From 5d10d327c57a4323c7860e8f6c40b1c9e2533b32 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Jan 2023 00:05:57 +0000 Subject: [PATCH 1/2] build(deps): bump zeebe-io/backport-action from 0.0.9 to 1.0.1 Bumps [zeebe-io/backport-action](https://github.com/zeebe-io/backport-action) from 0.0.9 to 1.0.1. - [Release notes](https://github.com/zeebe-io/backport-action/releases) - [Commits](https://github.com/zeebe-io/backport-action/compare/v0.0.9...v1.0.1) --- updated-dependencies: - dependency-name: zeebe-io/backport-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/backport.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index 5ed5f671..f624fd8d 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -10,7 +10,7 @@ jobs: steps: - uses: actions/checkout@v3 - name: Create backport PRs - uses: zeebe-io/backport-action@v0.0.9 + uses: zeebe-io/backport-action@v1.0.1 with: # Config README: https://github.com/zeebe-io/backport-action#backport-action github_token: ${{ secrets.GITHUB_TOKEN }} From 4083f150c0a7ab84dcb02657c6c8e84f96223331 Mon Sep 17 00:00:00 2001 From: Jan-Niklas Burfeind Date: Wed, 4 Jan 2023 21:25:25 +0100 Subject: [PATCH 2/2] backport-action: update workflow - set permissions explicitly, as recommended in their docs - drop github_token and github_workspace (now set per default) - ownership has moved from "zeebe-io" to the main developer "korthout" backport-action will follow semver from now on --- .github/workflows/backport.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index f624fd8d..882aa20e 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -2,6 +2,9 @@ name: Backport on: pull_request_target: types: [closed, labeled] +permissions: + contents: write # so it can comment + pull-requests: write # so it can create pull requests jobs: backport: name: Backport Pull Request @@ -10,10 +13,8 @@ jobs: steps: - uses: actions/checkout@v3 - name: Create backport PRs - uses: zeebe-io/backport-action@v1.0.1 + uses: korthout/backport-action@v1.0.1 with: - # Config README: https://github.com/zeebe-io/backport-action#backport-action - github_token: ${{ secrets.GITHUB_TOKEN }} - github_workspace: ${{ github.workspace }} + # Config README: https://github.com/korthout/backport-action#backport-action pull_description: |- Automatic backport to `${target_branch}`, triggered by a label in #${pull_number}.