From fcec038c29fd0fb1fbfc48286d9b3170a0d9f82e Mon Sep 17 00:00:00 2001 From: Anshuman Date: Tue, 10 Mar 2026 20:27:05 +0530 Subject: [PATCH 1/4] Grant write permissions to dependency-graph job --- ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala b/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala index 877fa5f3..397c20bb 100644 --- a/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala +++ b/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala @@ -20,6 +20,8 @@ import org.typelevel.sbt.NoPublishGlobalPlugin.noPublishModulesIgnore import org.typelevel.sbt.gha.GenerativePlugin import org.typelevel.sbt.gha.GenerativePlugin.autoImport._ import org.typelevel.sbt.gha.GitHubActionsPlugin +import org.typelevel.sbt.gha.PermissionValue +import org.typelevel.sbt.gha.Permissions import org.typelevel.sbt.gha.WorkflowStep import sbt._ @@ -156,6 +158,9 @@ object TypelevelCiPlugin extends AutoPlugin { scalas = Nil, sbtStepPreamble = Nil, javas = List(githubWorkflowJavaVersions.value.head), + permissions = Some( + Permissions.Specify.defaultRestrictive + .withContents(PermissionValue.Write)), steps = githubWorkflowJobSetup.value.toList :+ WorkflowStep.DependencySubmission( None, From d9187a5402bed48c91a44b31468e321318454509 Mon Sep 17 00:00:00 2001 From: anshuman Date: Tue, 10 Mar 2026 21:34:19 +0530 Subject: [PATCH 2/4] resolve ci errors --- .github/workflows/ci.yml | 221 +++++++++++++++++++++------------------ 1 file changed, 117 insertions(+), 104 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 631d1088..983a3432 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,19 +1,19 @@ -# This file was automatically generated by sbt-github-actions using the -# githubWorkflowGenerate task. You should add and commit this file to -# your git repository. It goes without saying that you shouldn't edit -# this file by hand! Instead, if you wish to make changes, you should -# change your sbt build configuration to revise the workflow description -# to meet your needs, then regenerate this file. - -name: Continuous Integration - -on: - pull_request: - branches: ['**', '!update/**', '!pr/**'] - push: - branches: ['**', '!update/**', '!pr/**'] - tags: [v*] - +# This file was automatically generated by sbt-github-actions using the +# githubWorkflowGenerate task. You should add and commit this file to +# your git repository. It goes without saying that you shouldn't edit +# this file by hand! Instead, if you wish to make changes, you should +# change your sbt build configuration to revise the workflow description +# to meet your needs, then regenerate this file. + +name: Continuous Integration + +on: + pull_request: + branches: ['**', '!update/**', '!pr/**'] + push: + branches: ['**', '!update/**', '!pr/**'] + tags: [v*] + permissions: actions: write checks: write @@ -28,19 +28,19 @@ permissions: security-events: write statuses: write -env: +env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} -concurrency: - group: ${{ github.workflow }} @ ${{ github.ref }} +concurrency: + group: ${{ github.workflow }} @ ${{ github.ref }} cancel-in-progress: true -jobs: +jobs: build: - name: Test - strategy: - matrix: + name: Test + strategy: + matrix: os: [ubuntu-22.04, macos-latest, windows-2022] scala: [2.12] java: @@ -76,10 +76,10 @@ jobs: - java: semeru@17 os: windows-2022 - java: temurin@8 - os: macos-latest + os: macos-latest runs-on: ${{ matrix.os }} - timeout-minutes: 60 - steps: + timeout-minutes: 60 + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') shell: bash @@ -87,7 +87,7 @@ jobs: - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -97,7 +97,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -111,7 +111,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -125,7 +125,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -139,7 +139,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -153,7 +153,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -167,7 +167,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -181,7 +181,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -240,28 +240,28 @@ jobs: - name: Upload target directories if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') uses: actions/upload-artifact@v5 - with: + with: name: target-${{ matrix.os }}-${{ matrix.java }}-${{ matrix.scala }}-${{ matrix.project }} path: targets.tar publish: name: Publish Artifacts needs: [build, validate-steward] - if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') - strategy: - matrix: + if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@8] + java: [temurin@8] runs-on: ${{ matrix.os }} - timeout-minutes: 45 - steps: + timeout-minutes: 45 + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -271,7 +271,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -284,7 +284,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -297,7 +297,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -310,7 +310,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -323,7 +323,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -336,7 +336,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -349,7 +349,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -360,7 +360,7 @@ jobs: - name: Download target directories (2.12, sbt-typelevelJVM) uses: actions/download-artifact@v6 - with: + with: name: target-${{ matrix.os }}-${{ matrix.java }}-2.12-sbt-typelevelJVM - name: Inflate target directories (2.12, sbt-typelevelJVM) @@ -370,14 +370,14 @@ jobs: - name: Import signing key if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE == '' - env: + env: PGP_SECRET: ${{ secrets.PGP_SECRET }} PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }} run: echo $PGP_SECRET | base64 -d -i - | gpg --import - name: Import signing key and strip passphrase if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE != '' - env: + env: PGP_SECRET: ${{ secrets.PGP_SECRET }} PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }} run: | @@ -386,7 +386,7 @@ jobs: (echo "$PGP_PASSPHRASE"; echo; echo) | gpg --command-fd 0 --pinentry-mode loopback --change-passphrase $(gpg --list-secret-keys --with-colons 2> /dev/null | grep '^sec:' | cut --delimiter ':' --fields 5 | tail -n 1) - name: Publish - env: + env: SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }} SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }} SONATYPE_CREDENTIAL_HOST: ${{ secrets.SONATYPE_CREDENTIAL_HOST }} @@ -394,20 +394,33 @@ jobs: dependency-submission: name: Submit Dependencies - if: github.event.repository.fork == false && github.event_name != 'pull_request' - strategy: - matrix: + if: github.event.repository.fork == false && github.event_name != 'pull_request' + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@8] + java: [temurin@8] runs-on: ${{ matrix.os }} - steps: + permissions: + actions: none + checks: none + contents: write + deployments: none + id-token: none + issues: none + packages: read + pages: none + pull-requests: none + repository-projects: none + security-events: none + statuses: none + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -417,7 +430,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -430,7 +443,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -443,7 +456,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -456,7 +469,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -469,7 +482,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -482,7 +495,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -495,7 +508,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -506,18 +519,18 @@ jobs: - name: Submit Dependencies uses: scalacenter/sbt-dependency-submission@v2 - with: + with: modules-ignore: sbt-typeleveljvm_2.12 docs_2.12 sbt-typelevelnative_2.12 sbt-typeleveljs_2.12 configs-ignore: test scala-tool scala-doc-tool test-internal validate-steward: - name: Validate Steward Config - strategy: - matrix: + name: Validate Steward Config + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@11] - runs-on: ${{ matrix.os }} - steps: + java: [temurin@11] + runs-on: ${{ matrix.os }} + steps: - name: Checkout current branch (fast) uses: actions/checkout@v6 @@ -525,31 +538,31 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 - uses: coursier/setup-action@v1 - with: + with: apps: scala-steward - run: scala-steward validate-repo-config .scala-steward.conf site: - name: Generate Site - strategy: - matrix: + name: Generate Site + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@11] - runs-on: ${{ matrix.os }} - steps: + java: [temurin@11] + runs-on: ${{ matrix.os }} + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -559,7 +572,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -572,7 +585,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -585,7 +598,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -598,7 +611,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -611,7 +624,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -624,7 +637,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -637,7 +650,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -652,30 +665,30 @@ jobs: - name: Publish site if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main' uses: peaceiris/actions-gh-pages@v4.0.0 - with: + with: github_token: ${{ secrets.GITHUB_TOKEN }} publish_dir: mdocs/target/docs/site keep_files: true greeter: - name: Generate some output - strategy: - matrix: - os: [ubuntu-22.04] + name: Generate some output + strategy: + matrix: + os: [ubuntu-22.04] runs-on: ${{ matrix.os }} - outputs: - greeting: ${{ steps.greet.outputs.msg }} - steps: + outputs: + greeting: ${{ steps.greet.outputs.msg }} + steps: - id: greet run: echo "msg=Hello" >> "$GITHUB_OUTPUT" consume-output: name: Consume output from greeter job needs: [greeter] - if: ${{ needs.greeter.outputs.greeting != 'Hello' }} - strategy: - matrix: - os: [ubuntu-22.04] - runs-on: ${{ matrix.os }} - steps: - - run: exit 1 + if: ${{ needs.greeter.outputs.greeting != 'Hello' }} + strategy: + matrix: + os: [ubuntu-22.04] + runs-on: ${{ matrix.os }} + steps: + - run: exit 1 From 74cccee3538edccffa85faa530a7cc82e4589dcd Mon Sep 17 00:00:00 2001 From: anshuman Date: Fri, 13 Mar 2026 18:38:19 +0530 Subject: [PATCH 3/4] Resolve line ending issues --- .github/workflows/ci.yml | 210 +++++++++++++++++++-------------------- 1 file changed, 105 insertions(+), 105 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 983a3432..cfcf98f3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,19 +1,19 @@ -# This file was automatically generated by sbt-github-actions using the -# githubWorkflowGenerate task. You should add and commit this file to -# your git repository. It goes without saying that you shouldn't edit -# this file by hand! Instead, if you wish to make changes, you should -# change your sbt build configuration to revise the workflow description -# to meet your needs, then regenerate this file. - -name: Continuous Integration - -on: - pull_request: - branches: ['**', '!update/**', '!pr/**'] - push: - branches: ['**', '!update/**', '!pr/**'] - tags: [v*] - +# This file was automatically generated by sbt-github-actions using the +# githubWorkflowGenerate task. You should add and commit this file to +# your git repository. It goes without saying that you shouldn't edit +# this file by hand! Instead, if you wish to make changes, you should +# change your sbt build configuration to revise the workflow description +# to meet your needs, then regenerate this file. + +name: Continuous Integration + +on: + pull_request: + branches: ['**', '!update/**', '!pr/**'] + push: + branches: ['**', '!update/**', '!pr/**'] + tags: [v*] + permissions: actions: write checks: write @@ -28,19 +28,19 @@ permissions: security-events: write statuses: write -env: +env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} -concurrency: - group: ${{ github.workflow }} @ ${{ github.ref }} +concurrency: + group: ${{ github.workflow }} @ ${{ github.ref }} cancel-in-progress: true -jobs: +jobs: build: - name: Test - strategy: - matrix: + name: Test + strategy: + matrix: os: [ubuntu-22.04, macos-latest, windows-2022] scala: [2.12] java: @@ -76,10 +76,10 @@ jobs: - java: semeru@17 os: windows-2022 - java: temurin@8 - os: macos-latest + os: macos-latest runs-on: ${{ matrix.os }} - timeout-minutes: 60 - steps: + timeout-minutes: 60 + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') shell: bash @@ -87,7 +87,7 @@ jobs: - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -97,7 +97,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -111,7 +111,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -125,7 +125,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -139,7 +139,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -153,7 +153,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -167,7 +167,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -181,7 +181,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -240,28 +240,28 @@ jobs: - name: Upload target directories if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') uses: actions/upload-artifact@v5 - with: + with: name: target-${{ matrix.os }}-${{ matrix.java }}-${{ matrix.scala }}-${{ matrix.project }} path: targets.tar publish: name: Publish Artifacts needs: [build, validate-steward] - if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') - strategy: - matrix: + if: github.event_name != 'pull_request' && (startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main') + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@8] + java: [temurin@8] runs-on: ${{ matrix.os }} - timeout-minutes: 45 - steps: + timeout-minutes: 45 + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -271,7 +271,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -284,7 +284,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -297,7 +297,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -310,7 +310,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -323,7 +323,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -336,7 +336,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -349,7 +349,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -360,7 +360,7 @@ jobs: - name: Download target directories (2.12, sbt-typelevelJVM) uses: actions/download-artifact@v6 - with: + with: name: target-${{ matrix.os }}-${{ matrix.java }}-2.12-sbt-typelevelJVM - name: Inflate target directories (2.12, sbt-typelevelJVM) @@ -370,14 +370,14 @@ jobs: - name: Import signing key if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE == '' - env: + env: PGP_SECRET: ${{ secrets.PGP_SECRET }} PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }} run: echo $PGP_SECRET | base64 -d -i - | gpg --import - name: Import signing key and strip passphrase if: env.PGP_SECRET != '' && env.PGP_PASSPHRASE != '' - env: + env: PGP_SECRET: ${{ secrets.PGP_SECRET }} PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }} run: | @@ -386,7 +386,7 @@ jobs: (echo "$PGP_PASSPHRASE"; echo; echo) | gpg --command-fd 0 --pinentry-mode loopback --change-passphrase $(gpg --list-secret-keys --with-colons 2> /dev/null | grep '^sec:' | cut --delimiter ':' --fields 5 | tail -n 1) - name: Publish - env: + env: SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }} SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }} SONATYPE_CREDENTIAL_HOST: ${{ secrets.SONATYPE_CREDENTIAL_HOST }} @@ -394,11 +394,11 @@ jobs: dependency-submission: name: Submit Dependencies - if: github.event.repository.fork == false && github.event_name != 'pull_request' - strategy: - matrix: + if: github.event.repository.fork == false && github.event_name != 'pull_request' + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@8] + java: [temurin@8] runs-on: ${{ matrix.os }} permissions: actions: none @@ -412,15 +412,15 @@ jobs: pull-requests: none repository-projects: none security-events: none - statuses: none - steps: + statuses: none + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -430,7 +430,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -443,7 +443,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -456,7 +456,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -469,7 +469,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -482,7 +482,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -495,7 +495,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -508,7 +508,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -519,18 +519,18 @@ jobs: - name: Submit Dependencies uses: scalacenter/sbt-dependency-submission@v2 - with: + with: modules-ignore: sbt-typeleveljvm_2.12 docs_2.12 sbt-typelevelnative_2.12 sbt-typeleveljs_2.12 configs-ignore: test scala-tool scala-doc-tool test-internal validate-steward: - name: Validate Steward Config - strategy: - matrix: + name: Validate Steward Config + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@11] - runs-on: ${{ matrix.os }} - steps: + java: [temurin@11] + runs-on: ${{ matrix.os }} + steps: - name: Checkout current branch (fast) uses: actions/checkout@v6 @@ -538,31 +538,31 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 - uses: coursier/setup-action@v1 - with: + with: apps: scala-steward - run: scala-steward validate-repo-config .scala-steward.conf site: - name: Generate Site - strategy: - matrix: + name: Generate Site + strategy: + matrix: os: [ubuntu-22.04] - java: [temurin@11] - runs-on: ${{ matrix.os }} - steps: + java: [temurin@11] + runs-on: ${{ matrix.os }} + steps: - name: Ignore line ending differences in git if: contains(runner.os, 'windows') run: git config --global core.autocrlf false - name: Checkout current branch (full) uses: actions/checkout@v6 - with: + with: fetch-depth: 0 - name: Setup sbt @@ -572,7 +572,7 @@ jobs: id: setup-java-temurin-8 if: matrix.java == 'temurin@8' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 8 cache: sbt @@ -585,7 +585,7 @@ jobs: id: setup-java-temurin-11 if: matrix.java == 'temurin@11' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 11 cache: sbt @@ -598,7 +598,7 @@ jobs: id: setup-java-temurin-17 if: matrix.java == 'temurin@17' uses: actions/setup-java@v5 - with: + with: distribution: temurin java-version: 17 cache: sbt @@ -611,7 +611,7 @@ jobs: id: setup-graalvm-22_3_2-11 if: matrix.java == 'graal_22.3.2@11' uses: graalvm/setup-graalvm@v1 - with: + with: version: 22.3.2 java-version: 11 cache: sbt @@ -624,7 +624,7 @@ jobs: id: setup-java-graalvm-21 if: matrix.java == 'graalvm@21' uses: actions/setup-java@v5 - with: + with: distribution: graalvm java-version: 21 cache: sbt @@ -637,7 +637,7 @@ jobs: id: setup-java-corretto-17 if: matrix.java == 'corretto@17' uses: actions/setup-java@v5 - with: + with: distribution: corretto java-version: 17 cache: sbt @@ -650,7 +650,7 @@ jobs: id: setup-java-semeru-17 if: matrix.java == 'semeru@17' uses: actions/setup-java@v5 - with: + with: distribution: semeru java-version: 17 cache: sbt @@ -665,30 +665,30 @@ jobs: - name: Publish site if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main' uses: peaceiris/actions-gh-pages@v4.0.0 - with: + with: github_token: ${{ secrets.GITHUB_TOKEN }} publish_dir: mdocs/target/docs/site keep_files: true greeter: - name: Generate some output - strategy: - matrix: - os: [ubuntu-22.04] + name: Generate some output + strategy: + matrix: + os: [ubuntu-22.04] runs-on: ${{ matrix.os }} - outputs: - greeting: ${{ steps.greet.outputs.msg }} - steps: + outputs: + greeting: ${{ steps.greet.outputs.msg }} + steps: - id: greet run: echo "msg=Hello" >> "$GITHUB_OUTPUT" consume-output: name: Consume output from greeter job needs: [greeter] - if: ${{ needs.greeter.outputs.greeting != 'Hello' }} - strategy: - matrix: - os: [ubuntu-22.04] - runs-on: ${{ matrix.os }} - steps: - - run: exit 1 + if: ${{ needs.greeter.outputs.greeting != 'Hello' }} + strategy: + matrix: + os: [ubuntu-22.04] + runs-on: ${{ matrix.os }} + steps: + - run: exit 1 From fb135011619d040f2a9537e80aece095475a5704 Mon Sep 17 00:00:00 2001 From: anshuman Date: Fri, 13 Mar 2026 18:52:40 +0530 Subject: [PATCH 4/4] Apply scalafmt to TypelevelCiPlugin --- ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala b/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala index 397c20bb..78dd2189 100644 --- a/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala +++ b/ci/src/main/scala/org/typelevel/sbt/TypelevelCiPlugin.scala @@ -159,8 +159,7 @@ object TypelevelCiPlugin extends AutoPlugin { sbtStepPreamble = Nil, javas = List(githubWorkflowJavaVersions.value.head), permissions = Some( - Permissions.Specify.defaultRestrictive - .withContents(PermissionValue.Write)), + Permissions.Specify.defaultRestrictive.withContents(PermissionValue.Write)), steps = githubWorkflowJobSetup.value.toList :+ WorkflowStep.DependencySubmission( None,