Skip to content

Commit 8da86ae

Browse files
pulumi-botpulumi-bot
authored
Update GitHub Actions workflows. (#5282)
This PR was automatically generated by the update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt repo, from commit d77004611f0044baca1f99589d312808cfa72d60.
1 parent 3699cae commit 8da86ae

File tree

14 files changed

+55
-40
lines changed

14 files changed

+55
-40
lines changed

‎.github/actions/download-prerequisites/action.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ runs:
55
using: "composite"
66
steps:
77
- name: Download the prerequisites bin
8-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
8+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
99
with:
1010
name: prerequisites-bin
1111
path: bin
@@ -19,7 +19,7 @@ runs:
1919
run: rm bin/executables.txt
2020

2121
- name: Download schema-embed.json
22-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
22+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
2323
with:
2424
# Use a pattern to avoid failing if the artifact doesn't exist
2525
pattern: schema-embed.*

‎.github/actions/download-provider/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ runs:
66
steps:
77

88
- name: Download pulumi-resource-aws
9-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
9+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
1010
with:
1111
pattern: pulumi-resource-aws-*-linux-amd64.tar.gz
1212
path: ${{ github.workspace }}/bin

‎.github/actions/download-sdk/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ runs:
1010
using: "composite"
1111
steps:
1212
- name: Download ${{ inputs.language }} SDK
13-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
13+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
1414
with:
1515
name: ${{ inputs.language }}-sdk.tar.gz
1616
path: ${{ github.workspace}}/sdk/

‎.github/actions/setup-tools/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ runs:
4747

4848
- name: Install Pulumi CLI
4949
if: inputs.tools == 'all' || contains(inputs.tools, 'pulumicli')
50-
uses: pulumi/actions@13b8b7177d6fb736766875dac9b78aab07bd785f # v6
50+
uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6
5151
with:
5252
pulumi-version: "dev"
5353

‎.github/actions/upload-prerequisites/action.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -9,14 +9,14 @@ runs:
99
run: find bin -type f -executable > bin/executables.txt
1010

1111
- name: Upload prerequisites bin
12-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
12+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
1313
with:
1414
name: prerequisites-bin
1515
path: bin/*
1616
retention-days: 30
1717

1818
- name: Upload schema-embed.json
19-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
19+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
2020
with:
2121
name: schema-embed.json
2222
path: provider/cmd/pulumi-resource-aws/schema-embed.json

‎.github/actions/upload-sdk/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ runs:
1313
shell: bash
1414
run: tar -zcf sdk/${{ inputs.language }}.tar.gz -C sdk/${{ inputs.language }} .
1515
- name: Upload artifacts
16-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
16+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
1717
with:
1818
name: ${{ inputs.language }}-sdk.tar.gz
1919
path: ${{ github.workspace}}/sdk/${{ inputs.language }}.tar.gz

‎.github/workflows/build_provider.yml

+15-13
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,19 @@ on:
99
required: true
1010
type: string
1111
description: Version of the provider to build
12+
matrix:
13+
required: false
14+
type: string
15+
default: |
16+
{
17+
"platform": [
18+
{"os": "linux", "arch": "amd64"},
19+
{"os": "linux", "arch": "arm64"},
20+
{"os": "darwin", "arch": "amd64"},
21+
{"os": "darwin", "arch": "arm64"},
22+
{"os": "windows", "arch": "amd64"}
23+
]
24+
}
1225
1326
jobs:
1427
build_provider:
@@ -19,18 +32,7 @@ jobs:
1932
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2033
strategy:
2134
fail-fast: true
22-
matrix:
23-
platform:
24-
- os: linux
25-
arch: amd64
26-
- os: linux
27-
arch: arm64
28-
- os: darwin
29-
arch: amd64
30-
- os: darwin
31-
arch: arm64
32-
- os: windows
33-
arch: amd64
35+
matrix: ${{ fromJSON(inputs.matrix) }}
3436
steps:
3537
# Run as first step so we don't delete things that have just been installed
3638
- name: Free Disk Space (Ubuntu)
@@ -97,7 +99,7 @@ jobs:
9799
run: make provider_dist-${{ matrix.platform.os }}-${{ matrix.platform.arch }}
98100

99101
- name: Upload artifacts
100-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
102+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
101103
with:
102104
name: pulumi-resource-aws-v${{ inputs.version }}-${{ matrix.platform.os }}-${{ matrix.platform.arch }}.tar.gz
103105
path: bin/pulumi-resource-aws-v${{ inputs.version }}-${{ matrix.platform.os }}-${{ matrix.platform.arch }}.tar.gz

‎.github/workflows/build_sdk.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
submodules: true
6161
persist-credentials: false
6262
- name: Cache examples generation
63-
uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4
63+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
6464
with:
6565
path: |
6666
.pulumi/examples-cache

‎.github/workflows/lint.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -54,5 +54,5 @@ jobs:
5454
- name: golangci-lint
5555
uses: golangci/golangci-lint-action@2226d7cb06a077cd73e56eedd38eecad18e5d837 # v6
5656
with:
57-
version: v1.60
57+
version: v1.64.6
5858
working-directory: provider

