dorfl 0.14.2 → 0.14.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/advance-lifecycle-template.d.ts.map +1 -1
- package/dist/advance-lifecycle-template.js +5 -4
- package/dist/advance-lifecycle-template.js.map +1 -1
- package/dist/close-job-template.d.ts.map +1 -1
- package/dist/close-job-template.js +2 -1
- package/dist/close-job-template.js.map +1 -1
- package/dist/install-ci-action-pins.d.ts +98 -0
- package/dist/install-ci-action-pins.d.ts.map +1 -0
- package/dist/install-ci-action-pins.js +165 -0
- package/dist/install-ci-action-pins.js.map +1 -0
- package/dist/install-ci-core.d.ts +7 -0
- package/dist/install-ci-core.d.ts.map +1 -1
- package/dist/install-ci-core.js +26 -10
- package/dist/install-ci-core.js.map +1 -1
- package/dist/intake-trigger-template.d.ts.map +1 -1
- package/dist/intake-trigger-template.js +2 -1
- package/dist/intake-trigger-template.js.map +1 -1
- package/dist/verify-workflow-template.d.ts.map +1 -1
- package/dist/verify-workflow-template.js +2 -1
- package/dist/verify-workflow-template.js.map +1 -1
- package/package.json +1 -1
- package/src/advance-lifecycle-template.ts +5 -4
- package/src/close-job-template.ts +2 -1
- package/src/install-ci-action-pins.ts +184 -0
- package/src/install-ci-core.ts +36 -10
- package/src/intake-trigger-template.ts +2 -1
- package/src/verify-workflow-template.ts +2 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"advance-lifecycle-template.d.ts","sourceRoot":"","sources":["../src/advance-lifecycle-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;
|
|
1
|
+
{"version":3,"file":"advance-lifecycle-template.d.ts","sourceRoot":"","sources":["../src/advance-lifecycle-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAGH,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAG3D,6EAA6E;AAC7E,eAAO,MAAM,+BAA+B,sBAAsB,CAAC;AAEnE,oEAAoE;AACpE,eAAO,MAAM,kCAAkC,uJACsG,CAAC;AAEtJ,8EAA8E;AAC9E,eAAO,MAAM,+BAA+B,oCACV,CAAC;AAEnC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gCAAgC,CAC/C,MAAM,EAAE,gBAAgB,GACtB,MAAM,CAsdR;AAED,mEAAmE;AACnE,MAAM,WAAW,uBAAuB;IACvC,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,8DAA8D;AAC9D,MAAM,WAAW,0BAA0B;IAC1C,kEAAkE;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,uBAAuB,EAAE,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC/C,IAAI,EAAE,MAAM,GACV,0BAA0B,CAmV5B"}
|
|
@@ -59,6 +59,7 @@
|
|
|
59
59
|
* parses + carries the right discipline" the task's acceptance criteria require;
|
|
60
60
|
* the test generates this artifact under `--fake` and asserts every invariant.
|
|
61
61
|
*/
|
|
62
|
+
import { ACTION_PINS, pinnedUses } from './install-ci-action-pins.js';
|
|
62
63
|
import { providerSecretsWithBlock } from './install-ci-core.js';
|
|
63
64
|
/** The capability id (the registry key + the emitted workflow file stem). */
|
|
64
65
|
export const ADVANCE_LIFECYCLE_CAPABILITY_ID = 'advance-lifecycle';
|
|
@@ -286,7 +287,7 @@ jobs:
|
|
|
286
287
|
# re-run, no baked-in YAML number.
|
|
287
288
|
githubTimeout: \${{ steps.timeout.outputs.githubTimeout }}
|
|
288
289
|
steps:
|
|
289
|
-
- uses:
|
|
290
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
290
291
|
with:
|
|
291
292
|
fetch-depth: 0
|
|
292
293
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -396,7 +397,7 @@ jobs:
|
|
|
396
397
|
matrix:
|
|
397
398
|
item: \${{ fromJson(needs.enumerate.outputs.items) }}
|
|
398
399
|
steps:
|
|
399
|
-
- uses:
|
|
400
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
400
401
|
with:
|
|
401
402
|
fetch-depth: 0
|
|
402
403
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -475,7 +476,7 @@ jobs:
|
|
|
475
476
|
matrix:
|
|
476
477
|
item: \${{ fromJson(needs.enumerate.outputs.items) }}
|
|
477
478
|
steps:
|
|
478
|
-
- uses:
|
|
479
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
479
480
|
with:
|
|
480
481
|
fetch-depth: 0
|
|
481
482
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -539,7 +540,7 @@ jobs:
|
|
|
539
540
|
if: \${{ (github.event.inputs.sweepMergedBranches || 'true') == 'true' }}
|
|
540
541
|
runs-on: ubuntu-latest
|
|
541
542
|
steps:
|
|
542
|
-
- uses:
|
|
543
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
543
544
|
with:
|
|
544
545
|
fetch-depth: 0
|
|
545
546
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"advance-lifecycle-template.js","sourceRoot":"","sources":["../src/advance-lifecycle-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;
|
|
1
|
+
{"version":3,"file":"advance-lifecycle-template.js","sourceRoot":"","sources":["../src/advance-lifecycle-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAC,wBAAwB,EAAC,MAAM,sBAAsB,CAAC;AAE9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,+BAA+B,GAAG,mBAAmB,CAAC;AAEnE,oEAAoE;AACpE,MAAM,CAAC,MAAM,kCAAkC,GAC9C,oJAAoJ,CAAC;AAEtJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,+BAA+B,GAC3C,iCAAiC,CAAC;AAEnC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gCAAgC,CAC/C,MAAwB;IAExB,wEAAwE;IACxE,8EAA8E;IAC9E,gFAAgF;IAChF,oEAAoE;IACpE,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAqMQ,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA0G1B,MAAM,CAAC,WAAW;;;;gBAIxB,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;6CAGH,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAwEhC,MAAM,CAAC,WAAW;;;;gBAIxB,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;6CAGH,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA6DtC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;;;;;;;;;;;CAa/C,CAAC;AACF,CAAC;AAkBD;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC/C,IAAY;IAEZ,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,iFAAiF;IACjF,+EAA+E;IAC/E,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,8EAA8E;IAC9E,OAAO,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,IAAI,CAChD,IAAI,CACJ,EAAE,2EAA2E,CAAC,CAAC;IAChF,OAAO,CAAC,kBAAkB,EAAE,CAAC,YAAY,CAAC,IAAI,CAC7C,SAAS,CACT,EAAE,6EAA6E;QAC/E,2CAA2C,CAAC,CAAC;IAE9C,gFAAgF;IAChF,OAAO,CAAC,cAAc,EAAE,iCAAiC,CAAC,IAAI,CAC7D,IAAI,CACJ,EAAE,yDAAyD,CAAC,CAAC;IAC9D,OAAO,CAAC,2BAA2B,EAAE,sBAAsB,CAAC,IAAI,CAC/D,IAAI,CACJ,EAAE,8DAA8D,CAAC,CAAC;IACnE,OAAO,CAAC,iCAAiC,EAAE,2DAA2D,CAAC,IAAI,CAC1G,IAAI,CACJ,EAAE,gEAAgE,CAAC,CAAC;IACrE,+EAA+E;IAC/E,8EAA8E;IAC9E,kEAAkE;IAClE,OAAO,CAAC,6BAA6B,EAAE,mDAAmD,CAAC,IAAI,CAC9F,IAAI,CACJ,EAAE,2EAA2E;QAC7E,4BAA4B,CAAC,CAAC;IAE/B,+EAA+E;IAC/E,OAAO,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjE,wCAAwC,CAAC,IAAI,CAC5C,IAAI,CACJ,EAAE,0EAA0E;QAC7E,kCAAkC,CAAC,CAAC;IAErC,+EAA+E;IAC/E,OAAO,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,IAAI,CAC3D,IAAI,CACJ,EAAE,gEAAgE,CAAC,CAAC;IACrE,OAAO,CAAC,6BAA6B,EAAE,mBAAmB,CAAC,IAAI,CAC9D,IAAI,CACJ,EAAE,iEAAiE;QACnE,wBAAwB,CAAC,CAAC;IAC3B,OAAO,CAAC,8BAA8B,EAAE,kFAAkF,CAAC,IAAI,CAC9H,IAAI,CACJ,EAAE,6DAA6D;QAC/D,sEAAsE,CAAC,CAAC;IACzE,wEAAwE;IACxE,wFAAwF;IACxF,oEAAoE;IACpE,OAAO,CAAC,kCAAkC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CACzE,SAAS,CACT,EAAE,qEAAqE;QACvE,2EAA2E;QAC3E,kDAAkD,CAAC,CAAC;IACrD,OAAO,CAAC,kCAAkC,EAAE,0EAA0E,CAAC,IAAI,CAC1H,IAAI,CACJ,EAAE,6EAA6E;QAC/E,4EAA4E;QAC5E,iBAAiB,CAAC,CAAC;IAEpB,gFAAgF;IAChF,6EAA6E;IAC7E,mEAAmE;IACnE,yEAAyE;IACzE,OAAO,CAAC,cAAc,EAAE,mDAAmD,CAAC,IAAI,CAC/E,IAAI,CACJ,EAAE,0EAA0E;QAC5E,uEAAuE;QACvE,yCAAyC,CAAC,CAAC;IAC5C,OAAO,CAAC,8BAA8B,EAAE,sEAAsE,CAAC,IAAI,CAClH,IAAI,CACJ,EAAE,yEAAyE;QAC3E,2EAA2E;QAC3E,iBAAiB,CAAC,CAAC;IACpB,2EAA2E;IAC3E,+EAA+E;IAC/E,qEAAqE;IACrE,OAAO,CAAC,sCAAsC,EAAE,CAAC,2CAA2C,CAAC,IAAI,CAChG,IAAI,CACJ,EAAE,yEAAyE;QAC3E,6EAA6E;QAC7E,6EAA6E,CAAC,CAAC;IAEhF,wEAAwE;IACxE,+EAA+E;IAC/E,iFAAiF;IACjF,gFAAgF;IAChF,+DAA+D;IAC/D,8EAA8E;IAC9E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,gEAAgE;IAChE,OAAO,CAAC,wBAAwB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAC7D,SAAS,CACT,EAAE,mEAAmE;QACrE,0FAA0F,CAAC,CAAC;IAC7F,OAAO,CAAC,uBAAuB,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAC3D,SAAS,CACT,EAAE,kEAAkE;QACpE,0FAA0F,CAAC,CAAC;IAC7F,OAAO,CAAC,gCAAgC,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAC7E,SAAS,CACT,EAAE,gEAAgE;QAClE,yFAAyF,CAAC,CAAC;IAC5F,OAAO,CAAC,8BAA8B,EAAE,CAAC,4BAA4B,CAAC,IAAI,CACzE,SAAS,CACT,EAAE,8DAA8D;QAChE,yFAAyF,CAAC,CAAC;IAC5F,+EAA+E;IAC/E,gFAAgF;IAChF,oEAAoE;IACpE,gFAAgF;IAChF,gFAAgF;IAChF,iFAAiF;IACjF,iFAAiF;IACjF,6EAA6E;IAC7E,KAAK,MAAM,KAAK,IAAI;QACnB,WAAW;QACX,UAAU;QACV,mBAAmB;QACnB,iBAAiB;KACjB,EAAE,CAAC;QACH,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,IAAI,MAAM,CAC5C,mDAAmD,KAAK,GAAG,CAC3D,CAAC,IAAI,CACL,IAAI,CACJ,EAAE,4CAA4C,KAAK,yBAAyB,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;QAC7B,CAAC,WAAW,EAAE,kBAAkB,CAAC;QACjC,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAC/B,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;QACjD,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;KACpC,EAAE,CAAC;QACZ,yEAAyE;QACzE,8CAA8C;QAC9C,6EAA6E;QAC7E,qEAAqE;QACrE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,MAAM,CAC9B,GAAG,WAAW,4CAA4C,KAAK,SAAS;YACvE,2BAA2B,WAAW,qBAAqB,MAAM,UAAU,WAAW,MAAM,CAC7F,CAAC;QACF,OAAO,CAAC,YAAY,KAAK,gBAAgB,EAAE,YAAY,CAAC,IAAI,CAC3D,IAAI,CACJ,EAAE,SAAS,KAAK,kDAAkD,MAAM,KAAK;YAC7E,yEAAyE,CAAC,CAAC;IAC7E,CAAC;IACD,8EAA8E;IAC9E,iFAAiF;IACjF,OAAO,CAAC,iCAAiC,EAAE,6DAA6D,CAAC,IAAI,CAC5G,IAAI,CACJ,EAAE,8EAA8E;QAChF,sEAAsE;QACtE,2DAA2D,CAAC,CAAC;IAC9D,+EAA+E;IAC/E,wCAAwC;IACxC,OAAO,CAAC,gCAAgC,EAAE,iEAAiE,CAAC,IAAI,CAC/G,IAAI,CACJ,EAAE,sEAAsE;QACxE,6DAA6D,CAAC,CAAC;IAEhE,gFAAgF;IAChF,OAAO,CAAC,