Skip to content

Commit f41984c

Browse files
committed
Merge remote-tracking branch 'upstream/master' into pretalx
2 parents 308a61c + c8994c9 commit f41984c

89 files changed

Lines changed: 2283 additions & 1820 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.eslintrc.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
11
{
2-
"extends": "next/core-web-vitals"
2+
"extends": "next/core-web-vitals",
3+
"rules": {
4+
"@next/next/no-html-link-for-pages": ["error", "app"]
5+
}
36
}

.github/workflows/add-good-first-issue-labels.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,13 +14,13 @@ permissions: {}
1414
jobs:
1515
add-labels:
1616
name: Add 'Good First Issue' and 'area/*' labels
17-
if: ${{(!github.event.issue.pull_request && github.event.issue.state != 'closed' && github.actor != 'asyncapi-bot') && (contains(github.event.comment.body, '/good-first-issue') || contains(github.event.comment.body, '/gfi' ))}}
17+
if: ${{(!github.event.issue.pull_request && github.event.issue.state != 'closed' && github.event.comment.user.login != 'asyncapi-bot') && (contains(github.event.comment.body, '/good-first-issue') || contains(github.event.comment.body, '/gfi' ))}}
1818
runs-on: ubuntu-latest
1919
permissions:
2020
issues: write # This is needed to add labels to issues.
2121
steps:
2222
- name: Add label
23-
uses: actions/github-script@v7
23+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
2424
with:
2525
github-token: ${{ github.token }}
2626
script: |

.github/workflows/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml

Lines changed: 14 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
if: >
2525
github.event.issue.pull_request &&
2626
github.event.issue.state != 'closed' &&
27-
github.actor != 'asyncapi-bot' &&
27+
github.event.comment.user.login != 'asyncapi-bot' &&
2828
(
2929
contains(github.event.comment.body, '/ready-to-merge') ||
3030
contains(github.event.comment.body, '/rtm' )
@@ -33,11 +33,14 @@ jobs:
3333
runs-on: ubuntu-latest
3434
steps:
3535
- name: Add ready-to-merge label
36-
uses: actions/github-script@v7
36+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
3737
env:
3838
GITHUB_ACTOR: ${{ github.actor }}
3939
with:
40-
github-token: ${{ github.token }}
40+
# Use bot PAT, not the default GITHUB_TOKEN: events created by
41+
# GITHUB_TOKEN do not trigger other workflows, so `Automerge For
42+
# Humans` would never see the `labeled` event.
43+
github-token: ${{ secrets.GH_TOKEN }}
4144
script: |
4245
const prDetailsUrl = context.payload.issue.pull_request.url;
4346
const { data: pull } = await github.request(prDetailsUrl);
@@ -83,17 +86,18 @@ jobs:
8386
if: >
8487
github.event.issue.pull_request &&
8588
github.event.issue.state != 'closed' &&
86-
github.actor != 'asyncapi-bot' &&
89+
github.event.comment.user.login != 'asyncapi-bot' &&
8790
(
8891
contains(github.event.comment.body, '/do-not-merge') ||
8992
contains(github.event.comment.body, '/dnm' )
9093
)
9194
runs-on: ubuntu-latest
9295
steps:
9396
- name: Add do-not-merge label
94-
uses: actions/github-script@v7
97+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
9598
with:
96-
github-token: ${{ github.token }}
99+
# Bot PAT so the `labeled` event can trigger downstream workflows.
100+
github-token: ${{ secrets.GH_TOKEN }}
97101
script: |
98102
github.rest.issues.addLabels({
99103
issue_number: context.issue.number,
@@ -109,17 +113,18 @@ jobs:
109113
if: >
110114
github.event.issue.pull_request &&
111115
github.event.issue.state != 'closed' &&
112-
github.actor != 'asyncapi-bot' &&
116+
github.event.comment.user.login != 'asyncapi-bot' &&
113117
(
114118
contains(github.event.comment.body, '/autoupdate') ||
115119
contains(github.event.comment.body, '/au' )
116120
)
117121
runs-on: ubuntu-latest
118122
steps:
119123
- name: Add autoupdate label
120-
uses: actions/github-script@v7
124+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
121125
with:
122-
github-token: ${{ github.token }}
126+
# Bot PAT so the `labeled` event can trigger the autoupdate workflow.
127+
github-token: ${{ secrets.GH_TOKEN }}
123128
script: |
124129
github.rest.issues.addLabels({
125130
issue_number: context.issue.number,

