Skip to content
Draft
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/on-pull-request.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand All @@ -32,7 +32,7 @@ jobs:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand All @@ -54,7 +54,7 @@ jobs:
matrix:
python: ["3.10", "3.11", "3.12", "3.13"]
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand All @@ -72,7 +72,7 @@ jobs:
if: github.event.pull_request.head.repo.fork == true
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Build Sphinx Image
run: |
docker build -f ./docs/Dockerfile
50 changes: 27 additions & 23 deletions .github/workflows/on-push.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,33 +10,37 @@ on:
jobs:
housekeeping:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- name: Download CI tool
shell: bash
run: |
curl -sSL http://ci.q-ctrl.com | bash -
- name: Vault Login
run: |
./ci vault login -r ${{ secrets.VAULT_ROLE_ID }} -s ${{ secrets.VAULT_SECRET_ID }}
- name: Inject environment variables
run: |
/scripts/ci env prepareGitHub
- name: Perform housekeeping checks
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
git config --global --add safe.directory $GITHUB_WORKSPACE
git config --global user.email "robot@q-ctrl.com"
git config --global user.name "Q-CTRL Robot"
/scripts/housekeeping.sh
- uses: actions/checkout@v6
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@v3
with:
app-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
repositories: reusable-workflows
- name: Checkout reusable workflows
uses: actions/checkout@v6
with:
repository: qctrl/reusable-workflows
token: ${{ steps.app-token.outputs.token }}
path: .github/reusable-workflows
persist-credentials: false
ref: actions/poetry/housekeeping/v2
- name: Run housekeeping
uses: ./.github/reusable-workflows/.github/actions/poetry/housekeeping
with:
vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
- name: Cleanup reusable workflows checkout
if: always()
run: rm -rf .github/reusable-workflows

linting:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand All @@ -59,7 +63,7 @@ jobs:
matrix:
python: ["3.10", "3.11", "3.12", "3.13"]
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand All @@ -79,7 +83,7 @@ jobs:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
- name: Download CI tool
shell: bash
run: |
Expand Down
53 changes: 43 additions & 10 deletions .github/workflows/on-release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,32 @@ jobs:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v6
with:
fetch-depth: 0
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@v3
with:
app-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
repositories: reusable-workflows
- name: Checkout reusable workflows
uses: actions/checkout@v6
with:
repository: qctrl/reusable-workflows
token: ${{ steps.app-token.outputs.token }}
path: .github/reusable-workflows
persist-credentials: false
ref: actions/poetry/housekeeping/v2
- name: Run housekeeping
uses: ./.github/reusable-workflows/.github/actions/poetry/housekeeping
with:
vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
- name: Cleanup reusable workflows checkout
if: always()
run: rm -rf .github/reusable-workflows
- name: Download CI tool
shell: bash
run: |
Expand All @@ -22,14 +45,6 @@ jobs:
- name: Inject environment variables
run: |
./ci env prepareGitHub
- name: Update version in code
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
git config --global --add safe.directory $GITHUB_WORKSPACE
git config --global user.email "robot@q-ctrl.com"
git config --global user.name "Q-CTRL Robot"
/scripts/housekeeping.sh
- name: Publish publicly
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Expand All @@ -43,10 +58,28 @@ jobs:
runs-on: ubuntu-latest
container: qctrl/ci-images:python-3.11-ci
steps:
- name: Generate GitHub App token
id: app-token
uses: actions/create-github-app-token@v3
with:
app-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
repositories: reusable-workflows
- name: Checkout reusable workflows
uses: actions/checkout@v6
with:
repository: qctrl/reusable-workflows
token: ${{ steps.app-token.outputs.token }}
path: .github/reusable-workflows
persist-credentials: false
ref: actions/docs/update-docs/v1
- name: Update docs repo
uses: qctrl/reusable-workflows/.github/actions/docs/update-docs@master
uses: ./.github/reusable-workflows/.github/actions/docs/update-docs
with:
source_branch: master
target_branch: master
vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
- name: Cleanup reusable workflows checkout
if: always()
run: rm -rf .github/reusable-workflows