sBAAsB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;QACtE,CAAC,aAAa,CAAC,IAAI,CAClB,SAAS,CACT,EAAE,yEAAyE;QAC5E,iEAAiE,CAAC,CAAC;IAEpE,+EAA+E;IAC/E,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,IAAI,CAC/D,IAAI,CACJ,EAAE,wEAAwE;QAC1E,0BAA0B,CAAC,CAAC;IAC7B,OAAO,CAAC,8BAA8B,EAAE,8BAA8B,CAAC,IAAI,CAC1E,IAAI,CACJ,EAAE,mEAAmE;QACrE,gCAAgC,CAAC,CAAC;IACnC,OAAO,CAAC,2BAA2B,EAAE,sBAAsB,CAAC,IAAI,CAC/D,IAAI,CACJ,EAAE,2EAA2E;QAC7E,YAAY,CAAC,CAAC;IACf,gCAAgC;IAChC,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,8EAA8E;IAC9E,8EAA8E;IAC9E,2CAA2C;IAC3C,OAAO,CAAC,8BAA8B,EAAE,wDAAwD,CAAC,IAAI,CACpG,IAAI,CACJ,EAAE,6DAA6D;QAC/D,8EAA8E;QAC9E,oEAAoE,CAAC,CAAC;IACvE,OAAO,CAAC,4BAA4B,EAAE,8CAA8C,CAAC,IAAI,CACxF,IAAI,CACJ,EAAE,sEAAsE;QACxE,2EAA2E;QAC3E,gEAAgE,CAAC,CAAC;IAEnE,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC,IAAI,CAC/C,SAAS,CACT,EAAE,0EAA0E,CAAC,CAAC;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,wEAAwE;IACxE,OAAO,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,gEAAgE,CAAC,CAAC;IAErE,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,IAAI,CAClE,IAAI,CACJ,EAAE,yEAAyE,CAAC,CAAC;IAE9E,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAChE,IAAI,CACJ,EAAE,wEAAwE;QAC1E,gEAAgE,CAAC,CAAC;IACnE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,+DAA+D,CAAC,CAAC;IAEpE,8EAA8E;IAC9E,OAAO,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7D,OAAO,CAAC,IAAI,CACX,IAAI,CACJ,EAAE,sEAAsE;QACzE,oCAAoC,CAAC,CAAC;IAEvC,6EAA6E;IAC7E,yEAAyE;IACzE,oEAAoE;IACpE,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,OAAO,CAAC,mCAAmC,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,aAAa,CAAC,IAAI,CACjB,IAAI,CACJ,EAAE,uEAAuE;QAC1E,4EAA4E;QAC5E,6EAA6E;QAC7E,uDAAuD;QACvD,sEAAsE,CAAC,CAAC;IAEzE,+EAA+E;IAC/E,2EAA2E;IAC3E,qEAAqE;IACrE,gFAAgF;IAChF,gFAAgF;IAChF,uEAAuE;IACvE,+EAA+E;IAC/E,+EAA+E;IAC/E,4DAA4D;IAC5D,OAAO,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1E,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,8BAA8B,CAAC,IAAI,CAClC,IAAI,CACJ,EAAE,4EAA4E;QAC/E,4DAA4D;QAC5D,gEAAgE;QAChE,6EAA6E;QAC7E,8DAA8D;QAC9D,4EAA4E;QAC5E,yBAAyB;QACzB,mDAAmD,CAAC,CAAC;IAEtD,+EAA+E;IAC/E,wEAAwE;IACxE,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,sDAAsD;IACtD,OAAO,CAAC,uCAAuC,EAAE,kDAAkD,CAAC,IAAI,CACvG,IAAI,CACJ,EAAE,0EAA0E;QAC5E,qCAAqC;QACrC,sDAAsD,CAAC,CAAC;IACzD,OAAO,CAAC,mCAAmC,EAAE,qBAAqB,CAAC,IAAI,CACtE,IAAI,CACJ,EAAE,yDAAyD;QAC3D,gEAAgE;QAChE,4DAA4D,CAAC,CAAC;IAC/D,OAAO,CAAC,2CAA2C,EAAE,mDAAmD,CAAC,IAAI,CAC5G,IAAI,CACJ,EAAE,sDAAsD;QACxD,sEAAsE;QACtE,sDAAsD,CAAC,CAAC;IACzD,OAAO,CAAC,qCAAqC,EAAE,iHAAiH,CAAC,IAAI,CACpK,IAAI,CACJ,EAAE,2DAA2D;QAC7D,0EAA0E;QAC1E,mEAAmE,CAAC,CAAC;IACtE,OAAO,CAAC,mCAAmC,EAAE,+GAA+G,CAAC,IAAI,CAChK,IAAI,CACJ,EAAE,yDAAyD;QAC3D,0EAA0E;QAC1E,4CAA4C,CAAC,CAAC;IAC/C,wEAAwE;IACxE,yEAAyE;IACzE,kEAAkE;IAClE,OAAO,CAAC,6BAA6B,EAAE,CAAC,iEAAiE,CAAC,IAAI,CAC7G,IAAI,CACJ,EAAE,gEAAgE;QAClE,mEAAmE;QACnE,+CAA+C,CAAC,CAAC;IAElD,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,IAAI,CACtF,IAAI,CACJ,EAAE,wDAAwD;QAC1D,8DAA8D,CAAC,CAAC;IAEjE,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"close-job-template.d.ts","sourceRoot":"","sources":["../src/close-job-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;
|
|
1
|
+
{"version":3,"file":"close-job-template.d.ts","sourceRoot":"","sources":["../src/close-job-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAG3D,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD,4DAA4D;AAC5D,eAAO,MAAM,0BAA0B,2EACkC,CAAC;AAE1E,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAEjE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAmFzE;AAED,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC/B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IAClC,kEAAkE;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAuFzE"}
|
|
@@ -32,6 +32,7 @@
|
|
|
32
32
|
* parses + carries the right discipline" the task's acceptance criteria require;
|
|
33
33
|
* the test generates this artifact under `--fake` and asserts every invariant.
|
|
34
34
|
*/
|
|
35
|
+
import { ACTION_PINS, pinnedUses } from './install-ci-action-pins.js';
|
|
35
36
|
import { shouldDropCheckoutCredentials } from './install-ci-core.js';
|
|
36
37
|
/** The capability id (the registry key + the emitted workflow file stem). */
|
|
37
38
|
export const CLOSE_JOB_CAPABILITY_ID = 'close-job';
|
|
@@ -116,7 +117,7 @@ jobs:
|
|
|
116
117
|
close-merged-issues:
|
|
117
118
|
runs-on: ubuntu-latest
|
|
118
119
|
steps:
|
|
119
|
-
- uses:
|
|
120
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
120
121
|
with:
|
|
121
122
|
fetch-depth: 0${checkoutCredentials}
|
|
122
123
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"close-job-template.js","sourceRoot":"","sources":["../src/close-job-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;
|
|
1
|
+
{"version":3,"file":"close-job-template.js","sourceRoot":"","sources":["../src/close-job-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAC,6BAA6B,EAAC,MAAM,sBAAsB,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAEnD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GACtC,wEAAwE,CAAC;AAE1E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAChE,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,MAAM,CAAC;QAChE,CAAC,CAAC;;;;;qCAKiC;QACnC,CAAC,CAAC,EAAE,CAAC;IACN,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAyDQ,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;0BAEtB,mBAAmB;;;;;;;;;;CAU5C,CAAC;AACF,CAAC;AAkBD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACpD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,iFAAiF;IACjF,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,EAAE,gEAAgE,CAAC,IAAI,CACjG,IAAI,CACJ,EAAE,4EAA4E;QAC9E,0EAA0E,CAAC,CAAC;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAC1D,SAAS,CACT,EAAE,4EAA4E;QAC9E,2DAA2D,CAAC,CAAC;IAC9D,+EAA+E;IAC/E,qDAAqD;IACrD,OAAO,CAAC,iBAAiB,EAAE,CAAC,iCAAiC,CAAC,IAAI,CACjE,SAAS,CACT,EAAE,6EAA6E,CAAC,CAAC;IAClF,OAAO,CAAC,6BAA6B,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAC/D,IAAI,CACJ,EAAE,0EAA0E;QAC5E,+CAA+C,CAAC,CAAC;IAElD,+EAA+E;IAC/E,6EAA6E;IAC7E,8DAA8D;IAC9D,OAAO,CAAC,6BAA6B,EAAE,6BAA6B,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,qEAAqE;QACvE,qDAAqD,CAAC,CAAC;IACxD,+EAA+E;IAC/E,+DAA+D;IAC/D,OAAO,CAAC,0BAA0B,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAC3D,SAAS,CACT,EAAE,sEAAsE;QACxE,uDAAuD,CAAC,CAAC;IAC1D,2EAA2E;IAC3E,OAAO,CAAC,gBAAgB,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAC9D,SAAS,CACT,EAAE,yEAAyE;QAC3E,qDAAqD,CAAC,CAAC;IAExD,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC,IAAI,CAC/C,SAAS,CACT,EAAE,0EAA0E,CAAC,CAAC;IAC/E,OAAO,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,IAAI,CAC3C,SAAS,CACT,EAAE,gEAAgE,CAAC,CAAC;IAErE,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,IAAI,CAClE,IAAI,CACJ,EAAE,+EAA+E,CAAC,CAAC;IAEpF,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAChE,IAAI,CACJ,EAAE,wEAAwE;QAC1E,gEAAgE,CAAC,CAAC;IACnE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,+DAA+D,CAAC,CAAC;IACpE,gFAAgF;IAChF,kFAAkF;IAClF,mFAAmF;IACnF,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,IAAI,CAC5D,SAAS,CACT,EAAE,8EAA8E,CAAC,CAAC;IAEnF,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The ONE table of third-party GitHub Actions that `dorfl install-ci` emits,
|
|
3
|
+
* each pinned to a full 40-character commit SHA, plus the regeneration rule that
|
|
4
|
+
* keeps a consumer repository's own pins.
|
|
5
|
+
*
|
|
6
|
+
* WHY SHAS. A tag such as `@v5` can be moved by whoever controls the action's
|
|
7
|
+
* repository, so a compromised or careless release reaches every job that uses
|
|
8
|
+
* it, including dorfl's jobs that hold `contents: write` and a provider API key.
|
|
9
|
+
* A commit SHA cannot move. This is GitHub's own hardening guidance ("Using
|
|
10
|
+
* third-party actions", Security hardening for GitHub Actions).
|
|
11
|
+
*
|
|
12
|
+
* THE FORMAT. Every reference is emitted as `owner/repo@<40-hex-sha> # vX.Y.Z`,
|
|
13
|
+
* the exact shape Dependabot writes and rewrites, so a consumer that enables
|
|
14
|
+
* Dependabot's `github-actions` ecosystem (with `/.github/actions/*` in
|
|
15
|
+
* `directories` for the composite action) gets reviewable bump PRs.
|
|
16
|
+
*
|
|
17
|
+
* HOW EACH SHA WAS RESOLVED (2026-09-26). For each tag:
|
|
18
|
+
* 1. `git ls-remote --tags https://github.com/<owner>/<repo>.git`, reading the
|
|
19
|
+
* peeled `refs/tags/<tag>^{}` line when the tag is annotated (that line is
|
|
20
|
+
* the COMMIT; the unpeeled line is the tag OBJECT and must never be used),
|
|
21
|
+
* else the tag line itself for a lightweight tag;
|
|
22
|
+
* 2. cross-checked with `gh api repos/<owner>/<repo>/git/ref/tags/<tag>`
|
|
23
|
+
* (object type) and `gh api repos/<owner>/<repo>/commits/<sha>` (the SHA is
|
|
24
|
+
* a commit that exists in the repository).
|
|
25
|
+
*
|
|
26
|
+
* actions/checkout v7.0.1: lightweight tag, `git/ref` type `commit`,
|
|
27
|
+
* 3d3c42e5aac5ba805825da76410c181273ba90b1 ("prep v7.0.1 release (#2531)").
|
|
28
|
+
* The floating `v7` tag points at the same commit. v7 is the current major
|
|
29
|
+
* and adds the fork-PR checkout block for `pull_request_target` /
|
|
30
|
+
* `workflow_run` that v5 lacks; the inputs dorfl passes (`fetch-depth`,
|
|
31
|
+
* `persist-credentials`) are unchanged.
|
|
32
|
+
* actions/setup-node v7.0.0: lightweight tag, `git/ref` type `commit`,
|
|
33
|
+
* 820762786026740c76f36085b0efc47a31fe5020 ("Migrate to ESM and upgrade
|
|
34
|
+
* dependencies (#1574)"). The floating `v7` tag points at the same commit.
|
|
35
|
+
* `node-version` and `package-manager-cache` are still inputs (see the
|
|
36
|
+
* comment on the setup-node step in `generateSetupAction`).
|
|
37
|
+
* pnpm/action-setup v6.1.0: ANNOTATED tag. `git/ref` type `tag` with object
|
|
38
|
+
* d9184bf108216479bc5a137cc391f4d7b14c870b (the tag object, NOT usable);
|
|
39
|
+
* peeled `^{}` and `gh api .../git/tags/d9184bf...` both give the commit
|
|
40
|
+
* ea17c68df8912ef543352723c149a84f56e3d413 ("feat: support pnpm v12
|
|
41
|
+
* (#288)"). With no `version` input it still reads `packageManager` from
|
|
42
|
+
* package.json, which is how dorfl's workspace mode uses it.
|
|
43
|
+
*
|
|
44
|
+
* To bump a pin: resolve the new tag the same way, update the entry, and record
|
|
45
|
+
* the resolution above. `install-ci-actions-pinned.test.ts` fails on any
|
|
46
|
+
* emitted `uses:` that is not a full SHA.
|
|
47
|
+
*/
|
|
48
|
+
/** One pinned third-party action. */
|
|
49
|
+
export interface ActionPin {
|
|
50
|
+
/** `owner/repo`, or `owner/repo/path` for an action in a subdirectory. */
|
|
51
|
+
readonly action: string;
|
|
52
|
+
/** The full 40-character lowercase commit SHA (never a tag object). */
|
|
53
|
+
readonly sha: string;
|
|
54
|
+
/** The release tag the SHA was resolved from, for the trailing comment. */
|
|
55
|
+
readonly version: string;
|
|
56
|
+
}
|
|
57
|
+
/** Every third-party action dorfl's generators emit. */
|
|
58
|
+
export declare const ACTION_PINS: {
|
|
59
|
+
readonly checkout: {
|
|
60
|
+
readonly action: "actions/checkout";
|
|
61
|
+
readonly sha: "3d3c42e5aac5ba805825da76410c181273ba90b1";
|
|
62
|
+
readonly version: "v7.0.1";
|
|
63
|
+
};
|
|
64
|
+
readonly setupNode: {
|
|
65
|
+
readonly action: "actions/setup-node";
|
|
66
|
+
readonly sha: "820762786026740c76f36085b0efc47a31fe5020";
|
|
67
|
+
readonly version: "v7.0.0";
|
|
68
|
+
};
|
|
69
|
+
readonly pnpmSetup: {
|
|
70
|
+
readonly action: "pnpm/action-setup";
|
|
71
|
+
readonly sha: "ea17c68df8912ef543352723c149a84f56e3d413";
|
|
72
|
+
readonly version: "v6.1.0";
|
|
73
|
+
};
|
|
74
|
+
};
|
|
75
|
+
/**
|
|
76
|
+
* The value to put after `uses: ` for a pinned action:
|
|
77
|
+
* `owner/repo@<sha> # vX.Y.Z` (the Dependabot format).
|
|
78
|
+
*/
|
|
79
|
+
export declare function pinnedUses(pin: ActionPin): string;
|
|
80
|
+
/**
|
|
81
|
+
* Collect the SHA pins an existing file already carries, keyed by action
|
|
82
|
+
* (`owner/repo[/path]`). The value is the whole `uses:` value with its trailing
|
|
83
|
+
* comment, exactly as written. When the file pins the same action to several
|
|
84
|
+
* different SHAs, the one whose `# vX.Y.Z` comment is highest wins (ties: the
|
|
85
|
+
* first in the file), so a partial manual bump is never undone.
|
|
86
|
+
*/
|
|
87
|
+
export declare function existingPins(existing: string): Map<string, string>;
|
|
88
|
+
/**
|
|
89
|
+
* Rewrite a freshly generated workflow / composite action so every `uses:` of an
|
|
90
|
+
* action that `existing` already pins to a full SHA keeps the consumer's
|
|
91
|
+
* reference and trailing comment. Matching is by action (`owner/repo`, plus the
|
|
92
|
+
* path for an action in a subdirectory), never by position. An existing TAG is
|
|
93
|
+
* not a pin: the generated reference (dorfl's SHA) stays. So the result never
|
|
94
|
+
* swaps a SHA for a tag. Only the value after `uses: ` changes; indentation and
|
|
95
|
+
* every other line are the generated ones.
|
|
96
|
+
*/
|
|
97
|
+
export declare function preserveExistingPins(generated: string, existing: string | undefined): string;
|
|
98
|
+
//# sourceMappingURL=install-ci-action-pins.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"install-ci-action-pins.d.ts","sourceRoot":"","sources":["../src/install-ci-action-pins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,wDAAwD;AACxD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;CAgBsB,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAEjD;AA8CD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,CAcR"}
|
|
@@ -0,0 +1,165 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The ONE table of third-party GitHub Actions that `dorfl install-ci` emits,
|
|
3
|
+
* each pinned to a full 40-character commit SHA, plus the regeneration rule that
|
|
4
|
+
* keeps a consumer repository's own pins.
|
|
5
|
+
*
|
|
6
|
+
* WHY SHAS. A tag such as `@v5` can be moved by whoever controls the action's
|
|
7
|
+
* repository, so a compromised or careless release reaches every job that uses
|
|
8
|
+
* it, including dorfl's jobs that hold `contents: write` and a provider API key.
|
|
9
|
+
* A commit SHA cannot move. This is GitHub's own hardening guidance ("Using
|
|
10
|
+
* third-party actions", Security hardening for GitHub Actions).
|
|
11
|
+
*
|
|
12
|
+
* THE FORMAT. Every reference is emitted as `owner/repo@<40-hex-sha> # vX.Y.Z`,
|
|
13
|
+
* the exact shape Dependabot writes and rewrites, so a consumer that enables
|
|
14
|
+
* Dependabot's `github-actions` ecosystem (with `/.github/actions/*` in
|
|
15
|
+
* `directories` for the composite action) gets reviewable bump PRs.
|
|
16
|
+
*
|
|
17
|
+
* HOW EACH SHA WAS RESOLVED (2026-09-26). For each tag:
|
|
18
|
+
* 1. `git ls-remote --tags https://github.com/<owner>/<repo>.git`, reading the
|
|
19
|
+
* peeled `refs/tags/<tag>^{}` line when the tag is annotated (that line is
|
|
20
|
+
* the COMMIT; the unpeeled line is the tag OBJECT and must never be used),
|
|
21
|
+
* else the tag line itself for a lightweight tag;
|
|
22
|
+
* 2. cross-checked with `gh api repos/<owner>/<repo>/git/ref/tags/<tag>`
|
|
23
|
+
* (object type) and `gh api repos/<owner>/<repo>/commits/<sha>` (the SHA is
|
|
24
|
+
* a commit that exists in the repository).
|
|
25
|
+
*
|
|
26
|
+
* actions/checkout v7.0.1: lightweight tag, `git/ref` type `commit`,
|
|
27
|
+
* 3d3c42e5aac5ba805825da76410c181273ba90b1 ("prep v7.0.1 release (#2531)").
|
|
28
|
+
* The floating `v7` tag points at the same commit. v7 is the current major
|
|
29
|
+
* and adds the fork-PR checkout block for `pull_request_target` /
|
|
30
|
+
* `workflow_run` that v5 lacks; the inputs dorfl passes (`fetch-depth`,
|
|
31
|
+
* `persist-credentials`) are unchanged.
|
|
32
|
+
* actions/setup-node v7.0.0: lightweight tag, `git/ref` type `commit`,
|
|
33
|
+
* 820762786026740c76f36085b0efc47a31fe5020 ("Migrate to ESM and upgrade
|
|
34
|
+
* dependencies (#1574)"). The floating `v7` tag points at the same commit.
|
|
35
|
+
* `node-version` and `package-manager-cache` are still inputs (see the
|
|
36
|
+
* comment on the setup-node step in `generateSetupAction`).
|
|
37
|
+
* pnpm/action-setup v6.1.0: ANNOTATED tag. `git/ref` type `tag` with object
|
|
38
|
+
* d9184bf108216479bc5a137cc391f4d7b14c870b (the tag object, NOT usable);
|
|
39
|
+
* peeled `^{}` and `gh api .../git/tags/d9184bf...` both give the commit
|
|
40
|
+
* ea17c68df8912ef543352723c149a84f56e3d413 ("feat: support pnpm v12
|
|
41
|
+
* (#288)"). With no `version` input it still reads `packageManager` from
|
|
42
|
+
* package.json, which is how dorfl's workspace mode uses it.
|
|
43
|
+
*
|
|
44
|
+
* To bump a pin: resolve the new tag the same way, update the entry, and record
|
|
45
|
+
* the resolution above. `install-ci-actions-pinned.test.ts` fails on any
|
|
46
|
+
* emitted `uses:` that is not a full SHA.
|
|
47
|
+
*/
|
|
48
|
+
/** Every third-party action dorfl's generators emit. */
|
|
49
|
+
export const ACTION_PINS = {
|
|
50
|
+
checkout: {
|
|
51
|
+
action: 'actions/checkout',
|
|
52
|
+
sha: '3d3c42e5aac5ba805825da76410c181273ba90b1',
|
|
53
|
+
version: 'v7.0.1',
|
|
54
|
+
},
|
|
55
|
+
setupNode: {
|
|
56
|
+
action: 'actions/setup-node',
|
|
57
|
+
sha: '820762786026740c76f36085b0efc47a31fe5020',
|
|
58
|
+
version: 'v7.0.0',
|
|
59
|
+
},
|
|
60
|
+
pnpmSetup: {
|
|
61
|
+
action: 'pnpm/action-setup',
|
|
62
|
+
sha: 'ea17c68df8912ef543352723c149a84f56e3d413',
|
|
63
|
+
version: 'v6.1.0',
|
|
64
|
+
},
|
|
65
|
+
};
|
|
66
|
+
/**
|
|
67
|
+
* The value to put after `uses: ` for a pinned action:
|
|
68
|
+
* `owner/repo@<sha> # vX.Y.Z` (the Dependabot format).
|
|
69
|
+
*/
|
|
70
|
+
export function pinnedUses(pin) {
|
|
71
|
+
return `${pin.action}@${pin.sha} # ${pin.version}`;
|
|
72
|
+
}
|
|
73
|
+
// ─── preserving the consumer's pins on regeneration ─────────────────────────
|
|
74
|
+
/**
|
|
75
|
+
* A `uses:` step line: the prefix (indentation, an optional `- ` list marker,
|
|
76
|
+
* `uses:` and its spacing), then the VALUE (an optionally quoted
|
|
77
|
+
* `action@ref`), then an optional trailing comment. Matched per line, which is
|
|
78
|
+
* how both dorfl's templates and Dependabot write these lines. A flow-style or
|
|
79
|
+
* multi-line `uses:` value is not recognised (and so not preserved).
|
|
80
|
+
*/
|
|
81
|
+
const USES_LINE = /^(\s*(?:-\s+)?uses:[ \t]+)((['"]?)([^\s'"@#]+)@([^\s'"#]+)\3(?:[ \t]+#.*)?)[ \t]*$/;
|
|
82
|
+
/**
|
|
83
|
+
* A full commit SHA (what counts as "pinned"). Case-insensitive here, so a
|
|
84
|
+
* consumer's uppercase pin is still kept; dorfl itself emits lowercase.
|
|
85
|
+
*/
|
|
86
|
+
const FULL_SHA = /^[0-9a-f]{40}$/i;
|
|
87
|
+
/** The lookup key for an action: GitHub treats `owner/repo` case-insensitively. */
|
|
88
|
+
function actionKey(action) {
|
|
89
|
+
return action.toLowerCase();
|
|
90
|
+
}
|
|
91
|
+
/** A remote action key (`owner/repo[/path]`), i.e. not `./local` nor `docker://`. */
|
|
92
|
+
function isRemoteAction(action) {
|
|
93
|
+
return !action.startsWith('.') && /^[^/\s]+\/[^/\s]+/.test(action);
|
|
94
|
+
}
|
|
95
|
+
/** Parse the version out of a trailing `# v1.2.3` comment, for ranking. */
|
|
96
|
+
function versionOf(tail) {
|
|
97
|
+
const m = /#\s*v?(\d+(?:\.\d+)*)/.exec(tail);
|
|
98
|
+
return m ? m[1].split('.').map(Number) : undefined;
|
|
99
|
+
}
|
|
100
|
+
/** Compare two parsed versions; a missing version ranks lowest. */
|
|
101
|
+
function compareVersions(a, b) {
|
|
102
|
+
if (!a || !b)
|
|
103
|
+
return (a ? 1 : 0) - (b ? 1 : 0);
|
|
104
|
+
for (let i = 0; i < Math.max(a.length, b.length); i++) {
|
|
105
|
+
const d = (a[i] ?? 0) - (b[i] ?? 0);
|
|
106
|
+
if (d !== 0)
|
|
107
|
+
return d;
|
|
108
|
+
}
|
|
109
|
+
return 0;
|
|
110
|
+
}
|
|
111
|
+
/**
|
|
112
|
+
* Collect the SHA pins an existing file already carries, keyed by action
|
|
113
|
+
* (`owner/repo[/path]`). The value is the whole `uses:` value with its trailing
|
|
114
|
+
* comment, exactly as written. When the file pins the same action to several
|
|
115
|
+
* different SHAs, the one whose `# vX.Y.Z` comment is highest wins (ties: the
|
|
116
|
+
* first in the file), so a partial manual bump is never undone.
|
|
117
|
+
*/
|
|
118
|
+
export function existingPins(existing) {
|
|
119
|
+
const pins = new Map();
|
|
120
|
+
// `\r?\n`: a CRLF checkout (Windows, `core.autocrlf`) must not hide its pins,
|
|
121
|
+
// or dorfl's default would silently replace them.
|
|
122
|
+
for (const line of existing.split(/\r?\n/)) {
|
|
123
|
+
const m = USES_LINE.exec(line);
|
|
124
|
+
if (!m)
|
|
125
|
+
continue;
|
|
126
|
+
const [, , value, , action, ref] = m;
|
|
127
|
+
if (!isRemoteAction(action) || !FULL_SHA.test(ref))
|
|
128
|
+
continue;
|
|
129
|
+
const key = actionKey(action);
|
|
130
|
+
const current = pins.get(key);
|
|
131
|
+
if (current === undefined ||
|
|
132
|
+
compareVersions(versionOf(value), versionOf(current)) > 0) {
|
|
133
|
+
pins.set(key, value);
|
|
134
|
+
}
|
|
135
|
+
}
|
|
136
|
+
return pins;
|
|
137
|
+
}
|
|
138
|
+
/**
|
|
139
|
+
* Rewrite a freshly generated workflow / composite action so every `uses:` of an
|
|
140
|
+
* action that `existing` already pins to a full SHA keeps the consumer's
|
|
141
|
+
* reference and trailing comment. Matching is by action (`owner/repo`, plus the
|
|
142
|
+
* path for an action in a subdirectory), never by position. An existing TAG is
|
|
143
|
+
* not a pin: the generated reference (dorfl's SHA) stays. So the result never
|
|
144
|
+
* swaps a SHA for a tag. Only the value after `uses: ` changes; indentation and
|
|
145
|
+
* every other line are the generated ones.
|
|
146
|
+
*/
|
|
147
|
+
export function preserveExistingPins(generated, existing) {
|
|
148
|
+
if (existing === undefined)
|
|
149
|
+
return generated;
|
|
150
|
+
const pins = existingPins(existing);
|
|
151
|
+
if (pins.size === 0)
|
|
152
|
+
return generated;
|
|
153
|
+
return generated
|
|
154
|
+
.split('\n')
|
|
155
|
+
.map((line) => {
|
|
156
|
+
const m = USES_LINE.exec(line);
|
|
157
|
+
if (!m)
|
|
158
|
+
return line;
|
|
159
|
+
const [, prefix, , , action] = m;
|
|
160
|
+
const kept = pins.get(actionKey(action));
|
|
161
|
+
return kept === undefined ? line : `${prefix}${kept}`;
|
|
162
|
+
})
|
|
163
|
+
.join('\n');
|
|
164
|
+
}
|
|
165
|
+
//# sourceMappingURL=install-ci-action-pins.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"install-ci-action-pins.js","sourceRoot":"","sources":["../src/install-ci-action-pins.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAYH,wDAAwD;AACxD,MAAM,CAAC,MAAM,WAAW,GAAG;IAC1B,QAAQ,EAAE;QACT,MAAM,EAAE,kBAAkB;QAC1B,GAAG,EAAE,0CAA0C;QAC/C,OAAO,EAAE,QAAQ;KACjB;IACD,SAAS,EAAE;QACV,MAAM,EAAE,oBAAoB;QAC5B,GAAG,EAAE,0CAA0C;QAC/C,OAAO,EAAE,QAAQ;KACjB;IACD,SAAS,EAAE;QACV,MAAM,EAAE,mBAAmB;QAC3B,GAAG,EAAE,0CAA0C;QAC/C,OAAO,EAAE,QAAQ;KACjB;CAC4C,CAAC;AAE/C;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAc;IACxC,OAAO,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,SAAS,GACd,oFAAoF,CAAC;AAEtF;;;GAGG;AACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,mFAAmF;AACnF,SAAS,SAAS,CAAC,MAAc;IAChC,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,SAAS,cAAc,CAAC,MAAc;IACrC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,mEAAmE;AACnE,SAAS,eAAe,CAAC,CAAY,EAAE,CAAY;IAClD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,8EAA8E;IAC9E,kDAAkD;IAClD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,AAAD,EAAG,KAAK,EAAE,AAAD,EAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC7D,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IACC,OAAO,KAAK,SAAS;YACrB,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,EACxD,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CACnC,SAAiB,EACjB,QAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,SAAS;SACd,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,EAAE,AAAD,EAAG,AAAD,EAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IACvD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC"}
|
|
@@ -534,6 +534,13 @@ export declare function outputBaseName(fake: boolean): string;
|
|
|
534
534
|
* Write the artifacts under `<workDir>/<base>/` (base = `.fake` when `fake`, else
|
|
535
535
|
* `.github`). Returns the repo-relative paths actually written. Pure filesystem
|
|
536
536
|
* I/O — no secrets, no git. Creates parent dirs as needed.
|
|
537
|
+
*
|
|
538
|
+
* PIN PRESERVATION. Before writing a YAML artifact, any `uses:` of an action the
|
|
539
|
+
* repository's EXISTING `.github/<path>` already pins to a full commit SHA keeps
|
|
540
|
+
* that reference and its trailing comment (see {@link preserveExistingPins}),
|
|
541
|
+
* so a Dependabot bump survives regeneration and a pin is never swapped for a
|
|
542
|
+
* tag. The existing file is always read from `.github/`, also in `--fake` mode,
|
|
543
|
+
* so the `.fake/` preview shows what a real run would write.
|
|
537
544
|
*/
|
|
538
545
|
export declare function writeArtifacts(options: {
|
|
539
546
|
workDir: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"install-ci-core.d.ts","sourceRoot":"","sources":["../src/install-ci-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;
|
|
1
|
+
{"version":3,"file":"install-ci-core.d.ts","sourceRoot":"","sources":["../src/install-ci-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAWH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,aAAa,CAAC;AAShD;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,WAAW,CAAC;AAErD,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC7B,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,MAAM,EAAE;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,EAAE,CAAC;IACvB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC5B,6CAA6C;IAC7C,QAAQ,EAAE,QAAQ,CAAC;IACnB,6DAA6D;IAC7D,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,sFAAsF;IACtF,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAG3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC5C,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,GAC9C,OAAO,CAET;AAED,+DAA+D;AAC/D,eAAO,MAAM,eAAe,EAAE,cAAqB,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,0EAA0E;AAC1E,eAAO,MAAM,sBAAsB,EAAE,aAA0B,CAAC;AAIhE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IACjC,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,sEAAsE;IACtE,WAAW,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;OAIG;IACH,cAAc,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D;;;;;;;;OAQG;IACH,iBAAiB,CAAC,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACnD;;;;;;OAMG;IACH,mBAAmB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE;;;;;;;;OAQG;IACH,gBAAgB,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC1D;;;;;;;;OAQG;IACH,gBAAgB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;CAC9C;AAED,mFAAmF;AACnF,MAAM,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAIhD;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IACjC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,EAAE,CAAC;CAC9C;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAEnE;AAED,qEAAqE;AACrE,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAE5D;AAED,4DAA4D;AAC5D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAMhE;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC3C,GAAG,CAAC,EAAE,MAAM,GACV,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiB9B;AASD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG;IAC5D,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAmBA;AAID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAYtE;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAGtE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAUzE;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC/B,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrC,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE;IACjD,GAAG,EAAE,iBAAiB,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,oFAAoF;IACpF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAoC7B;AAID,gDAAgD;AAChD,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAiE/D;AAED,sFAAsF;AACtF,wBAAgB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAWpE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAqBR;AAaD;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,oCAAoC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAwB5C;AA6BD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,gBAAgB;AACxB;;;;;;;GAOG;AACH,iBAAiB,CAAC,EAAE,MAAM,GACxB,MAAM,CAyMR;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,+1FA2FhC,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,gBAAgB,EACxB,YAAY,GAAE,iBAAiB,EAAO;AACtC;;;;;GAKG;AACH,OAAO,CAAC,EAAE;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAC,GACpC,WAAW,EAAE,CAiBf;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,WAAW,EAAE,CAAC;CACrB,GAAG,MAAM,EAAE,CAiBX"}
|
package/dist/install-ci-core.js
CHANGED
|
@@ -24,9 +24,10 @@
|
|
|
24
24
|
* policy is the SAME engine gate family resolved via the generated workflow's
|
|
25
25
|
* `DORFL_*` env block, NOT a new config knob minted here.
|
|
26
26
|
*/
|
|
27
|
-
import { readFileSync, writeFileSync, mkdirSync, readdirSync } from 'node:fs';
|
|
27
|
+
import { readFileSync, writeFileSync, mkdirSync, readdirSync, existsSync, } from 'node:fs';
|
|
28
28
|
import { dirname, join, relative } from 'node:path';
|
|
29
29
|
import { fileURLToPath } from 'node:url';
|
|
30
|
+
import { ACTION_PINS, pinnedUses, preserveExistingPins, } from './install-ci-action-pins.js';
|
|
30
31
|
/** Parse a provider's visibility answer (`PUBLIC`, `private`, ...); unknown ⇒ `undefined`. */
|
|
31
32
|
export function parseRepoVisibility(raw) {
|
|
32
33
|
const v = raw.trim().toLowerCase();
|
|
@@ -560,7 +561,7 @@ ${indent(modelsJsonStr, 8)}
|
|
|
560
561
|
if (config.installSource === 'workspace') {
|
|
561
562
|
installSteps = `\
|
|
562
563
|
- name: Setup pnpm
|
|
563
|
-
uses:
|
|
564
|
+
uses: ${pinnedUses(ACTION_PINS.pnpmSetup)}
|
|
564
565
|
|
|
565
566
|
- name: Add pnpm global bin to PATH
|
|
566
567
|
shell: bash
|
|
@@ -648,15 +649,16 @@ runs:
|
|
|
648
649
|
using: composite
|
|
649
650
|
steps:
|
|
650
651
|
${projectSetupBlock} - name: Setup Node.js
|
|
651
|
-
uses:
|
|
652
|
+
uses: ${pinnedUses(ACTION_PINS.setupNode)}
|
|
652
653
|
with:
|
|
653
654
|
node-version: '22'
|
|
654
|
-
# setup-node
|
|
655
|
-
#
|
|
656
|
-
# before that manager
|
|
657
|
-
# locate executable file").
|
|
658
|
-
#
|
|
659
|
-
#
|
|
655
|
+
# setup-node (v5 and later) auto-enables package-manager caching. In v5
|
|
656
|
+
# it probed whatever manager package.json's packageManager named, during
|
|
657
|
+
# its own run and before that manager was on PATH, and crashed ("Unable
|
|
658
|
+
# to locate executable file"). Since v6 it only fires when package.json
|
|
659
|
+
# declares npm, and then fails if there is no npm lockfile. Either way
|
|
660
|
+
# it is the project's cache, not dorfl's: dorfl provisions ONLY its own
|
|
661
|
+
# runtime (toolchain boundary), so disable it explicitly.
|
|
660
662
|
package-manager-cache: false
|
|
661
663
|
|
|
662
664
|
- name: Configure git identity
|
|
@@ -814,14 +816,28 @@ export function outputBaseName(fake) {
|
|
|
814
816
|
* Write the artifacts under `<workDir>/<base>/` (base = `.fake` when `fake`, else
|
|
815
817
|
* `.github`). Returns the repo-relative paths actually written. Pure filesystem
|
|
816
818
|
* I/O — no secrets, no git. Creates parent dirs as needed.
|
|
819
|
+
*
|
|
820
|
+
* PIN PRESERVATION. Before writing a YAML artifact, any `uses:` of an action the
|
|
821
|
+
* repository's EXISTING `.github/<path>` already pins to a full commit SHA keeps
|
|
822
|
+
* that reference and its trailing comment (see {@link preserveExistingPins}),
|
|
823
|
+
* so a Dependabot bump survives regeneration and a pin is never swapped for a
|
|
824
|
+
* tag. The existing file is always read from `.github/`, also in `--fake` mode,
|
|
825
|
+
* so the `.fake/` preview shows what a real run would write.
|
|
817
826
|
*/
|
|
818
827
|
export function writeArtifacts(options) {
|
|
819
828
|
const base = outputBaseName(options.fake);
|
|
820
829
|
const written = [];
|
|
821
830
|
for (const file of options.files) {
|
|
822
831
|
const abs = join(options.workDir, base, file.path);
|
|
832
|
+
let content = file.content;
|
|
833
|
+
if (/\.ya?ml$/.test(file.path)) {
|
|
834
|
+
const current = join(options.workDir, outputBaseName(false), file.path);
|
|
835
|
+
if (existsSync(current)) {
|
|
836
|
+
content = preserveExistingPins(content, readFileSync(current, 'utf8'));
|
|
837
|
+
}
|
|
838
|
+
}
|
|
823
839
|
mkdirSync(dirname(abs), { recursive: true });
|
|
824
|
-
writeFileSync(abs,
|
|
840
|
+
writeFileSync(abs, content, 'utf8');
|
|
825
841
|
written.push(relative(options.workDir, abs));
|
|
826
842
|
}
|
|
827
843
|
return written;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"install-ci-core.js","sourceRoot":"","sources":["../src/install-ci-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAC,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAC,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAC,MAAM,WAAW,CAAC;AAClD,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AAqIvC,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC5C,MAAgD;IAEhD,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAmB,IAAI,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAkB,UAAU,CAAC;AAqIhE;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB;IACrC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACvD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAY;IAEZ,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,sBAAsB,EAAE,CAAC,CAAC,qCAAqC;IACvE,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC1D,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,IAAI,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA0B;IAGzD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,GAA4B,EAAC,MAAM,EAAE,CAAC,CAAC,YAAY,EAAC,CAAC;YAChE,IAAI,CAAC,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACzC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACP,MAAM,KAAK,GAA4B;gBACtC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,MAAM,EAAE,CAAC,CAAC,YAAY;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aAChB,CAAC;YACF,IAAI,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,OAAO,EAAC,SAAS,EAAE,YAAY,EAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAChE,MAAM,KAAK,GACV,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,kBAAkB,IAAI,KAAK,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,oBAAoB,OAAO,EAAE,CAAC;AACtC,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAexC;IACA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAC,GAAG,OAAO,CAAC;IACpE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,KAAK,EACvB,IAAY,EACZ,KAAsD,EACtC,EAAE;QAClB,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;YACxC,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,+CAA+C;IAC/C,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,gDAAgD;AAChD,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAChD,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CACtB,oCAAoC,QAAQ,IAAI;YAC/C,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;IAChD,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CACtB,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,IACC,IAAI,CAAC,aAAa,KAAK,SAAS;QAChC,IAAI,CAAC,aAAa,KAAK,UAAU;QACjC,IAAI,CAAC,aAAa,KAAK,WAAW,EACjC,CAAC;QACF,MAAM,IAAI,aAAa,CACtB,+DAA+D,CAC/D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IACC,IAAI,CAAC,YAAY,KAAK,IAAI;YAC1B,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAC/B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,kEAAkE;gBACjE,2CAA2C;gBAC3C,gDAAgD,CACjD,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAChC,IACC,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,sEAAsE,CACtE,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO;QACN,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAC/B,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,IAAkB;IACjD,OAAO;QACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,sBAAsB;QAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB;KACrD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC7B,MAAwB,EACxB,OAAgC;IAEhC,MAAM,IAAI,GAAiB;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,MAAM,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAEhF,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB;aAC1E,OAAO,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,oDAAoD,OAAO,GAAG;YAC7D,sDAAsD;YACtD,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACH,CAAC;IACD,IACC,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,KAAK,CACd,uCAAuC,OAAO,wBAAwB;YACrE,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,+BAA+B,CACzE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAC1B,OAAuB,EACvB,aAA4B;IAE5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,GAAG,GACR,aAAa,KAAK,WAAW;YAC5B,CAAC,CAAC,eAAe,IAAI,EAAE;YACvB,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC7B,OAAO;;;;;;aAMI,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB;AACxB;;;;;;;GAOG;AACH,iBAA0B;IAE1B,IAAI,QAAgB,CAAC;IACrB,8EAA8E;IAC9E,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,gBAAgB,GACrB,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG;;;;;;;;;;;;;;;wDAe2C,CAAC;IACxD,CAAC;SAAM,CAAC;QACP,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CACnC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,EACjC,IAAI,EACJ,CAAC,CACD,CAAC;QACF,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,iFAAiF;QACjF,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,iBAAiB,IAAI,KAAK,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,uBAAuB,IAAI,oBAAoB,IAAI,OAAO,IAAI,yBAAyB,CACxF;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GACf,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC;;;;;;;;EAQJ,cAAc;;EAEd,cAAc,EAAE;YACd,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,GAAG;;;;;;EAMX,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;oBACN,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CACxC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,CACpB,CAAC;IAEF,2EAA2E;IAC3E,kEAAkE;IAClE,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,YAAoB,CAAC;IACzB,IAAI,MAAM,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC1C,YAAY,GAAG;;;;;;;;;;;;;;;;;;;iDAmBgC,cAAc,EAAE,CAAC;IACjE,CAAC;SAAM,CAAC;QACP,YAAY,GAAG;;;;;;;kCAOiB,mBAAmB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC1E,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,6EAA6E;IAC7E,2CAA2C;IAE3C,uEAAuE;IACvE,8EAA8E;IAC9E,iFAAiF;IACjF,gEAAgE;IAChE,MAAM,WAAW,GAChB,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC;EACH,gBAAgB;aAChB,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,KAAK,IAAI;4EACgE,IAAI;;gBAEhE,CACd;aACA,IAAI,CAAC,IAAI,CAAC;;CAEX;QACE,CAAC,CAAC,EAAE,CAAC;IAEP,iFAAiF;IACjF,gFAAgF;IAChF,gEAAgE;IAChE,MAAM,iBAAiB,GACtB,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;QAChD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;EAIN,WAAW;;;;;;;;;;;;;EAaX,iBAAiB;;;;;;;;;;;;;;;;;;EAkBjB,YAAY;;EAEZ,QAAQ;CACT,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2FnC,CAAC;AAEF,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,eAAoC,EAAE;AACtC;;;;;GAKG;AACH,OAAsC;IAEtC,MAAM,KAAK,GAAkB;QAC5B;YACC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC;YAClD,OAAO,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC;SAChE;KACD,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC;YAChD,OAAO,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAI9B;IACA,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}
|
|
1
|
+
{"version":3,"file":"install-ci-core.js","sourceRoot":"","sources":["../src/install-ci-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACN,YAAY,EACZ,aAAa,EACb,SAAS,EACT,WAAW,EACX,UAAU,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAC,MAAM,WAAW,CAAC;AAClD,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AAEvC,OAAO,EACN,WAAW,EACX,UAAU,EACV,oBAAoB,GACpB,MAAM,6BAA6B,CAAC;AAoIrC,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC5C,MAAgD;IAEhD,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAmB,IAAI,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAkB,UAAU,CAAC;AAqIhE;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB;IACrC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACvD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAY;IAEZ,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,sBAAsB,EAAE,CAAC,CAAC,qCAAqC;IACvE,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC1D,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,IAAI,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA0B;IAGzD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,GAA4B,EAAC,MAAM,EAAE,CAAC,CAAC,YAAY,EAAC,CAAC;YAChE,IAAI,CAAC,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACzC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACP,MAAM,KAAK,GAA4B;gBACtC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,MAAM,EAAE,CAAC,CAAC,YAAY;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aAChB,CAAC;YACF,IAAI,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,OAAO,EAAC,SAAS,EAAE,YAAY,EAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAChE,MAAM,KAAK,GACV,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,kBAAkB,IAAI,KAAK,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,oBAAoB,OAAO,EAAE,CAAC;AACtC,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAexC;IACA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAC,GAAG,OAAO,CAAC;IACpE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,KAAK,EACvB,IAAY,EACZ,KAAsD,EACtC,EAAE;QAClB,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;YACxC,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,+CAA+C;IAC/C,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,gDAAgD;AAChD,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAChD,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CACtB,oCAAoC,QAAQ,IAAI;YAC/C,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;IAChD,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CACtB,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,IACC,IAAI,CAAC,aAAa,KAAK,SAAS;QAChC,IAAI,CAAC,aAAa,KAAK,UAAU;QACjC,IAAI,CAAC,aAAa,KAAK,WAAW,EACjC,CAAC;QACF,MAAM,IAAI,aAAa,CACtB,+DAA+D,CAC/D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IACC,IAAI,CAAC,YAAY,KAAK,IAAI;YAC1B,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAC/B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,kEAAkE;gBACjE,2CAA2C;gBAC3C,gDAAgD,CACjD,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAChC,IACC,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,sEAAsE,CACtE,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO;QACN,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAC/B,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,IAAkB;IACjD,OAAO;QACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,sBAAsB;QAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB;KACrD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC7B,MAAwB,EACxB,OAAgC;IAEhC,MAAM,IAAI,GAAiB;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,MAAM,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAEhF,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,iCAAiC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB;aAC1E,OAAO,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,oDAAoD,OAAO,GAAG;YAC7D,sDAAsD;YACtD,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACH,CAAC;IACD,IACC,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,EACvD,CAAC;QACF,MAAM,IAAI,KAAK,CACd,uCAAuC,OAAO,wBAAwB;YACrE,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,+BAA+B,CACzE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAC1B,OAAuB,EACvB,aAA4B;IAE5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,kBAAkB,IAAI,kBAAkB,EAAE,CAAC;QAC3D,MAAM,GAAG,GACR,aAAa,KAAK,WAAW;YAC5B,CAAC,CAAC,eAAe,IAAI,EAAE;YACvB,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC7B,OAAO;;;;;;aAMI,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB;AACxB;;;;;;;GAOG;AACH,iBAA0B;IAE1B,IAAI,QAAgB,CAAC;IACrB,8EAA8E;IAC9E,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,gBAAgB,GACrB,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG;;;;;;;;;;;;;;;wDAe2C,CAAC;IACxD,CAAC;SAAM,CAAC;QACP,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CACnC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,EACjC,IAAI,EACJ,CAAC,CACD,CAAC;QACF,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,iFAAiF;QACjF,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,iBAAiB,IAAI,KAAK,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,uBAAuB,IAAI,oBAAoB,IAAI,OAAO,IAAI,yBAAyB,CACxF;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GACf,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC;;;;;;;;EAQJ,cAAc;;EAEd,cAAc,EAAE;YACd,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,GAAG;;;;;;EAMX,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;oBACN,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CACxC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,CACpB,CAAC;IAEF,2EAA2E;IAC3E,kEAAkE;IAClE,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,YAAoB,CAAC;IACzB,IAAI,MAAM,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC1C,YAAY,GAAG;;cAEH,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;iDAiBE,cAAc,EAAE,CAAC;IACjE,CAAC;SAAM,CAAC;QACP,YAAY,GAAG;;;;;;;kCAOiB,mBAAmB,EAAE,GAAG,cAAc,EAAE,CAAC;IAC1E,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,mEAAmE;IACnE,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,mEAAmE;IACnE,6EAA6E;IAC7E,2CAA2C;IAE3C,uEAAuE;IACvE,8EAA8E;IAC9E,iFAAiF;IACjF,gEAAgE;IAChE,MAAM,WAAW,GAChB,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC;EACH,gBAAgB;aAChB,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,KAAK,IAAI;4EACgE,IAAI;;gBAEhE,CACd;aACA,IAAI,CAAC,IAAI,CAAC;;CAEX;QACE,CAAC,CAAC,EAAE,CAAC;IAEP,iFAAiF;IACjF,gFAAgF;IAChF,gEAAgE;IAChE,MAAM,iBAAiB,GACtB,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;QAChD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;EAIN,WAAW;;;;;;;;;;;;;EAaX,iBAAiB;cACL,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;EAkB7C,YAAY;;EAEZ,QAAQ;CACT,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2FnC,CAAC;AAEF,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,eAAoC,EAAE;AACtC;;;;;GAKG;AACH,OAAsC;IAEtC,MAAM,KAAK,GAAkB;QAC5B;YACC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC;YAClD,OAAO,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC;SAChE;KACD,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC;YAChD,OAAO,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,OAI9B;IACA,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxE,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACxE,CAAC;QACF,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"intake-trigger-template.d.ts","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;
|
|
1
|
+
{"version":3,"file":"intake-trigger-template.d.ts","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAIH,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAG3D,6EAA6E;AAC7E,eAAO,MAAM,4BAA4B,WAAW,CAAC;AAErD,+DAA+D;AAC/D,eAAO,MAAM,+BAA+B,sJACmG,CAAC;AAEhJ,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,yBAAyB,CAAC;AAEnE;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAAyB,CAAC;AAI3D;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,8CAI9B,CAAC;AAEX;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;;OAIG;IACH,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B;;;;;;;;;OASG;IACH,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,WAAW,EAAE,SAAS,GAAG,WAAW,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAC1C,iBAAiB,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,aAAa,EAAE,OAAO,CAAC;CACvB,GAAG,sBAAsB,CAsBzB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC9B,iBAAiB,EAAE,MAAM,GAAG,SAAS,GACnC,OAAO,CAMT;AAID;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAyOvE;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACpC,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,MAAM,WAAW,uBAAuB;IACvC,kEAAkE;IAClE,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CA8N5E"}
|
|
@@ -67,6 +67,7 @@
|
|
|
67
67
|
* the test generates this artifact under `--fake` and asserts every invariant.
|
|
68
68
|
*/
|
|
69
69
|
import { brand } from './brand.js';
|
|
70
|
+
import { ACTION_PINS, pinnedUses } from './install-ci-action-pins.js';
|
|
70
71
|
import { providerSecretsWithBlock } from './install-ci-core.js';
|
|
71
72
|
/** The capability id (the registry key + the emitted workflow file stem). */
|
|
72
73
|
export const INTAKE_TRIGGER_CAPABILITY_ID = 'intake';
|
|
@@ -295,7 +296,7 @@ jobs:
|
|
|
295
296
|
if: \${{ github.event.issue.number && !github.event.issue.pull_request }}
|
|
296
297
|
runs-on: ubuntu-latest
|
|
297
298
|
steps:
|
|
298
|
-
- uses:
|
|
299
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
299
300
|
with:
|
|
300
301
|
fetch-depth: 0
|
|
301
302
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"intake-trigger-template.js","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;
|
|
1
|
+
{"version":3,"file":"intake-trigger-template.js","sourceRoot":"","sources":["../src/intake-trigger-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EAAC,KAAK,EAAC,MAAM,YAAY,CAAC;AACjC,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAC,wBAAwB,EAAC,MAAM,sBAAsB,CAAC;AAE9D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AAErD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,+BAA+B,GAC3C,8IAA8I,CAAC;AAEhJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,IAAI,SAAS,CAAC;AAE3D,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,OAAO;IACP,QAAQ;IACR,cAAc;CACL,CAAC;AAsDX;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAGjC;IACA,MAAM,EAAC,iBAAiB,EAAE,aAAa,EAAC,GAAG,OAAO,CAAC;IACnD,oFAAoF;IACpF,gFAAgF;IAChF,iFAAiF;IACjF,8EAA8E;IAC9E,iFAAiF;IACjF,6EAA6E;IAC7E,MAAM,IAAI,GAAwB,iBAAiB,CAAC;IACpD,MAAM,IAAI,GAAwB,iBAAiB,CAAC;IACpD,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,mFAAmF;IACnF,iFAAiF;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,WAAW,GAA4B,aAAa;QACzD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC;IACf,OAAO,EAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC9B,iBAAqC;IAErC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAQ,2BAAiD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC9D,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;MAeF,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAiGV,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;;6CAGH,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiHrD,CAAC;AACF,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,CAAC;IAEF,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,iFAAiF;IACjF,wEAAwE;IACxE,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,gFAAgF;IAChF,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAC9C,SAAS,CACT,EAAE,sEAAsE;QACxE,aAAa,CAAC,CAAC;IAChB,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,8BAA8B,EAAE,uGAAuG,CAAC,IAAI,CACnJ,SAAS,CACT,EAAE,4DAA4D;QAC9D,uFAAuF,CAAC,CAAC;IAC1F,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT;QACA,CAAC,oCAAoC,CAAC,IAAI,CACzC,SAAS,CACT,EAAE,gFAAgF;QACnF,+EAA+E;QAC/E,0CAA0C,CAAC,CAAC;IAC7C,6EAA6E;IAC7E,sEAAsE;IACtE,OAAO,CAAC,gBAAgB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CACvD,SAAS,CACT,EAAE,6EAA6E;QAC/E,0EAA0E,CAAC,CAAC;IAE7E,+EAA+E;IAC/E,OAAO,CAAC,uBAAuB,EAAE,mDAAmD,CAAC,IAAI,CACxF,IAAI,CACJ,EAAE,gEAAgE,CAAC,CAAC;IACrE,OAAO,CAAC,+BAA+B,EAAE,2DAA2D,CAAC,IAAI,CACxG,IAAI,CACJ,EAAE,0CAA0C;QAC5C,sEAAsE,CAAC,CAAC;IACzE,OAAO,CAAC,eAAe,EAAE,oDAAoD,CAAC,IAAI,CACjF,IAAI,CACJ,EAAE,yDAAyD,CAAC,CAAC;IAE9D,gFAAgF;IAChF,8EAA8E;IAC9E,gEAAgE;IAChE,OAAO,CAAC,2BAA2B,EAAE,CAAC,wDAAwD,CAAC,IAAI,CAClG,IAAI,CACJ,EAAE,wEAAwE;QAC1E,oEAAoE,CAAC,CAAC;IACvE,OAAO,CAAC,kBAAkB,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAChE,SAAS,CACT,EAAE,yEAAyE,CAAC,CAAC;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,OAAO,CAAC,kCAAkC,EAAE,qBAAqB,CAAC,IAAI,CACrE,IAAI,CACJ,EAAE,sEAAsE;QACxE,2DAA2D,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,kFAAkF;IAClF,OAAO,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,IAAI,CAC5D,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yEAAyE,CAAC,CAAC;IAC5E,wDAAwD;IACxD,OAAO,CAAC,iCAAiC,EAAE,6EAA6E,CAAC,IAAI,CAC5H,IAAI,CACJ,EAAE,6EAA6E;QAC/E,kCAAkC,CAAC,CAAC;IACrC,uDAAuD;IACvD,gFAAgF;IAChF,0EAA0E;IAC1E,qEAAqE;IACrE,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,mEAAmE;QACrE,kCAAkC,CAAC,CAAC;IACrC,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,iEAAiE;QACnE,yEAAyE;QACzE,kCAAkC,CAAC,CAAC;IACrC,4EAA4E;IAC5E,4DAA4D;IAC5D,OAAO,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,iEAAiE;QACnE,gCAAgC,CAAC,CAAC;IACnC,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,mEAAmE;QACrE,kCAAkC,CAAC,CAAC;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,yEAAyE;IACzE,OAAO,CAAC,gCAAgC,EAAE,4BAA4B,CAAC,IAAI,CAC1E,SAAS,CACT,EAAE,+EAA+E;QACjF,6DAA6D;QAC7D,yCAAyC,CAAC,CAAC;IAC5C,OAAO,CAAC,8BAA8B,EAAE,0BAA0B,CAAC,IAAI,CACtE,SAAS,CACT,EAAE,gFAAgF,CAAC,CAAC;IACrF,OAAO,CAAC,+BAA+B,EAAE,2CAA2C,CAAC,IAAI,CACxF,SAAS,CACT,EAAE,yEAAyE;QAC3E,mCAAmC,CAAC,CAAC;IACtC,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,IAAI,CACtD,SAAS,CACT,EAAE,0DAA0D;QAC5D,yEAAyE;QACzE,0DAA0D,CAAC,CAAC;IAC7D,6EAA6E;IAC7E,6EAA6E;IAC7E,gFAAgF;IAChF,+EAA+E;IAC/E,yEAAyE;IACzE,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,IAAI,CAC/D,SAAS,CACT,EAAE,4EAA4E;QAC9E,wEAAwE,CAAC,CAAC;IAC3E,OAAO,CAAC,8CAA8C,EAAE,4CAA4C,CAAC,IAAI,CACxG,SAAS,CACT,EAAE,8DAA8D;QAChE,6EAA6E;QAC7E,oDAAoD,CAAC,CAAC;IACvD,sEAAsE;IACtE,gFAAgF;IAChF,iFAAiF;IACjF,kDAAkD;IAClD,OAAO,CAAC,uBAAuB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAC9D,SAAS,CACT,EAAE,sEAAsE;QACxE,sEAAsE;QACtE,4DAA4D;QAC5D,6DAA6D,CAAC,CAAC;IAChE,8EAA8E;IAC9E,mEAAmE;IACnE,gFAAgF;IAChF,kFAAkF;IAClF,kFAAkF;IAClF,+EAA+E;IAC/E,oEAAoE;IACpE,OAAO,CAAC,wBAAwB,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAC7D,SAAS,CACT,EAAE,uEAAuE;QACzE,4EAA4E;QAC5E,2DAA2D,CAAC,CAAC;IAC9D,OAAO,CAAC,uBAAuB,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAC3D,SAAS,CACT,EAAE,sEAAsE;QACxE,4EAA4E;QAC5E,2DAA2D,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,IAAI,CAC5D,SAAS,CACT,EAAE,2EAA2E;QAC7E,+DAA+D,CAAC,CAAC;IAClE,gFAAgF;IAChF,6EAA6E;IAC7E,OAAO,CAAC,oBAAoB,EAAE,CAAC,iBAAiB,CAAC,IAAI,CACpD,SAAS,CACT,EAAE,4EAA4E;QAC9E,oEAAoE,CAAC,CAAC;IAEvE,8EAA8E;IAC9E,OAAO,CAAC,kBAAkB,EAAE,CAAC,cAAc,CAAC,IAAI,CAC/C,SAAS,CACT,EAAE,0EAA0E,CAAC,CAAC;IAC/E,OAAO,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAClD,SAAS,CACT,EAAE,gEAAgE,CAAC,CAAC;IAErE,+EAA+E;IAC/E,OAAO,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,IAAI,CAClE,IAAI,CACJ,EAAE,yEAAyE,CAAC,CAAC;IAC9E,OAAO,CAAC,uBAAuB,EAAE,iEAAiE,CAAC,IAAI,CACtG,IAAI,CACJ,EAAE,yEAAyE;QAC3E,yCAAyC,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,OAAO,CAAC,yBAAyB,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAChE,IAAI,CACJ,EAAE,wEAAwE;QAC1E,gEAAgE,CAAC,CAAC;IACnE,OAAO,CAAC,kCAAkC,EAAE,CAAC,uBAAuB,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,+DAA+D,CAAC,CAAC;IAEpE,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,EAAE,8CAA8C,CAAC,IAAI,CACtF,IAAI,CACJ,EAAE,sDAAsD;QACxD,8DAA8D,CAAC,CAAC;IAEjE,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-workflow-template.d.ts","sourceRoot":"","sources":["../src/verify-workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;
|
|
1
|
+
{"version":3,"file":"verify-workflow-template.d.ts","sourceRoot":"","sources":["../src/verify-workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAG3D;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAE7C,yDAAyD;AACzD,eAAO,MAAM,uBAAuB,oJAC8G,CAAC;AAEnJ,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAuEvE;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,gDAAgD;AAChD,MAAM,WAAW,wBAAwB;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,CA8B7E"}
|
|
@@ -20,6 +20,7 @@
|
|
|
20
20
|
* (GitHub Merge Queue) can flip the ruleset on without changing this workflow's
|
|
21
21
|
* trigger surface — the forward seam the spec's Applied Answers q3 names.
