Remove dependabot gradle wrapper (#5746)
This commit is contained in:
parent
91713f440c
commit
6a572bbc47
|
@ -1,29 +0,0 @@
|
|||
version: 2
|
||||
registries:
|
||||
gradle-plugin-portal:
|
||||
type: maven-repository
|
||||
url: https://plugins.gradle.org/m2
|
||||
username: dummy # Required by dependabot
|
||||
password: dummy # Required by dependabot
|
||||
updates:
|
||||
- package-ecosystem: "github-actions"
|
||||
directory: "/"
|
||||
schedule:
|
||||
interval: "daily"
|
||||
|
||||
- package-ecosystem: "gradle"
|
||||
directory: "/"
|
||||
registries:
|
||||
- gradle-plugin-portal
|
||||
schedule:
|
||||
interval: "daily"
|
||||
open-pull-requests-limit: 10
|
||||
ignore:
|
||||
- dependency-name: "edu.berkeley.cs.jqf:jqf-fuzz"
|
||||
- dependency-name: "org.jetbrains.kotlinx:kotlinx-coroutines-core"
|
||||
# Ignore updates to next mockito major version 5.x.x, which requires Java 11
|
||||
- dependency-name: "org.mockito:mockito-core"
|
||||
update-types: ["version-update:semver-major"]
|
||||
- dependency-name: "org.junit-pioneer:junit-pioneer"
|
||||
# junit-pioneer 2.x requires Java 11
|
||||
versions: [ "[1,)" ]
|
|
@ -36,11 +36,11 @@ Same settings as above for `main`, except:
|
|||
|
||||
(So that opentelemetrybot can create release branches)
|
||||
|
||||
### `dependabot/**/**`, `renovate/**/**`, `opentelemetrybot/*`, and `gradlew-update-*`
|
||||
### `renovate/**/**`, and `opentelemetrybot/*`
|
||||
|
||||
* Require status checks to pass before merging: UNCHECKED
|
||||
|
||||
(So that dependabot PRs can be rebased)
|
||||
(So that renovate PRs can be rebased)
|
||||
|
||||
* Restrict who can push to matching branches: UNCHECKED
|
||||
|
||||
|
@ -48,7 +48,7 @@ Same settings as above for `main`, except:
|
|||
|
||||
* Allow force pushes > Everyone
|
||||
|
||||
(So that dependabot PRs can be rebased)
|
||||
(So that renovate PRs can be rebased)
|
||||
|
||||
* Allow deletions: CHECKED
|
||||
|
||||
|
|
|
@ -28,7 +28,7 @@ echo
|
|||
|
||||
git log --reverse \
|
||||
--perl-regexp \
|
||||
--author='^(?!dependabot\[bot\] )' \
|
||||
--author='^(?!renovate\[bot\] )' \
|
||||
--pretty=format:"* %s" \
|
||||
"$range" \
|
||||
| sed -E 's,\(#([0-9]+)\)$,\n ([#\1](https://github.com/open-telemetry/opentelemetry-java/pull/\1)),'
|
||||
|
|
|
@ -84,7 +84,7 @@ echo $contributors1 $contributors2 \
|
|||
| sort -uf \
|
||||
| grep -v linux-foundation-easycla \
|
||||
| grep -v github-actions \
|
||||
| grep -v dependabot \
|
||||
| grep -v renovate \
|
||||
| grep -v codecov \
|
||||
| grep -v opentelemetrybot \
|
||||
| sed 's/^/@/'
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
# the benefit of this over dependabot is that this also analyzes transitive dependencies
|
||||
# while dependabot (at least currently) only analyzes top-level dependencies
|
||||
# the benefit of this over renovate is that this also analyzes transitive dependencies
|
||||
# while renovate (at least currently) only analyzes top-level dependencies
|
||||
name: OWASP dependency check (daily)
|
||||
|
||||
on:
|
||||
|
|
|
@ -1,34 +0,0 @@
|
|||
# this is useful because notifications for scheduled workflows are only sent to the user who
|
||||
# initially created the given workflow
|
||||
name: Reusable - Workflow notification
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
success:
|
||||
type: boolean
|
||||
required: true
|
||||
|
||||
jobs:
|
||||
workflow-notification:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
|
||||
- name: Open issue or add comment if issue already open
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: |
|
||||
number=$(gh issue list --search "Workflow failed: $GITHUB_WORKFLOW" --limit 1 --json number -q .[].number)
|
||||
|
||||
if [[ $number ]]; then
|
||||
if [[ "${{ inputs.success }}" == "true" ]]; then
|
||||
gh issue close $number
|
||||
else
|
||||
gh issue comment $number \
|
||||
--body "See [$GITHUB_WORKFLOW #$GITHUB_RUN_NUMBER](https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID)."
|
||||
fi
|
||||
elif [[ "${{ inputs.success }}" == "false" ]]; then
|
||||
gh issue create --title "Workflow failed: $GITHUB_WORKFLOW (#$GITHUB_RUN_NUMBER)" \
|
||||
--body "See [$GITHUB_WORKFLOW #$GITHUB_RUN_NUMBER](https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID)."
|
||||
fi
|
|
@ -1,34 +0,0 @@
|
|||
name: Update gradle wrappers (daily)
|
||||
|
||||
on:
|
||||
schedule:
|
||||
# daily at 1:30 UTC
|
||||
- cron: "30 1 * * *"
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
update-gradle-wrapper:
|
||||
runs-on: ubuntu-latest
|
||||
|
||||
steps:
|
||||
- uses: actions/checkout@v3
|
||||
|
||||
- id: setup-java
|
||||
uses: actions/setup-java@v3
|
||||
with:
|
||||
distribution: temurin
|
||||
java-version: 17
|
||||
|
||||
- name: Update Gradle Wrapper
|
||||
uses: gradle-update/update-gradle-wrapper-action@v1
|
||||
with:
|
||||
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
|
||||
github-token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
|
||||
|
||||
workflow-notification:
|
||||
needs:
|
||||
- update-gradle-wrapper
|
||||
if: always()
|
||||
uses: ./.github/workflows/reusable-workflow-notification.yml
|
||||
with:
|
||||
success: ${{ needs.update-gradle-wrapper.result == 'success' }}
|
Loading…
Reference in New Issue