mirror of
https://github.com/Cacti/spine.git
synced 2026-11-02 18:17:27 +09:00
Two pieces of CI plumbing, grouped so they are one review rather than two. **Rocky Linux 9 job.** EL is the primary deployment platform and nothing in CI covered it. The job as originally written could never have passed: `libtirpc-devel` is not in the Rocky 9 default repos, so `dnf install` aborted the whole transaction and every later step was skipped. Removed it — the build does not need it. Verified by running the full workflow body in a `rockylinux:9` container: install, configure, make and check all pass, 39 warnings. Image pinned by digest. `set -euo pipefail` added so it satisfies the workflow policy check in #541. Added a `pull_request` trigger with a `paths` filter so a change that breaks the EL9 build is caught on the PR, not on the following Saturday's cron. **Dependabot.** `github-actions` plus `docker` — the repo has `Dockerfile`, `Dockerfile.dev` and the snmpd fixture image, none of which were tracked. Was #548, folded in here. **CI hardening added** - `concurrency` with `cancel-in-progress` — a PR push previously ran the whole workflow twice and never cancelled stale runs. - `timeout-minutes: 20` on every job; a hung build otherwise holds a runner for six hours. - An ASan/UBSan job. Spine is a threaded network daemon and had no sanitizer coverage at all. - `make -j"$(nproc)"` in place of unbounded `make -j`. --------- Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
23 lines
700 B
YAML
23 lines
700 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: github-actions
|
|
directory: /
|
|
target-branch: develop
|
|
schedule: {interval: weekly, day: friday}
|
|
open-pull-requests-limit: 5
|
|
cooldown: {default-days: 7}
|
|
groups:
|
|
github-actions: {patterns: ["*"]}
|
|
labels: [dependencies, github-actions]
|
|
commit-message: {prefix: ci, include: scope}
|
|
- package-ecosystem: docker
|
|
directories: ["/", "/tests/snmpv3/snmpd"]
|
|
target-branch: develop
|
|
schedule: {interval: weekly, day: friday}
|
|
open-pull-requests-limit: 5
|
|
cooldown: {default-days: 7}
|
|
groups:
|
|
docker: {patterns: ["*"]}
|
|
labels: [dependencies, docker]
|
|
commit-message: {prefix: build, include: scope}
|