From a48d1d9aa027db180327f38b27fcf43d2f349317 Mon Sep 17 00:00:00 2001 From: Bill Little Date: Thu, 1 May 2025 16:20:40 +0100 Subject: [PATCH 1/4] ci: generate token for ci-locks pull-request --- .github/workflows/ci-locks.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml index 88d7323..7047d09 100644 --- a/.github/workflows/ci-locks.yml +++ b/.github/workflows/ci-locks.yml @@ -56,12 +56,19 @@ jobs: pixi workspace export conda-explicit-spec --environment ${{ env.NAME }} --frozen --ignore-pypi-errors requirements pixi workspace export conda-environment --environment ${{ env.NAME }} requirements/mo-pack.yml + - name: "generate token" + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a + id: generate-token + with: + app_id: ${{ secrets.AUTH_APP_ID }} + private_key: ${{ secrets.AUTH_APP_PRIVATE_KEY }} + - name: "create pull-request" id: cpr if: ${{ hashFiles('diff.md') }} uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ steps.generate-token.outputs.token }} add-paths: | ${{ github.workspace }}/pixi.lock ${{ github.workspace }}/requirements/mo-pack*.txt From d12af7259b793e9f050ed574ef0992742512092f Mon Sep 17 00:00:00 2001 From: Bill Little Date: Thu, 1 May 2025 17:10:26 +0100 Subject: [PATCH 2/4] review actions --- .github/workflows/ci-locks.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml index 7047d09..2c22857 100644 --- a/.github/workflows/ci-locks.yml +++ b/.github/workflows/ci-locks.yml @@ -57,11 +57,11 @@ jobs: pixi workspace export conda-environment --environment ${{ env.NAME }} requirements/mo-pack.yml - name: "generate token" - uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a + uses: actions/create-github-app-token@v2 id: generate-token with: - app_id: ${{ secrets.AUTH_APP_ID }} - private_key: ${{ secrets.AUTH_APP_PRIVATE_KEY }} + app-id: ${{ secrets.AUTH_APP_ID }} + private-qkey: ${{ secrets.AUTH_APP_PRIVATE_KEY }} - name: "create pull-request" id: cpr From 0edde06be54a6566b8baedfa3881d16c74adfb80 Mon Sep 17 00:00:00 2001 From: Bill Little Date: Thu, 1 May 2025 17:19:45 +0100 Subject: [PATCH 3/4] Update .github/workflows/ci-locks.yml Co-authored-by: Martin Yeo <40734014+trexfeathers@users.noreply.github.com> --- .github/workflows/ci-locks.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml index 2c22857..9b49500 100644 --- a/.github/workflows/ci-locks.yml +++ b/.github/workflows/ci-locks.yml @@ -61,7 +61,7 @@ jobs: id: generate-token with: app-id: ${{ secrets.AUTH_APP_ID }} - private-qkey: ${{ secrets.AUTH_APP_PRIVATE_KEY }} + private-key: ${{ secrets.AUTH_APP_PRIVATE_KEY }} - name: "create pull-request" id: cpr From 37e3606c338228898e07454e08ccee117bcc7b23 Mon Sep 17 00:00:00 2001 From: Bill Little Date: Thu, 1 May 2025 17:28:47 +0100 Subject: [PATCH 4/4] review actions --- .github/workflows/ci-locks.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/ci-locks.yml b/.github/workflows/ci-locks.yml index 9b49500..0520abc 100644 --- a/.github/workflows/ci-locks.yml +++ b/.github/workflows/ci-locks.yml @@ -24,10 +24,6 @@ defaults: run: shell: bash -l {0} -permissions: - contents: write - pull-requests: write - jobs: locks-update: name: "update lockfiles"