Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-securit…

…y-group-687b632a86

Signed-off-by: aka <157433003+aka2024@users.noreply.github.com>

.github/workflows/add_to_octokit_project.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-latest
  continue-on-error: true
  steps:
- - uses: actions/add-to-project@v0.5.0
+ - uses: actions/add-to-project@v1.0.2
  with:
  project-url: https://github.com/orgs/octokit/projects/10
  github-token: ${{ secrets.OCTOKITBOT_PROJECT_ACTION_TOKEN }}

.github/workflows/immediate-response.yml

@@ -11,19 +11,27 @@ on:
  - opened
 jobs:
  respond-to-issue:
- if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' && github.actor != 'githubactions[bot]' && github.actor != 'octokitbot' }}
+ if:
+ ${{ github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' &&
+ github.actor != 'githubactions[bot]' && github.actor != 'octokitbot' }}
  runs-on: ubuntu-latest
  steps:
  - name: Determine issue or PR number
  id: extract
- run: echo "NUMBER=${{ github.event.issue.number || github.event.pull_request.number }}" >> "$GITHUB_OUTPUT"
+ run: echo "NUMBER=${{ github.event.issue.number ||
+ github.event.pull_request.number }}" >> "$GITHUB_OUTPUT"
 
  - name: Respond to issue or PR
  uses: peter-evans/create-or-update-comment@v4
  with:
  issue-number: ${{ steps.extract.outputs.NUMBER }}
  body: >
- 👋 Hi! Thank you for this contribution! Just to let you know, our GitHub SDK team does a round of issue and PR reviews twice a week, every Monday and Friday!
- We have a [process in place](https://github.com/octokit/.github/blob/main/community/prioritization_response.md#overview) for prioritizing and responding to your input. 
- Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labled with `Status: Up for grabs`.
- You & others like you are the reason all of this works! So thank you & happy coding! 🚀
+ 👋 Hi! Thank you for this contribution! Just to let you know, our
+ GitHub SDK team does a round of issue and PR reviews twice a week,
+ every Monday and Friday! We have a [process in
+ place](https://github.com/octokit/.github/blob/main/community/prioritization_response.md#overview)
+ for prioritizing and responding to your input. Because you are a
+ part of this community please feel free to comment, add to, or pick
+ up any issues/PRs that are labeled with `Status: Up for grabs`. You
+ & others like you are the reason all of this works! So thank you &
+ happy coding! 🚀

.github/workflows/release.yml

@@ -5,7 +5,14 @@ name: Release
  - main
  - next
  - beta
- - v*.x
+ - "*.x"
+# These are recommended by the semantic-release docs: https://github.com/semantic-release/npm#npm-provenance
+permissions:
+ contents: write # to be able to publish a GitHub release
+ issues: write # to be able to comment on released issues
+ pull-requests: write # to be able to comment on released pull requests
+ id-token: write # to enable use of OIDC for npm provenance
+
 jobs:
  release:
  name: release

.github/workflows/test.yml

@@ -12,10 +12,11 @@ jobs:
  runs-on: ubuntu-latest
  strategy:
  matrix:
- node:
+ node_version:
  - 18
  - 20
- name: Node ${{ matrix.node }}
+ - 22
+ name: Node ${{ matrix.node_version }}
  steps:
  - uses: actions/checkout@v4
  - uses: actions/setup-node@v4
@@ -34,7 +35,7 @@ jobs:
  - uses: actions/setup-node@v4
  with:
  cache: npm
- node-version: 16
+ node-version: 20
  - run: npm ci
  - run: npm run validate:ts
  if: ${{ always() }}

.github/workflows/update-prettier.yml

@@ -11,7 +11,7 @@ jobs:
  - uses: actions/setup-node@v4
  with:
  cache: npm
- node-version: 16
+ node-version: 20
  - run: npm ci
  - run: npm run lint:fix
  - uses: gr2m/create-or-update-pull-request-action@v1.x

.github/workflows/update.yml

@@ -1,8 +1,10 @@
 name: Update
 "on":
- repository_dispatch:
- types:
- - octokit/webhooks release
+ push:
+ branches:
+ - renovate/octokit-openapi-webhooks-*
+ - renovate/octokit-monorepo
+ - renovate/major-octokit-monorepo
 jobs:
  update:
  runs-on: ubuntu-latest
@@ -11,38 +13,19 @@ jobs:
  - uses: actions/setup-node@v4
  with:
  cache: npm
- node-version: 16
+ node-version: 20
  - run: npm ci
- - uses: gr2m/await-npm-package-version-action@v1
- with:
- package: "@octokit/webhooks-schemas"
- version: ${{ github.event.client_payload.release.tag_name }}
- - run: npm install --save-exact --save-dev @octokit/webhooks-schemas@latest
- - uses: gr2m/await-npm-package-version-action@v1
- with:
- package: "@octokit/webhooks-types"
- version: ${{ github.event.client_payload.release.tag_name }}
- - run: npm install --save-exact @octokit/webhooks-types@latest
  - run: npm run generate-types
  - name: create pull request
  uses: gr2m/create-or-update-pull-request-action@v1.x
  env:
  GITHUB_TOKEN: ${{ secrets.OCTOKITBOT_PAT }}
  with:
  title: 🚧 🤖📯 Webhooks changed
- body: >
- A new release of
- [@octokit/webhooks-definitions](https://github.com/octokit/webhooks)
- was just released 👋🤖
-
-
- This pull request updates the TypeScript definitions derived from
- `@octokit/webhooks-definitions`. I can't tell if the changes are
- fixes, features or breaking, you'll have to figure that out on
- yourself and adapt the commit messages accordingly to trigger the
- right release, see [our commit message
- conventions](https://github.com/octokit/openapi/blob/main/CONTRIBUTING.md#merging-the-pull-request--releasing-a-new-version).
- branch: update-octokit-webhooks
+ body:
+ An update to the OpenAPI spec has been detected, and required updates to
+ your code. Please review the changes and merge this PR if everything
+ looks good.
+ branch: ${{ github.ref }}
  author: Octokit Bot <octokitbot@martynus.net>
  commit-message: "WIP: Webhooks changed - please review"
- labels: "Type: Maintenance"