From 674de74c40c292eca97e166cdc609114bb24a3df Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 15:31:54 +0000 Subject: [PATCH 1/2] Bump the github-actions group with 9 updates Bumps the github-actions group with 9 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5` | `6` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` | | [azure/setup-helm](https://github.com/azure/setup-helm) | `4` | `5` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `7` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) Updates `docker/metadata-action` from 5 to 6 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/v5...v6) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) Updates `azure/setup-helm` from 4 to 5 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](https://github.com/azure/setup-helm/compare/v4...v5) Updates `actions/setup-go` from 5 to 7 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v7) Updates `actions/setup-python` from 5 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v7) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: azure/setup-helm dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-image.yaml | 10 +++++----- .github/workflows/docs.yml | 2 +- .github/workflows/lint.yaml | 8 ++++---- .github/workflows/release.yaml | 14 +++++++------- .github/workflows/test.yaml | 16 ++++++++-------- 5 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/build-image.yaml b/.github/workflows/build-image.yaml index 92c7914..58794f2 100644 --- a/.github/workflows/build-image.yaml +++ b/.github/workflows/build-image.yaml @@ -30,17 +30,17 @@ jobs: - name: apps-mcp context: mcp steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 - - uses: docker/login-action@v3 + - uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - - uses: docker/metadata-action@v5 + - uses: docker/metadata-action@v6 id: meta with: images: ghcr.io/${{ github.repository }}/${{ matrix.name }} @@ -48,7 +48,7 @@ jobs: type=raw,value=latest,enable={{is_default_branch}} type=sha - - uses: docker/build-push-action@v6 + - uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} platforms: linux/amd64,linux/arm64 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 5fa3ae5..bfb449b 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -20,7 +20,7 @@ jobs: docs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 - uses: oven-sh/setup-bun@v2 with: bun-version: latest diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 5fd71bf..50175f7 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -10,9 +10,9 @@ jobs: name: Helm chart runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: azure/setup-helm@v4 + - uses: azure/setup-helm@v5 - name: helm lint run: helm lint charts/nebari-apps --set clusterDomain=nebari.example.com @@ -44,9 +44,9 @@ jobs: name: Operator runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: go-version-file: operator/go.mod diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 2945481..1d9b7b7 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -23,17 +23,17 @@ jobs: - name: apps-mcp context: mcp steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 - - uses: docker/login-action@v3 + - uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - - uses: docker/metadata-action@v5 + - uses: docker/metadata-action@v6 id: meta with: images: ghcr.io/${{ github.repository }}/${{ matrix.name }} @@ -41,7 +41,7 @@ jobs: type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} - - uses: docker/build-push-action@v6 + - uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} platforms: linux/amd64,linux/arm64 @@ -55,9 +55,9 @@ jobs: runs-on: ubuntu-latest needs: build steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: azure/setup-helm@v4 + - uses: azure/setup-helm@v5 - name: Log in to GHCR run: | diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 8c21ada..d22561b 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -10,9 +10,9 @@ jobs: name: Operator unit tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: go-version-file: operator/go.mod @@ -24,9 +24,9 @@ jobs: name: API tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v7 with: python-version: "3.12" @@ -40,9 +40,9 @@ jobs: name: MCP tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v7 with: python-version: "3.12" @@ -56,9 +56,9 @@ jobs: name: UI build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 22 cache: npm From 76300a78e1af61501d3b5d4fa335aa63868b59ea Mon Sep 17 00:00:00 2001 From: Johnny Bouder Date: Tue, 1 Sep 2026 12:18:55 -0400 Subject: [PATCH 2/2] Skip Cloudflare Pages deploy on Dependabot PRs Dependabot-triggered workflows cannot read repo secrets, so the deploy step fails with a missing CLOUDFLARE_API_TOKEN. Co-Authored-By: Claude Fable 5 --- .github/workflows/docs.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index bfb449b..e177580 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -50,10 +50,10 @@ jobs: # Dynamic base: subpath on main, root on PR previews (astro.config reads BASE_PATH). run: cd docs && BASE_PATH="${{ steps.cf.outputs.base_path }}" bun run build - # Fork PRs cannot read secrets; skip deploy there (build above still gates). + # Fork and Dependabot PRs cannot read secrets; skip deploy there (build above still gates). - name: Deploy to Cloudflare Pages id: deploy - if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} + if: ${{ github.event_name != 'pull_request' || (github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]') }} uses: cloudflare/wrangler-action@v4 with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}