👷 🔧 Configure and run Dependabot #2187

shnizzedy · 2025-02-06T19:33:55Z

Fixes

Error: This request has been automatically failed because it uses a deprecated version of actions/upload-artifact: v3. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/

by @birajstha

Description

All we need to do to resolve the issue is to update all the lines like

C-PAC/.github/workflows/smoke_test_participant.yml

Line 107 in 3ffec09

- uses: actions/upload-artifact@v3

to

C-PAC/.github/workflows/smoke_test_participant.yml

Line 107 in 7646484

- uses: actions/upload-artifact@v4

but this PR also:

Sets up Dependabot to check for these kinds of deprecations weekly and open PRs automatically when we need to upgrade GH Actions

C-PAC/.github/dependabot.yaml

Lines 3 to 10 in 7646484

    
           - package-ecosystem: "github-actions" 
        
             directory: "/" 
        
             # Check for updates once a week 
        
             schedule: 
        
               interval: "weekly" 
        
             groups: 
        
               all-actions: 
        
                 patterns: [ "*" ]

Makes all of Dependabot's current recommended upgrades (instead of just actions/upload-artifact v3 → v4)
Switches the datalad installation for the non-human smoke test data from neurodebian to conda (the neurodebian installation was failing after the dependabot upgrades)

Tests

Smoke tests passing

Checklist

My pull request has a descriptive title (not a vague title like Update index.md).
My pull request targets the develop branch of the repository.
My commit messages follow best practices.
My code follows the established code style of the repository.
I added tests for the changes I made (if applicable).
I updated the changelog.
I added or updated documentation (if applicable).
I tried running the project locally and verified that there are no visible errors.

Developer Certificate of Origin

Developer Certificate of Origin
Version 1.1

Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
1 Letterman Drive
Suite D4700
San Francisco, CA, 94129

Everyone is permitted to copy and distribute verbatim copies of this
license document, but changing it is not allowed.


Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
    have the right to submit it under the open source license
    indicated in the file; or

(b) The contribution is based upon previous work that, to the best
    of my knowledge, is covered under an appropriate open source
    license and I have the right under that license to submit that
    work with modifications, whether created in whole or in part
    by me, under the same open source license (unless I am
    permitted to submit under a different license), as indicated
    in the file; or

(c) The contribution was provided directly to me by some other
    person who certified (a), (b) or (c) and I have not modified
    it.

(d) I understand and agree that this project and the contribution
    are public and that a record of the contribution (including all
    personal information I submit with it, including my sign-off) is
    maintained indefinitely and may be redistributed consistent with
    this project or the open source license(s) involved.

Bumps the all-actions group with 10 updates: | Package | From | To | | --- | --- | --- | | [easimon/maximize-build-space](https://github.com/easimon/maximize-build-space) | `6` | `10` | | [actions/checkout](https://github.com/actions/checkout) | `2` | `4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2.2.1` | `3.9.0` | | [docker/login-action](https://github.com/docker/login-action) | `2` | `3` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `4.0.0` | `6.13.0` | | [Chizkiyahu/delete-untagged-ghcr-action](https://github.com/chizkiyahu/delete-untagged-ghcr-action) | `2` | `6` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `41.0.0` | `45.0.7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3` | `4` | | [guibranco/github-status-action-v2](https://github.com/guibranco/github-status-action-v2) | `1.1.7` | `1.1.13` | | [appleboy/ssh-action](https://github.com/appleboy/ssh-action) | `1.0.0` | `1.2.0` | Updates `easimon/maximize-build-space` from 6 to 10 - [Release notes](https://github.com/easimon/maximize-build-space/releases) - [Changelog](https://github.com/easimon/maximize-build-space/blob/master/CHANGELOG.md) - [Commits](easimon/maximize-build-space@v6...v10) Updates `actions/checkout` from 2 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v2...v4) Updates `docker/setup-buildx-action` from 2.2.1 to 3.9.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v2.2.1...v3.9.0) Updates `docker/login-action` from 2 to 3 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v2...v3) Updates `docker/build-push-action` from 4.0.0 to 6.13.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v4.0.0...v6.13.0) Updates `Chizkiyahu/delete-untagged-ghcr-action` from 2 to 6 - [Release notes](https://github.com/chizkiyahu/delete-untagged-ghcr-action/releases) - [Commits](chizkiyahu/delete-untagged-ghcr-action@v2...v6) Updates `tj-actions/changed-files` from 41.0.0 to 45.0.7 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@v41.0.0...v45.0.7) Updates `actions/upload-artifact` from 3 to 4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3...v4) Updates `guibranco/github-status-action-v2` from 1.1.7 to 1.1.13 - [Release notes](https://github.com/guibranco/github-status-action-v2/releases) - [Commits](guibranco/github-status-action-v2@v1.1.7...v1.1.13) Updates `appleboy/ssh-action` from 1.0.0 to 1.2.0 - [Release notes](https://github.com/appleboy/ssh-action/releases) - [Changelog](https://github.com/appleboy/ssh-action/blob/master/.goreleaser.yaml) - [Commits](appleboy/ssh-action@v1.0.0...v1.2.0) --- updated-dependencies: - dependency-name: easimon/maximize-build-space dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: Chizkiyahu/delete-untagged-ghcr-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-actions - dependency-name: guibranco/github-status-action-v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions - dependency-name: appleboy/ssh-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions ... Signed-off-by: dependabot[bot] <[email protected]>

shnizzedy and others added 5 commits February 6, 2025 11:47

👷 🔧 Add GH Actions to Dependabot config

97b5c4b

👷 ⬇️ Keep Python < 3.12 for OSF datalad tests

5b0779d

👷 👽 Update git-annex installation

3955717

👷 Install datalad via conda instead of neurodebian

7646484

shnizzedy temporarily deployed to ACCESS February 6, 2025 19:34 — with GitHub Actions Inactive

shnizzedy requested a review from birajstha February 6, 2025 19:34

shnizzedy added bug devops labels Feb 6, 2025

birajstha approved these changes Feb 6, 2025

View reviewed changes

shnizzedy mentioned this pull request Feb 6, 2025

👷 🔧 Configure Dependabot for Python dependencies #2188

Merged

8 tasks

shnizzedy merged commit cdb23b7 into develop Feb 6, 2025
43 of 44 checks passed

shnizzedy deleted the dependabot-config branch February 6, 2025 19:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

👷 🔧 Configure and run Dependabot #2187

👷 🔧 Configure and run Dependabot #2187

Uh oh!

shnizzedy commented Feb 6, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	- package-ecosystem: "github-actions"
	directory: "/"
	# Check for updates once a week
	schedule:
	interval: "weekly"
	groups:
	all-actions:
	patterns: [ "*" ]

Uh oh!

👷 🔧 Configure and run Dependabot #2187

👷 🔧 Configure and run Dependabot #2187

Uh oh!

Conversation

shnizzedy commented Feb 6, 2025

Fixes

Description

Tests

Checklist

Developer Certificate of Origin

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants