From e1f3f3b5b5a838547c431c4fa0e0758a5dd749f7 Mon Sep 17 00:00:00 2001 From: Tobias Stenzel Date: Wed, 15 Feb 2023 20:33:23 +0100 Subject: [PATCH 01/13] gitlab: make Git package configurable There have been multiple Git CVE that affected Gitlab. It's helpful for quick Git updates to make the Git package used by Gitlab/Gitaly configurable because overriding the nixpkgs git package causes mass package rebuilds. --- nixos/modules/services/misc/gitlab.nix | 24 ++++++++++++++++-------- 1 file changed, 16 insertions(+), 8 deletions(-) diff --git a/nixos/modules/services/misc/gitlab.nix b/nixos/modules/services/misc/gitlab.nix index d5aaa4fe3b033..ef17f667512b3 100644 --- a/nixos/modules/services/misc/gitlab.nix +++ b/nixos/modules/services/misc/gitlab.nix @@ -57,7 +57,7 @@ let prometheus_listen_addr = "localhost:9236" [git] - bin_path = "${gitPackage}/bin/git" + bin_path = "${cfg.packages.git}/bin/git" [gitlab-shell] dir = "${cfg.packages.gitlab-shell}" @@ -193,7 +193,7 @@ let runtimeDeps = with pkgs; [ nodejs gzip - gitPackage + cfg.packages.git gnutar postgresqlPackage coreutils @@ -272,6 +272,14 @@ in { ''; }; + packages.git = mkOption { + type = types.package; + default = gitPackage; + defaultText = literalExpression "Git 2.41 for Gitlab 16.3 on NixOS 23.05, otherwise just pkgs.git"; + description = lib.mdDoc "Reference to the git package"; + example = literalExpression "pkgs.git_2_41"; + }; + packages.gitlab = mkOption { type = types.package; default = pkgs.gitlab; @@ -1144,7 +1152,7 @@ in { } ]; - environment.systemPackages = [ gitlab-rake gitlab-rails cfg.packages.gitlab-shell ]; + environment.systemPackages = [ cfg.packages.git gitlab-rake gitlab-rails cfg.packages.gitlab-shell ]; systemd.targets.gitlab = { description = "Common target for all GitLab services."; @@ -1318,7 +1326,7 @@ in { jq openssl replace-secret - gitPackage + cfg.packages.git ]; serviceConfig = { Type = "oneshot"; @@ -1473,7 +1481,7 @@ in { }); path = with pkgs; [ postgresqlPackage - gitPackage + cfg.packages.git ruby openssh nodejs @@ -1503,7 +1511,7 @@ in { partOf = [ "gitlab.target" ]; path = with pkgs; [ openssh - gitPackage + cfg.packages.git gzip bzip2 ]; @@ -1586,7 +1594,7 @@ in { path = with pkgs; [ remarshal exiftool - gitPackage + cfg.packages.git gnutar gzip openssh @@ -1659,7 +1667,7 @@ in { environment = gitlabEnv; path = with pkgs; [ postgresqlPackage - gitPackage + cfg.packages.git openssh nodejs procps From 0f104fbf8091c07ca904e8683cdc7df49e6df895 Mon Sep 17 00:00:00 2001 From: Tobias Stenzel Date: Wed, 22 Feb 2023 15:48:44 +0100 Subject: [PATCH 02/13] pam_tty_audit: fix missing newline after config --- nixos/modules/security/pam.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix index 4172bc6fbe1e7..6150efcd55365 100644 --- a/nixos/modules/security/pam.nix +++ b/nixos/modules/security/pam.nix @@ -689,7 +689,7 @@ let ] ++ optional cfg.ttyAudit.openOnly "open_only" ++ optional (cfg.ttyAudit.enablePattern != null) "enable=${cfg.ttyAudit.enablePattern}" ++ optional (cfg.ttyAudit.disablePattern != null) "disable=${cfg.ttyAudit.disablePattern}" - )) + + ) + "\n") + optionalString config.services.homed.enable '' session required ${config.systemd.package}/lib/security/pam_systemd_home.so '' + From dd1440b39557a1d7e02b4ec6e3629980f0cb2bdf Mon Sep 17 00:00:00 