[WIP] github: protect the version of actions/checkout used in build-compat job#3894
[WIP] github: protect the version of actions/checkout used in build-compat job#3894masatake wants to merge 1 commit into
Conversation
masatake
changed the title
The name looks too long. |
masatake
force-pushed
the
ci--protect-build-compat-from-dependabot
branch
from
62d3a6d to
84379a8
Compare
masatake
changed the title
masatake
force-pushed
the
ci--protect-build-compat-from-dependabot
branch
from
84379a8 to
09325d5
Compare
masatake
force-pushed
the
ci--protect-build-compat-from-dependabot
branch
3 times, most recently
from
4180c47 to
0524919
Compare
I'm not sure what this should be. |
| # update the versions in your source tree. If your actions are in | ||
| # a separate file, you can add that file to Dependabot's exclude | ||
| # list. | ||
| name: call with ${{ matrix.image }} |
There was a problem hiding this comment.
Why the name is not build ${{ matrix.image }} like we have in other places?
It seems the final name is created (merged) from both names, which means:
build-compat.yml:name / cibuild.yml:call-build-compat:name.
Maybe the cibuild.yml:call-build-compat:name does not have to be set at all. Did you try it?
There was a problem hiding this comment.
If I don't set cibuild.yml:call-build-compat:name and set ${{ inputs.image }} to build-compat.yml:name, we get call-build-compat (ubuntu:18.04) / ubuntu:18.04 (pull_request). See the update commit.
|
Would it be possible to use in .github/dependabot.yml But I'm absolutely not sure which part of the configuration is the dependency-name we need to address (maybe it's the 'name:` field in the actions). Dependbot supports an 'ignore:' option to exclude certain things, but ... |
masatake
force-pushed
the
ci--protect-build-compat-from-dependabot
branch
from
0524919 to
c02d8ee
Compare
masatake
force-pushed
the
ci--protect-build-compat-from-dependabot
branch
from
c02d8ee to
14d9892
Compare
OK. I will try the way that modifies only dependabot.yml file in my repository. |
masatake
changed the title
2 participants
Updating action/checkout proposed by the dependabot has caused troubles:
5756e7b,
561f0bb, and
2af05e8.
This change places the original job in a separate file and adds that file to the exclude list.