Use sysroot repo rule to reference the macos sdk #18189
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: "Run Go Mod Tidy And Generate Licenses" | |
| on: | |
| pull_request: | |
| types: | |
| - labeled | |
| - synchronize # As the commit is ignored by dependabot we need to recreate it if we rebase. | |
| permissions: {} | |
| jobs: | |
| mod_tidy_and_generate_licenses: | |
| if: ${{ github.repository == 'DataDog/datadog-agent' && (github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'renovate[bot]') && contains(github.event.pull_request.labels.*.name, 'dependencies-go') }} | |
| permissions: | |
| id-token: write # Required for dd-octo-sts OIDC token | |
| pull-requests: write # Required to auto-close PRs that bump the root go directive | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 | |
| id: octo-sts | |
| with: | |
| scope: DataDog/datadog-agent | |
| policy: self.go-mod-tidy.push-branch | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| ref: ${{ github.head_ref }} | |
| fetch-depth: 0 | |
| - uses: ./.github/actions/bazel-cache | |
| - name: Install go | |
| uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 | |
| with: | |
| go-version-file: ".go-version" | |
| - name: Install dda | |
| uses: ./.github/actions/install-dda | |
| with: | |
| features: legacy-tasks | |
| - name: Go mod tidy | |
| run: dda inv -- -e tidy | |
| - name: Close PR if root go directive was bumped | |
| env: | |
| BASE_REF: ${{ github.event.pull_request.base.ref }} | |
| GH_TOKEN: ${{ github.token }} | |
| PR_NUMBER: ${{ github.event.pull_request.number }} | |
| run: | | |
| base_directive="$(git show "origin/$BASE_REF:go.mod" | grep -E '^go [0-9]' | head -1)" | |
| current_directive="$(grep -E '^go [0-9]' go.mod | head -1)" | |
| if [ "$base_directive" != "$current_directive" ]; then | |
| echo "::warning::Root go.mod 'go' directive changed from '$base_directive' to '$current_directive'. Auto-closing this PR — a dependency requires a newer Go version than the repo." | |
| gh pr comment "$PR_NUMBER" --body "Auto-closing: this update bumps the root \`go.mod\` \`go\` directive from \`$base_directive\` to \`$current_directive\`. Hold this dependency update until we bump the repository's Go version." | |
| gh pr close "$PR_NUMBER" | |
| exit 1 | |
| fi | |
| - name: Update LICENSE-3rdparty.csv | |
| if: ${{ !contains(github.event.pull_request.labels.*.name, 'dependencies-go-tools') }} | |
| run: | | |
| dda inv -- -e install-tools | |
| dda inv -- -e generate-licenses | |
| - name: Update mocks | |
| if: ${{ !contains(github.event.pull_request.labels.*.name, 'dependencies-go-tools') }} | |
| run: dda inv -- -e security-agent.gen-mocks # generate both security agent and process mocks | |
| - name: Create commit | |
| id: commit | |
| run: | | |
| if git diff --quiet; then | |
| echo "No changes to commit" | |
| echo "has_changes=false" >> $GITHUB_OUTPUT | |
| else | |
| git config --global user.name "Login will be determined by the Github API based on the creator of the token" | |
| git config --global user.email "" | |
| git commit -am "[dependabot skip] Auto-generate go.sum and LICENSE-3rdparty.csv changes" | |
| echo "has_changes=true" >> $GITHUB_OUTPUT | |
| fi | |
| - name: "Push signed commits" | |
| if: steps.commit.outputs.has_changes == 'true' | |
| uses: chouetz/push-signed-commits@9b123e8898e6176af65b9427b434e07aebe7f72f | |
| with: | |
| github-token: ${{ steps.octo-sts.outputs.token }} | |
| local_branch_name: ${{ github.head_ref }} | |
| remote_name: "origin" | |
| remote_branch_name: ${{ github.head_ref }} |