2001 From: Tobias Stenzel Date: Sun, 9 Apr 2023 01:23:48 +0200 Subject: [PATCH 03/13] pyslurm: 22.5.1 -> 23.2.0 --- pkgs/development/python-modules/pyslurm/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/pyslurm/default.nix b/pkgs/development/python-modules/pyslurm/default.nix index 97133b20eee89..5649bb460ece5 100644 --- a/pkgs/development/python-modules/pyslurm/default.nix +++ b/pkgs/development/python-modules/pyslurm/default.nix @@ -8,7 +8,7 @@ buildPythonPackage rec { pname = "pyslurm"; - version = "22.5.1"; + version = "23.2.0"; format = "setuptools"; disabled = pythonOlder "3.6"; @@ -17,7 +17,7 @@ buildPythonPackage rec { repo = "pyslurm"; owner = "PySlurm"; rev = "refs/tags/v${version}"; - hash = "sha256-sPZELCxe2e7/gUmRxvP2aOwqsbaR/x+0grHwuDdx0Dg="; + hash = "sha256-HIidm53pV8A7pwrl6k6/B3GpzXaIxKQiB3L4s7/dqHY="; }; buildInputs = [ cython slurm ]; From f7661da3bf5a3f690fe2ce2a825d1db76ab545ec Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sat, 3 Jun 2023 22:15:45 +0200 Subject: [PATCH 04/13] python311Packages.jupyterhub: 1.5.0 -> 4.0.0 Changelog: https://github.com/jupyterhub/jupyterhub/blob/4.0.0/docs/source/changelog.md --- .../python-modules/jupyterhub/default.nix | 66 ++++++++++++++----- 1 file changed, 48 insertions(+), 18 deletions(-) diff --git a/pkgs/development/python-modules/jupyterhub/default.nix b/pkgs/development/python-modules/jupyterhub/default.nix index 9dea973b042fe..64fc00dd0144b 100644 --- a/pkgs/development/python-modules/jupyterhub/default.nix +++ b/pkgs/development/python-modules/jupyterhub/default.nix @@ -1,30 +1,32 @@ { lib , stdenv -, buildPythonPackage -, pythonOlder -, fetchPypi -, fetchzip , alembic , async_generator +, beautifulsoup4 +, buildPythonPackage , certipy -, python-dateutil +, cryptography , entrypoints +, fetchPypi +, fetchzip +, importlib-metadata , jinja2 , jupyter-telemetry +, nodePackages +, notebook , oauthlib , pamela , prometheus-client +, pytest-asyncio +, pytestCheckHook +, python-dateutil +, pythonOlder , requests +, requests-mock +, selenium , sqlalchemy , tornado , traitlets -, nodePackages -, beautifulsoup4 -, cryptography -, notebook -, pytest-asyncio -, pytestCheckHook -, requests-mock , virtualenv }: @@ -61,12 +63,14 @@ in buildPythonPackage rec { pname = "jupyterhub"; - version = "1.5.0"; - disabled = pythonOlder "3.6"; + version = "4.0.0"; + format = "setuptools"; + + disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-3GGPZXwjukYoDjYlflCTGAZnS6Dp5kmK+wke/GIm1p0="; + hash = "sha256-LKspluSafStwwLtYCpkuRCBZSD4K8YrwYaKayCsUqGc="; }; # Most of this only applies when building from source (e.g. js/css assets are @@ -111,7 +115,6 @@ buildPythonPackage rec { ''; propagatedBuildInputs = [ - # https://github.com/jupyterhub/jupyterhub/blob/master/requirements.txt alembic async_generator certipy @@ -123,9 +126,12 @@ buildPythonPackage rec { pamela prometheus-client requests + selenium sqlalchemy tornado traitlets + ] ++ lib.optionals (pythonOlder "3.10") [ + importlib-metadata ]; preCheck = '' @@ -134,7 +140,6 @@ buildPythonPackage rec { ''; nativeCheckInputs = [ - # https://github.com/jupyterhub/jupyterhub/blob/master/dev-requirements.txt beautifulsoup4 cryptography notebook @@ -151,14 +156,39 @@ buildPythonPackage rec { "test_external_service" # attempts to do ssl connection "test_connection_notebook_wrong_certs" + # AttributeError: 'coroutine' object... + "test_valid_events" + "test_invalid_events" + "test_user_group_roles" + ]; + + disabledTestPaths = [ + # Not testing with a running instance + # AttributeError: 'coroutine' object has no attribute 'db' + "docs/test_docs.py" + "jupyterhub/tests/test_orm.py" + "jupyterhub/tests/test_api.py" + "jupyterhub/tests/test_auth.py" + "jupyterhub/tests/test_auth_expiry.py" + "jupyterhub/tests/test_metrics.py" + "jupyterhub/tests/test_named_servers.py" + "jupyterhub/tests/selenium/test_browser.py" + "jupyterhub/tests/test_user.py" + "jupyterhub/tests/test_singleuser.py" + "jupyterhub/tests/test_spawner.py" + "jupyterhub/tests/test_services_auth.py" + "jupyterhub/tests/test_scopes.py" + "jupyterhub/tests/test_proxy.py" + "jupyterhub/tests/test_pages.py" ]; meta = with lib; { - broken = lib.versionAtLeast sqlalchemy.version "2.0"; description = "Serves multiple Jupyter notebook instances"; homepage = "https://jupyter.org/"; changelog = "https://github.com/jupyterhub/jupyterhub/blob/${version}/docs/source/changelog.md"; license = licenses.bsd3; maintainers = with maintainers; [ ixxie cstrahan ]; + # darwin: E OSError: dlopen(/nix/store/43zml0mlr17r5jsagxr00xxx91hz9lky-openpam-20170430/lib/libpam.so, 6): image not found + broken = (stdenv.isLinux && stdenv.isAarch64) || stdenv.isDarwin; }; } From 772dad5ebe62e2405cd1727e953ca407cd8fda59 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 25 Jun 2023 23:10:59 +0200 Subject: [PATCH 05/13] python311Packages.jupyterhub: 4.0.0 -> 4.0.1 Changelog: https://github.com/jupyterhub/jupyterhub/blob/4.0.1/docs/source/reference/changelog.md --- .../python-modules/jupyterhub/default.nix | 32 ++++++++++++------- 1 file changed, 21 insertions(+), 11 deletions(-) diff --git a/pkgs/development/python-modules/jupyterhub/default.nix b/pkgs/development/python-modules/jupyterhub/default.nix index 64fc00dd0144b..9d53738acf8cd 100644 --- a/pkgs/development/python-modules/jupyterhub/default.nix +++ b/pkgs/development/python-modules/jupyterhub/default.nix @@ -11,11 +11,16 @@ , fetchzip , importlib-metadata , jinja2 +, jsonschema , jupyter-telemetry +, jupyterlab +, mock +, nbclassic , nodePackages , notebook , oauthlib , pamela +, playwright , prometheus-client , pytest-asyncio , pytestCheckHook @@ -63,14 +68,14 @@ in buildPythonPackage rec { pname = "jupyterhub"; - version = "4.0.0"; + version = "4.0.1"; format = "setuptools"; disabled = pythonOlder "3.7"; src = fetchPypi { inherit pname version; - hash = "sha256-LKspluSafStwwLtYCpkuRCBZSD4K8YrwYaKayCsUqGc="; + hash = "sha256-jig/9Z5cQBZxIHfSVJ7XSs2RWjKDb+ACGGeKh4G9ft4="; }; # Most of this only applies when building from source (e.g. js/css assets are @@ -143,6 +148,11 @@ buildPythonPackage rec { beautifulsoup4 cryptography notebook + jsonschema + nbclassic + mock + jupyterlab + playwright pytest-asyncio pytestCheckHook requests-mock @@ -166,26 +176,26 @@ buildPythonPackage rec { # Not testing with a running instance # AttributeError: 'coroutine' object has no attribute 