Files
oxc-project__oxc/.github/workflows/monitor-oxc.yml
renovate[bot] 9688d38dfa chore(deps): update github actions (#26364)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[benc-uk/workflow-dispatch](https://redirect.github.com/benc-uk/workflow-dispatch)
| action | patch | `v1.3.2` → `v1.3.3` | |
| [mlugg/setup-zig](https://redirect.github.com/mlugg/setup-zig) |
action | minor | `v2` → `v2.2.1` | |
|
[semgrep/semgrep](https://redirect.github.com/semgrep/semgrep-proprietary)
| container | minor | `1.175.0` → `1.176.0` | `1.176.1` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.87.0` → `v2.87.4` | `v2.87.6` (+1) |

---

### Release Notes

<details>
<summary>benc-uk/workflow-dispatch (benc-uk/workflow-dispatch)</summary>

###
[`v1.3.3`](https://redirect.github.com/benc-uk/workflow-dispatch/releases/tag/v1.3.3)

[Compare
Source](https://redirect.github.com/benc-uk/workflow-dispatch/compare/v1.3.2...v1.3.3)

##### What's changed since v1.3.2

##### Fixed

- Continue polling while a dispatched workflow run is in the `pending`
state, preventing premature completion warnings and a `null` conclusion
for workflows using concurrency groups or waiting for a runner.
([#&#8203;97](https://redirect.github.com/benc-uk/workflow-dispatch/issues/97),
fixes
[#&#8203;106](https://redirect.github.com/benc-uk/workflow-dispatch/issues/106))

##### Notes

- No breaking changes.
- The floating `v1` and `v1.3` tags have been moved to point at
`v1.3.3`.

**Full changelog**:
<https://github.com/benc-uk/workflow-dispatch/compare/v1.3.2...v1.3.3>

</details>

<details>
<summary>mlugg/setup-zig (mlugg/setup-zig)</summary>

###
[`v2.2.1`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.2.1)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.2.0...v2.2.1)

- Print which version of Zig was installed
- Add a little more log output (helps debug cache issues)

> \[!NOTE]
> The setup-zig project is now hosted on
[Codeberg](https://codeberg.org/mlugg/setup-zig), and this GitHub
repository exists as a mirror solely to work around the vendor lock-in
mechanisms employed by GitHub Actions. While there are **no plans** to
discontinue GitHub Actions support, I would nonetheless encourage users
to consider upgrading to Forgejo Actions on a non-profit forge like
Codeberg to avoid being affected by GitHub's profit-driven behavior
(such as attempting to [charge users by the minute for using their own
hardware](https://resources.github.com/actions/2026-pricing-changes-for-github-actions/)).

###
[`v2.2.0`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.2.0)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.1.0...v2.2.0)

- Update dependencies
- Replace libsodium dependency with node:crypto, improving target
support
- Use hardcoded mirror list when ziglang.org is inaccessible
- Fix incorrect tarball names when fetching certain versions

> \[!NOTE]
> The setup-zig project is now hosted on
[Codeberg](https://codeberg.org/mlugg/setup-zig), and this GitHub
repository exists as a mirror solely to work around the vendor lock-in
mechanisms employed by GitHub Actions. While there are **no plans** to
discontinue GitHub Actions support, I would nonetheless encourage users
to consider upgrading to Forgejo Actions on a non-profit forge like
Codeberg to avoid being affected by GitHub's profit-driven behavior
(such as attempting to [charge users by the minute for using their own
hardware](https://resources.github.com/actions/2026-pricing-changes-for-github-actions/)).

###
[`v2.1.0`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.1.0)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.5...v2.1.0)

- Support Forgejo Actions
- Support recent Zig versions on ARM
- Progress towards better OS support
- Redirect Zig caches to working directory to avoid sharing the cache on
self-hosted runners

###
[`v2.0.5`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.5)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.4...v2.0.5)

- Fix exception identifying Zig cache directory on recent Zig builds
([#&#8203;49](https://redirect.github.com/mlugg/setup-zig/issues/49))

###
[`v2.0.4`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.4)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.3...v2.0.4)

- Fix canonical `ziglang.org` download URL
- Use more descriptive `?source` query parameter value

###
[`v2.0.3`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.3)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.2...v2.0.3)

This release switches from a hardcoded `mirrors.json` list, to fetching
the list of mirrors [now
available](https://ziglang.org/download/community-mirrors/) from the Zig
website. There are no user-facing changes.

###
[`v2.0.2`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.2)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2.0.1...v2.0.2)

- Update dependencies
- Remove some mirrors experiencing issues
- Don't use tool cache on GitHub-hosted runners by default
([#&#8203;34](https://redirect.github.com/mlugg/setup-zig/issues/34))
- Improve logging, in particular to help debug potential issues

###
[`v2.0.1`](https://redirect.github.com/mlugg/setup-zig/releases/tag/v2.0.1)

[Compare
Source](https://redirect.github.com/mlugg/setup-zig/compare/v2...v2.0.1)

The recent Zig 0.14.1 release flipped the "arch" and "OS" fields in the
tarball name; for instance, `zig-x86_64-linux-0.14.1.tar.xz` instead of
`zig-linux-x86_64-0.14.1.tar.xz`. This brings the tarball names in line
with target triple syntax.

The change does *not* retroactively apply to old Zig tarballs.

So, this patch has only one fix:

- Add support for new Zig tarball name format as of Zig 0.14.1 /
0.15.0-dev.631+9a3540d61

> \[!NOTE]
>
> **I do not intend to update v1 to support the new tarball name
format.**
> `setup-zig` version 1 is considered deprecated. Please upgrade to
version 2.

