Merge pull request #9896 from geekosaur/cve-2024-3651 #4
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Changelogs | |
| on: | |
| push: | |
| branches: | |
| - master | |
| paths: | |
| - 'changelog.d/*' | |
| - '.github/workflows/changelogs.yml' | |
| pull_request: | |
| paths: | |
| - 'changelog.d/*' | |
| - '.github/workflows/changelogs.yml' | |
| release: | |
| types: | |
| - created | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| build: | |
| name: Changelogs | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Cannot install changelog-d directly from remote tarball due to | |
| # https://github.com/haskell/cabal/issues/7360 | |
| # Also, we would like to get the build plan for the cache key. | |
| - name: Fetch changelog-d | |
| run: | | |
| changelog_d_latest="$(curl https://codeberg.org/api/v1/repos/fgaz/changelog-d/branches/master | jq -r .commit.id)" | |
| echo "Using changelog-d revision $changelog_d_latest" | |
| curl "https://codeberg.org/fgaz/changelog-d/archive/$changelog_d_latest.tar.gz" -o changelog-d.tar.gz | |
| tar -xf changelog-d.tar.gz | |
| - name: Update Hackage index | |
| run: cabal v2-update | |
| - name: Build plan for changelog-d | |
| working-directory: changelog-d | |
| run: | | |
| cabal v2-build --dry-run --allow-newer=changelog-d:base | |
| - name: Restore dependencies of changelog-d | |
| uses: actions/cache/restore@v4 | |
| id: cache | |
| with: | |
| path: ~/.local/state/cabal | |
| key: linux-store-changelogs-${{ hashfiles('changelog-d/dist-newstyle/cache/plan.json') }} | |
| restore-keys: linux-store-changelogs | |
| - name: Install changelog-d | |
| working-directory: changelog-d | |
| run: | | |
| cabal v2-install --allow-newer=changelog-d:base | |
| - name: Cache dependencies of changelog-d | |
| uses: actions/cache/save@v4 | |
| if: always() && steps.cache.outputs.cache-hit != 'true' | |
| with: | |
| path: ~/.local/state/cabal | |
| key: ${{ steps.cache.outputs.cache-primary-key }} | |
| - name: Checkout cabal sources | |
| uses: actions/checkout@v4 | |
| - name: Run changelog-d | |
| run: | | |
| changelog-d changelog.d |