'db' "docs/test_docs.py" - "jupyterhub/tests/test_orm.py" + "jupyterhub/tests/browser/test_browser.py" "jupyterhub/tests/test_api.py" - "jupyterhub/tests/test_auth.py" "jupyterhub/tests/test_auth_expiry.py" + "jupyterhub/tests/test_auth.py" "jupyterhub/tests/test_metrics.py" "jupyterhub/tests/test_named_servers.py" - "jupyterhub/tests/selenium/test_browser.py" - "jupyterhub/tests/test_user.py" + "jupyterhub/tests/test_orm.py" + "jupyterhub/tests/test_pages.py" + "jupyterhub/tests/test_proxy.py" + "jupyterhub/tests/test_scopes.py" + "jupyterhub/tests/test_services_auth.py" "jupyterhub/tests/test_singleuser.py" "jupyterhub/tests/test_spawner.py" - "jupyterhub/tests/test_services_auth.py" - "jupyterhub/tests/test_scopes.py" - "jupyterhub/tests/test_proxy.py" - "jupyterhub/tests/test_pages.py" + "jupyterhub/tests/test_user.py" ]; meta = with lib; { description = "Serves multiple Jupyter notebook instances"; homepage = "https://jupyter.org/"; - changelog = "https://github.com/jupyterhub/jupyterhub/blob/${version}/docs/source/changelog.md"; + changelog = "https://github.com/jupyterhub/jupyterhub/blob/${version}/docs/source/reference/changelog.md"; license = licenses.bsd3; maintainers = with maintainers; [ ixxie cstrahan ]; # darwin: E OSError: dlopen(/nix/store/43zml0mlr17r5jsagxr00xxx91hz9lky-openpam-20170430/lib/libpam.so, 6): image not found From 1099e3004ef95a845a2dac5a54a223b4aed5435c Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 25 Jun 2023 23:39:14 +0200 Subject: [PATCH 06/13] python311Packages.batchspawner: add missing input --- pkgs/development/python-modules/batchspawner/default.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/development/python-modules/batchspawner/default.nix b/pkgs/development/python-modules/batchspawner/default.nix index 09023536a94b4..de3077e5a34e2 100644 --- a/pkgs/development/python-modules/batchspawner/default.nix +++ b/pkgs/development/python-modules/batchspawner/default.nix @@ -2,6 +2,7 @@ , buildPythonPackage , fetchFromGitHub , jupyterhub +, packaging , pythonOlder }: @@ -21,6 +22,7 @@ buildPythonPackage rec { propagatedBuildInputs = [ jupyterhub + packaging ]; # Tests require a job scheduler e.g. slurm, pbs, etc. From 9540b6cb11117fbf806b04667850eae80e8c181a Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Mon, 26 Jun 2023 07:53:15 +0200 Subject: [PATCH 07/13] python311Packages.jupyterhub-systemdspawner: 0.11 -> 1.0.1 Diff: https://github.com/jupyterhub/systemdspawner/compare/refs/tags/v0.11...v1.0.1 Changelog: https://github.com/jupyterhub/systemdspawner/blob/v1.0.1/CHANGELOG.md --- .../jupyterhub-systemdspawner/default.nix | 35 ++++++++++++------- 1 file changed, 23 insertions(+), 12 deletions(-) diff --git a/pkgs/development/python-modules/jupyterhub-systemdspawner/default.nix b/pkgs/development/python-modules/jupyterhub-systemdspawner/default.nix index 7aeaa6cdb2370..1d5cc192032e9 100644 --- a/pkgs/development/python-modules/jupyterhub-systemdspawner/default.nix +++ b/pkgs/development/python-modules/jupyterhub-systemdspawner/default.nix @@ -1,29 +1,26 @@ { lib +, bash , buildPythonPackage , fetchFromGitHub , jupyterhub +, pythonOlder , tornado -, bash }: buildPythonPackage rec { pname = "jupyterhub-systemdspawner"; - version = "0.15"; + version = "1.0.1"; + format = "setuptools"; + + disabled = pythonOlder "3.8"; src = fetchFromGitHub { owner = "jupyterhub"; repo = "systemdspawner"; - rev = "v${version}"; - hash = "sha256-EUCA+CKCeYr+cLVrqTqe3Q32JkbqeALL6tfOnlVHk8Q="; + rev = "refs/tags/v${version}"; + hash = "sha256-2Pxswa472umovHBUVTIX1l+Glj6bzzgBLsu+p4IA6jA="; }; - propagatedBuildInputs = [ - jupyterhub - tornado - ]; - - buildInputs = [ bash ]; - postPatch = '' substituteInPlace systemdspawner/systemd.py \ --replace "/bin/bash" "${bash}/bin/bash" @@ -32,7 +29,16 @@ buildPythonPackage rec { --replace "/bin/bash" "${bash}/bin/bash" ''; - # no tests + buildInputs = [ + bash + ]; + + propagatedBuildInputs = [ + jupyterhub + tornado + ]; + + # Module has no tests doCheck = false; postInstall = '' @@ -41,9 +47,14 @@ buildPythonPackage rec { patchShebangs $out/bin ''; + pythonImportsCheck = [ + "systemdspawner" + ]; + meta = with lib; { description = "JupyterHub Spawner using systemd for resource isolation"; homepage = "https://github.com/jupyterhub/systemdspawner"; + changelog = "https://github.com/jupyterhub/systemdspawner/blob/v${version}/CHANGELOG.md"; license = licenses.bsd3; maintainers = with maintainers; [ costrouc ]; }; From 42590b9395fd726b04bf42ca07e6d5845e5e00bd Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Mon, 26 Jun 2023 07:54:12 +0200 Subject: [PATCH 08/13] python311Packages.jupyterhub: add packing --- pkgs/development/python-modules/jupyterhub/default.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkgs/development/python-modules/jupyterhub/default.nix b/pkgs/development/python-modules/jupyterhub/default.nix index 9d53738acf8cd..f20e35611f0c3 100644 --- a/pkgs/development/python-modules/jupyterhub/default.nix +++ b/pkgs/development/python-modules/jupyterhub/default.nix @@ -19,6 +19,7 @@ , nodePackages , notebook , oauthlib +, packaging , pamela , playwright , prometheus-client @@ -128,6 +129,7 @@ buildPythonPackage rec { jinja2 jupyter-telemetry oauthlib + packaging pamela prometheus-client requests From d2f4535a3bf37cdea333f74354494e42532f94c8 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 13 Aug 2023 22:12:58 +0200 Subject: [PATCH 09/13] python311Packages.batchspawner: add changelog to meta --- pkgs/development/python-modules/batchspawner/default.nix | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/batchspawner/default.nix b/pkgs/development/python-modules/batchspawner/default.nix index de3077e5a34e2..f2e8acfe7a0e3 100644 --- a/pkgs/development/python-modules/batchspawner/default.nix +++ b/pkgs/development/python-modules/batchspawner/default.nix @@ -34,8 +34,9 @@ buildPythonPackage rec { meta = with lib; { description = "A spawner for Jupyterhub to spawn notebooks using batch resource managers"; - homepage = "https://jupyter.org"; + homepage = "https://github.com/jupyterhub/batchspawner"; + changelog = "https://github.com/jupyterhub/batchspawner/blob/v${version}/CHANGELOG.md"; license = licenses.bsd3; - maintainers = [ maintainers.costrouc ]; + maintainers = with maintainers; [ ]; }; } From 8477bb76b461b04d5858fb01f4980f0ae63e6ace Mon Sep 17 00:00:00 2001 From: Tobias Stenzel Date: Mon, 28 Aug 2023 23:04:42 +0200 Subject: [PATCH 10/13] jupyterhub: add jupyerlab to build inputs to fix server startup error --- pkgs/development/python-modules/jupyterhub/default.