Bump isort from 8.0.0 to 8.0.1 in the patch group #90
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Automatically repo-config migrations for Dependabot PRs | |
| # | |
| # The companion auto-dependabot workflow skips repo-config group PRs so | |
| # they're handled exclusively by the migration workflow. | |
| # | |
| # XXX: !!! SECURITY WARNING !!! | |
| # pull_request_target has write access to the repo, and can read secrets. | |
| # This is required because Dependabot PRs are treated as fork PRs: the | |
| # GITHUB_TOKEN is read-only and secrets are unavailable with a plain | |
| # pull_request trigger. The action mitigates the risk by: | |
| # - Never executing code from the PR (migrate.py is fetched from an | |
| # upstream tag, not from the checked-out branch). | |
| # - Gating migration steps on github.actor == 'dependabot[bot]'. | |
| # - Running checkout with persist-credentials: false and isolating | |
| # push credentials from the migration script environment. | |
| # For more details read: | |
| # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ | |
| name: Repo Config Migration | |
| on: | |
| pull_request_target: | |
| types: [opened, synchronize, reopened, labeled, unlabeled] | |
| permissions: | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| repo-config-migration: | |
| name: Migrate Repo Config | |
| if: contains(github.event.pull_request.title, 'the repo-config group') | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Generate token | |
| id: create-app-token | |
| uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1 | |
| with: | |
| app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} | |
| private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} | |
| - name: Migrate | |
| uses: frequenz-floss/gh-action-dependabot-migrate@init | |
| with: | |
| script-url-template: >- | |
| https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/{version}/cookiecutter/migrate.py | |
| token: ${{ steps.create-app-token.outputs.token }} | |
| migration-token: ${{ secrets.REPO_CONFIG_MIGRATION_TOKEN }} | |
| auto-merge-on-changes: "true" | |
| sign-commits: "true" | |
| auto-merged-label: "tool:auto-merged" | |
| migrated-label: "tool:repo-config:migration:executed" | |
| intervention-pending-label: "tool:repo-config:migration:intervention-pending" | |
| intervention-done-label: "tool:repo-config:migration:intervention-done" |