mirror of
https://github.com/Koenkk/zigbee2mqtt.git
synced 2026-07-10 05:51:40 +00:00
DJTerentjev
1b3dd7540b
* GitHub Workflows security hardening (#14799) * build: harden update_frontend.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden update_zhc.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden ghcr_cleanup.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> * build: harden update_zh.yml permissions Signed-off-by: Alex <aleksandrosansan@gmail.com> Signed-off-by: Alex <aleksandrosansan@gmail.com> * Add bound polling by manufacturerNames Based on: #7825 * Add bound polling by manufacturerNames Based on: #7825 Signed-off-by: Alex <aleksandrosansan@gmail.com> Co-authored-by: Alex <aleksandrosansan@gmail.com>
36 lines
1.2 KiB
YAML
36 lines
1.2 KiB
YAML
name: Update zigbee-frontend
|
|
on:
|
|
repository_dispatch:
|
|
types: update_frontend
|
|
|
|
permissions: {}
|
|
jobs:
|
|
update_frontend:
|
|
permissions:
|
|
contents: write # to create branch (peter-evans/create-pull-request)
|
|
pull-requests: write # to create a PR (peter-evans/create-pull-request)
|
|
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
with:
|
|
ref: dev
|
|
ssh-key: ${{ secrets.SSH_PRIVATE_KEY }}
|
|
- uses: actions/setup-node@v3
|
|
with:
|
|
node-version: 16
|
|
- run: npm install zigbee2mqtt-frontend@${{ github.event.client_payload.version }} --save-exact
|
|
- uses: peter-evans/create-pull-request@v4
|
|
id: cpr
|
|
with:
|
|
commit-message: Update zigbee2mqtt-frontend to ${{ github.event.client_payload.version }}
|
|
branch: "update_frontend"
|
|
title: Update zigbee-frontend to ${{ github.event.client_payload.version }}
|
|
- run: sleep 5 # Otherwise pull request may not exist yet causing automerge to fail
|
|
- uses: peter-evans/enable-pull-request-automerge@v2
|
|
if: steps.cpr.outputs.pull-request-operation == 'created'
|
|
with:
|
|
token: ${{ secrets.CR_PAT }}
|
|
pull-request-number: ${{ steps.cpr.outputs.pull-request-number }}
|
|
merge-method: squash
|