9 Commits
Author SHA1 Message Date
dependabot[bot]andSubmariner Bot fed3053a05 Bump the github-actions group with 4 updates
Bumps the github-actions group with 4 updates: [depends-on/depends-on-action](https://github.com/depends-on/depends-on-action), [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/stale](https://github.com/actions/stale).


Updates `depends-on/depends-on-action` from 0.16.0 to 0.17.0
- [Release notes](https://github.com/depends-on/depends-on-action/releases)
- [Commits](https://github.com/depends-on/depends-on-action/compare/826c144163ac67bf08347590a5f81afd45da63ca...c7ac9a6932a7069e83aef80c202d9f60f91e43fd)

Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97)

Updates `actions/stale` from 10.3.0 to 11.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...4391f3da665fdf50b6810c1a66712fb9ba21aa93)

---
updated-dependencies:
- dependency-name: depends-on/depends-on-action
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-01 15:26:38 +03:00
dependabot[bot]andSubmariner Bot f60098ba77 Bump the github-actions group with 4 updates
Bumps the github-actions group with 4 updates: [depends-on/depends-on-action](https://github.com/depends-on/depends-on-action), [actions/checkout](https://github.com/actions/checkout), [azure/setup-helm](https://github.com/azure/setup-helm) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `depends-on/depends-on-action` from e7915c70317af4efc4e6c4a4eb1e9260e215270c to 826c144163ac67bf08347590a5f81afd45da63ca
- [Release notes](https://github.com/depends-on/depends-on-action/releases)
- [Commits](https://github.com/depends-on/depends-on-action/compare/e7915c70317af4efc4e6c4a4eb1e9260e215270c...826c144163ac67bf08347590a5f81afd45da63ca)

Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `azure/setup-helm` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/dda3372f752e03dde6b3237bc9431cdc2f7a02a2...9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310)

Updates `actions/setup-python` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1)

---
updated-dependencies:
- dependency-name: depends-on/depends-on-action
  dependency-version: 826c144163ac67bf08347590a5f81afd45da63ca
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: azure/setup-helm
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-01 15:36:24 +03:00
Tom Pantelis cdb48a6e26 Switch to depends-on/depends-on-action for PR dependencies
Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
2026-06-05 08:38:16 -04:00
dependabot[bot]andStephen Kitt 940619cc84 Bump z0al/dependent-issues from 1.5.1 to 1.5.2
Bumps [z0al/dependent-issues](https://github.com/z0al/dependent-issues) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/z0al/dependent-issues/releases)
- [Commits](https://github.com/z0al/dependent-issues/compare/0fae07162bc9e0d8e116a133bd03686eed6efa21...950226e7ca8fc43dc209a7febf67c655af3bdb43)

---
updated-dependencies:
- dependency-name: z0al/dependent-issues
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-03-01 14:34:08 +01:00
Daniel FarrellandStephen Kitt e16a2c36df Minimize GHA permissions
Set the GitHub Actions token permission to null in most workflows.

This results in:

GITHUB_TOKEN Permissions
  Metadata: read

The default permissions, used without the null override, are either

GITHUB_TOKEN Permissions
  Actions: write
  Checks: write
  Contents: write
  Deployments: write
  Discussions: write
  Issues: write
  Metadata: read
  Packages: write
  Pages: write
  PullRequests: write
  RepositoryProjects: write
  SecurityEvents: write
  Statuses: write

or

GITHUB_TOKEN Permissions
  Actions: read
  Checks: read
  Contents: read
  Deployments: read
  Discussions: read
  Issues: read
  Metadata: read
  Packages: read
  Pages: read
  PullRequests: read
  RepositoryProjects: read
  SecurityEvents: read
  Statuses: read

Jobs triggered by PRs get read permissions, other jobs get write.

One job requires non-null permissions to function.

The dependent issues GHA needs PR/issues write permissions to add/remove
`dependent` labels. It needs status write permission to block/unblock
PRs when dependencies are missing/met. Fails with HttpError otherwise.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2022-08-25 10:47:32 +02:00
Daniel FarrellandDaniel Farrell 182a06d2a8 Update z0al/dependent-issues to 1.5.1
The current version is not tagged, but is first in the 1.3.0 tag.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2022-03-18 10:47:52 -04:00
Daniel FarrellandThomas Pantelis f151c3f3dc Fix yamllint errors, use SubM-standard config
Use similar yamllint configuration as other Submariner repos.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2022-03-15 10:13:58 -04:00
Daniel FarrellandDaniel Farrell 50489802e2 Don't run periodic PR dependency checks on forks
As we do with the Flake Finder and other periodic jobs, skip the checks
for PR dependencies on forks.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
2021-08-09 16:39:00 -04:00
Janki ChhatbarandDaniel Farrell 78294c1827 Enable PR dependency check jobs
This job marks a PR `dependent` whenever a dependent PR
is mentioned via `Depends on/ depends on` keyword.

The job fails until the dependent PR is not merged. This
helps in properly managing merging of dependent PRs.

Signed-off-by: Janki Chhatbar <jchhatba@redhat.com>
2021-07-22 10:18:28 -04:00