Tatsh / wiswa / 37185976583

100%

push

github

github/workflows: pin the Flatpak image and replace create-pull-request

Resolve the newest freedesktop tag of the flatpak-github-actions image
on each regen with the new ghcrLatestImageTagDigest native function and
pin it by digest, which satisfies the zizmor unpinned-images audit. The
Flatpak manifest runtime-version follows the same tag, so the build
image and the runtime always match.

Push the MSYS2 PKGBUILD branch and open the pull request with git and
gh instead of peter-evans/create-pull-request (superfluous-actions). An
open pull request for the branch is updated instead of duplicated, and
gh supplies the push credentials from MSYS2_TOKEN.

Make the generated run scripts pass shellcheck: the LuaRocks upload
glob, an unused variable in the AppImage build, the clang-format file
arguments, and a cd without a failure check in the MSYS2 workflow.

Regenerate the Flatpak workflow and manifest of Wiswa itself.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

796 of 796 branches covered (100.0%)

Branch coverage included in aggregate %.

35 of 35 new or added lines in 1 file covered. (100.0%)

2077 of 2077 relevant lines covered (100.0%)

4.0 hits per line