.github/workflows/automerge-for-humans-merging.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
steps:
3333
- name: Get PR authors
3434
id: authors
35-
uses: actions/github-script@v7
35+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
3636
with:
3737
script: |
3838
// Get paginated list of all commits in the PR
@@ -71,7 +71,7 @@ jobs:
7171
7272
- name: Create commit message
7373
id: create-commit-message
74-
uses: actions/github-script@v7
74+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
7575
env:
7676
AUTHORS_JSON: ${{ steps.authors.outputs.result }}
7777
with:

.github/workflows/automerge-for-humans-remove-ready-to-merge-label-on-edit.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,10 @@
66
name: Remove ready-to-merge label
77

88
on:
9-
pull_request:
9+
pull_request_target:
1010
types:
1111
- synchronize
12-
- edited
12+
- edited # zizmor: ignore[dangerous-triggers] needed as pull_request token is read-only
1313

1414
permissions: {}
1515

@@ -21,7 +21,7 @@ jobs:
2121
pull-requests: write # required to remove labels and post comments on PR issues
2222
steps:
2323
- name: Remove label
24-
uses: actions/github-script@v7
24+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
2525
with:
2626
github-token: ${{ github.token }}
2727
script: |

.github/workflows/automerge-orphans.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,11 +19,11 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: Checkout repository
22-
uses: actions/checkout@v4
22+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2323
with:
2424
persist-credentials: false
2525
- name: Get list of orphans
26-
uses: actions/github-script@v7
26+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
2727
id: orphans
2828
with:
2929
github-token: ${{ github.token }}

.github/workflows/automerge.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,6 @@ jobs:
1616
name: Autoapprove PR comming from a bot
1717
if: >
1818
contains(fromJson('["asyncapi-bot", "dependabot[bot]", "dependabot-preview[bot]"]'), github.event.pull_request.user.login) &&
19-
contains(fromJson('["asyncapi-bot", "dependabot[bot]", "dependabot-preview[bot]"]'), github.actor) &&
2019
!contains(github.event.pull_request.labels.*.name, 'released')
2120
runs-on: ubuntu-latest
2221
steps:
@@ -26,7 +25,7 @@ jobs:
2625
github-token: "${{ secrets.GH_TOKEN_BOT_EVE }}"
2726

2827
- name: Label autoapproved
29-
uses: actions/github-script@v7
28+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
3029
with:
3130
github-token: ${{ secrets.GH_TOKEN }}
3231
script: |

.github/workflows/bounty-program-commands.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
issues: write # required to post a comment on the issue/PR
3030
pull-requests: write # required to post a comment on the issue/PR if it's a PR
3131
if: >
32-
!contains(fromJSON('["aeworxet","thulieblack"]'), github.actor) &&
32+
!contains(fromJSON('["aeworxet","thulieblack"]'), github.event.comment.user.login) &&
3333
(
3434
startsWith(github.event.comment.body, '/bounty' )
3535
)
@@ -38,7 +38,7 @@ jobs:
3838

