Skip to content

Commit 017a4fc

Browse files
alan-agius4alan-agius4
authored
ci: add branch tracking comments to dev-infra GitHub actions (#33605)
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
1 parent b8e88a0 commit 017a4fc

13 files changed

Lines changed: 98 additions & 93 deletions

‎.github/workflows/assistant-to-the-branch-manager.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ name: DevInfra
22

33
on:
44
push:
5+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
56
pull_request_target:
67
types: [opened, synchronize, reopened, ready_for_review, labeled]
78

@@ -17,6 +18,6 @@ jobs:
1718
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
1819
with:
1920
persist-credentials: false
20-
- uses: angular/dev-infra/github-actions/branch-manager@ba726e7bca0b08b125ccc6f93c233749e1213c17
21+
- uses: angular/dev-infra/github-actions/branch-manager@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2122
with:
2223
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

‎.github/workflows/ci.material-aio.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,11 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Initialize environment
24-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
24+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2525
- name: Setup Bazel
26-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
26+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2727
- name: Setup Bazel RBE
28-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
28+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2929
- name: Install node modules
3030
run: pnpm install --frozen-lockfile
3131
- name: Execute Build
@@ -35,11 +35,11 @@ jobs:
3535
runs-on: ubuntu-latest
3636
steps:
3737
- name: Initialize environment
38-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
38+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
3939
- name: Setup Bazel
40-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
40+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4141
- name: Setup Bazel RBE
42-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
42+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4343
- name: Install node modules
4444
run: pnpm install --frozen-lockfile
4545
- name: Execute Tests
@@ -56,11 +56,11 @@ jobs:
5656
runs-on: ubuntu-latest
5757
steps:
5858
- name: Initialize environment
59-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
59+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6060
- name: Setup Bazel
61-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
61+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6262
- name: Setup Bazel RBE
63-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
63+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6464
- name: Install node modules
6565
run: pnpm install --frozen-lockfile
6666
- name: Execute Lighthouse Audit

‎.github/workflows/ci.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Initialize environment
24-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
24+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2525
- name: Install node modules
2626
run: pnpm install --frozen-lockfile
2727
# TODO: Remove --ignore_all_rc_files flag once a repository can be loaded in bazelrc during info
@@ -49,11 +49,11 @@ jobs:
4949
runs-on: ubuntu-latest
5050
steps:
5151
- name: Initialize environment
52-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
52+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
5353
- name: Setup Bazel
54-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
54+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
5555
- name: Setup Bazel RBE
56-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
56+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
5757
with:
5858
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
5959
- name: Install node modules
@@ -65,11 +65,11 @@ jobs:
6565
runs-on: ubuntu-latest
6666
steps:
6767
- name: Initialize environment
68-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
68+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6969
- name: Setup Bazel
70-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
70+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
7171
- name: Setup Bazel RBE
72-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
72+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
7373
with:
7474
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
7575
- name: Install node modules
@@ -81,11 +81,11 @@ jobs:
8181
runs-on: ubuntu-latest
8282
steps:
8383
- name: Initialize environment
84-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
84+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
8585
- name: Setup Bazel
86-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
86+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
8787
- name: Setup Bazel RBE
88-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
88+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
8989
with:
9090
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
9191
- name: Install node modules
@@ -98,11 +98,11 @@ jobs:
9898
runs-on: ubuntu-latest-16core
9999
steps:
100100
- name: Initialize environment
101-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
101+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
102102
- name: Setup Bazel
103-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
103+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
104104
- name: Setup Bazel RBE
105-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
105+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
106106
with:
107107
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
108108
- name: Install node modules
@@ -114,11 +114,11 @@ jobs:
114114
runs-on: ubuntu-latest-16core
115115
steps:
116116
- name: Initialize environment
117-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
117+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
118118
- name: Setup Bazel
119-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
119+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
120120
- name: Setup Bazel RBE
121-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
121+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
122122
with:
123123
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
124124
- name: Install node modules
@@ -130,11 +130,11 @@ jobs:
130130
runs-on: ubuntu-latest-4core
131131
steps:
132132
- name: Initialize environment
133-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
133+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
134134
- name: Setup Bazel
135-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
135+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
136136
- name: Setup Bazel RBE
137-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
137+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
138138
- name: Install node modules
139139
run: pnpm install --frozen-lockfile
140140
- name: Build Snapshots
@@ -154,15 +154,15 @@ jobs:
154154
runs-on: ubuntu-latest-4core
155155
steps:
156156
- name: Initialize environment
157-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
157+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
158158
# See: https://github.com/puppeteer/puppeteer/pull/13196 and
159159
# https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md.
160160
- name: Disable AppArmor
161161
run: echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
162162
- name: Setup Bazel
163-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
163+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
164164
- name: Setup Bazel RBE
165-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
165+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
166166
- name: Install node modules
167167
run: pnpm install --frozen-lockfile
168168
- name: Build and Verify Release Output
@@ -185,12 +185,12 @@ jobs:
185185
CI_RUNNER_NUMBER: ${{ github.run_id }}
186186
steps:
187187
- name: Initialize environment
188-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
188+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
189189
- name: Install node modules
190190
run: pnpm install --frozen-lockfile
191191
- name: Setup Bazel
192-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
192+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
193193
- name: Setup Browserstack Variables
194-
uses: angular/dev-infra/github-actions/browserstack@ba726e7bca0b08b125ccc6f93c233749e1213c17
194+
uses: angular/dev-infra/github-actions/browserstack@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
195195
- name: Run tests on Browserstack
196196
run: ./scripts/circleci/run-browserstack-tests.sh

‎.github/workflows/deploy-dev-app-main-push.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,11 +17,11 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Initialize environment
20-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
20+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2121
- name: Setup Bazel
22-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
22+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2323
- name: Setup Bazel RBE
24-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
24+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2525
- name: Install node modules
2626
run: pnpm install --frozen-lockfile
2727

@@ -47,7 +47,7 @@ jobs:
4747
channelId: '${{env.PREVIEW_CHANNEL}}'
4848

4949
- name: Deployment Status
50-
uses: zattoo/deploy-status@c8a0267e54a90ea07765fa88f7c7c35171859eec # v1
50+
uses: zattoo/deploy-status@00e46ff4f584a96261c36d9337a4f7d2bfc4bdd3 # v1
5151
with:
5252
token: '${{github.token}}'
5353
environment: 'dev'

‎.github/workflows/dev-infra.yml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
name: DevInfra
22

33
on:
4+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
45
pull_request_target:
56
types: [opened, synchronize, reopened]
67
issues:
@@ -15,21 +16,21 @@ jobs:
1516
if: github.event_name == 'pull_request_target'
1617
runs-on: ubuntu-latest
1718
steps:
18-
- uses: angular/dev-infra/github-actions/labeling/pull-request@649c3afeaa46674507b9625537e49de54a695e2b
19+
- uses: angular/dev-infra/github-actions/labeling/pull-request@649c3afeaa46674507b9625537e49de54a695e2b # main
1920
with:
2021
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
2122
post_approval_changes:
2223
if: github.event_name == 'pull_request_target'
2324
runs-on: ubuntu-latest
2425
steps:
25-
- uses: angular/dev-infra/github-actions/post-approval-changes@649c3afeaa46674507b9625537e49de54a695e2b
26+
- uses: angular/dev-infra/github-actions/post-approval-changes@649c3afeaa46674507b9625537e49de54a695e2b # main
2627
with:
2728
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
2829
issue_labels:
2930
if: github.event_name == 'issues'
3031
runs-on: ubuntu-latest
3132
steps:
32-
- uses: angular/dev-infra/github-actions/labeling/issue@649c3afeaa46674507b9625537e49de54a695e2b
33+
- uses: angular/dev-infra/github-actions/labeling/issue@649c3afeaa46674507b9625537e49de54a695e2b # main
3334
with:
3435
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
3536
google-generative-ai-key: ${{ secrets.GOOGLE_GENERATIVE_AI_KEY }}

‎.github/workflows/docs-preview-build.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,16 +21,16 @@ jobs:
2121
(github.event.action == 'synchronize' && contains(github.event.pull_request.labels.*.name, 'docs: preview'))
2222
steps:
2323
- name: Initialize environment
24-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
24+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2525
- name: Setup Bazel
26-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
26+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2727
- name: Setup Bazel RBE
28-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
28+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2929
- name: Install node modules
3030
run: pnpm install --frozen-lockfile
3131
- name: Build docs site
3232
run: pnpm bazel build //docs:build.production
33-
- uses: angular/dev-infra/github-actions/previews/pack-and-upload-artifact@ba726e7bca0b08b125ccc6f93c233749e1213c17
33+
- uses: angular/dev-infra/github-actions/previews/pack-and-upload-artifact@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
3434
with:
3535
workflow-artifact-name: 'docs-preview'
3636
pull-number: '${{github.event.pull_request.number}}'

‎.github/workflows/docs-preview-deploy.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@
88
name: Deploying docs preview to Firebase
99

1010
on:
11+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
1112
workflow_run:
1213
workflows: ['Build docs for preview deployment']
1314
types: [completed]
@@ -29,7 +30,7 @@ jobs:
2930
runs-on: ubuntu-latest
3031
if: ${{ github.event.workflow_run.conclusion == 'success' }}
3132
steps:
32-
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
33+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3334
with:
3435
token: '${{secrets.GITHUB_TOKEN}}'
3536

@@ -40,7 +41,7 @@ jobs:
4041
npx -y firebase-tools@latest target:clear --config docs/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting mat-aio
4142
npx -y firebase-tools@latest target:apply --config docs/firebase.json --project ${{env.PREVIEW_PROJECT}} hosting mat-aio ${{env.PREVIEW_SITE}}
4243
43-
- uses: angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase@ba726e7bca0b08b125ccc6f93c233749e1213c17
44+
- uses: angular/dev-infra/github-actions/previews/upload-artifacts-to-firebase@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4445
with:
4546
github-token: '${{secrets.GITHUB_TOKEN}}'
4647
workflow-artifact-name: 'docs-preview'

‎.github/workflows/google-internal-tests.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
name: Google Internal Tests Enforcement
22

33
on:
4+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
45
pull_request_target:
56
types: [opened, reopened, synchronize]
67

@@ -13,7 +14,7 @@ jobs:
1314
runs-on: ubuntu-latest
1415
steps:
1516
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
16-
- uses: angular/dev-infra/github-actions/google-internal-tests@ba726e7bca0b08b125ccc6f93c233749e1213c17
17+
- uses: angular/dev-infra/github-actions/google-internal-tests@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
1718
with:
1819
run-tests-guide-url: http://go/angular-material-presubmit
1920
github-token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)