dependabot[bot]
4b055e786b
chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7
...
Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag ) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/spf13/pflag/releases )
- [Commits](https://github.com/spf13/pflag/compare/v1.0.6...v1.0.7 )
---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
dependency-version: 1.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-07-23 18:23:07 +00:00
Andy Feller
1b94463127
Merge pull request #11307 from cli/dependabot/go_modules/github.com/sigstore/sigstore-go-1.1.0
...
chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
2025-07-23 14:21:27 -04:00
Andy Feller
74be242713
Updated third-party license compliance content
2025-07-23 14:09:37 -04:00
Andy Feller
13a7498279
Merge pull request #11298 from cli/dependabot/github_actions/advanced-security/filter-sarif-1.0.1
...
chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
2025-07-23 14:06:26 -04:00
Andy Feller
0d80c36dcc
Merge pull request #11361 from cli/kw/cli-11360-regression-gh-pr-create-fails-on-self-hosted-runner-in-v2760-resource-not-accessible-by-integration-organizationteams
...
Fix: `gh pr create`, only fetch teams when reviewers contain a team
2025-07-23 13:09:34 -04:00
Kynan Ware
5a6cac3643
Add tests for reviewer team handling in PR creation
...
Added test cases to verify that teams are fetched when reviewers include teams and not fetched when only users are specified. This ensures correct behavior when requesting reviews from users and teams during pull request creation.
2025-07-23 10:15:30 -06:00
Kynan Ware
addee16531
Refactor and improve RepoMetadata teams test
...
Renamed the test to clarify its purpose and added an explicit exclusion for the OrganizationTeamList GraphQL query to ensure teams are only fetched when specified. This improves test accuracy and readability.
2025-07-23 09:59:20 -06:00
Andy Feller
7dffc39c33
Merge pull request #11332 from cli/andyfeller/11209-automate-govulncheck
...
Incorporate govulncheck into workflows
2025-07-23 10:56:51 -04:00
William Martin
43e76099a5
Merge pull request #11274 from jsoref/issue-11239
...
Improve `api` `--preview` docs
2025-07-23 10:42:13 +02:00
Kynan Ware
e5feda353f
Refactor error assertion in Test_RepoMetadataTeams
...
Replaces manual error check with require.NoError for consistency and improved readability in the test.
2025-07-22 11:06:50 -06:00
Kynan Ware
df317d4a05
FIX: conditionally fetching team reviewers
...
Updated the logic for fetching team reviewers in PR edit and create flows. In `pr edit`, team reviewers are always fetched for consistency with existing behavior, with a note to potentially align with `pr create` logic in the future. In `pr create`, team reviewers are now only fetched if a reviewer contains a slash, aligning with behavior before the regression.
2025-07-22 11:00:47 -06:00
Kynan Ware
449920b40f
Add TeamReviewers flag to RepoMetadataInput
...
Introduces a TeamReviewers boolean to RepoMetadataInput to control whether team reviewers are fetched. Updates RepoMetadata logic to only fetch teams if both Reviewers and TeamReviewers are true. Adds tests to verify correct behavior when TeamReviewers is false.
2025-07-22 10:47:24 -06:00
Kynan Ware
b2348f8386
Merge pull request #11316 from cli/babakks/automate-spam-issue-detection
...
Automate spam issue detection
2025-07-21 17:49:12 -06:00
Andy Feller
aa955e1fe6
Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
2025-07-21 15:56:11 -04:00
Andy Feller
0c105aff8a
Use gh go templating for user prompt
...
`gh` has Go templating support built in, so let's use it.
2025-07-21 15:51:48 -04:00
Andy Feller
f7448c10e6
Update eval script comments
2025-07-21 15:26:35 -04:00
Andy Feller
03cc1d8311
Remove unnecessary file for heredoc
2025-07-21 15:21:01 -04:00
Andy Feller
8610d8ba8a
First pass to optimize and improve
2025-07-21 15:01:22 -04:00
Andy Feller
4da24b8a0c
Limit permissions of govulncheck workflow
2025-07-21 08:44:58 -04:00
Kynan Ware
42a8e0265c
Merge pull request #11326 from cli/update-release-shared-ownership
...
update ownership of pkg/cmd/release/shared/
2025-07-19 10:12:20 -06:00
Andy Feller
bd6b862b63
Incorporate govulncheck into workflows
2025-07-18 17:03:39 -04:00
Andy Feller
28b9470ba7
Merge pull request #11325 from cli/andyfeller/11310-avoid-redundant-pr-workflows
...
Run Lint and Tests on `push` to `trunk` branch
2025-07-18 11:54:54 -04:00
ejahnGithub
5a54970f0f
update ownership of pkg/cmd/release/shared/
2025-07-17 21:07:35 -04:00
Eugene
806ae030ce
Merge pull request #11261 from cli/attester/tenancy-aware-for-san
2025-07-17 17:17:31 -04:00
Andy Feller
db24646e70
Run Lint and Tests on push to trunk branch
...
