Matrix-Mirrors/synapse-product
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse-product.git synced 2024-10-01 08:25:44 -04:00
Code Issues Packages Projects Releases Wiki Activity

yet another attempt to make dependabot changelogs work (#14021)

Browse Source 
* yet another attempt to make dependabot changelogs work

* Changelog
This commit is contained in:
David Robertson 2022-10-03 15:59:32 +01:00 committed by GitHub
parent a52d27a68b
commit 3ac0e76b79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/dependabot_changelog.yml vendored
View File

@ -9,6 +9,9 @@ permissions:
# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
# for a similar example
contents: write
# The pull_requests "synchronize" event doesn't seem to fire with just `contents: write`, so
# CI doesn't run with the new changelog. Maybe `pull_requests: write` will fix this?
pull_requests: write
jobs:
add-changelog:
@ -27,3 +30,5 @@ jobs:
git commit -m "Changelog"
git push
shell: bash
# THIS WORKFLOW HAS VARIOUS WRITE PERMISSIONS---do not add other jobs here unless they
# are sufficiently locked down to dependabot only as above.

1
changelog.d/14021.misc Normal file
View File

@ -0,0 +1 @@
Prototype a workflow to automatically add changelogs to dependabot PRs.