3939
steps:
4040
- name: ❌ @${{github.actor}} made an unauthorized attempt to use a Bounty Program's command
41-
uses: actions/github-script@v7
41+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
4242
env:
4343
ACTOR: ${{ github.actor }}
4444
with:
@@ -61,15 +61,15 @@ jobs:
6161
issues: write # required to read/create labels and add labels on the issue/PR
6262
pull-requests: write # required to read/create labels and add labels on the issue/PR
6363
if: >
64-
contains(fromJSON('["aeworxet","thulieblack"]'), github.actor) &&
64+
contains(fromJSON('["aeworxet","thulieblack"]'), github.event.comment.user.login) &&
6565
(
6666
startsWith(github.event.comment.body, '/bounty' )
6767
)
6868
6969
runs-on: ubuntu-latest
7070
steps:
7171
- name: Add label `bounty`
72-
uses: actions/github-script@v7
72+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
7373
with:
7474
github-token: ${{ github.token }}
7575
script: |
@@ -105,14 +105,14 @@ jobs:
105105
issues: write # required to read/remove labels on the issue/PR
106106
pull-requests: write # required to read/remove labels on the issue/PR if it's a PR
107107
if: >
108-
contains(fromJSON('["aeworxet","thulieblack"]'), github.actor) &&
108+
contains(fromJSON('["aeworxet","thulieblack"]'), github.event.comment.user.login) &&
109109
(
110110
startsWith(github.event.comment.body, '/unbounty' )
111111
)
112112
runs-on: ubuntu-latest
113113
steps:
114114
- name: Remove label `bounty`
115-
uses: actions/github-script@v7
115+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
116116
with:
117117
github-token: ${{ github.token }}
118118
script: |

.github/workflows/help-command.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,13 +13,13 @@ permissions: {}
1313
jobs:
1414
create_help_comment_pr:
1515
name: Help Comment in PR
16-
if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '/help') && github.actor != 'asyncapi-bot' }}
16+
if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '/help') && github.event.comment.user.login != 'asyncapi-bot' }}
1717
runs-on: ubuntu-latest
1818
permissions:
1919
pull-requests: write # To comment on Pull requests
2020
steps:
2121
- name: Add comment to PR
22-
uses: actions/github-script@v7
22+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
2323
env:
2424
ACTOR: ${{ github.actor }}
2525
with:
@@ -47,13 +47,13 @@ jobs:
4747

4848
create_help_comment_issue:
4949
name: Help Comment in Issue
50-
if: ${{ !github.event.issue.pull_request && startsWith(github.event.comment.body, '/help') && github.actor != 'asyncapi-bot' }}
50+
if: ${{ !github.event.issue.pull_request && startsWith(github.event.comment.body, '/help') && github.event.comment.user.login != 'asyncapi-bot' }}
5151
runs-on: ubuntu-latest
5252
permissions:
5353
issues: write # To comment on Issues
5454
steps:
5555
- name: Add comment to Issue
56-
uses: actions/github-script@v7
56+
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
5757
env:
5858
ACTOR: ${{ github.actor }}
5959
with:

.github/workflows/issues-prs-notifications.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ permissions: {}
1818

1919
jobs:
2020
issue:
21-
if: github.event_name == 'issues' && github.actor != 'asyncapi-bot' && github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]'
21+
if: github.event_name == 'issues' && github.event.issue.user.login != 'asyncapi-bot' && github.event.issue.user.login != 'dependabot[bot]' && github.event.issue.user.login != 'dependabot-preview[bot]'
2222
name: Notify slack on every new issue
2323
runs-on: ubuntu-latest
2424
steps:
@@ -41,7 +41,7 @@ jobs:
4141
MSG_MINIMAL: true
4242

4343
pull_request:
44-
if: github.event_name == 'pull_request_target' && github.actor != 'asyncapi-bot' && github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]'
44+
if: github.event_name == 'pull_request_target' && github.event.pull_request.user.login != 'asyncapi-bot' && github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.user.login != 'dependabot-preview[bot]'
4545
name: Notify slack on every new pull request
4646
runs-on: ubuntu-latest
4747
steps:
@@ -64,7 +64,7 @@ jobs:
6464
MSG_MINIMAL: true
6565

6666
discussion:
67-
if: github.event_name == 'discussion' && github.actor != 'asyncapi-bot' && github.actor != 'dependabot[bot]' && github.actor != 'dependabot-preview[bot]'
67+
if: github.event_name == 'discussion' && github.event.discussion.user.login != 'asyncapi-bot' && github.event.discussion.user.login != 'dependabot[bot]' && github.event.discussion.user.login != 'dependabot-preview[bot]'
6868
name: Notify slack on every new pull request
6969
runs-on: ubuntu-latest
7070
steps:

0 commit comments

Comments
 (0)