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/pkgs/development/python-modules/jupyterhub/default.nix b/pkgs/development/python-modules/jupyterhub/default.nix index f20e35611f0c3..782c9379e05b0 100644 --- a/pkgs/development/python-modules/jupyterhub/default.nix +++ b/pkgs/development/python-modules/jupyterhub/default.nix @@ -128,6 +128,7 @@ buildPythonPackage rec { entrypoints jinja2 jupyter-telemetry + jupyterlab oauthlib packaging pamela From 163595bee97c276886ed76832476feac15412926 Mon Sep 17 00:00:00 2001 From: Tobias Stenzel Date: Thu, 5 Oct 2023 16:10:39 +0200 Subject: [PATCH 11/13] gitlab: remove DB migration warning This is a bit annoying as it still appears after doing the upgrade. We didn't experience the problem on any Gitlab instance, yet. --- nixos/modules/services/misc/gitlab.nix | 5 ----- 1 file changed, 5 deletions(-) diff --git a/nixos/modules/services/misc/gitlab.nix b/nixos/modules/services/misc/gitlab.nix index ef17f667512b3..459e9d4a2264f 100644 --- a/nixos/modules/services/misc/gitlab.nix +++ b/nixos/modules/services/misc/gitlab.nix @@ -1110,11 +1110,6 @@ in { ''Support for container registries other than gitlab-container-registry has ended since GitLab 16.0.0 and is scheduled for removal in a future release. Please back up your data and migrate to the gitlab-container-registry package.'' ) - (mkIf - (versionAtLeast (getVersion cfg.packages.gitlab) "16.2.0" && versionOlder (getVersion cfg.packages.gitlab) "16.5.0") - ''GitLab instances created or updated between versions [15.11.0, 15.11.2] have an incorrect database schema. - Check the upstream documentation for a workaround: https://docs.gitlab.com/ee/update/versions/gitlab_16_changes.html#undefined-column-error-upgrading-to-162-or-later'' - ) ]; assertions = [ From 0943e993141eff793076e1b51757a1058d1d4eb8 Mon Sep 17 00:00:00 2001 From: Maximilian Bosch Date: Thu, 2 Nov 2023 11:31:49 +0100 Subject: [PATCH 12/13] linux_6_1: 6.1.60 -> 6.1.61 (cherry picked from commit a123453fd3cc17894a8964c4c978bebea601a203) --- pkgs/os-specific/linux/kernel/kernels-org.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index ab2775ab922d7..1eaff71793499 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -12,8 +12,8 @@ "hash": "sha256:0zgj1z97jyx7wf12zrnlcp0mj4cl43ais9qsy6dh1jwylf2fq9ln" }, "6.1": { - "version": "6.1.60", - "hash": "sha256:02pvymr1dgd36mp7yikxqqv0sfrpwi1grnvxvx6jbbx6wmx0wljq" + "version": "6.1.61", + "hash": "sha256:1kk4d7ph6pvgdrdmaklg15wf58nw9n7yqgkag7jdvqinzh99sb5d" }, "5.15": { "version": "5.15.137", From 40de84c893cf203b7669d0d4240e31db2046c000 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Nov 2023 03:04:59 +0000 Subject: [PATCH 13/13] build(deps): bump korthout/backport-action from 1.2.0 to 2.1.1 Bumps [korthout/backport-action](https://github.com/korthout/backport-action) from 1.2.0 to 2.1.1. - [Release notes](https://github.com/korthout/backport-action/releases) - [Commits](https://github.com/korthout/backport-action/compare/v1.2.0...v2.1.1) --- updated-dependencies: - dependency-name: korthout/backport-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/backport.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index 60ceb304ee8a8..74906aa4410a8 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -24,7 +24,7 @@ jobs: with: ref: ${{ github.event.pull_request.head.sha }} - name: Create backport PRs - uses: korthout/backport-action@v1.2.0 + uses: korthout/backport-action@v2.1.1 with: # Config README: https://github.com/korthout/backport-action#backport-action copy_labels_pattern: 'severity:\ssecurity'