|
|
22
22
|
*/
|
|
23
|
+
import { ACTION_PINS, pinnedUses } from './install-ci-action-pins.js';
|
|
23
24
|
import { shouldDropCheckoutCredentials } from './install-ci-core.js';
|
|
24
25
|
/**
|
|
25
26
|
* The required-status-check CONTEXT install-ci sets via branch protection AND the
|
|
@@ -104,7 +105,7 @@ jobs:
|
|
|
104
105
|
${VERIFY_CHECK_CONTEXT}:
|
|
105
106
|
runs-on: ubuntu-latest
|
|
106
107
|
steps:
|
|
107
|
-
- uses:
|
|
108
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
108
109
|
with:
|
|
109
110
|
fetch-depth: 0${checkoutCredentials}
|
|
110
111
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-workflow-template.js","sourceRoot":"","sources":["../src/verify-workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;
|
|
1
|
+
{"version":3,"file":"verify-workflow-template.js","sourceRoot":"","sources":["../src/verify-workflow-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAC,WAAW,EAAE,UAAU,EAAC,MAAM,6BAA6B,CAAC;AAEpE,OAAO,EAAC,6BAA6B,EAAC,MAAM,sBAAsB,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAE7C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAE7C,yDAAyD;AACzD,MAAM,CAAC,MAAM,uBAAuB,GACnC,iJAAiJ,CAAC;AAEnJ,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC9D,sEAAsE;IACtE,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,mBAAmB,GAAG,6BAA6B,CAAC,MAAM,CAAC;QAChE,CAAC,CAAC;;;;qCAIiC;QACnC,CAAC,CAAC,EAAE,CAAC;IACN,OAAO;;;;;;kEAM0D,oBAAoB;;4DAE1B,oBAAoB;yEACP,oBAAoB;;;;;;;;gDAQ7C,oBAAoB;;;;;;;;;;QAU5D,oBAAoB;;;;;;;;;;;WAWjB,oBAAoB;;;;;;;;;SAStB,oBAAoB;;IAEzB,oBAAoB;;;gBAGR,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC;;0BAEtB,mBAAmB;;;;CAI5C,CAAC;AACF,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,OAAgB,EAAE,OAAe,EAAQ,EAAE;QACvE,IAAI,CAAC,OAAO;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,OAAO,EAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,IAAI;SACpB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,CAAC,0BAA0B,EAAE,IAAI,MAAM,CAC7C,UAAU,oBAAoB,QAAQ,EACtC,GAAG,CACH,CAAC,IAAI,CACL,SAAS,CACT,EAAE,mDAAmD,oBAAoB,KAAK;QAC9E,6DAA6D,CAAC,CAAC;IAChE,OAAO,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,IAAI,CACxE,SAAS,CACT,EAAE,kEAAkE,CAAC,CAAC;IACvE,OAAO,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,IAAI,CAC3D,SAAS,CACT,EAAE,oFAAoF,CAAC,CAAC;IACzF,OAAO,CAAC,yBAAyB,EAAE,CAAC,2BAA2B,CAAC,IAAI,CACnE,SAAS,CACT,EAAE,iDAAiD,CAAC,CAAC;IACtD,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,IAAI,CACjD,SAAS,CACT,EAAE,mFAAmF,CAAC,CAAC;IACxF,OAAO,EAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAC,CAAC;AAC9C,CAAC"}
|
package/package.json
CHANGED
|
@@ -60,6 +60,7 @@
|
|
|
60
60
|
* the test generates this artifact under `--fake` and asserts every invariant.
|
|
61
61
|
*/
|
|
62
62
|
|
|
63
|
+
import {ACTION_PINS, pinnedUses} from './install-ci-action-pins.js';
|
|
63
64
|
import type {ResolvedCIConfig} from './install-ci-core.js';
|
|
64
65
|
import {providerSecretsWithBlock} from './install-ci-core.js';
|
|
65
66
|
|
|
@@ -296,7 +297,7 @@ jobs:
|
|
|
296
297
|
# re-run, no baked-in YAML number.
|
|
297
298
|
githubTimeout: \${{ steps.timeout.outputs.githubTimeout }}
|
|
298
299
|
steps:
|
|
299
|
-
- uses:
|
|
300
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
300
301
|
with:
|
|
301
302
|
fetch-depth: 0
|
|
302
303
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -406,7 +407,7 @@ jobs:
|
|
|
406
407
|
matrix:
|
|
407
408
|
item: \${{ fromJson(needs.enumerate.outputs.items) }}
|
|
408
409
|
steps:
|
|
409
|
-
- uses:
|
|
410
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
410
411
|
with:
|
|
411
412
|
fetch-depth: 0
|
|
412
413
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -485,7 +486,7 @@ jobs:
|
|
|
485
486
|
matrix:
|
|
486
487
|
item: \${{ fromJson(needs.enumerate.outputs.items) }}
|
|
487
488
|
steps:
|
|
488
|
-
- uses:
|
|
489
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
489
490
|
with:
|
|
490
491
|
fetch-depth: 0
|
|
491
492
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -549,7 +550,7 @@ jobs:
|
|
|
549
550
|
if: \${{ (github.event.inputs.sweepMergedBranches || 'true') == 'true' }}
|
|
550
551
|
runs-on: ubuntu-latest
|
|
551
552
|
steps:
|
|
552
|
-
- uses:
|
|
553
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
553
554
|
with:
|
|
554
555
|
fetch-depth: 0
|
|
555
556
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -33,6 +33,7 @@
|
|
|
33
33
|
* the test generates this artifact under `--fake` and asserts every invariant.
|
|
34
34
|
*/
|
|
35
35
|
|
|
36
|
+
import {ACTION_PINS, pinnedUses} from './install-ci-action-pins.js';
|
|
36
37
|
import type {ResolvedCIConfig} from './install-ci-core.js';
|
|
37
38
|
import {shouldDropCheckoutCredentials} from './install-ci-core.js';
|
|
38
39
|
|
|
@@ -123,7 +124,7 @@ jobs:
|
|
|
123
124
|
close-merged-issues:
|
|
124
125
|
runs-on: ubuntu-latest
|
|
125
126
|
steps:
|
|
126
|
-
- uses:
|
|
127
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
127
128
|
with:
|
|
128
129
|
fetch-depth: 0${checkoutCredentials}
|
|
129
130
|
- uses: ./.github/actions/dorfl-setup
|
|
@@ -0,0 +1,184 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* The ONE table of third-party GitHub Actions that `dorfl install-ci` emits,
|
|
3
|
+
* each pinned to a full 40-character commit SHA, plus the regeneration rule that
|
|
4
|
+
* keeps a consumer repository's own pins.
|
|
5
|
+
*
|
|
6
|
+
* WHY SHAS. A tag such as `@v5` can be moved by whoever controls the action's
|
|
7
|
+
* repository, so a compromised or careless release reaches every job that uses
|
|
8
|
+
* it, including dorfl's jobs that hold `contents: write` and a provider API key.
|
|
9
|
+
* A commit SHA cannot move. This is GitHub's own hardening guidance ("Using
|
|
10
|
+
* third-party actions", Security hardening for GitHub Actions).
|
|
11
|
+
*
|
|
12
|
+
* THE FORMAT. Every reference is emitted as `owner/repo@<40-hex-sha> # vX.Y.Z`,
|
|
13
|
+
* the exact shape Dependabot writes and rewrites, so a consumer that enables
|
|
14
|
+
* Dependabot's `github-actions` ecosystem (with `/.github/actions/*` in
|
|
15
|
+
* `directories` for the composite action) gets reviewable bump PRs.
|
|
16
|
+
*
|
|
17
|
+
* HOW EACH SHA WAS RESOLVED (2026-09-26). For each tag:
|
|
18
|
+
* 1. `git ls-remote --tags https://github.com/<owner>/<repo>.git`, reading the
|
|
19
|
+
* peeled `refs/tags/<tag>^{}` line when the tag is annotated (that line is
|
|
20
|
+
* the COMMIT; the unpeeled line is the tag OBJECT and must never be used),
|
|
21
|
+
* else the tag line itself for a lightweight tag;
|
|
22
|
+
* 2. cross-checked with `gh api repos/<owner>/<repo>/git/ref/tags/<tag>`
|
|
23
|
+
* (object type) and `gh api repos/<owner>/<repo>/commits/<sha>` (the SHA is
|
|
24
|
+
* a commit that exists in the repository).
|
|
25
|
+
*
|
|
26
|
+
* actions/checkout v7.0.1: lightweight tag, `git/ref` type `commit`,
|
|
27
|
+
* 3d3c42e5aac5ba805825da76410c181273ba90b1 ("prep v7.0.1 release (#2531)").
|
|
28
|
+
* The floating `v7` tag points at the same commit. v7 is the current major
|
|
29
|
+
* and adds the fork-PR checkout block for `pull_request_target` /
|
|
30
|
+
* `workflow_run` that v5 lacks; the inputs dorfl passes (`fetch-depth`,
|
|
31
|
+
* `persist-credentials`) are unchanged.
|
|
32
|
+
* actions/setup-node v7.0.0: lightweight tag, `git/ref` type `commit`,
|
|
33
|
+
* 820762786026740c76f36085b0efc47a31fe5020 ("Migrate to ESM and upgrade
|
|
34
|
+
* dependencies (#1574)"). The floating `v7` tag points at the same commit.
|
|
35
|
+
* `node-version` and `package-manager-cache` are still inputs (see the
|
|
36
|
+
* comment on the setup-node step in `generateSetupAction`).
|
|
37
|
+
* pnpm/action-setup v6.1.0: ANNOTATED tag. `git/ref` type `tag` with object
|
|
38
|
+
* d9184bf108216479bc5a137cc391f4d7b14c870b (the tag object, NOT usable);
|
|
39
|
+
* peeled `^{}` and `gh api .../git/tags/d9184bf...` both give the commit
|
|
40
|
+
* ea17c68df8912ef543352723c149a84f56e3d413 ("feat: support pnpm v12
|
|
41
|
+
* (#288)"). With no `version` input it still reads `packageManager` from
|
|
42
|
+
* package.json, which is how dorfl's workspace mode uses it.
|
|
43
|
+
*
|
|
44
|
+
* To bump a pin: resolve the new tag the same way, update the entry, and record
|
|
45
|
+
* the resolution above. `install-ci-actions-pinned.test.ts` fails on any
|
|
46
|
+
* emitted `uses:` that is not a full SHA.
|
|
47
|
+
*/
|
|
48
|
+
|
|
49
|
+
/** One pinned third-party action. */
|
|
50
|
+
export interface ActionPin {
|
|
51
|
+
/** `owner/repo`, or `owner/repo/path` for an action in a subdirectory. */
|
|
52
|
+
readonly action: string;
|
|
53
|
+
/** The full 40-character lowercase commit SHA (never a tag object). */
|
|
54
|
+
readonly sha: string;
|
|
55
|
+
/** The release tag the SHA was resolved from, for the trailing comment. */
|
|
56
|
+
readonly version: string;
|
|
57
|
+
}
|
|
58
|
+
|
|
59
|
+
/** Every third-party action dorfl's generators emit. */
|
|
60
|
+
export const ACTION_PINS = {
|
|
61
|
+
checkout: {
|
|
62
|
+
action: 'actions/checkout',
|
|
63
|
+
sha: '3d3c42e5aac5ba805825da76410c181273ba90b1',
|
|
64
|
+
version: 'v7.0.1',
|
|
65
|
+
},
|
|
66
|
+
setupNode: {
|
|
67
|
+
action: 'actions/setup-node',
|
|
68
|
+
sha: '820762786026740c76f36085b0efc47a31fe5020',
|
|
69
|
+
version: 'v7.0.0',
|
|
70
|
+
},
|
|
71
|
+
pnpmSetup: {
|
|
72
|
+
action: 'pnpm/action-setup',
|
|
73
|
+
sha: 'ea17c68df8912ef543352723c149a84f56e3d413',
|
|
74
|
+
version: 'v6.1.0',
|
|
75
|
+
},
|
|
76
|
+
} as const satisfies Record<string, ActionPin>;
|
|
77
|
+
|
|
78
|
+
/**
|
|
79
|
+
* The value to put after `uses: ` for a pinned action:
|
|
80
|
+
* `owner/repo@<sha> # vX.Y.Z` (the Dependabot format).
|
|
81
|
+
*/
|
|
82
|
+
export function pinnedUses(pin: ActionPin): string {
|
|
83
|
+
return `${pin.action}@${pin.sha} # ${pin.version}`;
|
|
84
|
+
}
|
|
85
|
+
|
|
86
|
+
// ─── preserving the consumer's pins on regeneration ─────────────────────────
|
|
87
|
+
|
|
88
|
+
/**
|
|
89
|
+
* A `uses:` step line: the prefix (indentation, an optional `- ` list marker,
|
|
90
|
+
* `uses:` and its spacing), then the VALUE (an optionally quoted
|
|
91
|
+
* `action@ref`), then an optional trailing comment. Matched per line, which is
|
|
92
|
+
* how both dorfl's templates and Dependabot write these lines. A flow-style or
|
|
93
|
+
* multi-line `uses:` value is not recognised (and so not preserved).
