Commit Graph

29 Commits

Author SHA1 Message Date
Jia Yuan Lo b2d81d3e55 fix(ci/packages_updates): use GITHUB_TOKEN for dry run 2024-05-04 01:30:21 +08:00
Jia Yuan Lo 469bb9fe82 ci(package_updates): allow dry run auto update in PR 2024-05-04 01:17:46 +08:00
Jia Yuan Lo 3347593885 ci(package_updates): update list of packages to free up space
To match packages.yml
2024-05-04 01:17:46 +08:00
Jia Yuan Lo 6fed5dfc70
ci(package_updates.yml): always clean up for spaces (#17810)
As more packages get enabled for auto update, there is a need for more
spaces for CI to complete.
2023-09-22 13:19:30 +08:00
dependabot[bot] 089a1eccbb build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-05 17:24:58 +05:30
Tee KOBAYASHI 0fa8530659
workflows: Use `TERMUXBOT2_TOKEN`
instead of `GH_API_KEY`.
2023-02-08 21:59:42 +01:00
Alex fdead17156
chore,ci: use explicit permissions for GitHub Actions
Quoted from #11735:
This commit adds explicit [permissions
section](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions)
to workflows. This is a security best practice because by default
workflows run with [extended set of
permissions](https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)
(except from `on: pull_request` [from external
forks](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)).
By specifying any permission explicitly all others are set to none. By
using the principle of least privilege the damage a compromised workflow
can do (because of an
[injection](https://securitylab.github.com/research/github-actions-untrusted-input/)
or compromised third party tool or action) is restricted.\r\nIt is
recommended to have [most strict permissions on the top
level](https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions)
and grant write permissions on [job
level](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs)
case by case.

Co-Authored-By: Alex <93376818+sashashura@users.noreply.github.com>
2022-08-28 08:59:01 +05:30
Henrik Grimler 6cf9f35fac
scripts,ci(*): use termux.dev instead of termux.org
We are now mainly promoting and using termux.dev, so lets switch all
the urls.
2022-07-02 10:41:16 +02:00
Yaksh Bariya 029da6a2dd
ci: use v3 of actions/{checkout,download-artifact,upload-artifact} 2022-04-26 19:41:35 +05:30
Aditya Alok 92ea572ede
ci(package_updates.yml): use `contact@termux.org` for git email
Signed-off-by: Aditya Alok <dev.aditya.alok@gmail.com>
2022-03-28 23:45:07 +05:30
Aditya Alok 5377dbc8b8 ci(package_updates.yml): adhere to new update system
Signed-off-by: Aditya Alok <dev.aditya.alok@gmail.com>
2022-03-28 23:11:11 +05:30
Henrik Grimler eb66dbe60f
package_updates: switch contact email to one at termux.org 2022-02-18 11:01:58 +01:00
Yaksh Bariya 9874a3fd8d
Revert "Delete Package Update workflow" 2022-02-07 17:02:43 +05:30
Yaksh Bariya f6b5153ac9
Delete Package Update workflow 2022-02-07 17:02:31 +05:30
Henrik Grimler 567e223183
Revert "github actions: use per-repository token for automatic package updates workflow"
This reverts commit fc95ff7881.

Unfortunately GITHUB_TOKEN authentication cannot start other action
(recent automatic update pushes haven't been built), so switch back to
a new personal access token (generated by me).

Ref: https://stackoverflow.com/a/67551255
2022-02-02 14:14:57 +01:00
xeffyr fc95ff7881
github actions: use per-repository token for automatic package updates workflow 2022-01-31 19:47:26 +02:00
Yaksh Bariya 46423f3675
CI: limit package-updates actions scope
Running this action in forks has literally no sense
2021-10-31 10:33:30 +05:30
Leonid Pliushch 2283ce7ecd
github actions: fix auto updates script name 2021-10-04 13:23:28 +03:00
Leonid Pliushch 74e4f276c6
scripts: move script for updating packages to bin directory 2021-10-04 13:22:07 +03:00
Leonid Pliushch 7ffda0cf62
automatic updates: use Termux email for git
Do not use my email for automated commits, so GitHub won't assign them to
my account.
2021-07-22 21:27:42 +03:00
Leonid Pliushch a33bfe8acc
Revert "github actions: remove package_updates.yml (automatic updates)"
This reverts commit 468b4d4063.
2021-06-13 22:21:41 +03:00
Leonid Pliushch 468b4d4063
github actions: remove package_updates.yml (automatic updates)
Begin phasing out dl.bintray.com/termux/termux-packages-24.

Before Bintray will go read-only (28 Feb), we need to ensure that
its repo has consistent state and no/minimal amount of issues as
large amount of users will continue to use it until Bintray finally
go down.

I still leaving autobuild/autodeploy (packages.yml) to Bintray repo
to process all remaining updates or pull requests with for short time.
2021-02-08 18:15:57 +02:00
Leonid Pliushch 2aed379af2
CI: package updates: use my token for cloned repo 2020-12-18 00:26:53 +02:00
Leonid Pliushch 6ab6ffa865
CI: fetch all commits in package_updates.yml 2020-12-18 00:07:12 +02:00
Leonid Pliushch 8fec9045fd
CI: run package updates every 6 hours 2020-12-17 23:52:50 +02:00
Leonid Pliushch 5dfac1d75b
CI: allow workflow 'package updates' to be triggered manually 2020-12-17 23:50:16 +02:00
Leonid Pliushch a182182d8e
CI: allow to push updates 2020-12-17 23:44:44 +02:00
Leonid Pliushch 61e23dd6c6
CI: experimental support for automatically checking updates, building them and committing
No push to main repo is performed currently.
2020-12-17 22:24:13 +02:00
Leonid Pliushch a531f0da37
CI: add workflow for check-updates.sh
For now script will just check package updates each 6 hours and print
them to console. Nothing will be built/pushed.

Functionality will be extended gradually.
2020-12-17 16:36:08 +02:00