ebcc8b7ca9
ci: enable corepack in setup-node steps
...
The actions/setup-node@v6.4.0 upgrade stopped auto-shimming yarn onto
PATH via corepack. The yarn-plugin test spawns yarn via Node's
child_process.spawn() which does a raw PATH lookup, causing
ENOENT failures. Adding corepack: true ensures the yarn shim is
available.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2026-05-28 10:20:37 +02:00
850f7c2ce5
Merge pull request #33359 from awanlin/topic/typos-cli
...
Added `typos` to CI and fixed all findings
2026-05-25 15:23:38 -05:00
4b78a21ba5
Merge pull request #34279 from backstage/renovate/chromaui-action-digest
...
Update chromaui/action digest to 7aca53e
2026-05-25 12:07:01 +02:00
699b15678b
Update actions/setup-node action to v6.4.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-22 17:18:40 +00:00
01e3e3d32f
Update chromaui/action digest to 7aca53e
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-22 17:18:27 +00:00
2c53691962
Fix postgres env var casing in deploy_packages workflow
...
The env vars used lowercase postgres18/postgres14 instead of uppercase
POSTGRES18/POSTGRES14, which didn't match the names expected by
TestDatabases. This caused all postgres-only test suites to see no
available databases and crash.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2026-05-19 23:21:47 +02:00
a07e6a31a4
Typos CLI - initial config and changes
...
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixed test typos
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixed docs typos
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixed code comment typos
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixed remaining typos
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Added CI and Config
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixed typo, lol
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Fixes and update API reports
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Updated based on feedback
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Updated test
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Minor corrections
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Removed changesets
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Refactor to make changes non-breaking
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Clean up of new typos
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Use typoed over typo'd
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Added typoed
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Updated API Reports
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Feedback improvement
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Refinements
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Simplify based on feedback
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
Reverted to handle both keys
Signed-off-by: Andre Wanlin <awanlin@spotify.com >
2026-05-19 07:38:06 -05:00
d7116e3780
chore(deps): update actions/labeler action to v6.1.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-14 04:27:10 +00:00
34abc1d0ee
Merge pull request #33503 from backstage/renovate/mshick-add-pr-comment-3.x
...
chore(deps): update mshick/add-pr-comment action to v3
2026-05-13 15:16:37 +02:00
84e1ca6b85
Merge pull request #33769 from backstage/renovate/chromaui-action-digest
...
chore(deps): update chromaui/action digest to e3eb8ec
2026-05-13 15:15:33 +02:00
5da4528553
Merge pull request #34088 from backstage/renovate/actions-cache-5.x
...
chore(deps): update actions/cache action to v5.0.5
2026-05-13 13:19:28 +02:00
b6ff1ca58f
Merge pull request #34083 from backstage/renovate/stefanbuck-github-issue-parser-digest
...
chore(deps): update stefanbuck/github-issue-parser digest to cb6e971
2026-05-13 13:19:11 +02:00
f96ee452f8
Merge pull request #34082 from backstage/renovate/actions-upload-artifact-digest
...
chore(deps): update actions/upload-artifact digest to 043fb46
2026-05-13 13:18:55 +02:00
1399e136d7
Merge pull request #34073 from backstage/renovate/actions-cache-digest
...
chore(deps): update actions/cache digest to 27d5ce7
2026-05-13 13:18:37 +02:00
b6e1ecf158
Merge pull request #34166 from backstage/renovate/actions-upload-artifact-7.x
...
chore(deps): update actions/upload-artifact action to v7.0.1
2026-05-13 13:14:32 +02:00
17c0551651
ci: add explicit permissions to pull_request_target workflows
...
Add least-privilege permissions blocks to three workflows that use
pull_request_target without explicit permission scoping:
- sync_renovate-changesets: contents:write + pull-requests:write
- sync_dependabot-changesets: contents:write + pull-requests:write
- sync_pull-requests-trigger: all none (only uploads artifacts)
These workflows run in the base repo context and have access to secrets.
Explicit permissions ensure the GITHUB_TOKEN is scoped to only what each
workflow needs, reducing blast radius if a guard is ever bypassed.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2026-05-12 19:59:05 +02:00
2e7c972a06
chore(deps): update mshick/add-pr-comment action to v3
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:37:37 +00:00
b4d844d304
chore(deps): update actions/upload-artifact action to v7.0.1
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:26:25 +00:00
6bdde6e6cb
chore(deps): update actions/cache action to v5.0.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:26:18 +00:00
0395bb37a3
chore(deps): update stefanbuck/github-issue-parser digest to cb6e971
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:26:12 +00:00
59a4e68a36
chore(deps): update chromaui/action digest to e3eb8ec
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:26:06 +00:00
c1bef46f1f
chore(deps): update actions/upload-artifact digest to 043fb46
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:26:00 +00:00
9b22d8dbf1
chore(deps): update actions/cache digest to 27d5ce7
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-12 10:25:52 +00:00
a44f28972a
Merge pull request #34141 from backstage/renovate/snyk-actions-digest
...
chore(deps): update snyk/actions digest to 9cf6ca7
2026-05-08 14:08:36 -05:00
2e435d8e88
Update github/codeql-action action to v4.35.4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-07 16:26:59 +00:00
2f54d56a7c
Update snyk/actions digest to 9cf6ca7
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-06 13:03:29 +00:00
d10af0be6d
Merge pull request #33657 from backstage/rugvip/replace-discord-action
...
workflows: replace Ilshidur/action-discord with inline github-script
2026-03-30 20:28:04 +02:00
6cc48113fc
remove some cli deprecation warnings
...
