Commit Graph

526 Commits

Author SHA1 Message Date
Philip Taron
4181800d30 Revert "build(deps): bump cachix/install-nix-action from 30 to 31" (#390695) 2025-03-17 08:09:59 -07:00
Wolfgang Walther
5a9d36cf6b build(deps): bump cachix/cachix-action from 15 to 16 (#390646) 2025-03-17 15:06:32 +00:00
Philip Taron
281875261d Revert "build(deps): bump cachix/install-nix-action from 30 to 31" 2025-03-17 08:05:43 -07:00
dependabot[bot]
8cad67f2a3 build(deps): bump cachix/install-nix-action from 30 to 31
Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 30 to 31.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](08dcb3a5e6...02a151ada4)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-17 11:39:46 +00:00
dependabot[bot]
2f2a95ddcc build(deps): bump cachix/cachix-action from 15 to 16
Bumps [cachix/cachix-action](https://github.com/cachix/cachix-action) from 15 to 16.
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Commits](ad2ddac53f...0fc020193b)

---
updated-dependencies:
- dependency-name: cachix/cachix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-17 11:37:30 +00:00
dependabot[bot]
94816e8c96 build(deps): bump actions/create-github-app-token from 1.11.5 to 1.11.6
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1.11.5 to 1.11.6.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](0d564482f0...21cfef2b49)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-03 11:17:16 +00:00
Wolfgang Walther
f78a1e6d34 build(deps): bump korthout/backport-action from 3.1.0 to 3.2.0 (#384747) 2025-02-27 19:41:10 +01:00
dependabot[bot]
a38730c806 build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](65c4c4a1dd...4cec3d8aa0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 12:19:54 +00:00
dependabot[bot]
d1b76b4b7c build(deps): bump korthout/backport-action from 3.1.0 to 3.2.0
Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](be567af183...436145e922)

---
updated-dependencies:
- dependency-name: korthout/backport-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 12:19:51 +00:00
r-vdp
707565040a .github/workflows: build the nixos manual also when doc/ changed
We import things like the nixpkgs release notes, and the css and js
files from doc/ into nixos/doc/, so building the nixos manual whenever
doc/ was modified, avoids failures reaching master.
2025-02-19 11:32:17 +01:00
dependabot[bot]
f66585fd39 build(deps): bump actions/create-github-app-token from 1.11.3 to 1.11.5
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1.11.3 to 1.11.5.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](67e27a7eb7...0d564482f0)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 11:47:47 +00:00
Silvan Mosberger
ec32f93eb2 workflows/eval-lib-tests: Run on maintainer changes
The lib tests also check maintainers, not doing so can cause problems: https://github.com/NixOS/nixpkgs/pull/379894
2025-02-12 09:45:25 +05:30
dependabot[bot]
95e123c783 build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.3
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1.11.1 to 1.11.3.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](c1a285145b...67e27a7eb7)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-10 11:50:07 +00:00
Wolfgang Walther
93df51fa33 workflows/eval: rename BASE_SHA to TARGET_SHA
To be in line with the terminology introduced in the README.md in the
same folder.
2025-02-02 20:17:33 +01:00
Wolfgang Walther
86a38d48fb workflows/eval: fail hard without target run
Without a target run, we won't get any rebuild labels, rebuild counts or
maintainer pings. This might have been correct before #373935, but by
now we run eval on all commits on the target branch, so we should treat
it as a failure if we can't find the run.
2025-02-02 20:17:09 +01:00
Wolfgang Walther
06fa362486 workflows/eval: no maintainer reviews in draft mode (#372479) 2025-02-01 11:58:50 +01:00
Wolfgang Walther
1a53a38d36 .github/labeler.yml: automatically add backport label for PRs touching ci/ (#374921) 2025-02-01 11:57:14 +01:00
Peder Bergebakken Sundt
8ed4f7b5a6 workflows/labels: add a sync-labels: false step, migrate some rules 2025-01-20 12:35:38 +01:00
Silvan Mosberger
8e614ad4fa ci: Format nixfmt command prominently (#373939) 2025-01-19 10:28:41 +01:00
Robert Hensing
c98e26ae4e ci: Interpunction
The latter part is structurally a full sentence, if short.
2025-01-15 06:52:30 +01:00
Robert Hensing
3895dfe2cf ci: Show example nixfmt command prominently 2025-01-15 06:51:53 +01:00
John Titor
38ebbf7c4f workflows/periodic-merges: explicitly inherit the secrets
Apparently since we are callling a reusable workflow here, we need to explicitly pass the secrets. :(
2025-01-15 11:04:30 +05:30
John Titor
6ab6314d06 workflows/periodic-merges: use nixpkgs-ci's token 2025-01-15 10:29:29 +05:30
John Titor
f697628305 workflows/backport: switch to new variables
As per https://github.com/NixOS/org/issues/54, new variables are now NIXPKGS_CI_APP_ID and NIXPKGS_CI_APP_PRIVATE_KEY.
2025-01-15 10:19:21 +05:30
Wolfgang Walther
21b5113509 workflows/eval: no maintainer reviews in draft mode 2025-01-13 20:48:05 +01:00
Silvan Mosberger
be67d6fb26 workflows/codeowners-v2: only run if github.repository_owner is NixOS (#360286) 2025-01-13 18:44:15 +01:00
dependabot[bot]
c254691a5b build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](6f51ac03b9...65c4c4a1dd)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-13 11:45:12 +00:00
Wolfgang Walther
d725592cd1 workflows/periodic-merge: move fork condition to calling workflow
Apparently the skipping needs to happen on the calling workflow,
otherwise those workflows show up as "failed" in forks instead of
skipped.
2025-01-12 13:41:05 +01:00
Zhong Jianxin
973017d933 workflows/codeowners-v2: only run if github.repository_owner is NixOS
Failure on fork:

```
throw new Error("Input required and not supplied: app-id");
```
2025-01-11 21:14:39 +08:00
Wolfgang Walther
9ea74225cc workflows: add README
This introduces some basic concepts used in these workflows and a common
terminology.