‎.github/workflows/prerequisites.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ jobs:
6565
major-version: 6
6666
set-env: 'PROVIDER_VERSION'
6767
- name: Cache examples generation
68-
uses: actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4
68+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4
6969
with:
7070
path: |
7171
.pulumi/examples-cache
@@ -83,7 +83,7 @@ jobs:
8383
- name: Unit-test provider code
8484
run: make test_provider
8585
- name: Upload coverage reports to Codecov
86-
uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
86+
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
8787
env:
8888
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
8989
- if: inputs.is_pr

‎.github/workflows/publish.yml

+2-4
Original file line numberDiff line numberDiff line change
@@ -75,14 +75,14 @@ jobs:
7575
- name: Create dist directory
7676
run: mkdir -p dist
7777
- name: Download provider assets
78-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
78+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
7979
with:
8080
pattern: pulumi-resource-aws-v${{ inputs.version }}-*
8181
path: dist
8282
# Don't create a directory for each artifact
8383
merge-multiple: true
8484
- name: Download schema
85-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
85+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
8686
with:
8787
# Use a pattern to avoid failing if the artifact doesn't exist
8888
pattern: schema-embed.*
@@ -226,7 +226,5 @@ jobs:
226226
secrets: inherit
227227
with:
228228
providerVersion: ${{ inputs.version }}
229-
# Prelease is run often but we only have 5 concurrent macos runners, so we only test after the stable release.
230-
enableMacRunner: ${{ inputs.isPrerelease == false }}
231229
skipGoSdk: ${{ inputs.skipGoSdk }}
232230
pythonVersion: ${{ needs.publish_sdk.outputs.python_version }}

‎.github/workflows/run-acceptance-tests.yml

+6
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,12 @@ jobs:
5757
secrets: inherit
5858
with:
5959
version: ${{ needs.prerequisites.outputs.version }}
60+
matrix: |
61+
{
62+
"platform": [
63+
{"os": "linux", "arch": "amd64"},
64+
]
65+
}
6066
6167
build_sdk:
6268
if: github.event_name == 'repository_dispatch' ||

‎.github/workflows/upgrade-bridge.yml

+19-1
Original file line numberDiff line numberDiff line change
@@ -57,8 +57,26 @@ permissions:
5757

5858
env:
5959
GH_TOKEN: ${{ secrets.PULUMI_PROVIDER_AUTOMATION_TOKEN || secrets.PULUMI_BOT_TOKEN || secrets.GITHUB_TOKEN }}
60+
AWS_REGION: us-west-2
6061
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
61-
62+
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
63+
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
64+
NUGET_PUBLISH_KEY: ${{ secrets.NUGET_PUBLISH_KEY }}
65+
OIDC_ROLE_ARN: ${{ secrets.OIDC_ROLE_ARN }}
66+
PUBLISH_REPO_PASSWORD: ${{ secrets.OSSRH_PASSWORD }}
67+
PUBLISH_REPO_USERNAME: ${{ secrets.OSSRH_USERNAME }}
68+
PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
69+
PULUMI_API: https://api.pulumi-staging.io
70+
PULUMI_GO_DEP_ROOT: ${{ github.workspace }}/..
71+
PULUMI_LOCAL_NUGET: ${{ github.workspace }}/nuget
72+
PULUMI_MISSING_DOCS_ERROR: "true"
73+
PYPI_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
74+
PYPI_USERNAME: __token__
75+
SIGNING_KEY: ${{ secrets.JAVA_SIGNING_KEY }}
76+
SIGNING_KEY_ID: ${{ secrets.JAVA_SIGNING_KEY_ID }}
77+
SIGNING_PASSWORD: ${{ secrets.JAVA_SIGNING_PASSWORD }}
78+
TF_APPEND_USER_AGENT: pulumi
79+
6280
jobs:
6381
upgrade_provider:
6482
name: upgrade-provider

‎.github/workflows/verify-release.yml

+1-10
Original file line numberDiff line numberDiff line change
@@ -26,11 +26,6 @@ on:
2626
description: "The version of the provider to verify"
2727
required: true
2828
type: string
29-
enableMacRunner:
30-
description: "Enable the macos-latest runner in addition to ubuntu-latest and windows-latest. Defaults to 'false'."
31-
required: false
32-
type: boolean
33-
default: false
3429
skipGoSdk:
3530
description: "Skip the Go SDK verification. Defaults to 'false'. This is used when we're not publishing a Go SDK on the default branch build."
3631
required: false
@@ -67,11 +62,7 @@ jobs:
6762
name: verify-release
6863
strategy:
6964
matrix:
70-
# We always run on Linux and Windows, and optionally on MacOS. This is because MacOS runners have limited availability.
71-
# Expression expands to ["ubuntu-latest","windows-latest"] or ["ubuntu-latest","windows-latest","macos-latest"]
72-
# GitHub expressions don't have 'if' statements, so we use a ternary operator to conditionally include the MacOS runner suffix.
73-
# See the docs for a similar example to this: https://docs.github.com/en/actions/learn-github-actions/expressions#fromjson
74-
runner: ${{ fromJSON(format('["ubuntu-latest","windows-latest"{0}]', inputs.enableMacRunner && ',"macos-latest"' || '')) }}
65+
runner: ["ubuntu-latest", "windows-latest", "macos-latest"]
7566
runs-on: ${{ matrix.runner }}
7667
permissions:
7768
contents: 'read'

0 commit comments

Comments
 (0)