Mellanox / network-operator / 28858706555

Build # 28858706555

Build Type

push

github

Committed by web-flow

Commit Message

ci: use workflow metadata for Dependabot sync (#2725)

## Summary
- Check out the workflow commit separately in `get-managed-components`.
- Read `dependabotSyncManaged` ownership metadata from that workflow
source instead of the release branch.
- Keep release component and downstream-fork metadata sourced from the
release branch.

## Root cause
For RC releases, `get-managed-components` checks out `base_branch` such
as `v26.1.x`. Older release branches do not contain the newer
`dependabotSyncManaged` markers, so `dependabot_managed_repos` becomes
`[]` and the Dependabot sync step is skipped for every matrix repo even
though `sync_dependabot` is true.

## Validation
- `ruby -e 'require "yaml";
YAML.parse_file(".github/workflows/release.yaml"); puts "yaml ok"'`\n-
`ruby -ryaml -e 'doc=YAML.load_file(".github/workflows/release.yaml");
step=doc["jobs"]["get-managed-components"]["steps"].find{|s| s["id"] ==
"set-dependabot-repos"}; print step["run"]' | bash -n`\n- `git diff
--check -- .github/workflows/release.yaml`

Coverage Stats

5005 of 7971 relevant lines covered (62.79%)

48.73 hits per line

Source File

Press 'n' to go to next uncovered line, 'b' for previous

Source Not Available