0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
discourse/.github/workflows/dependabot-bundler-checksums.yml
dependabot[bot] d5c21891b4
DEPS: Bump actions/checkout from 6 to 7 (#41156)
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to
7.
- [Release notes](https://github.com/actions/checkout/releases)
-
[Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 21:54:51 +02:00

46 lines
1.3 KiB
YAML
Vendored

name: Bundler checksums on Dependabot PRs
on:
push:
branches:
- "dependabot/bundler/**/*"
paths:
- "Gemfile.lock"
permissions:
contents: write
jobs:
normalize:
name: Normalize
if: github.actor == 'dependabot[bot]'
runs-on: ${{ (github.repository_owner == 'discourse' && 'cdck-linux-8-core') || 'ubuntu-latest' }}
container: discourse/discourse_test:release
steps:
- name: Set working directory owner
run: chown root:root .
- uses: actions/checkout@v7
with:
fetch-depth: 1
token: ${{ secrets.GH_PUSH_TOKEN }}
# Dependabot writes a newer `bundler` checksum than `BUNDLED WITH`; rewrite
# it with the image's bundler so the linting check passes. See
# https://github.com/ruby/rubygems/issues/9512
- name: Normalize Gemfile.lock
env:
BUNDLE_FROZEN: "false"
BUNDLE_DEPLOYMENT: "false"
run: |
bundle lock --add-checksums
bundle lock --normalize-platforms
- name: Git push
run: |
git config --global user.email "team@discourse.org"
git config --global user.name "discoursebot"
git add Gemfile.lock
git status
git commit -m "Normalize Gemfile.lock checksums [dependabot skip]" && git push || echo "done"