From 1dd8d3334be42af598d8f5cb2c3bc541ba3b9bcb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Sep 2024 07:09:32 +0000 Subject: [PATCH 1/2] GH Actions: Bump peter-evans/create-pull-request from 6 to 7 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 7. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/update-phpcs-versionnr.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/update-phpcs-versionnr.yml b/.github/workflows/update-phpcs-versionnr.yml index 6ffeae45..d67cec48 100644 --- a/.github/workflows/update-phpcs-versionnr.yml +++ b/.github/workflows/update-phpcs-versionnr.yml @@ -68,7 +68,7 @@ jobs: run: git status -vv --untracked=all - name: Create pull request - uses: peter-evans/create-pull-request@v6 + uses: peter-evans/create-pull-request@v7 with: base: ${{ steps.branches.outputs.BASE }} branch: ${{ steps.branches.outputs.PR_BRANCH }} From 50d05631586ad27587abde8b963fa3f4967e9ff4 Mon Sep 17 00:00:00 2001 From: jrfnl Date: Mon, 9 Sep 2024 21:46:29 +0200 Subject: [PATCH 2/2] GH Actions: update for new version of "Create Pull Request" The "Create Pull Request" action has released a new major version. I have verified that the workflow as-is would still work. However, this new version also offers one relevant new feature: * Signing commits. The PRs created by this actions are created by the `github-actions[bot]` user. Adding the `sign-commits: true` option will allow the bot to sign the commits based on the repo default `GITHUB_TOKEN`. Refs: * https://github.com/peter-evans/create-pull-request/releases/tag/v7.0.0 * https://github.com/peter-evans/create-pull-request/blob/v7.0.0/docs/concepts-guidelines.md#commit-signature-verification-for-bots --- .github/workflows/update-phpcs-versionnr.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/update-phpcs-versionnr.yml b/.github/workflows/update-phpcs-versionnr.yml index d67cec48..de75c615 100644 --- a/.github/workflows/update-phpcs-versionnr.yml +++ b/.github/workflows/update-phpcs-versionnr.yml @@ -73,6 +73,7 @@ jobs: base: ${{ steps.branches.outputs.BASE }} branch: ${{ steps.branches.outputs.PR_BRANCH }} delete-branch: true + sign-commits: true commit-message: "GetVersionTest: update for release of PHPCS ${{ steps.version.outputs.TAG }}" title: "GetVersionTest: update for release of PHPCS ${{ steps.version.outputs.TAG }}" # yamllint disable rule:line-length