Skip to content

Commit 90b83b0

Browse files
alan-agius4alan-agius4
committed
ci: add branch tracking comments to dev-infra GitHub actions
Adds `# main` version comments after SHA references for `angular/dev-infra` GitHub Actions across workflows so that Renovate tracks the main branch and proposes updates when digests change.
1 parent 9c2e2ed commit 90b83b0

5 files changed

Lines changed: 64 additions & 57 deletions

File tree

‎.github/workflows/assistant-to-the-branch-manager.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ name: DevInfra
22

33
on:
44
push:
5+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
56
pull_request_target:
67
types: [opened, synchronize, reopened, ready_for_review, labeled]
78

@@ -17,6 +18,6 @@ jobs:
1718
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
1819
with:
1920
persist-credentials: false
20-
- uses: angular/dev-infra/github-actions/branch-manager@ba726e7bca0b08b125ccc6f93c233749e1213c17
21+
- uses: angular/dev-infra/github-actions/branch-manager@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2122
with:
2223
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

‎.github/workflows/ci.yml‎

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -21,9 +21,9 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Initialize environment
24-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
24+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2525
- name: Setup Bazel
26-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
26+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2727
- name: Install node modules
2828
run: pnpm install --frozen-lockfile
2929
- name: Generate JSON schema types
@@ -44,11 +44,11 @@ jobs:
4444
runs-on: ubuntu-latest
4545
steps:
4646
- name: Initialize environment
47-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
47+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4848
- name: Setup Bazel
49-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
49+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
5050
- name: Setup Bazel RBE
51-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
51+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
5252
with:
5353
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
5454
- name: Install node modules
@@ -61,11 +61,11 @@ jobs:
6161
runs-on: ubuntu-latest
6262
steps:
6363
- name: Initialize environment
64-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
64+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6565
- name: Setup Bazel
66-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
66+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6767
- name: Setup Bazel RBE
68-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
68+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
6969
with:
7070
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
7171
- name: Install node modules
@@ -84,13 +84,13 @@ jobs:
8484
runs-on: ubuntu-latest
8585
steps:
8686
- name: Initialize environment
87-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
87+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
8888
- name: Install node modules
8989
run: pnpm install --frozen-lockfile
9090
- name: Setup Bazel
91-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
91+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
9292
- name: Setup Bazel RBE
93-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
93+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
9494
with:
9595
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
9696
- name: Run CLI E2E tests
@@ -100,11 +100,11 @@ jobs:
100100
runs-on: ubuntu-latest
101101
steps:
102102
- name: Initialize environment
103-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
103+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
104104
- name: Setup Bazel
105-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
105+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
106106
- name: Setup Bazel RBE
107-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
107+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
108108
with:
109109
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
110110
- name: Install node modules
@@ -137,7 +137,7 @@ jobs:
137137
runs-on: windows-2025
138138
steps:
139139
- name: Initialize environment
140-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
140+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
141141
- name: Install node modules
142142
run: pnpm install --frozen-lockfile
143143
- name: Download built Windows E2E tests
@@ -164,13 +164,13 @@ jobs:
164164
runs-on: ubuntu-latest
165165
steps:
166166
- name: Initialize environment
167-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
167+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
168168
- name: Install node modules
169169
run: pnpm install --frozen-lockfile
170170
- name: Setup Bazel
171-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
171+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
172172
- name: Setup Bazel RBE
173-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
173+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
174174
with:
175175
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
176176
- name: Run CLI E2E tests
@@ -188,13 +188,13 @@ jobs:
188188
runs-on: ubuntu-latest
189189
steps:
190190
- name: Initialize environment
191-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
191+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
192192
- name: Install node modules
193193
run: pnpm install --frozen-lockfile
194194
- name: Setup Bazel
195-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
195+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
196196
- name: Setup Bazel RBE
197-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
197+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
198198
with:
199199
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
200200
- name: Run CLI E2E tests
@@ -208,13 +208,13 @@ jobs:
208208
SAUCE_TUNNEL_IDENTIFIER: angular-cli-${{ github.workflow }}-${{ github.run_number }}
209209
steps:
210210
- name: Initialize environment
211-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
211+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
212212
- name: Install node modules
213213
run: pnpm install --frozen-lockfile
214214
- name: Setup Bazel
215-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
215+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
216216
- name: Setup Bazel RBE
217-
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17
217+
uses: angular/dev-infra/github-actions/bazel/configure-remote@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
218218
with:
219219
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
220220
- name: Run E2E Browser tests
@@ -244,11 +244,11 @@ jobs:
244244
CIRCLE_BRANCH: ${{ github.ref_name }}
245245
steps:
246246
- name: Initialize environment
247-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
247+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
248248
- name: Install node modules
249249
run: pnpm install --frozen-lockfile
250250
- name: Setup Bazel
251-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
251+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
252252
- run: pnpm admin snapshots --verbose
253253
env:
254254
SNAPSHOT_BUILDS_GITHUB_TOKEN: ${{ secrets.SNAPSHOT_BUILDS_GITHUB_TOKEN }}

