From 35e9df8e8f40a73ff8ec57f1afa5826a0b76b091 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 30 May 2024 10:50:00 +0000 Subject: [PATCH 1/2] Bump senzing-factory/build-resources from 1 to 2 Bumps [senzing-factory/build-resources](https://github.com/senzing-factory/build-resources) from 1 to 2. - [Release notes](https://github.com/senzing-factory/build-resources/releases) - [Changelog](https://github.com/senzing-factory/build-resources/blob/main/CHANGELOG.md) - [Commits](https://github.com/senzing-factory/build-resources/compare/v1...v2) --- updated-dependencies: - dependency-name: senzing-factory/build-resources dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/add-labels-standardized.yaml | 2 +- .github/workflows/lint-workflows.yaml | 2 +- .github/workflows/move-pr-to-done-dependabot.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/add-labels-standardized.yaml b/.github/workflows/add-labels-standardized.yaml index 1360a67..38483d9 100644 --- a/.github/workflows/add-labels-standardized.yaml +++ b/.github/workflows/add-labels-standardized.yaml @@ -13,4 +13,4 @@ jobs: secrets: ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }} SENZING_MEMBERS: ${{ secrets.SENZING_MEMBERS }} - uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v1 + uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v2 diff --git a/.github/workflows/lint-workflows.yaml b/.github/workflows/lint-workflows.yaml index 1bcd936..c471330 100644 --- a/.github/workflows/lint-workflows.yaml +++ b/.github/workflows/lint-workflows.yaml @@ -14,4 +14,4 @@ permissions: jobs: lint-workflows: - uses: senzing-factory/build-resources/.github/workflows/lint-workflows.yaml@v1 + uses: senzing-factory/build-resources/.github/workflows/lint-workflows.yaml@v2 diff --git a/.github/workflows/move-pr-to-done-dependabot.yaml b/.github/workflows/move-pr-to-done-dependabot.yaml index 582a1b0..63c6908 100644 --- a/.github/workflows/move-pr-to-done-dependabot.yaml +++ b/.github/workflows/move-pr-to-done-dependabot.yaml @@ -9,4 +9,4 @@ jobs: move-pr-to-done-dependabot: secrets: SENZING_GITHUB_PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }} - uses: senzing-factory/build-resources/.github/workflows/move-pr-to-done.yaml@v1 + uses: senzing-factory/build-resources/.github/workflows/move-pr-to-done.yaml@v2 From 0f703c88af4391ae3abdcfa88bc3ef3220d6576b Mon Sep 17 00:00:00 2001 From: Sam <109683132+kernelsam@users.noreply.github.com> Date: Thu, 30 May 2024 12:17:50 -0700 Subject: [PATCH 2/2] update workflow permissions --- .github/workflows/add-labels-standardized.yaml | 5 +++-- .github/workflows/add-to-project-community-dependabot.yaml | 3 +++ .github/workflows/add-to-project-community.yaml | 3 +++ .github/workflows/move-pr-to-done-dependabot.yaml | 3 +++ 4 files changed, 12 insertions(+), 2 deletions(-) diff --git a/.github/workflows/add-labels-standardized.yaml b/.github/workflows/add-labels-standardized.yaml index 38483d9..01aa8a1 100644 --- a/.github/workflows/add-labels-standardized.yaml +++ b/.github/workflows/add-labels-standardized.yaml @@ -6,10 +6,11 @@ on: - opened - reopened +permissions: + issues: write + jobs: add-issue-labels: - permissions: - issues: write secrets: ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }} SENZING_MEMBERS: ${{ secrets.SENZING_MEMBERS }} diff --git a/.github/workflows/add-to-project-community-dependabot.yaml b/.github/workflows/add-to-project-community-dependabot.yaml index ca381ee..ca13aa9 100644 --- a/.github/workflows/add-to-project-community-dependabot.yaml +++ b/.github/workflows/add-to-project-community-dependabot.yaml @@ -8,6 +8,9 @@ env: CREATOR: ${{ github.event.pull_request.user.login }} GITHUB_TOKEN: ${{ secrets.SENZING_GITHUB_ACCESS_TOKEN }} +permissions: + repository-projects: write + jobs: add-to-project-dependabot: name: add issue to Senzing Community project diff --git a/.github/workflows/add-to-project-community.yaml b/.github/workflows/add-to-project-community.yaml index 2c76520..25cddf3 100644 --- a/.github/workflows/add-to-project-community.yaml +++ b/.github/workflows/add-to-project-community.yaml @@ -6,6 +6,9 @@ on: - opened - reopened +permissions: + repository-projects: write + jobs: add-to-project: name: add issue to project diff --git a/.github/workflows/move-pr-to-done-dependabot.yaml b/.github/workflows/move-pr-to-done-dependabot.yaml index 63c6908..68bcb82 100644 --- a/.github/workflows/move-pr-to-done-dependabot.yaml +++ b/.github/workflows/move-pr-to-done-dependabot.yaml @@ -5,6 +5,9 @@ on: branches: [main] types: [closed] +permissions: + repository-projects: write + jobs: move-pr-to-done-dependabot: secrets: