Commit graph

183 commits

Author SHA1 Message Date
nate smith
9b1be750d2 oops 2021-11-24 16:45:27 -06:00
nate smith
1ba03938a1 automatically label non-core issues 2021-11-24 16:32:07 -06:00
nate smith
9326824e9e self-assign core team PRs 2021-11-24 16:31:17 -06:00
nate smith
0e52f429c0 label external PRs as such 2021-11-24 16:30:31 -06:00
Mislav Marohnić
1464a8a0f3 Generate release notes using the new API
https://docs.github.com/en/rest/reference/repos#generate-release-notes-content-for-a-release
2021-10-14 20:22:38 +02:00
Mislav Marohnić
53479c712c
Merge pull request #4510 from cli/dependabot-patch
Configure Dependabot to only consider patch version bumps
2021-10-13 21:01:39 +02:00
Mislav Marohnić
127e2dae99 Configure Dependabot to only consider patch version bumps
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#ignore
2021-10-13 20:06:19 +02:00
Mislav Marohnić
2819deb15b Avoid applying human-oriented PR automation to PRs from bots 2021-10-11 11:33:44 +02:00
Mislav Marohnić
dabaa5ad7d CodeQL-Dependabot compatibility
Configure the CodeQL workflow to avoid running for pushes on all pull
requests because that causes problems with Dependabot PRs.

https://github.com/cli/cli/pull/4475/checks?check_run_id=3857074760
2021-10-11 11:27:54 +02:00
flying-cow
706dede7ac Enable dependabot to get security updates and if needed version updates on dependencies
https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically

Having knowledge about vulnerabilities of the dependencies helps the project owners decide on their dependencies security posture to make decisions.

If the project decides to get updates only on security updates and not on any version updates then setting these options would not open any PR 's open-pull-requests-limit: 0
2021-10-10 19:41:30 -05:00
Mislav Marohnić
2f45173370 Publish docs site using a deploy key instead of PAT
I'd like to decommission SITE_GITHUB_TOKEN as it's a PAT that has write
access to all my `github/*` repositories. Instead, I've created a deploy
key that only has access to `github/cli.github.com`.

    ssh-keygen -t ed25519 -C "gh docs push" -N "" -f ~/.ssh/gh-docs-publish
    gh repo -R github/cli.github.com deploy-key add ~/.ssh/gh-docs-publish.pub

    # testing:
    GIT_SSH_COMMAND='ssh -i $HOME/.ssh/gh-docs-publish' git push ...
2021-09-13 16:30:40 +02:00
Mislav Marohnić
eb78ac0dcb Require Go 1.16+ 2021-08-23 18:08:09 +02:00
Robin Neatherway
6ebafb55ae
Extend query suite with quality queries 2021-08-19 15:05:28 +01:00
Mislav Marohnić
5a46c1cab6
Merge pull request #4043 from cli/upgrade-goreleaser
This reverts commit 85d0447.
2021-07-28 21:07:29 +02:00
Mislav Marohnić
85d0447a6e
Revert "Update GoReleaser to v0.172.1" 2021-07-20 21:39:50 +02:00
chemotaxis
ab675a33f3 Upgrade GoReleaser
Now that the config file is updated, upgrade from v0.169.0 to v0.172.1.
2021-07-01 18:41:13 -04:00
vilmibm
3cc4c40dcb pin goreleaser version 2021-06-29 13:52:10 -05:00
Vishesh Gupta
4d20aa7873
Merge pull request #3801 from Vishesh-Gupta/automate-winget-release
Automate packaging for Winget
2021-06-18 15:56:58 +02:00
Param Patidar
c34d017a04
fix project layout link 2021-06-02 12:33:40 +05:30
vilmibm
2d704ba591 bonus: support sid 2021-05-19 16:51:58 -05:00
Mislav Marohnić
068ad31c14
Add support for new Ubuntu, Kali linux (#3645)
Co-authored-by: vilmibm <vilmibm@neongrid.space>
2021-05-18 08:11:47 +02:00
Mislav Marohnić
adbfb6e8de
Merge pull request #3638 from cli/release-discussion
Create a Release Discussion on every new release
2021-05-17 15:37:39 +02:00
Mislav Marohnić
02b7a71783
Add project layout documentation (#3587) 2021-05-11 21:21:57 +02:00
Mislav Marohnić
26d2e5c5ce Rework our pull request template (#3584) 2021-05-11 17:08:28 +02:00
Mislav Marohnić
f18929cf3d Increase linter timeout from 1min to 3min
Hopefully avoids CI failures like https://github.com/cli/cli/runs/2379956774
2021-04-19 12:53:52 +02:00
Mislav Marohnić
93b5bf20eb Fix secrets in PR automation being available to PR from forks 2021-04-13 11:10:13 +02:00
Mislav Marohnić
a35d451b67 Fix PR automation workflow
- Use AUTOMATION_TOKEN to get around "resource not available by
  integration". It looks like jobs triggered from community pull
  requests do not have permissions to write to our project.

- Tolerate the "project already has the associated issue" error for
  staff as non-fatal.
2021-04-02 15:31:22 +02:00
Mislav Marohnić
531b15c831 Fix pr automation workflow 2021-03-31 18:39:00 +02:00
Mislav Marohnić
a238d2952d Dynamically resolve the column ID for "Needs review" 2021-03-29 15:29:08 +02:00
Mislav Marohnić
c1c936b74b Improve PR lint script
- Do not add draft PRs to the review board
- Do not enforce that the base branch must be "trunk"
- Refuse PRs made with our "trunk" as the head
- Improve staff check to avoid hardcoding
- Improve pattern matching when suggesting to link to an issue
- Use the stock GITHUB_TOKEN
2021-03-29 15:05:34 +02:00
vilmibm
bfdad5bd48 fix missing PRAUTHOR and add TODO 2021-03-10 18:15:01 -06:00
vilmibm
7675588280 grep tweaks 2021-03-10 18:07:09 -06:00
vilmibm
31312d22d0 meh 2021-03-10 14:49:42 -06:00
vilmibm
8ddc82e557 rename 2021-03-10 14:13:47 -06:00
vilmibm
75ac2595b3 add workflow 2021-03-10 14:01:15 -06:00
Nate Smith
de5c04f721
Merge pull request #2856 from cli/fix-rpms
run createrepo via docker
2021-02-01 13:20:51 -08:00
Mislav Marohnić
7e8348a68f
Remove duplicate link to report a security vulnerability
We already have a `.github/security.md` file which auto-generates a link in the issue template chooser
2021-02-01 13:18:15 +01:00
Mislav Marohnić
c8704260b1
Add additional resources to issue template chooser 2021-02-01 13:16:33 +01:00
vilmibm
7479b3834d use volume to avoid having to rebuild 2021-01-27 10:58:54 -08:00
vilmibm
773c8b3923 no longer try and install createrepo 2021-01-27 10:58:08 -08:00
vilmibm
6ef5248d21 cp -r instead of mv 2021-01-26 17:08:08 -08:00
vilmibm
39628a4354 use new docker-based script 2021-01-26 16:53:00 -08:00
Mislav Marohnić
f89346f335
Merge pull request #2748 from cli/makefile-rewrite
Port build tasks to Go script
2021-01-21 17:36:36 +01:00
Mislav Marohnić
3673a9beb2 Add more documentation for script/build.go 2021-01-21 17:16:11 +01:00
Robin Neatherway
3ab01661e4 Add on: pull_request trigger to CodeQL workflow
From February 2021, in order to provide feedback on pull requests, Code Scanning workflows must be configured with both `push` and `pull_request` triggers. This is because Code Scanning compares the results from a pull request against the results for the base branch to tell you only what has changed between the two.

Early in the beta period we supported displaying results on pull requests for workflows with only `push` triggers, but have discontinued support as this proved to be less robust.

See https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#scanning-pull-requests for more information on how best to configure your Code Scanning workflows.
2021-01-13 11:09:00 +00:00
Mislav Marohnić
19ee0eff08 Simplify linter output setup
`golangci-lint` now supports an output formatter for GitHub Actions, so
we don't need to manually reformat the failure output anymore.
2021-01-07 16:16:44 +01:00
Pete Woods
03949a4d72
Build static binaries
Fixes #2555
2020-12-07 15:49:58 +00:00
Amanda Pinsker
436846a715
Add design system docs to contributing 2020-11-25 11:58:26 -08:00
Sam
1ed4f049a1
Merge pull request #2113 from cli/move-project-cards-fix
Fix moving all "Pending release" project cards to the "Done" column
2020-10-27 12:01:30 +03:00
Mislav Marohnić
d66fd2fe9e Remove needs-user-input from "please avoid"
The user input might have come in a reply already, but the maintainers
haven't gotten around to remove the stale label yet. This shouldn't
prevent someone from submitting a PR.
2020-10-13 18:06:00 +02:00