‎.github/workflows/dev-infra.yml‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
name: DevInfra
22

33
on:
4+
# zizmor: ignore[dangerous-triggers] - {Trigger is safe as workflow does not checkout untrusted code}
45
pull_request_target:
56
types: [opened, synchronize, reopened]
67
issues:
@@ -15,21 +16,21 @@ jobs:
1516
if: github.event_name == 'pull_request_target'
1617
runs-on: ubuntu-latest
1718
steps:
18-
- uses: angular/dev-infra/github-actions/labeling/pull-request@649c3afeaa46674507b9625537e49de54a695e2b
19+
- uses: angular/dev-infra/github-actions/labeling/pull-request@649c3afeaa46674507b9625537e49de54a695e2b # main
1920
with:
2021
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
2122
post_approval_changes:
2223
if: github.event_name == 'pull_request_target'
2324
runs-on: ubuntu-latest
2425
steps:
25-
- uses: angular/dev-infra/github-actions/post-approval-changes@649c3afeaa46674507b9625537e49de54a695e2b
26+
- uses: angular/dev-infra/github-actions/post-approval-changes@649c3afeaa46674507b9625537e49de54a695e2b # main
2627
with:
2728
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
2829
issue_labels:
2930
if: github.event_name == 'issues'
3031
runs-on: ubuntu-latest
3132
steps:
32-
- uses: angular/dev-infra/github-actions/labeling/issue@649c3afeaa46674507b9625537e49de54a695e2b
33+
- uses: angular/dev-infra/github-actions/labeling/issue@649c3afeaa46674507b9625537e49de54a695e2b # main
3334
with:
3435
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
3536
google-generative-ai-key: ${{ secrets.GOOGLE_GENERATIVE_AI_KEY }}

‎.github/workflows/perf.yml‎

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@ on:
99

1010
permissions:
1111
contents: 'read'
12-
id-token: 'write'
1312

1413
defaults:
1514
run:
@@ -23,7 +22,7 @@ jobs:
2322
workflows: ${{ steps.workflows.outputs.workflows }}
2423
steps:
2524
- name: Initialize environment
26-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
25+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
2726
- name: Install node modules
2827
run: pnpm install --frozen-lockfile
2928
- id: workflows
@@ -33,14 +32,17 @@ jobs:
3332
timeout-minutes: 30
3433
runs-on: ubuntu-latest
3534
needs: list
35+
permissions:
36+
contents: 'read'
37+
id-token: 'write'
3638
strategy:
3739
matrix:
3840
workflow: ${{ fromJSON(needs.list.outputs.workflows) }}
3941
steps:
4042
- name: Initialize environment
41-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17
43+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4244
- name: Setup Bazel
43-
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17
45+
uses: angular/dev-infra/github-actions/bazel/setup@ba726e7bca0b08b125ccc6f93c233749e1213c17 # main
4446
- name: Install node modules
4547
run: pnpm install --frozen-lockfile
4648
# We utilize the google-github-actions/auth action to allow us to get an active credential using workflow
@@ -52,4 +54,7 @@ jobs:
5254
project_id: 'internal-200822'
5355
workload_identity_provider: 'projects/823469418460/locations/global/workloadIdentityPools/measurables-tracking/providers/angular'
5456
service_account: 'measures-uploader@internal-200822.iam.gserviceaccount.com'
55-
- run: pnpm ng-dev perf workflows --name ${{ matrix.workflow }} --commit-sha ${{github.sha}}
57+
- run: pnpm ng-dev perf workflows --name "$WORKFLOW" --commit-sha "$COMMIT_SHA"
58+
env:
59+
WORKFLOW: ${{ matrix.workflow }}
60+
COMMIT_SHA: ${{ github.sha }}

0 commit comments

Comments
 (0)