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 09:44:30 +02:00
0cb1189130
workflows: add Discord notification for ready PRs ( #33655 )
...
* workflows: add Discord notification for ready PRs
Adds a new workflow that posts to Discord whenever a pull request is
opened as non-draft or marked as ready for review. Uses jq to safely
construct the JSON payload and sends it via curl to a webhook URL
stored in repository secrets.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
* workflows: harden Discord webhook notification
Add early guard for missing webhook secret, disable Discord mention
parsing to prevent abuse via PR titles/bodies, and check the HTTP
response to surface webhook failures.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
* workflows: upgrade github-script to v8 and truncate embed title
Align actions/github-script pin with the rest of the repo (v8.0.0)
and truncate the Discord embed title to the 256-character limit to
prevent webhook failures on long PR titles.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
---------
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-28 15:44:47 +01:00
18c928175d
workflows: replace Ilshidur/action-discord with inline github-script
...
Replace the third-party Discord notification action with inline
`actions/github-script@v8` steps that post to the Discord webhook
directly using fetch. This removes a third-party action dependency
and adds explicit error handling for missing secrets and failed
webhook requests.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-28 13:07:38 +01:00
76769c8be7
Merge pull request #33496 from backstage/renovate/github-codeql-action-4.x
...
chore(deps): update github/codeql-action action to v4.34.1
2026-03-27 11:43:25 +01:00
7ca5846bff
Merge pull request #33502 from backstage/renovate/microsoft-setup-msbuild-3.x
...
chore(deps): update microsoft/setup-msbuild action to v3
2026-03-27 11:43:07 +01:00
4975a14a38
chore(deps): pin dependencies
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 00:58:06 +00:00
3207f9d1c4
chore(deps): update microsoft/setup-msbuild action to v3
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 16:11:54 +00:00
5e1f181f74
chore(deps): update github/codeql-action action to v4.34.1
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 16:11:24 +00:00
10e7e657b3
Merge pull request #33456 from backstage/renovate/actions-cache-digest
...
chore(deps): update actions/cache digest to 6682284
2026-03-20 11:14:32 +01:00
b445d25735
chore(deps): update actions/cache action to v5.0.4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:30:54 +00:00
0e3942620b
chore(deps): update actions/cache digest to 6682284
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:30:46 +00:00
e7cfb0cc8e
Merge pull request #33306 from backstage/renovate/windows-2025.x
...
chore(deps): update dependency windows to v2025
2026-03-20 10:24:20 +01:00
dd5cc5be52
Merge pull request #33307 from backstage/renovate/docker-build-push-action-7.x
...
chore(deps): update docker/build-push-action action to v7
2026-03-20 10:24:00 +01:00
c7abbf0373
Merge pull request #33311 from backstage/renovate/docker-login-action-4.x
...
chore(deps): update docker/login-action action to v4
2026-03-20 10:23:45 +01:00
f62aff93e8
Merge pull request #33314 from backstage/renovate/docker-setup-buildx-action-4.x
...
chore(deps): update docker/setup-buildx-action action to v4
2026-03-20 10:23:11 +01:00
ed3f0f9f0d
Merge pull request #33315 from backstage/renovate/major-github-artifact-actions
...
chore(deps): update github artifact actions (major)
2026-03-20 10:22:06 +01:00
0dd6794ff7
chore(deps): update github/codeql-action action to v4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 10:22:34 +00:00
269b85ef0d
feat: use branch name instead of tag for stable docs ( #32614 )
...
* feat: use branch name instead of tag for stable docs
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* test
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* paginate everything
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* different return value
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* update both flows
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* add docs
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
* Change checkout ref from tags to heads
Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com >
---------
Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com >
Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com >
2026-03-12 11:03:13 -04:00
b3b081909a
chore(deps): update github artifact actions
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 12:09:03 +00:00
8976bd58fd
chore(deps): update docker/setup-buildx-action action to v4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 12:08:55 +00:00
3de804a11b
chore(deps): update docker/login-action action to v4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 11:07:50 +00:00
293dfe00f1
chore(deps): update docker/build-push-action action to v7
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 10:05:34 +00:00
f55c567da3
chore(deps): update dependency windows to v2025
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 10:05:25 +00:00
Fredrik Adelöw