From 77cf05a832a41bb8c2749a300aaea3fa31c65479 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 Aug 2025 11:11:58 +0300 Subject: [PATCH 01/10] chore(deps): bump actions/checkout from 4 to 5 (#127) --- .github/workflows/commit-check.yml | 2 +- .github/workflows/main.yaml | 2 +- .github/workflows/used-by.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/commit-check.yml b/.github/workflows/commit-check.yml index f75de56..b22e048 100644 --- a/.github/workflows/commit-check.yml +++ b/.github/workflows/commit-check.yml @@ -12,7 +12,7 @@ jobs: contents: read pull-requests: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: ref: ${{ github.event.pull_request.head.sha }} # checkout PR HEAD commit fetch-depth: 0 # fetch all history for all branches and tags diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 913593d..b4a7f0d 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -19,7 +19,7 @@ jobs: re-tag: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: fetch-depth: 0 ref: ${{ inputs.ref }} diff --git a/.github/workflows/used-by.yml b/.github/workflows/used-by.yml index 0625b49..fae6e88 100644 --- a/.github/workflows/used-by.yml +++ b/.github/workflows/used-by.yml @@ -14,7 +14,7 @@ jobs: used-by: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - uses: shenxianpeng/used-by@v0.1.4 with: repo: '${{ github.repository }}' From ea1ae5cc4f3e8ab71676ba9b51152fdc812ace52 Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Tue, 19 Aug 2025 22:08:00 +0300 Subject: [PATCH 02/10] chore: update and rename main.yaml to release.yaml (#129) --- .github/workflows/{main.yaml => release.yaml} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename .github/workflows/{main.yaml => release.yaml} (96%) diff --git a/.github/workflows/main.yaml b/.github/workflows/release.yaml similarity index 96% rename from .github/workflows/main.yaml rename to .github/workflows/release.yaml index b4a7f0d..a9edb15 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/release.yaml @@ -1,9 +1,9 @@ -name: Main +name: Release on: release: branches: [main] - types: [published] + types: [released] workflow_dispatch: inputs: tag: From 1a0695bffb51d20f90f059c7c0b54b537ee61be8 Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Tue, 19 Aug 2025 22:13:38 +0300 Subject: [PATCH 03/10] docs: update README.md to move a badge --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index 478a8d4..163cd76 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,5 @@ # Commit-Check GitHub Action -[![Main](https://github.com/commit-check/commit-check-action/actions/workflows/main.yaml/badge.svg)](https://github.com/commit-check/commit-check-action/actions/workflows/main.yaml) [![Commit Check](https://github.com/commit-check/commit-check-action/actions/workflows/commit-check.yml/badge.svg)](https://github.com/commit-check/commit-check-action/actions/workflows/commit-check.yml) ![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/commit-check/commit-check-action) [![Used by](https://img.shields.io/static/v1?label=Used%20by&message=67&color=informational&logo=slickpic)](https://github.com/commit-check/commit-check-action/network/dependents) From 4d869c9231db21d02461d6330ad04d724c0b3ca6 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 25 Aug 2025 12:59:08 +0300 Subject: [PATCH 04/10] chore: update used-by badge by github-actions[bot] (#125) Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com> --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 163cd76..06fcc86 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ [![Commit Check](https://github.com/commit-check/commit-check-action/actions/workflows/commit-check.yml/badge.svg)](https://github.com/commit-check/commit-check-action/actions/workflows/commit-check.yml) ![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/commit-check/commit-check-action) -[![Used by](https://img.shields.io/static/v1?label=Used%20by&message=67&color=informational&logo=slickpic)](https://github.com/commit-check/commit-check-action/network/dependents) +[![Used by](https://img.shields.io/static/v1?label=Used%20by&message=68&color=informational&logo=slickpic)](https://github.com/commit-check/commit-check-action/network/dependents) [![GitHub marketplace](https://img.shields.io/badge/Marketplace-commit--check--action-blue)](https://github.com/marketplace/actions/commit-check-action) [![slsa-badge](https://slsa.dev/images/gh-badge-level3.svg)](https://github.com/commit-check/commit-check-action/blob/a2873ca0482dd505c93fb51861c953e82fd0a186/action.yml#L59-L69) From a36334daa1e18458d82ba2c54fc2fa716eae3faf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Sep 2025 02:59:34 +0300 Subject: [PATCH 05/10] chore(deps): bump pygithub from 2.7.0 to 2.8.1 (#138) --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index e5ff28b..50651fe 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,4 +2,4 @@ # For details please see: https://github.com/commit-check/commit-check commit-check==0.10.1 # Interact with the GitHub API. -PyGithub==2.7.0 +PyGithub==2.8.1 From 857cc3c18b53099b8b4dd7c144530885fbe69e53 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 4 Sep 2025 04:20:35 +0300 Subject: [PATCH 06/10] chore(deps): bump commit-check from 0.10.1 to 0.10.2 (#137) Bumps [commit-check](https://github.com/commit-check/commit-check) from 0.10.1 to 0.10.2. - [Release notes](https://github.com/commit-check/commit-check/releases) - [Commits](https://github.com/commit-check/commit-check/compare/v0.10.1...v0.10.2) --- updated-dependencies: - dependency-name: commit-check dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 50651fe..133fa28 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ # Install commit-check CLI # For details please see: https://github.com/commit-check/commit-check -commit-check==0.10.1 +commit-check==0.10.2 # Interact with the GitHub API. PyGithub==2.8.1 From 8079416d15d2ab4a0af0152510b57077a32a0e7d Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Thu, 4 Sep 2025 04:29:38 +0300 Subject: [PATCH 07/10] fix: Workflow does not contain permissions (#139) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a9edb15..10087ef 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -1,4 +1,6 @@ name: Release +permissions: + contents: write on: release: From 3cc934cf58039833e50200fa9221ce79221781c4 Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Thu, 4 Sep 2025 04:30:00 +0300 Subject: [PATCH 08/10] fix: Workflow does not contain permissions (#140) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/pre-commit.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 7ee1b19..83151fa 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -1,4 +1,6 @@ name: Run pre-commit +permissions: + contents: read on: push: From 4d2f3846a694e87acb6b544574bdbee1de286177 Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Thu, 4 Sep 2025 04:30:19 +0300 Subject: [PATCH 09/10] fix: Workflow does not contain permissions (#141) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- .github/workflows/release-drafter.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index d25c13e..026bcaf 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -1,4 +1,6 @@ name: Release Drafter +permissions: + contents: read on: push: From d627c141cd667d09d58245154a10cb995892eb9e Mon Sep 17 00:00:00 2001 From: Xianpeng Shen Date: Thu, 4 Sep 2025 04:32:43 +0300 Subject: [PATCH 10/10] Revert "fix: Workflow does not contain permissions (#141)" (#142) This reverts commit 4d2f3846a694e87acb6b544574bdbee1de286177. --- .github/workflows/release-drafter.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index 026bcaf..d25c13e 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -1,6 +1,4 @@ name: Release Drafter -permissions: - contents: read on: push: