chore(deps): bump library/redis from 970b561 to 1f07381 in /test/container
#3771
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Cherry Pick | |
| on: | |
| pull_request_target: | |
| branches: | |
| - master | |
| types: ["labeled", "closed"] | |
| env: | |
| # a workaround to disable harden runner | |
| STEP_SECURITY_HARDEN_RUNNER: ${{ vars.disable_harden_runner }} | |
| jobs: | |
| find-labels: | |
| name: Find Cherry Pick Labels | |
| if: | | |
| github.event.pull_request.merged == true && ( | |
| (github.event.action == 'labeled' && startsWith(github.event.label.name, 'cherry-pick/')) || | |
| (github.event.action == 'closed' && contains(toJSON(github.event.pull_request.labels.*.name), 'cherry-pick/')) | |
| ) | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| labels: ${{ steps.extract-labels.outputs.labels }} | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| if: ${{ vars.disable_harden_runner != 'true' }} | |
| uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1 | |
| with: | |
| egress-policy: audit | |
| - name: Extract cherry-pick labels | |
| id: extract-labels | |
| run: | | |
| if [[ "${{ github.event.action }}" == "labeled" ]]; then | |
| # Label was just added - use it directly | |
| LABEL_NAME="${{ github.event.label.name }}" | |
| VERSION="${LABEL_NAME#cherry-pick/}" | |
| CHERRY_PICK_DATA='[{"label":"'$LABEL_NAME'","version":"'$VERSION'"}]' | |
| else | |
| # PR was closed - find all cherry-pick labels | |
| CHERRY_PICK_DATA=$(echo '${{ toJSON(github.event.pull_request.labels) }}' | jq -c '[.[] | select(.name | startswith("cherry-pick/")) | {label: .name, version: (.name | sub("cherry-pick/"; ""))}]') | |
| fi | |
| echo "labels=$CHERRY_PICK_DATA" >> "$GITHUB_OUTPUT" | |
| echo "Found cherry-pick data: $CHERRY_PICK_DATA" | |
| cherry-pick: | |
| name: Cherry Pick | |
| needs: find-labels | |
| if: needs.find-labels.outputs.labels != '[]' | |
| strategy: | |
| matrix: | |
| include: ${{ fromJSON(needs.find-labels.outputs.labels) }} | |
| fail-fast: false | |
| uses: ./.github/workflows/cherry-pick-single.yml | |
| with: | |
| merge_commit_sha: ${{ github.event.pull_request.merge_commit_sha }} | |
| version_number: ${{ matrix.version }} | |
| pr_number: ${{ github.event.pull_request.number }} | |
| pr_title: ${{ github.event.pull_request.title }} | |
| secrets: | |
| CHERRYPICK_APP_ID: ${{ vars.CHERRYPICK_APP_ID }} | |
| CHERRYPICK_APP_PRIVATE_KEY: ${{ secrets.CHERRYPICK_APP_PRIVATE_KEY }} |