From patchwork Fri Sep 6 15:12:43 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Frank Lichtenheld X-Patchwork-Id: 3804 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:6bd4:b0:5b9:581e:f939 with SMTP id c20csp206997max; Fri, 6 Sep 2024 08:13:14 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCUwBfPBkRrvtOEaeGz5edVqWuMtoelDH3GRw4gzWBec50b7AtQ3rGyjJzYcl7t8jz/sc+GROh1jkHs=@openvpn.net X-Google-Smtp-Source: AGHT+IHy1cHzTSzGMa7GZPeI5srt3A8Uj4tIHcO6lBQubLu/Xs6vPP6Efn2Aw5ymYw1vj7T5aLuw X-Received: by 2002:a17:903:18a:b0:203:74fe:4ee0 with SMTP id d9443c01a7336-206f0623012mr31367485ad.53.1725635594650; Fri, 06 Sep 2024 08:13:14 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1725635594; cv=none; d=google.com; s=arc-20240605; b=JZEwb/E4rpBRzL9ICdQCUeH/uXmbP0QTJrSzNt0lrqvuu2HpgFNAQYE9234mSNn0qT Eyf0wXjmTZEMSOnYWIL7Vdq6bi12BTVXbA3FnPXuTWqIRwcDvgcc7TmDFYNKAHUkZD+H cp6NHXE0GP1OKu6b1ajSE59z2yqm1wQTTax2BCBSjDwJYVcOIWfe5QnsDLcS6g0/h+o8 e4aUJYZx6qfjKikPIZRF1ZUqaz3oXUASYRM6yxlYz+qhNcyK2g1XlQJGtz7gr8eAQr1y Xxj4p2zVLDTRp3hpEr2TDD2mJlXCEgfyt7p09UjqtmqQDq4Phfo3vyMEh2GEvvyyRESP tOpg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=errors-to:content-transfer-encoding:cc:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=r8rkDIJYX1rehZCGn8oSW6vxB7PE5DZJOWRFTkOVLh0=; fh=+RvhenvyyTB/gEYfixWFj8aUJD7Z9sWFjIuPmceqICU=; b=Ezrx6b77twOrlhAzoV0GDKCIyZ8J3hRLj7ai/NFKs46fgy9UbXa7FN/b2TffsHIPJ8 euDEy3JImRj+2o2nh/9JlgGgDmuyBLm354LntC0fHRQXKksw5VrgSPhOLmtcTHxL6qFm Tm1p2Lp4DaFV1ZBX5vFzshbSmCbDS71flv2KiW8Z1uO7PFUPWn3vl7OYoEBDUOmGydgB FiRjRl8Tz0fY43GJj2dZJP/fHq+2AxA6c0ooCt9prfPE8XbckPHAnqCmuK9XBsKKCUzh xH21Kc+PqV2fqI3S4XRNiAmE4YVgYf8AkW+rIfSWnfsjx5ayPC7FJsDNV4QIojqGRMCd kBbw==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=GYRdPQfY; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=JcUgaLdd; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=qowIbj9X; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id d9443c01a7336-206ae91365csi72573275ad.182.2024.09.06.08.13.14 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 06 Sep 2024 08:13:14 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=GYRdPQfY; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=JcUgaLdd; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=qowIbj9X; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1smads-00072z-Tk; Fri, 06 Sep 2024 15:12:56 +0000 Received: from [172.30.29.66] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1smadr-00072m-8Q for openvpn-devel@lists.sourceforge.net; Fri, 06 Sep 2024 15:12:55 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=vN0iynmwfNHT0OelZt8OmnAgSlB08DSStSQabTNW2c4=; b=GYRdPQfYS31sLs2+5bhVa7EYDz 0Jhv6z7hyAS/w5/XNrNfGbyelsF4eucHOWV58DU1SySkv6d3DJ8cj7yMLOjRmvU7VvOakA32PxiLK 7bWE10XipidWHX5vEH6Mii0Sg67tjBSBHYjE7ELCowDrqnBEchRxG8ttYGAuivWk8AKg=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=vN0iynmwfNHT0OelZt8OmnAgSlB08DSStSQabTNW2c4=; b=JcUgaLddfpJdfMlLUPXh0AQMpO Gj0RnFYbEM6v2qLl2kAIWZcacaZ7BHtV9znDmLvgEU27ughejWFo5wYQ22a14FMO9S9gVfw8aec6f PGFFlb4YSjE+wtg0Se+qcewX4PmOaQWalKB1svObaAA20xnsNI0oRYj40uSv+eY2J5/Q=; Received: from mout-p-103.mailbox.org ([80.241.56.161]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1smadp-0004Ab-9q for openvpn-devel@lists.sourceforge.net; Fri, 06 Sep 2024 15:12:55 +0000 Received: from smtp102.mailbox.org (smtp102.mailbox.org [IPv6:2001:67c:2050:b231:465::102]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-103.mailbox.org (Postfix) with ESMTPS id 4X0fqJ6zWVz9sp5; Fri, 6 Sep 2024 17:12:44 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lichtenheld.com; s=MBO0001; t=1725635565; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=vN0iynmwfNHT0OelZt8OmnAgSlB08DSStSQabTNW2c4=; b=qowIbj9Xow8Afd2/jV9a6uHsU/PwyZalRikvjTaGR8QXxRjkuFmTIbIQsR9bhOzaH+5TJA LG/IxT283QcAfJYgE83ZFxHu1WzY3Vno0l/3z9MsTR1xy5wh3DMy6xhQ8wUR3x5pH7R2qv I/0+A7TN/a1MJ5nUxFu0AGGQWGl01BlR5cJzr28QNwCGzRniPlXMAq+hqUTKqLUh9Gr5dx i9zmVIu/cw8RZlZY/nPSn8CHzaeZrt4htUU7xvKm9ZS0a5SslYLT1ZbJCBpayRvpKtnxqm XjbBqjUuGxxaOIrwq9x/5/NiLzqVBd6YzDxapcqZmlGZbOfKod/exWRF0g4CPA== From: Frank Lichtenheld To: openvpn-devel@lists.sourceforge.net Date: Fri, 6 Sep 2024 17:12:43 +0200 Message-Id: <20240906151243.69549-1-frank@lichtenheld.com> In-Reply-To: References: MIME-Version: 1.0 X-Rspamd-Queue-Id: 4X0fqJ6zWVz9sp5 X-Spam-Score: -0.9 (/) X-Spam-Report: Spam detection software, running on the system "util-spamd-2.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: OpenVPN Renovate Maintain GitHub actions and other version references in GHA. Switch some GHA references from branch versions to tag version so the pinning works correctly. Content analysis details: (-0.9 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [80.241.56.161 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1smadp-0004Ab-9q Subject: [Openvpn-devel] [PATCH v1] GHA: Configure Renovate X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Yuriy Darnobyt , OpenVPN Renovate Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1809460069199388570?= X-GMAIL-MSGID: =?utf-8?q?1809460069199388570?= From: OpenVPN Renovate Maintain GitHub actions and other version references in GHA. Switch some GHA references from branch versions to tag version so the pinning works correctly. Change-Id: I06253be7ed783e3bf30e7df1d6da8ca888016711 Signed-off-by: Frank Lichtenheld Acked-by: Yuriy Darnobyt --- This change was reviewed on Gerrit and approved by at least one developer. I request to merge it to master. Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/722 This mail reflects revision 1 of this Change. Acked-by according to Gerrit (reflected above): Yuriy Darnobyt diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 6e361d5..6207c95 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -52,13 +52,13 @@ uses: actions/checkout@v4 - name: Restore from cache and install vcpkg - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@v11.5 with: vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/mingw/vcpkg.json' - name: Run CMake with vcpkg.json manifest - uses: lukka/run-cmake@v10 + uses: lukka/run-cmake@v10.7 with: configurePreset: mingw-${{ matrix.arch }} buildPreset: mingw-${{ matrix.arch }} @@ -274,26 +274,26 @@ runs-on: windows-latest steps: - uses: actions/checkout@v4 - - uses: lukka/get-cmake@latest + - uses: lukka/get-cmake@v3.30.1 - name: Install rst2html run: python -m pip install --upgrade pip docutils - name: Restore artifacts, or setup vcpkg (do not install any package) - uses: lukka/run-vcpkg@v11 + uses: lukka/run-vcpkg@v11.5 with: vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/windows/vcpkg.json' - name: Run CMake with vcpkg.json manifest (NO TESTS) - uses: lukka/run-cmake@v10 + uses: lukka/run-cmake@v10.7 if: ${{ matrix.arch == 'arm64' }} with: configurePreset: win-${{ matrix.arch }}-release buildPreset: win-${{ matrix.arch }}-release - name: Run CMake with vcpkg.json manifest - uses: lukka/run-cmake@v10 + uses: lukka/run-cmake@v10.7 if: ${{ matrix.arch != 'arm64' }} with: configurePreset: win-${{ matrix.arch }}-release @@ -344,6 +344,7 @@ uses: actions/checkout@v4 with: path: libressl + # versioning=semver-coerced repository: libressl/portable ref: v3.8.3 - name: "libressl: autogen.sh" @@ -403,6 +404,7 @@ uses: actions/checkout@v4 with: path: mbedtls + # versioning=semver-coerced repository: Mbed-TLS/mbedtls ref: v3.5.2 - name: "mbedtls: make no_test" diff --git a/renovate.json b/renovate.json new file mode 100644 index 0000000..1e69955 --- /dev/null +++ b/renovate.json @@ -0,0 +1,40 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "packageRules": [ + { + "matchDepTypes": [ + "action" + ], + "groupName": "github actions", + "pinDigests": true, + "extends": [ + "schedule:monthly" + ] + }, + { + "matchDepNames": [ + "vcpkg" + ], + "extends": [ + "schedule:monthly" + ] + } + ], + "customManagers": [ + { + "customType": "regex", + "fileMatch": ["^\\.github/workflows/.+\\.ya?ml$"], + "matchStrings": ["vcpkgGitCommitId:\\s*(?.*?)\\n"], + "currentValueTemplate": "master", + "depNameTemplate": "vcpkg", + "packageNameTemplate": "https://github.com/microsoft/vcpkg", + "datasourceTemplate": "git-refs" + }, + { + "customType": "regex", + "fileMatch": ["^\\.github/workflows/.+\\.ya?ml$"], + "matchStrings": ["versioning=(?.*?)\\n\\s*repository:\\s*(?.*?)\\n\\s*ref:\\s*(?.*?)\\n"], + "datasourceTemplate": "github-tags" + } + ] +}