mirror of
https://github.com/ohmyzsh/ohmyzsh.git
synced 2026-11-09 10:17:38 -05:00
c483ff288d
Bumps the gha-minor group with 1 update: [step-security/harden-runner](https://github.com/step-security/harden-runner). Updates `step-security/harden-runner` from 2.22.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/dc2769abcc0fcfbadfc1df54081c1608579ef6b2...46b06cea07f9e64621fdf066ba77ac6915163d43) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
47 lines
1.5 KiB
YAML
47 lines
1.5 KiB
YAML
name: Update dependencies
|
|
on:
|
|
workflow_dispatch: {}
|
|
schedule:
|
|
- cron: "0 6 * * 0"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
check:
|
|
name: Check for updates
|
|
runs-on: ubuntu-latest
|
|
if: github.repository == 'ohmyzsh/ohmyzsh'
|
|
permissions:
|
|
contents: write # this is needed to push commits and branches
|
|
steps:
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3
|
|
with:
|
|
egress-policy: audit
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Authenticate as @ohmyzsh
|
|
id: generate-token
|
|
uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
|
|
with:
|
|
client-id: ${{ secrets.OHMYZSH_CLIENT_ID }}
|
|
private-key: ${{ secrets.OHMYZSH_APP_PRIVATE_KEY }}
|
|
- name: Setup Python
|
|
uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
|
|
with:
|
|
python-version: "3.12"
|
|
cache: "pip"
|
|
- name: Process dependencies
|
|
env:
|
|
GH_TOKEN: ${{ steps.generate-token.outputs.token }}
|
|
GIT_APP_NAME: ohmyzsh[bot]
|
|
GIT_APP_EMAIL: 54982679+ohmyzsh[bot]@users.noreply.github.com
|
|
TMP_DIR: ${{ runner.temp }}
|
|
run: |
|
|
pip install -r .github/workflows/dependencies/requirements.txt
|
|
python3 .github/workflows/dependencies/updater.py
|