5
5
6
6
name : Sample Run and Dependabot Auto-merge
7
7
on :
8
+ push :
9
+ branches : [ master ]
8
10
pull_request_target :
9
11
branches : [ master ]
10
12
workflow_dispatch :
11
13
12
14
permissions :
13
15
id-token : write
14
16
contents : write
17
+ pull-requests : write
18
+ statuses : write
15
19
16
20
jobs :
17
21
sample-run :
@@ -24,20 +28,22 @@ jobs:
24
28
strategy :
25
29
fail-fast : false
26
30
matrix :
27
- python-version : [ "3.8", "3. 9", "3.10", "3.11" ]
31
+ python-version : [ "3.9", "3.10", "3.11" ]
28
32
jdk-version : [ "8", "11", "17", "21", "24" ]
29
33
os : [ ubuntu-latest, macOS-latest, windows-latest ]
30
34
31
35
steps :
32
36
- name : Checkout
33
37
uses : actions/checkout@v4
38
+ with :
39
+ ref : ${{ github.event.pull_request.head.sha }}
34
40
35
41
- name : Configure AWS Credentials
36
42
uses : aws-actions/configure-aws-credentials@v4
37
43
with :
38
44
aws-region : us-east-1
39
- role-to-assume : arn:aws:iam::751999266872:role/GitHubWorkflows
40
- role-session-name : myGitHubActions
45
+ role-to-assume : arn:aws:iam::751999266872:role/GitHubPython
46
+ role-session-name : myGitHubActionsPython
41
47
42
48
- name : Set up JDK ${{ matrix.jdk-version }}
43
49
uses : actions/setup-java@v4
66
72
python -m build
67
73
python setup.py download_jars
68
74
python setup.py install
75
+ env :
76
+ KCL_MVN_REPO_SEARCH_URL : https://repo1.maven.org/maven2/
69
77
70
78
- name : Put words to sample stream
71
79
run : |
@@ -85,17 +93,25 @@ jobs:
85
93
auto-merge-dependabot :
86
94
needs : [sample-run]
87
95
runs-on : ubuntu-latest
88
- if : github.event.pull_request.user.login == 'dependabot[bot]'
96
+ if : github.actor == 'dependabot[bot]' && github. event.pull_request.user.login == 'dependabot[bot]'
89
97
steps :
90
98
- name : Fetch Dependabot metadata
91
99
id : metadata
92
100
uses : dependabot/fetch-metadata@v2
93
101
with :
94
102
alert-lookup : true
95
103
github-token : " ${{ secrets.GITHUB_TOKEN }}"
96
- - name : Enable auto-merge for Dependabot PRs
104
+
105
+ - name : Approve PR
97
106
if : steps.metadata.outputs.update-type != 'version-update:semver-major'
98
- run : gh pr merge --auto --merge "$PR_URL"
107
+ run : gh pr review --approve "$PR_URL"
99
108
env :
100
109
PR_URL : ${{github.event.pull_request.html_url}}
101
110
GH_TOKEN : ${{secrets.GITHUB_TOKEN}}
111
+
112
+ # - name: Enable auto-merge for Dependabot PRs
113
+ # if: steps.metadata.outputs.update-type != 'version-update:semver-major'
114
+ # run: gh pr merge --auto --merge "$PR_URL"
115
+ # env:
116
+ # PR_URL: ${{github.event.pull_request.html_url}}
117
+ # GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
0 commit comments