From edc31cb1c7bc74c94602cf07b243394fd0cb2d49 Mon Sep 17 00:00:00 2001 From: Derek Roberts Date: Mon, 26 Oct 2026 20:10:59 -0700 Subject: [PATCH 1/2] chore(ci): retarget bcgov/actions to recut v0.11.0 --- .github/workflows/.deployer.yml | 4 ++-- .github/workflows/cert-expiry-tests.yml | 4 ++-- .github/workflows/oc-runner-commands.yml | 4 ++-- .github/workflows/pg-upgrade.yml | 4 ++-- .github/workflows/pr-open.yml | 6 +++--- crunchy/action.yml | 2 +- deployer/action.yml | 2 +- oc-runner/action.yml | 2 +- 8 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/.deployer.yml b/.github/workflows/.deployer.yml index 75e093e..94630a4 100644 --- a/.github/workflows/.deployer.yml +++ b/.github/workflows/.deployer.yml @@ -108,7 +108,7 @@ jobs: - name: Resolve PR from images id: tracker if: inputs.tag == '' && inputs.promote_images != '' - uses: bcgov/actions/image-tracker@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/image-tracker@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: packages: ${{ inputs.promote_images }} @@ -200,7 +200,7 @@ jobs: persist-credentials: false # One call: resolve every package's digest and point promote_tags at it - - uses: bcgov/actions/image-tracker@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + - uses: bcgov/actions/image-tracker@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: packages: ${{ inputs.promote_images }} tags: ${{ inputs.promote_tags }} diff --git a/.github/workflows/cert-expiry-tests.yml b/.github/workflows/cert-expiry-tests.yml index 26690b5..f9d45fb 100644 --- a/.github/workflows/cert-expiry-tests.yml +++ b/.github/workflows/cert-expiry-tests.yml @@ -46,7 +46,7 @@ jobs: echo "sha=${sha}" >> "$GITHUB_OUTPUT" - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: base: ${{ steps.base.outputs.sha || github.event.before }} triggers: | @@ -143,6 +143,6 @@ jobs: runs-on: ubuntu-26.04 timeout-minutes: 5 steps: - - uses: bcgov/actions/workflow-results@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + - uses: bcgov/actions/workflow-results@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: needs: ${{ toJson(needs) }} diff --git a/.github/workflows/oc-runner-commands.yml b/.github/workflows/oc-runner-commands.yml index 751ce44..3068ab7 100644 --- a/.github/workflows/oc-runner-commands.yml +++ b/.github/workflows/oc-runner-commands.yml @@ -39,7 +39,7 @@ jobs: echo "sha=${sha}" >> "$GITHUB_OUTPUT" - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: base: ${{ steps.base.outputs.sha || github.event.before }} triggers: | @@ -123,6 +123,6 @@ jobs: runs-on: ubuntu-26.04 timeout-minutes: 5 steps: - - uses: bcgov/actions/workflow-results@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + - uses: bcgov/actions/workflow-results@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: needs: ${{ toJson(needs) }} diff --git a/.github/workflows/pg-upgrade.yml b/.github/workflows/pg-upgrade.yml index 591abcd..c72fe29 100644 --- a/.github/workflows/pg-upgrade.yml +++ b/.github/workflows/pg-upgrade.yml @@ -44,7 +44,7 @@ jobs: echo "sha=${sha}" >> "$GITHUB_OUTPUT" - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: base: ${{ steps.base.outputs.sha || github.event.before }} # pg-upgrade/action.yml calls oc-runner only to log in @@ -136,6 +136,6 @@ jobs: runs-on: ubuntu-26.04 timeout-minutes: 5 steps: - - uses: bcgov/actions/workflow-results@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + - uses: bcgov/actions/workflow-results@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: needs: ${{ toJson(needs) }} diff --git a/.github/workflows/pr-open.yml b/.github/workflows/pr-open.yml index 36b0715..4020124 100644 --- a/.github/workflows/pr-open.yml +++ b/.github/workflows/pr-open.yml @@ -138,7 +138,7 @@ jobs: echo "sha=${sha}" >> "$GITHUB_OUTPUT" - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: base: ${{ steps.base.outputs.sha || github.event.before }} filters: | @@ -263,7 +263,7 @@ jobs: echo "sha=${sha}" >> "$GITHUB_OUTPUT" - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: base: ${{ steps.base.outputs.sha || github.event.before }} triggers: | @@ -691,6 +691,6 @@ jobs: runs-on: ubuntu-26.04 timeout-minutes: 5 steps: - - uses: bcgov/actions/workflow-results@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + - uses: bcgov/actions/workflow-results@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: needs: ${{ toJson(needs) }} diff --git a/crunchy/action.yml b/crunchy/action.yml index 396a744..ab21603 100644 --- a/crunchy/action.yml +++ b/crunchy/action.yml @@ -282,7 +282,7 @@ runs: echo "VALUES_URL=${VALUES_URL}" >> $GITHUB_ENV - id: triggers - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: triggers: ${{ inputs.triggers }} base: ${{ inputs.base }} diff --git a/deployer/action.yml b/deployer/action.yml index 898664e..26445af 100644 --- a/deployer/action.yml +++ b/deployer/action.yml @@ -133,7 +133,7 @@ runs: # Send triggers to diff action - id: triggers - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: triggers: ${{ inputs.triggers }} base: ${{ inputs.base }} diff --git a/oc-runner/action.yml b/oc-runner/action.yml index 92ada47..7017675 100644 --- a/oc-runner/action.yml +++ b/oc-runner/action.yml @@ -133,7 +133,7 @@ runs: # Send triggers to diff action - id: diff - uses: bcgov/actions/diff-triggers@8843560d44aa717798dacb6831bf87161d0658ca # v0.11.0 + uses: bcgov/actions/diff-triggers@091f1da89c669d36bf4899830381e5b12d2c889a # v0.11.0 with: triggers: ${{ inputs.triggers }} base: ${{ inputs.base }} From be7aec51c150cecb188a0364ec137e36e11092e4 Mon Sep 17 00:00:00 2001 From: Derek Roberts Date: Mon, 26 Oct 2026 20:27:47 -0700 Subject: [PATCH 2/2] ci: grant results job notify permissions (issues: write) for workflow-results v0.11.0 --- .github/workflows/cert-expiry-tests.yml | 5 ++++- .github/workflows/oc-runner-commands.yml | 5 ++++- .github/workflows/pg-upgrade.yml | 5 ++++- .github/workflows/pr-open.yml | 5 ++++- 4 files changed, 16 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cert-expiry-tests.yml b/.github/workflows/cert-expiry-tests.yml index f9d45fb..bc3d413 100644 --- a/.github/workflows/cert-expiry-tests.yml +++ b/.github/workflows/cert-expiry-tests.yml @@ -139,7 +139,10 @@ jobs: - unit - known-host if: always() - permissions: {} + permissions: + contents: read + issues: write + pull-requests: read runs-on: ubuntu-26.04 timeout-minutes: 5 steps: diff --git a/.github/workflows/oc-runner-commands.yml b/.github/workflows/oc-runner-commands.yml index 3068ab7..e3451b6 100644 --- a/.github/workflows/oc-runner-commands.yml +++ b/.github/workflows/oc-runner-commands.yml @@ -119,7 +119,10 @@ jobs: - commands - unreachable-api if: always() - permissions: {} + permissions: + contents: read + issues: write + pull-requests: read runs-on: ubuntu-26.04 timeout-minutes: 5 steps: diff --git a/.github/workflows/pg-upgrade.yml b/.github/workflows/pg-upgrade.yml index c72fe29..49e6588 100644 --- a/.github/workflows/pg-upgrade.yml +++ b/.github/workflows/pg-upgrade.yml @@ -132,7 +132,10 @@ jobs: - unit - containers if: always() - permissions: {} + permissions: + contents: read + issues: write + pull-requests: read runs-on: ubuntu-26.04 timeout-minutes: 5 steps: diff --git a/.github/workflows/pr-open.yml b/.github/workflows/pr-open.yml index 4020124..ceb14c4 100644 --- a/.github/workflows/pr-open.yml +++ b/.github/workflows/pr-open.yml @@ -687,7 +687,10 @@ jobs: - test-fork-token-degradation - test-image-import if: always() - permissions: {} + permissions: + contents: read + issues: write + pull-requests: read runs-on: ubuntu-26.04 timeout-minutes: 5 steps: