jyapayne/Sunshine
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ci(release): increase permission for job and bump actions (#3816)

Browse source
This commit is contained in:
ReenigneArcher 2025-04-25 21:01:37 -04:00 • committed by GitHub
commit c6f36474ba
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 11 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.github/workflows/CI.yml vendored
View file

@ -40,6 +40,8 @@ jobs:
release_generate_release_notes: ${{ steps.setup_release.outputs.release_generate_release_notes }} release_generate_release_notes: ${{ steps.setup_release.outputs.release_generate_release_notes }}
release_tag: ${{ steps.setup_release.outputs.release_tag }} release_tag: ${{ steps.setup_release.outputs.release_tag }}
release_version: ${{ steps.setup_release.outputs.release_version }} release_version: ${{ steps.setup_release.outputs.release_version }}
permissions:
contents: write # read does not work to check squash and merge details
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
@ -47,7 +49,7 @@ jobs:
- name: Setup Release - name: Setup Release
id: setup_release id: setup_release
uses: LizardByte/setup-release-action@v2025.102.14715 uses: LizardByte/setup-release-action@v2025.426.225
with: with:
github_token: ${{ secrets.GITHUB_TOKEN }} github_token: ${{ secrets.GITHUB_TOKEN }}
@ -249,7 +251,7 @@ jobs:
- name: Create/Update GitHub Release - name: Create/Update GitHub Release
if: needs.setup_release.outputs.publish_release == 'true' if: needs.setup_release.outputs.publish_release == 'true'
uses: LizardByte/create-release-action@v2025.102.13208 uses: LizardByte/create-release-action@v2025.426.1549
with: with:
allowUpdates: true allowUpdates: true
body: ${{ needs.setup_release.outputs.release_body }} body: ${{ needs.setup_release.outputs.release_body }}
@ -462,7 +464,7 @@ jobs:
- name: Create/Update GitHub Release - name: Create/Update GitHub Release
if: needs.setup_release.outputs.publish_release == 'true' if: needs.setup_release.outputs.publish_release == 'true'
uses: LizardByte/create-release-action@v2025.102.13208 uses: LizardByte/create-release-action@v2025.426.1549
with: with:
allowUpdates: true allowUpdates: true
body: ${{ needs.setup_release.outputs.release_body }} body: ${{ needs.setup_release.outputs.release_body }}
@ -663,7 +665,7 @@ jobs:
if: >- if: >-
matrix.release && matrix.release &&
needs.setup_release.outputs.publish_release == 'true' needs.setup_release.outputs.publish_release == 'true'
uses: LizardByte/create-release-action@v2025.102.13208 uses: LizardByte/create-release-action@v2025.426.1549
with: with:
allowUpdates: true allowUpdates: true
artifacts: '${{ github.workspace }}/homebrew/*' artifacts: '${{ github.workspace }}/homebrew/*'
@ -978,7 +980,7 @@ jobs:
- name: Create/Update GitHub Release - name: Create/Update GitHub Release
if: needs.setup_release.outputs.publish_release == 'true' if: needs.setup_release.outputs.publish_release == 'true'
uses: LizardByte/create-release-action@v2025.102.13208 uses: LizardByte/create-release-action@v2025.426.1549
with: with:
allowUpdates: true allowUpdates: true
body: ${{ needs.setup_release.outputs.release_body }} body: ${{ needs.setup_release.outputs.release_body }}

6
.github/workflows/ci-docker.yml vendored
View file

@ -114,6 +114,8 @@ jobs:
release_generate_release_notes: ${{ steps.setup_release.outputs.release_generate_release_notes }} release_generate_release_notes: ${{ steps.setup_release.outputs.release_generate_release_notes }}
release_tag: ${{ steps.setup_release.outputs.release_tag }} release_tag: ${{ steps.setup_release.outputs.release_tag }}
release_version: ${{ steps.setup_release.outputs.release_version }} release_version: ${{ steps.setup_release.outputs.release_version }}
permissions:
contents: write # read does not work to check squash and merge details
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
@ -121,7 +123,7 @@ jobs:
- name: Setup Release - name: Setup Release
id: setup_release id: setup_release
uses: LizardByte/setup-release-action@v2025.102.14715 uses: LizardByte/setup-release-action@v2025.426.225
with: with:
dotnet: ${{ needs.check_dockerfiles.outputs.dotnet }} dotnet: ${{ needs.check_dockerfiles.outputs.dotnet }}
github_token: ${{ secrets.GITHUB_TOKEN }} github_token: ${{ secrets.GITHUB_TOKEN }}
@ -354,7 +356,7 @@ jobs:
if: > if: >
needs.setup_release.outputs.publish_release == 'true' && needs.setup_release.outputs.publish_release == 'true' &&
steps.prepare.outputs.artifacts == 'true' steps.prepare.outputs.artifacts == 'true'
uses: LizardByte/create-release-action@v2025.102.13208 uses: LizardByte/create-release-action@v2025.426.1549
with: with:
allowUpdates: true allowUpdates: true
artifacts: "*artifacts/*" artifacts: "*artifacts/*"