At the same time we remove some of the comments from various workflow
files, because they are assumed to be "general knowledge" through the
README.
2025-01-10 18:36:22 +01:00
Wolfgang Walther
3e9f5c05ea workflows: rename baseSha to targetSha
We currently use two different "base" commits, but the same name. One of
them is the commit in which context the pull_request_target runs. The
other is the parent of the merge commit. Those are **not** necessarily
the same - see README introduced in the next commit for details.

Renaming one of them for clarity. Since the pull_request_target related
base commit is also called like that in GitHub Actions terminology, we
rename the other. The best I could come up with is "target".
2025-01-10 18:36:22 +01:00
Wolfgang Walther
ba09688dc8 workflows/periodic-merge: support merge bases in re-usable workflow 2025-01-10 18:36:22 +01:00
Wolfgang Walther
51b8ad2191 workflows/periodic-merge: create re-usable workflow
Less repetition, more consistency.
2025-01-10 18:36:22 +01:00
Wolfgang Walther
58f8c536c6 workflows/{editorconfig,nix-parse}: run against release branches
It seems odd to exclude PRs against release branches for those checks -
especially when not excluding PRs against staging-** variants at the
same time.
2025-01-10 18:36:22 +01:00
Wolfgang Walther
b64d5e1c0c workflows: make checks work with non-NixOS repos
No need for that limitation, which only artifically limits test-ability
of CI in forks.

Some other workflows like backports, cherry-pick checks and periodic
merges are very specific to the release branches and don't need to be
run in forks.
2025-01-10 18:36:21 +01:00
Wolfgang Walther
94c4c7bd3b workflows/eval: remove non-required "needs: attrs"
The eval-aliases job is independent of attrs already.
2025-01-10 18:36:18 +01:00
Wolfgang Walther
88afad8833 workflows: basic consistency in formatting workflows
Same top-level ordering of keys / empty lines and same indentation for
yaml lists. One blank line between each step.

Makes it easier to read and compare the workflows.
2025-01-09 21:29:41 +01:00
Wolfgang Walther
72fd375d1c workflows/eval: fix actionlint
mergedSha is available from needs.get-merge-commit, not needs.attrs.
Actionlint rightfully complains about that.

The code still works as expected because nixpkgs/ is checked out at
mergedSha, so the diff will be between mergedSha and baseSha.
2025-01-09 21:29:41 +01:00
Wolfgang Walther
fcb24b90d0 workflows/check-maintainers-sorted: Use .yml extension for consistency
All other workflows do - and most importantly actionlint only runs on
.yml files!
2025-01-09 21:29:41 +01:00
Wolfgang Walther
4d00c68aa4 workflows/check-shell: use job matrix 2025-01-09 21:29:41 +01:00
Wolfgang Walther
aa7335ca5f workflows/basic-eval: remove
This seems to be unused. It can be triggered manually, but is this
really done?

Is this superseded by the new eval checks or should we instead run this
regularly?
2025-01-09 21:29:41 +01:00
Wolfgang Walther
3c9794d06e workflows/eval: add eval summary before requesting reviewers
This is to ensure that the eval summary is still set as commit status,
even when the review requests fail due to too many reviewers.
2025-01-06 20:18:34 +01:00
dependabot[bot]
ebdb307d51 build(deps): bump actions/create-github-app-token from 1.11.0 to 1.11.1 (#371397)
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1.11.0 to 1.11.1.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/v1.11.0...c1a285145b9d317df6ced56c09f525b5c2b6f755)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-06 19:54:39 +05:30
John Titor
9ccdc413e4 workflows/eval: add swap to tackle recent borderline OOM
Removed in https://github.com/NixOS/nixpkgs/pull/356023#discussion_r1844961453

Due to https://github.com/NixOS/nixpkgs/issues/355847#issuecomment-2566688172 https://github.com/NixOS/nixpkgs/issues/355847#issuecomment-2559907806 https://github.com/NixOS/nixpkgs/issues/355847#issuecomment-2543915995
2025-01-05 23:24:40 +05:30
NAHO
dbd20ce0eb workflows: lock macOS runner to macos-14 2025-01-05 00:18:58 +01:00
NAHO
fcfbe6fff4 workflows: update Ubuntu runner to ubuntu-24.04
Link: https://github.com/actions/runner-images/issues/10636
2025-01-05 00:18:58 +01:00
NAHO
2660dd1e71 workflows: lock Ubuntu runner to ubuntu-22.04
Lock the Ubuntu runner to ubuntu-22.04 to avoid accidental updates [1]
and increase reproducibility.

[1]: https://github.com/actions/runner-images/issues/10636
2025-01-05 00:18:57 +01:00
Wolfgang Walther
62779fbfa4 ci/request-reviews: share code to request reviewers from gh api
This makes it easier to add ofborg's request-1-by-1 logic, where failed
requests are OK for edge cases.
2025-01-04 18:34:17 +01:00
Wolfgang Walther
2e6119462e workflows/eval: make "requesting maintainer reviews" separate step
Odd to have this in the "Tagging pull request" step, which is only about
labels otherwise.
2025-01-04 14:40:03 +01:00
Wolfgang Walther
cf0616fec6 ci/request-reviews: rename code-owner related files
Now that we have maintainer reviews as well, be a bit more explicit
about naming.
2025-01-04 13:54:05 +01:00