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.87.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.4):
2.87.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.3...v2.87.4)

- Update `uv@latest` to 0.12.8.

- Update `protoc@latest` to 3.36.1.

- Update `coreutils@latest` to 0.11.0.

###
[`v2.87.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.3):
2.87.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.2...v2.87.3)

- Update `zizmor@latest` to 1.30.0.

- Update `ubi@latest` to 0.12.0.

- Update `protoc-gen-connect-openapi@latest` to 0.25.8.

- Update `mise@latest` to 2026.8.16.

- Update `kingfisher@latest` to 2.1.0.

- Update `dprint@latest` to 0.57.0.

###
[`v2.87.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.2):
2.87.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.1...v2.87.2)

- Update `typos@latest` to 1.50.0.

- Update `tombi@latest` to 1.5.0.

- Update `shfmt@latest` to 3.14.0.

###
[`v2.87.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.1):
2.87.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.0...v2.87.1)

- Update `uv@latest` to 0.12.7.

- Update `typos@latest` to 1.49.1.

- Update `syft@latest` to 1.51.1.

- Update `prek@latest` to 0.5.0.

- Update `d2@latest` to 0.8.2.

- Update `cargo-zigbuild@latest` to 0.23.3.

- Update `cargo-rdme@latest` to 2.2.2.

- Update `biome@latest` to 2.5.11.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-06 17:24:53 +00:00

158 lines
5.6 KiB
YAML

name: Monitor Oxc
on:
pull_request:
types: [labeled]
issue_comment:
types: [created]
permissions:
pull-requests: read
concurrency:
group: monitor-oxc-${{ github.event.pull_request.number || github.event.issue.number }}
cancel-in-progress: true
jobs:
trigger:
if: >
github.repository == 'oxc-project/oxc' &&
(
(
github.event_name == 'pull_request' &&
github.event.label.name == 'run-monitor-oxc' &&
github.event.pull_request.head.repo.full_name == github.repository
) ||
(
github.event_name == 'issue_comment' &&
github.event.issue.pull_request &&
github.event.comment.body == '/monitor-oxc run'
)
)
runs-on: ubuntu-latest
steps:
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
id: pr
with:
script: |
const fromComment = context.eventName === 'issue_comment';
let issueNumber;
let pr;
if (fromComment) {
const user = context.payload.sender.login;
const { data: permission } = await github.rest.repos.getCollaboratorPermissionLevel({
owner: context.repo.owner,
repo: context.repo.repo,
username: user,
});
if (!permission.user.permissions.triage) {
throw new Error(`${user} does not have permission to trigger Monitor Oxc`);
}
issueNumber = context.issue.number;
({ data: pr } = await github.rest.pulls.get({
owner: context.repo.owner,
repo: context.repo.repo,
pull_number: issueNumber,
}));
const commentCreatedAt = new Date(context.payload.comment.created_at);
const headRepoPushedAt = new Date(pr.head.repo.pushed_at);
if (headRepoPushedAt > commentCreatedAt) {
throw new Error('The PR was updated after the trigger command; review it and run the command again');
}
} else {
pr = context.payload.pull_request;
issueNumber = pr.number;
}
core.setOutput('issue-number', issueNumber);
core.setOutput('branch', pr.head.ref);
core.setOutput('head-sha', pr.head.sha);
- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
id: app-token
with:
client-id: ${{ secrets.APP_ID }}
private-key: ${{ secrets.APP_PRIVATE_KEY }}
owner: oxc-project
repositories: |
${{ github.event.repository.name }}
monitor-oxc
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
id: prepare
env:
BRANCH: ${{ steps.pr.outputs.branch }}
ISSUE_NUMBER: ${{ steps.pr.outputs.issue-number }}
with:
github-token: ${{ steps.app-token.outputs.token }}
script: |
const issueNumber = Number(process.env.ISSUE_NUMBER);
const branch = process.env.BRANCH;
const body = `Triggering Monitor Oxc for \`${branch}\`\nhttps://github.com/oxc-project/monitor-oxc/actions/workflows/ci.yml`;
const comments = await github.paginate(github.rest.issues.listComments, {
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: issueNumber,
per_page: 100,
});
const existing = comments.findLast((c) =>
c.user.login === 'oxc-guard[bot]' &&
c.body &&
(c.body.startsWith('Triggering Monitor Oxc') || c.body.startsWith('## [Monitor Oxc]'))
);
let commentId;
if (existing) {
await github.rest.issues.updateComment({
owner: context.repo.owner,
repo: context.repo.repo,
comment_id: existing.id,
body,
});
commentId = existing.id;
} else {
const { data: created } = await github.rest.issues.createComment({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: issueNumber,
body,
});
commentId = created.id;
}
core.setOutput('comment-id', commentId);
- uses: benc-uk/workflow-dispatch@d004979be141727c7a17c28f603e2facc40d0855 # v1.3.3
with:
repo: oxc-project/monitor-oxc
workflow: ci.yml
token: ${{ steps.app-token.outputs.token }}
ref: main
inputs: >-
{
"issue-number": "${{ steps.pr.outputs.issue-number }}",
"comment-id": "${{ steps.prepare.outputs.comment-id }}",
"ref": "${{ steps.pr.outputs.head-sha }}"
}
- if: github.event_name == 'pull_request'
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
ISSUE_NUMBER: ${{ steps.pr.outputs.issue-number }}
with:
github-token: ${{ steps.app-token.outputs.token }}
script: |
try {
await github.rest.issues.removeLabel({
owner: context.repo.owner,
repo: context.repo.repo,
issue_number: Number(process.env.ISSUE_NUMBER),
name: 'run-monitor-oxc',
});
} catch (error) {
if (error.status !== 404) throw error;
}