chore(deps-dev): Bump postcss from 8.5.14 to 8.5.23 #17076
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: tester | |
| on: | |
| push: | |
| branches: | |
| - "main" | |
| - "release-**" | |
| pull_request: | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| - ready_for_review | |
| branches: | |
| - "main" | |
| - "release-**" | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| env: | |
| TERRAFORM_VERSION: 1.11.1 | |
| # Keep the checksum in sync with the versioned archive URL. | |
| NGROK_DOWNLOAD_URL: https://bin.equinox.io/a/bNzUz3YQtcB/ngrok-v3-3.33.1-linux-amd64.tar.gz | |
| NGROK_DOWNLOAD_SHA256: 7d5cf30be47a38d937958dff61a2b175a289bdbf72fdc20774a6dceeaaaa3dbf | |
| jobs: | |
| changes: | |
| permissions: | |
| contents: read # for dorny/paths-filter to fetch a list of changed files | |
| pull-requests: read # for dorny/paths-filter to read pull requests | |
| outputs: | |
| should-run-tests: ${{ steps.changes.outputs.go == 'true' }} | |
| if: github.event.pull_request.draft == false | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3 | |
| id: changes | |
| with: | |
| filters: | | |
| go: | |
| - '**/*.go' | |
| - '**/*.txt' # golden file test output | |
| - 'go.*' | |
| - '**/go.mod' | |
| - '**/go.sum' | |
| - '**/*.tmpl' | |
| - 'Makefile' | |
| - '.github/workflows/test.yml' | |
| test: | |
| needs: [changes] | |
| if: needs.changes.outputs.should-run-tests == 'true' | |
| name: Tests | |
| runs-on: ubuntu-24.04 | |
| # Use latest testing environment for automatic updates | |
| # Previous: ghcr.io/runatlantis/testing-env:latest@sha256:725981e9090c977f8055f5ec5ba7a63430a8f0337ab955978e6b8cc2cd0236c3 | |
| container: ghcr.io/runatlantis/testing-env:latest@sha256:dc683c36e7fb8f26fcc8628fdcf328f42d3b1903e130aebb8484223fbdedfd98 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| # need to setup go toolchain explicitly | |
| - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 | |
| with: | |
| go-version-file: go.mod | |
| - run: make test-all | |
| - run: make check-fmt | |
| ########################################################### | |
| # Notifying #contributors about test failure on main branch | |
| ########################################################### | |
| - name: Slack failure notification | |
| if: ${{ github.ref == 'refs/heads/main' && failure() }} | |
| uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 | |
| with: | |
| payload: | | |
| { | |
| "blocks": [ | |
| { | |
| "type": "section", | |
| "text": { | |
| "type": "mrkdwn", | |
| "text": ":x: Failed GitHub Action:" | |
| } | |
| }, | |
| { | |
| "type": "section", | |
| "fields": [ | |
| { | |
| "type": "mrkdwn", | |
| "text": "*Workflow:*\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|${{ github.workflow }}>" | |
| }, | |
| { | |
| "type": "mrkdwn", | |
| "text": "*Job:*\n${{ github.job }}" | |
| }, | |
| { | |
| "type": "mrkdwn", | |
| "text": "*Repo:*\n${{ github.repository }}" | |
| } | |
| ] | |
| } | |
| ] | |
| } | |
| env: | |
| SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} | |
| SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK | |
| skip-test: | |
| needs: [changes] | |
| if: needs.changes.outputs.should-run-tests == 'false' | |
| name: Tests | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - run: 'echo "No build required"' | |
| e2e-github: | |
| runs-on: ubuntu-24.04 | |
| # dont run e2e tests on forked PRs or Dependabot PRs, where repository secrets are unavailable | |
| if: github.event.pull_request.head.repo.fork == false && github.actor != 'dependabot[bot]' | |
| env: | |
| ATLANTIS_GH_APP_ID: ${{ secrets.ATLANTISBOT_GH_APP_ID }} | |
| ATLANTIS_GH_APP_KEY: ${{ secrets.ATLANTISBOT_GH_APP_KEY }} | |
| ATLANTIS_GH_APP_SLUG: ${{ secrets.ATLANTISBOT_GH_APP_SLUG }} | |
| NGROK_AUTH_TOKEN: ${{ secrets.ATLANTISBOT_NGROK_AUTH_TOKEN }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 | |
| with: | |
| go-version-file: go.mod | |
| # This version of TF will be downloaded before Atlantis is started. | |
| # We do this instead of setting --default-tf-version because setting | |
| # that flag starts the download asynchronously so we'd have a race | |
| # condition. | |
| - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 | |
| with: | |
| terraform_version: ${{ env.TERRAFORM_VERSION }} | |
| - name: Setup ngrok | |
| run: | | |
| wget -q -O ngrok.tar.gz "${NGROK_DOWNLOAD_URL}" | |
| echo "${NGROK_DOWNLOAD_SHA256} ngrok.tar.gz" | sha256sum --check --strict | |
| tar -xzf ngrok.tar.gz | |
| chmod +x ngrok | |
| ./ngrok version | |
| - name: Setup gitconfig | |
| run: | | |
| git config --global user.email "maintainers@runatlantis.io" | |
| if [ -n "${ATLANTIS_GH_APP_SLUG:-}" ]; then | |
| git config --global user.name "${ATLANTIS_GH_APP_SLUG}[bot]" | |
| else | |
| git config --global user.name "atlantis[bot]" | |
| fi | |
| - run: | | |
| make build-service | |
| ./scripts/e2e.sh | |
| e2e-gitlab: | |
| runs-on: ubuntu-24.04 | |
| # dont run e2e tests on forked PRs or Dependabot PRs, where repository secrets are unavailable | |
| if: github.event.pull_request.head.repo.fork == false && github.actor != 'dependabot[bot]' | |
| env: | |
| ATLANTIS_GITLAB_USER: ${{ secrets.ATLANTISBOT_GITLAB_USERNAME }} | |
| ATLANTIS_GITLAB_TOKEN: ${{ secrets.ATLANTISBOT_GITLAB_TOKEN }} | |
| NGROK_AUTH_TOKEN: ${{ secrets.ATLANTISBOT_NGROK_AUTH_TOKEN }} | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 | |
| - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 | |
| with: | |
| go-version-file: go.mod | |
| # This version of TF will be downloaded before Atlantis is started. | |
| # We do this instead of setting --default-tf-version because setting | |
| # that flag starts the download asynchronously so we'd have a race | |
| # condition. | |
| - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 | |
| with: | |
| terraform_version: ${{ env.TERRAFORM_VERSION }} | |
| - name: Setup ngrok | |
| run: | | |
| wget -q -O ngrok.tar.gz "${NGROK_DOWNLOAD_URL}" | |
| echo "${NGROK_DOWNLOAD_SHA256} ngrok.tar.gz" | sha256sum --check --strict | |
| tar -xzf ngrok.tar.gz | |
| chmod +x ngrok | |
| ./ngrok version | |
| - name: Setup gitconfig | |
| run: | | |
| git config --global user.email "maintainers@runatlantis.io" | |
| git config --global user.name "atlantisbot" | |
| - run: | | |
| make build-service | |
| ./scripts/e2e.sh |