[Snyk] Security upgrade protobufjs from 8.0.1 to 8.6.6 #45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PR Merge Integration Test Check | |
| on: | |
| pull_request: | |
| branches: | |
| - stable | |
| types: [opened, synchronize, reopened, edited] | |
| issue_comment: | |
| types: [created, edited] | |
| permissions: | |
| issues: write | |
| pull-requests: write | |
| contents: read | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| jobs: | |
| # Job to handle /integration-tests-ok command | |
| process-integration-command: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event.issue.pull_request && contains(github.event.comment.body, '/integration-tests-ok') }} | |
| steps: | |
| - name: Check if the author is a member or Owner | |
| id: check-condition | |
| run: | | |
| if [[ "${{ github.event.comment.author_association }}" == "MEMBER" || "${{ github.event.comment.author_association }}" == "OWNER" ]]; then | |
| echo "condition_met=true" >> $GITHUB_ENV | |
| else | |
| echo "User does not have permission to trigger this command." | |
| echo "condition_met=false" >> $GITHUB_ENV | |
| fi | |
| - name: Leave a Comment on Permission Fail | |
| if: env.condition_met == 'false' | |
| env: | |
| message: 🚫 This command cannot be processed. Only organization members or owners can use the `/integration-tests-ok` command. | |
| run: | | |
| gh issue comment ${{ github.event.issue.number }} --repo "${{ github.repository }}" --body "${{ env.message }}" | |
| echo ${message} | |
| exit 1 | |
| - name: Check if PR target | |
| if: env.condition_met == 'true' | |
| run: | | |
| PR_URL="${{ github.event.issue.pull_request.url }}" | |
| PR_DATA=$(curl -s -H "Authorization: Bearer $GH_TOKEN" -H "Accept: application/vnd.github.v3+json" "$PR_URL") | |
| BASE_BRANCH=$(echo "$PR_DATA" | jq -r '.base.ref') | |
| HEAD_BRANCH=$(echo "$PR_DATA" | jq -r '.head.ref') | |
| echo "Base branch: $BASE_BRANCH" | |
| echo "Head branch: $HEAD_BRANCH" | |
| if [[ "$BASE_BRANCH" == "stable" || "$BASE_BRANCH" == "master" ]]; then | |
| echo "valid_target=true" >> $GITHUB_ENV | |
| else | |
| echo "valid_target=false" >> $GITHUB_ENV | |
| echo "This command only works for PRs against master/stable branch" | |
| fi | |
| - name: Leave a Comment on Invalid Target | |
| if: env.condition_met == 'true' && env.valid_target == 'false' | |
| env: | |
| message: ⚠️ This command only works for pull requests to `master/stable` branches. | |
| run: | | |
| gh issue comment ${{ github.event.issue.number }} --repo "${{ github.repository }}" --body "${{ env.message }}" | |
| echo ${message} | |
| exit 1 | |
| - name: Add integration-tests-verified label | |
| if: env.condition_met == 'true' && env.valid_target == 'true' | |
| run: | | |
| gh issue edit ${{ github.event.issue.number }} --add-label "integration-tests-verified" --repo "${{ github.repository }}" | |
| echo "✅ Added integration-tests-verified label" | |
| - name: Leave success comment | |
| if: env.condition_met == 'true' && env.valid_target == 'true' | |
| env: | |
| message: | | |
| ✅ **Integration Tests Verified** | |
| The `integration-tests-verified` label has been added to this PR. The merge check will now pass. | |
| **Note**: This label will be automatically removed if new commits are pushed to ensure tests are re-run with the latest changes. | |
| run: | | |
| gh issue comment ${{ github.event.issue.number }} --repo "${{ github.repository }}" --body "${{ env.message }}" | |
| # Job to remove label on new commits and check for label presence | |
| integration-test-check: | |
| name: Integration Test Verification | |
| runs-on: ubuntu-latest | |
| if: github.event_name == 'pull_request' || contains(github.event.comment.body, '/integration-tests-ok') | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v5 | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.11' | |
| - name: Install dependencies | |
| run: | | |
| pip install PyGithub | |
| - name: Check integration test label | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PR_NUMBER: ${{ github.event.pull_request.number || github.event.issue.number }} | |
| REPO_OWNER: ${{ github.repository_owner }} | |
| REPO_NAME: ${{ github.event.repository.name }} | |
| GITHUB_EVENT_NAME: ${{ github.event_name }} | |
| GITHUB_EVENT_ACTION: ${{ github.event.action }} | |
| run: | | |
| echo "Waiting for 10 sec for label to get added in case it does get added" | |
| sleep 10 | |
| python .github/scripts/check_integration_test_label.py |