Skip to content
This repository has been archived by the owner on Aug 24, 2023. It is now read-only.

chore(renovate): replace dependabot with renovate #43

Merged
merged 1 commit into from
Aug 31, 2022
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 0 additions & 22 deletions .github/dependabot.yml

This file was deleted.

28 changes: 28 additions & 0 deletions .github/renovate.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": ["config:base", "helpers:pinGitHubActionDigests", ":semanticCommitTypeAll(bump)"],
"dependencyDashboard": true,
"dependencyDashboardAutoclose": false,
"major": {
"dependencyDashboardApproval": true
},
"rangeStrategy": "bump",
"packageRules": [
{
"matchPackagePatterns": ["eslint"],
"groupName": "eslint"
},
{
"matchPackagePatterns": ["jest"],
"groupName": "jest"
},
{
"matchPackagePatterns": ["^@birthdayresearch/contented"],
"groupName": "@birthdayresearch/contented"
},
{
"matchPackagePatterns": ["^@birthdayresearch/sticky", "^@birthdayresearch/eslint-config"],
"groupName": "@birthdayresearch/sticky"
}
]
}
20 changes: 10 additions & 10 deletions .github/workflows/cd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,10 +19,10 @@ jobs:
runs-on: ubuntu-latest
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I normally like to hardcode the version. But could you please let me know the rational of using latest here :) ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

True we should do it for builds.

Normally, CD is inconsequential with multi-platform with docker qemu + buildx. However, since we're not building on image layer and including the binary directly we're not benefiting from it.

  • I think what we need is for cd.yml to utilize building on docker engine so we can utilize docker qemu.
  • While for ci.yml our builds should run on multi-platform via a matrix targeting different versions.

@DieHard073055 can you open 2 separate issues for these 2 problems.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I hope i understood everything.
#61
#62

steps:
- name: Checkout
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- name: Cache
uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77
uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3.0.8
with:
path: |
~/.cargo/bin/
Expand All @@ -33,7 +33,7 @@ jobs:
key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}

- name: Set up rust toolchain
uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # tag=v1.0.6
with:
profile: minimal
toolchain: nightly
Expand All @@ -42,7 +42,7 @@ jobs:
override: true

- name: Cargo build
uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505
uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # tag=v1.0.3
with:
command: build
args: --release --all
Expand All @@ -53,20 +53,20 @@ jobs:
cp target/release/meta-node build/
- name: Set up QEMU
uses: docker/setup-qemu-action@8b122486cedac8393e77aa9734c3528886e4a1a8
uses: docker/setup-qemu-action@8b122486cedac8393e77aa9734c3528886e4a1a8 # tag=v2.0.0

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@dc7b9719a96d48369863986a06765841d7ea23f6
uses: docker/setup-buildx-action@dc7b9719a96d48369863986a06765841d7ea23f6 # tag=v2.0.0

- name: Login to GitHub Container Registry
uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b
uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b # tag=v2.0.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}

- name: Tags
uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66
uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66 # tag=v6.2.0
id: tags
with:
script: |
Expand Down Expand Up @@ -94,7 +94,7 @@ jobs:
sed -i 's/FROM /FROM --platform=$BUILDPLATFORM /g' ./Dockerfile
- name: Build & Publish
uses: docker/build-push-action@c84f38281176d4c9cdb1626ffafcd6b3911b5d94
uses: docker/build-push-action@c84f38281176d4c9cdb1626ffafcd6b3911b5d94 # tag=v3.1.1
with:
context: .
file: ./Dockerfile
Expand All @@ -108,7 +108,7 @@ jobs:

- name: Post Report
if: github.event_name == 'pull_request'
uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443
uses: marocchino/sticky-pull-request-comment@39c5b5dc7717447d0cba270cd115037d32d28443 # tag=v2.2.0
with:
header: release
message: |
Expand Down
35 changes: 18 additions & 17 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,9 +14,9 @@ jobs:
Build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77
- uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3.0.8
with:
path: |
~/.cargo/bin/
Expand All @@ -26,15 +26,15 @@ jobs:
target/
key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}

- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # tag=v1.0.6
with:
profile: minimal
toolchain: nightly
target: wasm32-unknown-unknown
default: true
override: true

- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505
- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # tag=v1.0.3
with:
command: build
args: --release --all
Expand All @@ -43,9 +43,9 @@ jobs:
name: Lint (cargo fmt)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # tag=v1.0.6
with:
profile: minimal
toolchain: nightly
Expand All @@ -54,7 +54,7 @@ jobs:
override: true
components: rustfmt

- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505
- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # tag=v1.0.3
with:
command: fmt
args: --all -- --check
Expand All @@ -63,9 +63,9 @@ jobs:
name: Lint (cargo clippy)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # tag=v1.0.6
with:
profile: minimal
toolchain: nightly
Expand All @@ -74,25 +74,25 @@ jobs:
override: true
components: clippy

- uses: actions-rs/clippy-check@b5b5f21f4797c02da247df37026fcd0a5024aa4d
- uses: actions-rs/clippy-check@b5b5f21f4797c02da247df37026fcd0a5024aa4d # tag=v1.0.7
with:
token: ${{ secrets.GITHUB_TOKEN }}
args: --all-features

Test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af
- uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # tag=v1.0.6
with:
profile: minimal
toolchain: nightly
target: wasm32-unknown-unknown
default: true
override: true

- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505
- uses: actions-rs/cargo@844f36862e911db73fe0815f00a4a2602c279505 # tag=v1.0.3
with:
command: test
args: --all-features --no-fail-fast
Expand All @@ -102,18 +102,19 @@ jobs:
RUSTDOCFLAGS: '-Zprofile -Ccodegen-units=1 -Cinline-threshold=0 -Clink-dead-code -Coverflow-checks=off -Cpanic=abort -Zpanic_abort_tests'

- id: coverage
uses: actions-rs/grcov@770fa904bcbfc50da498080d1511da7388e6ddc6
uses: actions-rs/grcov@770fa904bcbfc50da498080d1511da7388e6ddc6 # tag=v0.1.6

- uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378
- uses: codecov/codecov-action@81cd2dc8148241f03f5839d295e000b8f761e378 # tag=v3.1.0
with:
files: ${{ steps.coverage.outputs.report }}
fail_ci_if_error: true

e2e:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1
with:
node-version: '16'
cache: 'npm'
Expand Down
7 changes: 4 additions & 3 deletions .github/workflows/docs-release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
result: ${{ steps.version.outputs.result }}
steps:
- id: version
uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66
uses: actions/github-script@c713e510dbd7d213d92d41b7a7805a986f4c5c66 # tag=v6.2.0
with:
script: |
const semver = context.ref.replace('refs/tags/v', '')
Expand All @@ -30,8 +30,9 @@ jobs:
needs: Version
environment: NPM Release
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1
with:
node-version: '16'

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/oss-governance-bot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,6 @@ jobs:
Bot:
runs-on: ubuntu-latest
steps:
- uses: BirthdayResearch/oss-governance-bot@52367df5cdbc6ede6126a1db7a663f22cffe739c
- uses: BirthdayResearch/oss-governance-bot@52367df5cdbc6ede6126a1db7a663f22cffe739c # tag=v2.0.11
with:
github-token: ${{ secrets.DEFICHAIN_BOT_GITHUB_TOKEN }}
2 changes: 1 addition & 1 deletion .github/workflows/oss-governance-labeler.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ jobs:
Labeler:
runs-on: ubuntu-latest
steps:
- uses: fuxingloh/multi-labeler@fb9bc28b2d65e406ffd208384c5095793c3fd59a
- uses: fuxingloh/multi-labeler@fb9bc28b2d65e406ffd208384c5095793c3fd59a # tag=v1.8.0
with:
github-token: ${{ secrets.DEFICHAIN_BOT_GITHUB_TOKEN }}
config-path: .github/labeler.yml
4 changes: 2 additions & 2 deletions .github/workflows/oss-governance-labels.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,9 +13,9 @@ jobs:
Labels:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2

- uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c
- uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # tag=v1.3.0
with:
prune: true
env:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-drafter.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,6 @@ jobs:
main:
runs-on: ubuntu-latest
steps:
- uses: release-drafter/release-drafter@06a49bf28488e030d35ca2ac6dbf7f408a481779
- uses: release-drafter/release-drafter@06a49bf28488e030d35ca2ac6dbf7f408a481779 # tag=v5.20.1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}