Michael Daniels
4a45de05bd
workflows: appease zizmor by installing npm pkgs from lockfile
2026-07-21 19:30:53 -04:00
Hythera
8bbed87799
workflows/teams: fix execution day of comment
2026-06-08 22:41:22 +02:00
dependabot[bot]
d90a8da39f
.github: Bump actions/checkout from 6.0.2 to 6.0.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](de0fac2e45...df4cb1c069 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-05 11:22:54 +00:00
Martin Weinelt
1cf127e528
workflows: migrate from app-id to client-id
...
See https://github.com/actions/create-github-app-token/releases/tag/v3.1.0 .
2026-05-26 03:06:17 +02:00
dependabot[bot]
8a91364b57
.github: Bump actions/create-github-app-token from 3.1.1 to 3.2.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.1.1 to 3.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](1b10c78c78...bcd2ba4921 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-15 11:25:37 +00:00
Michael Daniels
94779b2284
.github: Bump actions/create-github-app-token from 3.0.0 to 3.1.1 ( #510858 )
2026-04-17 13:33:17 +00:00
dependabot[bot]
a641fbe953
.github: Bump actions/create-github-app-token from 3.0.0 to 3.1.1
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 3.0.0 to 3.1.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](f8d387b68d...1b10c78c78 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 11:23:22 +00:00
dependabot[bot]
3a60da8896
.github: Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](c0f553fe54...5f6978faf0 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-17 11:23:10 +00:00
dependabot[bot]
b7e66be21f
.github: Bump actions/github-script from 8.0.0 to 9.0.0
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](ed597411d8...3a2844b7e9 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-10 11:23:10 +00:00
dependabot[bot]
c9593d281a
workflows: bump actions/create-github-app-token from 2.2.1 to 3.0.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](29824e69f5...f8d387b68d )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-16 18:12:34 -04:00
Michael Daniels
c249afb851
workflows/{bot,check,teams}: pin bottleneck version
2026-02-15 10:21:32 -05:00
Philip Taron
27e350c16d
build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 ( #483978 )
2026-01-26 12:44:43 +00:00
dependabot[bot]
d5e4fa4444
build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](98357b18bf...c0f553fe54 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 12:25:00 +00:00
dependabot[bot]
0f2f886044
build(deps): bump actions/checkout from 6.0.1 to 6.0.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 12:24:55 +00:00
dependabot[bot]
ae757e2c85
build(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.11 to 8.0.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](22a9089034...98357b18bf )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 11:03:45 +00:00
Philip Taron
974bee2dc6
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 ( #468944 )
2025-12-08 12:57:49 +00:00
Philip Taron
1821a13456
build(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 ( #468943 )
2025-12-08 12:57:00 +00:00
dependabot[bot]
67efee554c
build(deps): bump peter-evans/create-pull-request from 7.0.9 to 7.0.11
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.9 to 7.0.11.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](84ae59a2cd...22a9089034 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 7.0.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 11:04:11 +00:00
dependabot[bot]
5e90578a17
build(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](7e473efe3c...29824e69f5 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 11:04:06 +00:00
dependabot[bot]
25c33e559a
build(deps): bump actions/checkout from 6.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1af3b93b68...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 11:03:57 +00:00
Wolfgang Walther
1289456d3b
workflows: run smaller jobs on ubuntu-slim
...
This is in public preview now. These runners run in a docker container
with only a single vCPU instead of 4 like the other jobs. For most of
our jobs, this should be plenty, except for eval and linting.
2025-11-25 11:44:14 +01:00
Wolfgang Walther
e24f26dc20
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 ( #464559 )
2025-11-24 13:03:59 +00:00
Wolfgang Walther
64aa47acf0
build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 ( #464561 )
2025-11-24 13:03:24 +00:00
dependabot[bot]
6029d82a8a
build(deps): bump actions/checkout from 5.0.0 to 6.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...1af3b93b68 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 12:17:05 +00:00
dependabot[bot]
7c482d98e1
build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0
...
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](6701853927...7e473efe3c )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 2.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 12:16:50 +00:00
dependabot[bot]
83fc104756
build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 7.0.8 to 7.0.9.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](271a8d0340...84ae59a2cd )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 7.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 12:16:42 +00:00
Markus S. Wamser
694cb8ac10
workflows/teams: restrict to NixOS org
...
without the restriction the workflow would trigger on all forks,
but it is only relevant on NixOS/nixpkgs
2025-11-10 22:36:24 +01:00
Wolfgang Walther
1742aef1e9
workflows/teams: use single token in team sync
...
The nixpkgs-ci app now has all the privileges needed to see the member
lists anyway, so no need for two apps / tokens anymore.
2025-11-06 12:11:34 +01:00
Silvan Mosberger
72d9fc32fe
workflows/team: Prefix PR branch with create-pull-request
...
Allows better scoping of branch creation restrictions
2025-10-28 15:49:42 +01:00
Wolfgang Walther
81005856bb
workflows/teams: consistent style with other workflows
...
These are style-only formatting changes, that are not enforced via
tooling - but used consistently in the other workflow files.
2025-10-28 11:43:07 +01:00
Wolfgang Walther
42de52d21a
workflows/teams: rename from team
...
Keeping the workflow filename in-sync with the visible name.
2025-10-28 11:39:37 +01:00