This change causes the "Lint" and "Unit and Integration Tests" workflows to only run on `push` events on the default branch (`trunk`).
This should avoid running redundant set of jobs on pull requests.
2025-07-17 15:18:31 -04:00
Andy Feller
08303d91e6
Merge pull request #11299 from cli/kw/feature-request-comment
...
Add automated feature request response workflow
2025-07-17 14:20:10 -04:00
Kynan Ware
e35a974892
Update .github/workflows/feature-request-comment.yml
2025-07-17 12:11:30 -06:00
Kynan Ware
5ea34d80de
Merge pull request #11211 from samcoe/fix-web-code-search-filename-extension-flags
...
Transform `extension` and `filename` qualifiers into `path` qualifier for web code search
2025-07-17 12:09:58 -06:00
Kynan Ware
0bcb9bf818
Merge pull request #11322 from cli/kw/alert-autofix-169
...
Potential fix for code scanning alert no. 169: Workflow does not contain permissions
2025-07-17 12:08:12 -06:00
Kynan Ware
7f97bcfcd6
doc: remove codenames from code comments
2025-07-17 12:00:17 -06:00
Kynan Ware
f06c46de95
Potential fix for code scanning alert no. 169: Workflow does not contain permissions
...
Co-Authored-By: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-07-17 11:02:20 -06:00
Kynan Ware
73cb3ec8a8
Merge pull request #11312 from cli/babakks/avoid-fetching-logs-for-skipped-jobs
...
Avoid fetching logs for skipped jobs
2025-07-17 09:48:41 -06:00
Sam Coe
e2b444452d
Add additional test case for when extension is prefixed with a dot
2025-07-17 17:32:48 +02:00
Andy Feller
47f24b9228
Merge pull request #11251 from cli/bdehamer/immutable-release-field
...
Display immutable field in `release view` command
2025-07-17 10:53:04 -04:00
Sam Coe
723d0e861b
Merge branch 'trunk' into fix-web-code-search-filename-extension-flags
2025-07-17 10:21:46 +02:00
Babak K. Shandiz
8a235ecbef
ci: echo spam detection result
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 22:41:26 +01:00
Babak K. Shandiz
6a5fbdd44f
ci: add models: read permission
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 22:31:31 +01:00
Andy Feller
260519dc69
Merge pull request #11279 from cli/andyfeller/issue-create-assign-copilot
...
Assign Copilot during `gh issue create`
2025-07-16 17:01:32 -04:00
Babak K. Shandiz
1779103a04
ci: correct sed usage to remove Markdown front matter
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:57:33 +01:00
Babak K. Shandiz
9aae4a525d
docs: fix typo in script docs
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:54:02 +01:00
Babak K. Shandiz
7996a6cdb9
ci: fix potentially confusing typo in system prompt
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:53:44 +01:00
Babak K. Shandiz
1447400c0a
ci: use issue.html_url instead of issue.url
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:46:36 +01:00
Babak K. Shandiz
e90336a331
ci: remove unused env vars
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:20:12 +01:00
Babak K. Shandiz
43e1634816
ci: add spam issue detection workflow
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:02:56 +01:00
Babak K. Shandiz
c7c68920d8
ci: add spam issue detection scripts
...
Signed-off-by: Babak K. Shandiz <babakks@github.com>
2025-07-16 21:02:53 +01:00
Andy Feller
973718712a
Fix failing tests for Copilot replacement
2025-07-16 15:36:53 -04:00
Andy Feller
b433792a44
Fix copilot replace test names
...
In refactoring how this parameter works, I forgot to update the related tests to match.
2025-07-16 15:09:13 -04:00
Andy Feller
5cf3d3b9a5
Use constant for Copilot name
...
Based on PR feedback from @bagtoad, this commit creates a new constant for the Copilot bot name, which is used in the assignee / reviewer selection as well as replacing `@copilot` when going to GitHub.com UI
2025-07-16 15:06:43 -04:00
Andy Feller
4f0a5807bf
Refactor CopilotReplacer logic based on PR feedback
...
Thanks to @bagtoad, this commit refactors the argument to `NewCopilotReplacer(bool)` from being where this is used to what it effect is has.
Because there is already precedence for display name being `<login> (<name>)`, I worried there would be confusion for `Copilot (AI)` being display name for assignees and reviewers but `Copilot` when going to GitHub.com UI. Instead, I renamed the argument based on whether the login is returned / replaced.
2025-07-16 14:42:11 -04:00
Andy Feller
e2bed653df
Implement actor and user assignee tests
2025-07-16 14:10:26 -04:00