From cee6988bb97cb1a9578888545131868eef69d45d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Sep 2024 05:32:58 +0000 Subject: [PATCH 1/2] GH Actions: Bump peter-evans/create-pull-request from 6 to 7 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 7. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/happy-new-year.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/happy-new-year.yml b/.github/workflows/happy-new-year.yml index 380569e44b..8e8c9cfd7f 100644 --- a/.github/workflows/happy-new-year.yml +++ b/.github/workflows/happy-new-year.yml @@ -73,7 +73,7 @@ jobs: run: exit 1 - name: Create pull request - uses: peter-evans/create-pull-request@v6 + uses: peter-evans/create-pull-request@v7 with: base: ${{ steps.branches.outputs.BASE }} branch: ${{ steps.branches.outputs.PR_BRANCH }} From 4600d9edfe7ea31aeea339498f18c446b1f3450d Mon Sep 17 00:00:00 2001 From: jrfnl Date: Mon, 9 Sep 2024 21:48:07 +0200 Subject: [PATCH 2/2] GH Actions: update for new version of "Create Pull Request" The "Create Pull Request" action has released a new major version. I have verified that the workflow as-is would still work. However, this new version also offers one relevant new feature: * Signing commits. The PRs created by this actions are created by the `github-actions[bot]` user. Adding the `sign-commits: true` option will allow the bot to sign the commits based on the repo default `GITHUB_TOKEN`. Refs: * https://github.com/peter-evans/create-pull-request/releases/tag/v7.0.0 * https://github.com/peter-evans/create-pull-request/blob/v7.0.0/docs/concepts-guidelines.md#commit-signature-verification-for-bots --- .github/workflows/happy-new-year.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/happy-new-year.yml b/.github/workflows/happy-new-year.yml index 8e8c9cfd7f..a6de2682e5 100644 --- a/.github/workflows/happy-new-year.yml +++ b/.github/workflows/happy-new-year.yml @@ -78,6 +78,7 @@ jobs: base: ${{ steps.branches.outputs.BASE }} branch: ${{ steps.branches.outputs.PR_BRANCH }} delete-branch: true + sign-commits: true commit-message: "Squiz/FileComment: update year in test case fixed file" title: "Squiz/FileComment: update year in test case fixed file" # yamllint disable rule:line-length