chore(deps): update docker.io/python docker tag to v3.14.7 #467
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release - Dry Run | |
| on: | |
| pull_request: | |
| branches: [ main, '+.x', beta, alpha ] | |
| permissions: {} | |
| jobs: | |
| release-dryrun: | |
| name: Release - Dry Run | |
| runs-on: ubuntu-24.04 | |
| timeout-minutes: 15 | |
| permissions: | |
| contents: write # Necessary for semantic-release to verify Git push permissions, even during a dry run. | |
| steps: | |
| - name: Harden runner | |
| uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 | |
| with: | |
| disable-sudo-and-containers: true | |
| egress-policy: block | |
| allowed-endpoints: > | |
| github.com:443 | |
| *.github.qkg1.top:443 | |
| *.githubusercontent.com:443 | |
| api.nuget.org:443 | |
| registry.npmjs.org:443 | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 # Required by semantic-release | |
| # Use the pull request head ref (source branch) to ensure the dry run simulates a release for the current PR. | |
| # LIMITATION: will probably not work with pull requests from forks forbidding read accesses. | |
| ref: ${{ github.head_ref }} | |
| - name: Setup Node.js | |
| uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0 | |
| with: | |
| node-version: 24 | |
| cache: npm | |
| cache-dependency-path: .github/release/package-lock.json | |
| - name: Install semantic-release | |
| working-directory: .github/release/ | |
| run: npm clean-install --engine-strict | |
| - name: Simulate new feature | |
| run: | | |
| git config --local user.name 'github-actions[bot]' | |
| git config --local user.email '41898282+github-actions[bot]@users.noreply.github.com' | |
| git commit --no-verify --allow-empty -m 'feat: simulate new feature' | |
| - name: Release | |
| env: | |
| GITHUB_TOKEN: ${{ github.token }} | |
| working-directory: .github/release/ | |
| # Perform a dry run without publishing anything. | |
| # | |
| # Unset the `GITHUB_ACTIONS` environment variable to trick semantic-release into thinking it's not running in a CI environment, | |
| # as `--no-ci` alone is insufficient. | |
| # | |
| # Use `--branches "${GITHUB_HEAD_REF}"` to consider the PR head ref (source branch) as a release one for the dry run. | |
| run: | | |
| unset GITHUB_ACTIONS | |
| npx --no-install semantic-release --dry-run --no-ci --branches "${GITHUB_HEAD_REF}" |