From 5aa1e1178eae9d774017496a10198080dd5eedca Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 20:36:16 +0000 Subject: [PATCH 1/6] fix: fix java-cloud-bom README update workflow after monorepo migration --- .../java-cloud-bom-update-readme-table.yaml | 20 ++++--------------- 1 file changed, 4 insertions(+), 16 deletions(-) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index f6033178862b..e6d90aac3200 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -13,24 +13,12 @@ on: env: BUILD_SUBDIR: java-cloud-bom jobs: - filter: - runs-on: ubuntu-latest - outputs: - library: ${{ steps.filter.outputs.library }} - steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - with: - persist-credentials: false - - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3 - id: filter - with: - filters: | - library: - - 'java-cloud-bom/**' update-readme: - needs: filter - if: ${{ needs.filter.outputs.library == 'true' }} + if: ${{ github.event_name == 'workflow_dispatch' || startsWith(github.event.release.tag_name, 'libraries-bom/') }} runs-on: ubuntu-latest + defaults: + run: + working-directory: java-cloud-bom permissions: contents: write pull-requests: write From d29745f0a2e5c782d0325d7108f6f6f9a9e9cdd8 Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 20:52:09 +0000 Subject: [PATCH 2/6] style: update actions/checkout hash pin to v4.2.2 for zizmor --- .github/workflows/java-cloud-bom-update-readme-table.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index e6d90aac3200..e20b5d601b9d 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -24,7 +24,7 @@ jobs: pull-requests: write steps: - name: Check out repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false From 855155794dbae0233c772b1ebb0889d4900a1b1a Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 22:40:11 +0000 Subject: [PATCH 3/6] style: update actions/checkout to v6.1.0 with bot token --- .github/workflows/java-cloud-bom-update-readme-table.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index e20b5d601b9d..0e19982a1126 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -24,9 +24,9 @@ jobs: pull-requests: write steps: - name: Check out repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: - persist-credentials: false + token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }} - name: Set up Python uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 From 8535091509ea1fd9bbe5f6afc209542a4a61f7aa Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 22:42:05 +0000 Subject: [PATCH 4/6] style: explicitly set persist-credentials: true with comment --- .github/workflows/java-cloud-bom-update-readme-table.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index 0e19982a1126..6f16f362e3f5 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -26,7 +26,9 @@ jobs: - name: Check out repository uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: + # Token and persist-credentials are required so subsequent git push steps can authenticate token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }} + persist-credentials: true - name: Set up Python uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 From defe228bc77acd404fd7fbe9c6e5b456a45475be Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 22:43:41 +0000 Subject: [PATCH 5/6] style: remove unneeded checkout token and rely on default GITHUB_TOKEN --- .github/workflows/java-cloud-bom-update-readme-table.yaml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index 6f16f362e3f5..bbfd2cf3a9a9 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -25,10 +25,6 @@ jobs: steps: - name: Check out repository uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - with: - # Token and persist-credentials are required so subsequent git push steps can authenticate - token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }} - persist-credentials: true - name: Set up Python uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 From 156014225306510d48cec679ff81436bd40fab89 Mon Sep 17 00:00:00 2001 From: Tomo Suzuki Date: Fri, 24 Jul 2026 22:58:26 +0000 Subject: [PATCH 6/6] style: explicitly set persist-credentials: true with comment --- .github/workflows/java-cloud-bom-update-readme-table.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/java-cloud-bom-update-readme-table.yaml b/.github/workflows/java-cloud-bom-update-readme-table.yaml index bbfd2cf3a9a9..f3e34cf48afe 100644 --- a/.github/workflows/java-cloud-bom-update-readme-table.yaml +++ b/.github/workflows/java-cloud-bom-update-readme-table.yaml @@ -25,6 +25,9 @@ jobs: steps: - name: Check out repository uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 + with: + # Explicitly persist credentials so subsequent git push steps can authenticate with origin + persist-credentials: true - name: Set up Python uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6