593d281a
workflows: bump actions/create-github-app-token from 2.2.1 to 3.0.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](29824e69f5...f8d387b68d )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 18:12:34 -04:00
Jamie Magee
55b21e9fd6
workflows: document write permissions
2026-03-04 14:46:50 -08:00
Michael Daniels
c249afb851
workflows/{bot,check,teams}: pin bottleneck version
2026-02-15 10:21:32 -05:00
Marcin Serwin
d6678d806e
ci: pin @actions/artifact to 5.0.3
...
Signed-off-by: Marcin Serwin <marcin@serwin.dev >
2026-01-29 20:25:06 +01:00
dependabot[bot]
0f2f886044
build(deps): bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 12:24:55 +00:00
Aliaksandr
20ca66ac68
ci(bot): add token fallback for labeler actions
...
Use github.token when app token is not available (in forks).
2026-01-24 01:15:34 +02:00
Philip Taron
1821a13456
build(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 ( #468943 )
2025-12-08 12:57:00 +00:00
dependabot[bot]
5e90578a17
build(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](7e473efe3c...29824e69f5 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 11:04:06 +00:00
dependabot[bot]
25c33e559a
build(deps): bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 11:03:57 +00:00
Wolfgang Walther
1289456d3b
workflows: run smaller jobs on ubuntu-slim
...
This is in public preview now. These runners run in a docker container
with only a single vCPU instead of 4 like the other jobs. For most of
our jobs, this should be plenty, except for eval and linting.
2025-11-25 11:44:14 +01:00
Wolfgang Walther
64aa47acf0
build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 ( #464561 )
2025-11-24 13:03:24 +00:00
dependabot[bot]
6029d82a8a
build(deps): bump actions/checkout from 5.0.0 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...1af3b93b68 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 12:17:05 +00:00
dependabot[bot]
7c482d98e1
build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](6701853927...7e473efe3c )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 12:16:50 +00:00
Wolfgang Walther
74d6ba3ab4
Revert "wprkflows/bot: increase frequency to every 5 minutes"
...
This partially reverts commit 1197fe48da .
GitHub just doesn't schedule these narrow intervals. 10 minutes is
alright in practice.
2025-11-04 19:49:07 +01:00
Wolfgang Walther
1197fe48da
wprkflows/bot: increase frequency to every 5 minutes
...
This makes reactions to merge comments and all the labeling a bit
quicker. Lower the number of backlog items to process per run
accordingly, so that we don't really need more API requests for it.
2025-11-04 16:13:41 +01:00
Wolfgang Walther
5cfe736140
workflows/bot: touch cron schedule
...
The last user to touch the schedule will be notified about errors in the
scheduled run. I used to be that, but somehow when renaming the workflow
this didn't happen anymore, so I didn't noticed the workflow failing for
quite some time.
2025-11-03 12:17:20 +01:00
Wolfgang Walther
a5296ec9d5
workflows/bot: request read permissions for members
...
The nixpkgs-ci token used in CI doesn't have permissions to read the
member list of the nixpkgs-committers team, yet. Let's request this
permission and see whether that fixes the errors we get so far.
2025-11-01 16:29:27 +01:00
Wolfgang Walther
eea09eb9d3
workflows/bot: migrate nixpkgs-merge-bot to GHA
...
Running the nixpkgs-merge-bot in GitHub Actions instead of a separate
workflow has multiple advantages:
- A much better development workflow, with improved testability.
- The ability to label PRs with a "merge-bot eligible" label from the
same codebase.
- Using more data for merge strategy decisions, for example the number
of rebuilds.
This commits re-implements most of the features from the current
nxipkgs-merge-bot directly in the bot workflow. Instead of reacting to
webhook events, this now runs on the regular 10 minute schedule. Some
merges might be delayed a few minutes, but that should not be a problem
in practice.
To give the user early feedback, there are additional workflows running
when a comment or review is posted. These react with "eyes" to make the
user aware that the comment has been recognized.
The only feature not taken over was the size check for files in the PR.
This kind of check is not really relevant for maintainer merges only -
if we want to prevent bigger files from making it into the tree, then we
need a generic CI check, which is out of scope for the merge-bot.
Other than that, everything should be implemented - any omissions are by
accident.
2025-11-01 15:54:51 +01:00
Wolfgang Walther
d78de15627
workflows/bot: rename from labels
...
This workflow / script is already doing more than must labeling: it's
already auto-closing package request issues.
Since we're going to migrate the nixpkgs-merge-bot into this workflow,
we'll rename things to a more generic name.
2025-11-01 15:24:09 +01:00