opendefensecloud / artifact-conduit / 39391871782
86%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 17
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 86.508% (+0.5%) from 86.02%
39391871782

push

github

web-flow 
chore(deps): migrate to dev-kit v3.1.0 (#521)

## What
Moves to dev-kit v3.1.0 and replaces our copies of the shared workflows
with small stubs that call dev-kit.
Closes #499

## Why
dev-kit v3 moves the shared workflows into dev-kit itself, so we stop
carrying copies that drift. v3.1.0 rather than v3.0.0 because that's
where the Solar pilot ended up: its relock workflow also updates the Go
toolchain on Renovate's Go-version PRs.

## Testing
`nix develop -c make lint test` passes locally. `make
check-dev-kit-pins` confirms the workflows, `Makefile`, `flake.nix` and
`flake.lock` all point at v3.1.0. The `flake.lock` diff changes only the
dev-kit entry.

## Notes for reviewers
- Replaced with dev-kit stubs: `update-action-pins`,
`conventional-commits`, `osv-scanner`, `issues-add-labels`,
`issues-add-to-project`. `scorecard` stays as it is.
- `osv-scanner` no longer runs on `merge_group`, on purpose. We don't
use a merge queue.
- New `renovate-dev-kit-lock` workflow. It only runs on Renovate's
dev-kit and Go-version branches, and it needs an org admin to give this
repo the `dev-kit-bot` app and its secrets. Until then it will fail on
those PRs.
- Extras: `check-dev-kit-pins` now runs in `lint`, `release-drafter`
runs on `ubuntu-24.04`, and `.common.mk-configs` is ignored.
- Required checks (`check`, `CodeQL`) keep their names, so `make
repo-settings` doesn't need a rerun.
- Started as Renovate's v3.0.0 PR; its release notes are kept below.
Notes for v3.0.1 to v3.1.0 are on the [dev-kit releases
page](https://github.com/opendefensecloud/dev-kit/releases).

## Checklist
- [x] Tests added/updated, or confirmed that no tests are required
- [x] No breaking changes, or upgrade path documented above
- [x] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved

---

### Release Notes (from Renovate)

<details>
<summary>opendefensecloud/dev-kit</summary>

###
[`v3.0.0`](https://redirect.github.com/opende... (continued)

1417 of 1638 relevant lines covered (86.51%)

2102.78 hits per line

Coverage Regressions

Lines Coverage ∆ File
2
79.68
0.53% pkg/controller/order_controller.go
2
84.55
1.82% pkg/controller/workflow_handler.go
Jobs
ID Job ID Ran Files Coverage
1 39391871782.1 17
86.51
GitHub Action Run
Source Files on build 39391871782