CI updates

This is done by the automated script named upgrade-c2cciutils-to-1.7

.github/renovate.json5

@@ -106,5 +106,10 @@
       groupName: 'CI dependencies',
       automerge: true,
     },
+    /** For security reason don't takes the too early packages on stabilization branches */
+    {
+      matchBaseBranches: ['/^[0-9]+\\.[0-9]+\\.[0-9]+$/'],
+      minimumReleaseAge: '7 days',
+    },
   ],
 }

.github/workflows/audit.yaml

@@ -46,8 +46,3 @@ jobs:
         uses: andstor/file-existence-action@v3
         with:
           files: ci/dpkg-versions.yaml
-      - name: Update dpkg packages versions
-        run: ~/.venv/bin/c2cciutils-docker-versions-update --branch=${{ matrix.branch }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GOPASS_CI_GITHUB_TOKEN }}
-        if: steps.dpkg-versions.outputs.files_exists == 'true'

.github/workflows/pull-request-automation.yaml

@@ -5,14 +5,10 @@ on:
     types:
       - opened
       - reopened
-      - closed
-  pull_request_target:
-    types:
-      - closed
 
 jobs:
   auto-merge:
-    name: Auto reviews, merge and close pull requests
+    name: Auto reviews pull requests from bots
     runs-on: ubuntu-22.04
     timeout-minutes: 5
 
@@ -38,11 +34,9 @@ jobs:
             })
         if: |-
           startsWith(github.head_ref, 'ghci/audit/')
-          && (github.event.pull_request.user.login == 'ghci-test[bot]'
-            || github.event.pull_request.user.login == 'ghci-int[bot]'
-            || github.event.pull_request.user.login == 'ghci[bot]')
-          && (github.event.action == 'opened'
-            || github.event.action == 'reopened')
+          && (github.event.pull_request.user.login == 'geo-ghci-test[bot]'
+            || github.event.pull_request.user.login == 'geo-ghci-int[bot]'
+            || github.event.pull_request.user.login == 'geo-ghci[bot]')
       - name: Auto reviews Renovate updates
         uses: actions/github-script@v7
         with:
@@ -55,63 +49,3 @@ jobs:
             })
         if: |-
           github.event.pull_request.user.login == 'renovate[bot]'
-          && (github.event.action == 'opened'
-            || github.event.action == 'reopened')
-      - name: Auto review and merge dpkg updates
-        uses: actions/github-script@v7
-        with:
-          script: |-
-            github.rest.pulls.createReview({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              pull_number: context.payload.pull_request.number,
-              event: 'APPROVE',
-            });
-            github.graphql(`
-              mutation {
-                enablePullRequestAutoMerge(input: {
-                  pullRequestId: "${context.payload.pull_request.node_id}",
-                  mergeMethod: SQUASH,
-                }) {
-                  pullRequest {
-                    autoMergeRequest {
-                      enabledAt
-                    }
-                  }
-                }
-              }
-            `)
-        if: |-
-          github.event.pull_request.user.login == 'c2c-bot-gis-ci-2'
-          && startsWith(github.head_ref, 'dpkg-update/')
-          && (github.event.action == 'opened'
-            || github.event.action == 'reopened')
-      - name: Auto review and merge snyk auto fix
-        uses: actions/github-script@v7
-        with:
-          script: |-
-            github.rest.pulls.createReview({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              pull_number: context.payload.pull_request.number,
-              event: 'APPROVE',
-            });
-            github.graphql(`
-              mutation {
-                enablePullRequestAutoMerge(input: {
-                  pullRequestId: "${context.payload.pull_request.node_id}",
-                  mergeMethod: SQUASH,
-                }) {
-                  pullRequest {
-                    autoMergeRequest {
-                      enabledAt
-                    }
-                  }
-                }
-              }
-            `)
-        if: |-
-          github.event.pull_request.user.login == 'c2c-bot-gis-ci-2'
-          && startsWith(github.head_ref, 'snyk-fix/')
-          && (github.event.action == 'opened'
-            || github.event.action == 'reopened')

.pre-commit-config.yaml

@@ -90,11 +90,7 @@ repos:
     hooks:
       - id: jsonschema-validator
         files: ^ci/config\.yaml$
-ci:
-  autoupdate_schedule: quarterly
-  skip:
-    - copyright
-    - poetry-check
-    - poetry-lock
-    - ripsecrets
-    - jsonschema-validator
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 37.428.1
+    hooks:
+      - id: renovate-config-validator

ci/config.yaml

@@ -1,4 +1,5 @@
 # yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/c2cciutils/1.6.22/c2cciutils/schema.json
+
 publish:
   pypi:
     packages: []