fix(sec-auto): aikido Fix security issue in undici via minor version … #84
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| permissions: {} | |
| jobs: | |
| release-please: | |
| runs-on: ubuntu-24.04 | |
| name: Release Automation | |
| permissions: | |
| # Required by the tag pushes below, which use the checkout's credentials. | |
| contents: write | |
| # Required for grooming the release PR. | |
| pull-requests: write | |
| steps: | |
| - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 | |
| id: generate-token | |
| with: | |
| client-id: ${{ secrets.LENDABOT_APP_ID }} | |
| private-key: ${{ secrets.LENDABOT_APP_PRIVATE_KEY }} | |
| - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5 | |
| id: release | |
| with: | |
| token: ${{ steps.generate-token.outputs.token }} | |
| config-file: release-please-config.json | |
| manifest-file: .release-please-manifest.json | |
| include-component-in-tag: false | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 | |
| if: ${{ steps.release.outputs.release_created }} | |
| with: | |
| token: ${{ steps.generate-token.outputs.token }} | |
| persist-credentials: false | |
| - name: Tag Major and Minor versions | |
| if: ${{ steps.release.outputs.release_created }} | |
| env: | |
| GH_TOKEN: ${{ steps.generate-token.outputs.token }} | |
| run: | | |
| git config user.name github-actions[bot] | |
| git config user.email 41898282+github-actions[bot]@users.noreply.github.com | |
| gh auth setup-git | |
| git tag -d v${{ steps.release.outputs.major }} || true | |
| git tag -d v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }} || true | |
| git push origin :v${{ steps.release.outputs.major }} || true | |
| git push origin :v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }} || true | |
| git tag -a v${{ steps.release.outputs.major }} -m "Release v${{ steps.release.outputs.major }}" | |
| git tag -a v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }} -m "Release v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}" | |
| git push origin v${{ steps.release.outputs.major }} | |
| git push origin v${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }} |