chore: bump github/codeql-action from 4.37.9 to 4.38.0 #18425
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: pull-request-target | |
| on: | |
| pull_request_target: | |
| types: [opened, edited, synchronize, labeled, closed] | |
| branches: | |
| - "*" | |
| concurrency: | |
| # Generally we use `github.ref`, but in pull_request_target, that's always `main`. | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| jobs: | |
| main: | |
| name: Validate PR title | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: amannn/action-semantic-pull-request@v6 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| requireScope: false | |
| # The standard ones plus | |
| # - "internal" for code quality / ergonomics improvements | |
| # - "devops" for developer ergonomics | |
| # - "web" for playground / website (but not docs) | |
| # - "refine" for tiny changes | |
| types: | | |
| feat | |
| fix | |
| docs | |
| style | |
| refactor | |
| perf | |
| test | |
| build | |
| ci | |
| chore | |
| revert | |
| internal | |
| devops | |
| web | |
| refine | |
| backport: | |
| # Backport to `web` branch on `pr-backport-web` | |
| name: Backport to `web` branch | |
| runs-on: ubuntu-24.04 | |
| # Confirm that it's merged and has a label to ensure nothing is backported without oversight | |
| if: | | |
| github.event.pull_request.merged | |
| && github.event.pull_request.base.ref == 'main' | |
| && ( | |
| github.event.action == 'closed' | |
| || ( | |
| github.event.action == 'labeled' | |
| && contains(github.event.label.name, 'pr-backport-web') | |
| ) | |
| ) | |
| # `pull_request_target` runs at the base branch's ref, and `TEND_BOT_TOKEN` | |
| # lives in the `tend` environment, which admits only `main`. Hence the | |
| # `base.ref` condition above. | |
| environment: | |
| name: tend | |
| deployment: false | |
| steps: | |
| - uses: tibdex/backport@v2 | |
| with: | |
| # This is a personal access token from the @prql-bot | |
| github_token: ${{ secrets.TEND_BOT_TOKEN }} | |
| # Docs are at https://github.com/tibdex/backport/blob/main/action.yml | |
| # We only use `web` atm | |
| label_pattern: "^pr-backport-(?<base>([^ ]+))$" | |
| title_template: "chore: Backport #<%= number%> to `web`" |