|
|
94
|
+
*/
|
|
95
|
+
const USES_LINE =
|
|
96
|
+
/^(\s*(?:-\s+)?uses:[ \t]+)((['"]?)([^\s'"@#]+)@([^\s'"#]+)\3(?:[ \t]+#.*)?)[ \t]*$/;
|
|
97
|
+
|
|
98
|
+
/**
|
|
99
|
+
* A full commit SHA (what counts as "pinned"). Case-insensitive here, so a
|
|
100
|
+
* consumer's uppercase pin is still kept; dorfl itself emits lowercase.
|
|
101
|
+
*/
|
|
102
|
+
const FULL_SHA = /^[0-9a-f]{40}$/i;
|
|
103
|
+
|
|
104
|
+
/** The lookup key for an action: GitHub treats `owner/repo` case-insensitively. */
|
|
105
|
+
function actionKey(action: string): string {
|
|
106
|
+
return action.toLowerCase();
|
|
107
|
+
}
|
|
108
|
+
|
|
109
|
+
/** A remote action key (`owner/repo[/path]`), i.e. not `./local` nor `docker://`. */
|
|
110
|
+
function isRemoteAction(action: string): boolean {
|
|
111
|
+
return !action.startsWith('.') && /^[^/\s]+\/[^/\s]+/.test(action);
|
|
112
|
+
}
|
|
113
|
+
|
|
114
|
+
/** Parse the version out of a trailing `# v1.2.3` comment, for ranking. */
|
|
115
|
+
function versionOf(tail: string): number[] | undefined {
|
|
116
|
+
const m = /#\s*v?(\d+(?:\.\d+)*)/.exec(tail);
|
|
117
|
+
return m ? m[1].split('.').map(Number) : undefined;
|
|
118
|
+
}
|
|
119
|
+
|
|
120
|
+
/** Compare two parsed versions; a missing version ranks lowest. */
|
|
121
|
+
function compareVersions(a?: number[], b?: number[]): number {
|
|
122
|
+
if (!a || !b) return (a ? 1 : 0) - (b ? 1 : 0);
|
|
123
|
+
for (let i = 0; i < Math.max(a.length, b.length); i++) {
|
|
124
|
+
const d = (a[i] ?? 0) - (b[i] ?? 0);
|
|
125
|
+
if (d !== 0) return d;
|
|
126
|
+
}
|
|
127
|
+
return 0;
|
|
128
|
+
}
|
|
129
|
+
|
|
130
|
+
/**
|
|
131
|
+
* Collect the SHA pins an existing file already carries, keyed by action
|
|
132
|
+
* (`owner/repo[/path]`). The value is the whole `uses:` value with its trailing
|
|
133
|
+
* comment, exactly as written. When the file pins the same action to several
|
|
134
|
+
* different SHAs, the one whose `# vX.Y.Z` comment is highest wins (ties: the
|
|
135
|
+
* first in the file), so a partial manual bump is never undone.
|
|
136
|
+
*/
|
|
137
|
+
export function existingPins(existing: string): Map<string, string> {
|
|
138
|
+
const pins = new Map<string, string>();
|
|
139
|
+
// `\r?\n`: a CRLF checkout (Windows, `core.autocrlf`) must not hide its pins,
|
|
140
|
+
// or dorfl's default would silently replace them.
|
|
141
|
+
for (const line of existing.split(/\r?\n/)) {
|
|
142
|
+
const m = USES_LINE.exec(line);
|
|
143
|
+
if (!m) continue;
|
|
144
|
+
const [, , value, , action, ref] = m;
|
|
145
|
+
if (!isRemoteAction(action) || !FULL_SHA.test(ref)) continue;
|
|
146
|
+
const key = actionKey(action);
|
|
147
|
+
const current = pins.get(key);
|
|
148
|
+
if (
|
|
149
|
+
current === undefined ||
|
|
150
|
+
compareVersions(versionOf(value), versionOf(current)) > 0
|
|
151
|
+
) {
|
|
152
|
+
pins.set(key, value);
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
return pins;
|
|
156
|
+
}
|
|
157
|
+
|
|
158
|
+
/**
|
|
159
|
+
* Rewrite a freshly generated workflow / composite action so every `uses:` of an
|
|
160
|
+
* action that `existing` already pins to a full SHA keeps the consumer's
|
|
161
|
+
* reference and trailing comment. Matching is by action (`owner/repo`, plus the
|
|
162
|
+
* path for an action in a subdirectory), never by position. An existing TAG is
|
|
163
|
+
* not a pin: the generated reference (dorfl's SHA) stays. So the result never
|
|
164
|
+
* swaps a SHA for a tag. Only the value after `uses: ` changes; indentation and
|
|
165
|
+
* every other line are the generated ones.
|
|
166
|
+
*/
|
|
167
|
+
export function preserveExistingPins(
|
|
168
|
+
generated: string,
|
|
169
|
+
existing: string | undefined,
|
|
170
|
+
): string {
|
|
171
|
+
if (existing === undefined) return generated;
|
|
172
|
+
const pins = existingPins(existing);
|
|
173
|
+
if (pins.size === 0) return generated;
|
|
174
|
+
return generated
|
|
175
|
+
.split('\n')
|
|
176
|
+
.map((line) => {
|
|
177
|
+
const m = USES_LINE.exec(line);
|
|
178
|
+
if (!m) return line;
|
|
179
|
+
const [, prefix, , , action] = m;
|
|
180
|
+
const kept = pins.get(actionKey(action));
|
|
181
|
+
return kept === undefined ? line : `${prefix}${kept}`;
|
|
182
|
+
})
|
|
183
|
+
.join('\n');
|
|
184
|
+
}
|
package/src/install-ci-core.ts
CHANGED
|
@@ -25,10 +25,21 @@
|
|
|
25
25
|
* `DORFL_*` env block, NOT a new config knob minted here.
|
|
26
26
|
*/
|
|
27
27
|
|
|
28
|
-
import {
|
|
28
|
+
import {
|
|
29
|
+
readFileSync,
|
|
30
|
+
writeFileSync,
|
|
31
|
+
mkdirSync,
|
|
32
|
+
readdirSync,
|
|
33
|
+
existsSync,
|
|
34
|
+
} from 'node:fs';
|
|
29
35
|
import {dirname, join, relative} from 'node:path';
|
|
30
36
|
import {fileURLToPath} from 'node:url';
|
|
31
37
|
import type {HarnessAdapter} from './config.js';
|
|
38
|
+
import {
|
|
39
|
+
ACTION_PINS,
|
|
40
|
+
pinnedUses,
|
|
41
|
+
preserveExistingPins,
|
|
42
|
+
} from './install-ci-action-pins.js';
|
|
32
43
|
|
|
33
44
|
// ─── Config model ──────────────────────────────────────────────────────────
|
|
34
45
|
|
|
@@ -925,7 +936,7 @@ ${indent(modelsJsonStr, 8)}
|
|
|
925
936
|
if (config.installSource === 'workspace') {
|
|
926
937
|
installSteps = `\
|
|
927
938
|
- name: Setup pnpm
|
|
928
|
-
uses:
|
|
939
|
+
uses: ${pinnedUses(ACTION_PINS.pnpmSetup)}
|
|
929
940
|
|
|
930
941
|
- name: Add pnpm global bin to PATH
|
|
931
942
|
shell: bash
|
|
@@ -1021,15 +1032,16 @@ runs:
|
|
|
1021
1032
|
using: composite
|
|
1022
1033
|
steps:
|
|
1023
1034
|
${projectSetupBlock} - name: Setup Node.js
|
|
1024
|
-
uses:
|
|
1035
|
+
uses: ${pinnedUses(ACTION_PINS.setupNode)}
|
|
1025
1036
|
with:
|
|
1026
1037
|
node-version: '22'
|
|
1027
|
-
# setup-node
|
|
1028
|
-
#
|
|
1029
|
-
# before that manager
|
|
1030
|
-
# locate executable file").
|
|
1031
|
-
#
|
|
1032
|
-
#
|
|
1038
|
+
# setup-node (v5 and later) auto-enables package-manager caching. In v5
|
|
1039
|
+
# it probed whatever manager package.json's packageManager named, during
|
|
1040
|
+
# its own run and before that manager was on PATH, and crashed ("Unable
|
|
1041
|
+
# to locate executable file"). Since v6 it only fires when package.json
|
|
1042
|
+
# declares npm, and then fails if there is no npm lockfile. Either way
|
|
1043
|
+
# it is the project's cache, not dorfl's: dorfl provisions ONLY its own
|
|
1044
|
+
# runtime (toolchain boundary), so disable it explicitly.
|
|
1033
1045
|
package-manager-cache: false
|
|
1034
1046
|
|
|
1035
1047
|
- name: Configure git identity
|
|
@@ -1195,6 +1207,13 @@ export function outputBaseName(fake: boolean): string {
|
|
|
1195
1207
|
* Write the artifacts under `<workDir>/<base>/` (base = `.fake` when `fake`, else
|
|
1196
1208
|
* `.github`). Returns the repo-relative paths actually written. Pure filesystem
|
|
1197
1209
|
* I/O — no secrets, no git. Creates parent dirs as needed.
|
|
1210
|
+
*
|
|
1211
|
+
* PIN PRESERVATION. Before writing a YAML artifact, any `uses:` of an action the
|
|
1212
|
+
* repository's EXISTING `.github/<path>` already pins to a full commit SHA keeps
|
|
1213
|
+
* that reference and its trailing comment (see {@link preserveExistingPins}),
|
|
1214
|
+
* so a Dependabot bump survives regeneration and a pin is never swapped for a
|
|
1215
|
+
* tag. The existing file is always read from `.github/`, also in `--fake` mode,
|
|
1216
|
+
* so the `.fake/` preview shows what a real run would write.
|
|
1198
1217
|
*/
|
|
1199
1218
|
export function writeArtifacts(options: {
|
|
1200
1219
|
workDir: string;
|
|
@@ -1205,8 +1224,15 @@ export function writeArtifacts(options: {
|
|
|
1205
1224
|
const written: string[] = [];
|
|
1206
1225
|
for (const file of options.files) {
|
|
1207
1226
|
const abs = join(options.workDir, base, file.path);
|
|
1227
|
+
let content = file.content;
|
|
1228
|
+
if (/\.ya?ml$/.test(file.path)) {
|
|
1229
|
+
const current = join(options.workDir, outputBaseName(false), file.path);
|
|
1230
|
+
if (existsSync(current)) {
|
|
1231
|
+
content = preserveExistingPins(content, readFileSync(current, 'utf8'));
|
|
1232
|
+
}
|
|
1233
|
+
}
|
|
1208
1234
|
mkdirSync(dirname(abs), {recursive: true});
|
|
1209
|
-
writeFileSync(abs,
|
|
1235
|
+
writeFileSync(abs, content, 'utf8');
|
|
1210
1236
|
written.push(relative(options.workDir, abs));
|
|
1211
1237
|
}
|
|
1212
1238
|
return written;
|
|
@@ -68,6 +68,7 @@
|
|
|
68
68
|
*/
|
|
69
69
|
|
|
70
70
|
import {brand} from './brand.js';
|
|
71
|
+
import {ACTION_PINS, pinnedUses} from './install-ci-action-pins.js';
|
|
71
72
|
import type {ResolvedCIConfig} from './install-ci-core.js';
|
|
72
73
|
import {providerSecretsWithBlock} from './install-ci-core.js';
|
|
73
74
|
|
|
@@ -365,7 +366,7 @@ jobs:
|
|
|
365
366
|
if: \${{ github.event.issue.number && !github.event.issue.pull_request }}
|
|
366
367
|
runs-on: ubuntu-latest
|
|
367
368
|
steps:
|
|
368
|
-
- uses:
|
|
369
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
369
370
|
with:
|
|
370
371
|
fetch-depth: 0
|
|
371
372
|
- uses: ./.github/actions/dorfl-setup${setupWith}
|
|
@@ -21,6 +21,7 @@
|
|
|
21
21
|
* trigger surface — the forward seam the spec's Applied Answers q3 names.
|
|
22
22
|
*/
|
|
23
23
|
|
|
24
|
+
import {ACTION_PINS, pinnedUses} from './install-ci-action-pins.js';
|
|
24
25
|
import type {ResolvedCIConfig} from './install-ci-core.js';
|
|
25
26
|
import {shouldDropCheckoutCredentials} from './install-ci-core.js';
|
|
26
27
|
|
|
@@ -112,7 +113,7 @@ jobs:
|
|
|
112
113
|
${VERIFY_CHECK_CONTEXT}:
|
|
113
114
|
runs-on: ubuntu-latest
|
|
114
115
|
steps:
|
|
115
|
-
- uses:
|
|
116
|
+
- uses: ${pinnedUses(ACTION_PINS.checkout)}
|
|
116
117
|
with:
|
|
117
118
|
fetch-depth: 0${checkoutCredentials}
|
|
118
119
|
- uses: ./.github/actions/dorfl-setup
|