Merge pull request #3453 from SwissDataScienceCenter/release/v2.4.1

chore: release v2.4.1

Author: Panaetius

.github/dependabot.yml

@@ -8,7 +8,6 @@ updates:
       prefix: "build(deps): "
       include: "scope"
     target-branch: "develop"
-    open-pull-requests-limit: 0
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

.github/workflows/acceptance-tests.yml

@@ -76,7 +76,7 @@ jobs:
           body-includes: "You can access the deployment of this PR at"
       - name: Create comment pre deploy
         if: steps.findcomment.outputs.comment-id == 0
-        uses: peter-evans/create-or-update-comment@v2
+        uses: peter-evans/create-or-update-comment@v3
         with:
           token: ${{ secrets.RENKUBOT_GITHUB_TOKEN }}
           issue-number: ${{ github.event.pull_request.number }}

.github/workflows/cheatsheet.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     if: "'refs/heads/master' != github.ref && 'refs/heads/develop' != github.ref && !startsWith(github.ref, 'refs/tags/')"
     steps:
-      - uses: actions/checkout@v3.5.0
+      - uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
       - name: Install dependencies

.github/workflows/combine-dependabot-updates.yml

@@ -1,29 +1,104 @@
 name: "Combine Dependabot PRs"
 on:
   workflow_dispatch:
+    inputs:
+      target_branch:
+        description: Target branch to create a release/PR to
+        type: string
+        required: true
+        default: develop
+      branch_name:
+        description: Name of the branch to combine PRs into
+        type: string
+        required: true
+        default: combined-prs-branch
 
 jobs:
   combine-prs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
           token: "${{ secrets.RENKUBOT_GITHUB_TOKEN }}"
+          ref: develop
       - name: Setup local branch and merge tool
         run: |
-          git branch --track dependabot-updates origin/dependabot-updates
+          git checkout -b "${{ inputs.branch_name }}" || ( git checkout "${{ inputs.branch_name }}" && git branch -u "origin/${{ inputs.branch_name }}" && git pull && git merge develop)
           echo "poetry.lock merge=ours" >> .git/info/attributes
           git config merge.ours.driver true
-      - uses: mark-hingston/combine-dependabot-prs@main
+          git merge --no-edit "origin/${{ inputs.target_branch }}"
+      - name: Set up Python
+        uses: actions/setup-python@v4
         with:
-          branchPrefix: "dependabot"
-          mustBeGreen: false
-          combineBranchName: "combined-prs"
-          includeLabel: ""
-          ignoreLabel: "nocombine"
-          baseBranch: "develop"
-          openPR: true
-          allowSkipped: false
-          closeOnceCombined: true
-          githubToken: "${{ secrets.RENKUBOT_GITHUB_TOKEN }}"
+          python-version: 3.11
+      - name: Install dependencies
+        env:
+          POETRY_VIRTUALENVS_CREATE: "false"
+        shell: bash
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+      - name: Set Git config
+        shell: bash
+        run: |
+          git config --global --add user.name "Renku Bot"
+          git config --global --add user.email "renku@datascience.ch"
+      - name: Merge PRs
+        id: merge_prs
+        env:
+          POETRY_VIRTUALENVS_CREATE: "false"
+        run: |
+          repo="https://api.github.com/repos/${{ github.repository }}"
+          dependabot_pulls=($(curl -s "$repo/pulls?state=open" | jq -r ".[] | select((.head.ref | test(\"dependabot/\"))) | \"\(.head.ref),\(.number)\""))
+
+          pr_body="# Combined PRs\n✅ The following pull requests have been successfully combined on this PR:\n"
+          failed=()
+
+          for branch in "${dependabot_pulls[@]}"; do
+            branch_arr=(${branch//,/ })
+            echo "Merging branch ${branch_arr[0]}"
+
+            if git merge --no-edit "origin/${branch_arr[0]}"; then
+              pr_body="$pr_body\n- #${branch_arr[1]}"
+            else
+              git merge --abort
+              git clean -fdx
+              git reset --hard
+              failed+=(${branch_arr[1]})
+            fi
+          done
+
+          if (( ${#failed[@]} )); then
+            pr_body="$pr_body\n\nFailed to combine:\n"
+
+            for fail in "${failed[@]}"; do
+              pr_body="$pr_body\n- #$fail"
+            done
+          fi
+          poetry lock
+          git add -A
+          git commit -m "update lock file" --no-verify
+          git status
+          git push origin "${{ inputs.branch_name }}"
+          echo "pr_body=$pr_body" >> $GITHUB_OUTPUT
+      - name: Create Pull Request
+        uses: actions/github-script@v6
+        with:
+          token: ${{ secrets.RENKUBOT_GITHUB_TOKEN }}
+          script: |
+            const { repo, owner } = context.repo;
+            const result = await github.rest.pulls.create({
+              title: 'chore: combined dependency update',
+              owner,
+              repo,
+              head: '${{ inputs.branch_name }}',
+              base: '${{ inputs.target_branch }}',
+              body: '${{ steps.merge_prs.outputs.pr_body }}'
+            });
+            github.rest.issues.addLabels({
+              owner,
+              repo,
+              issue_number: result.data.number,
+              labels: ['dependencies', 'automated pr']
+            });

.github/workflows/publish_shacl.yml

@@ -11,7 +11,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.5.0
+      - uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
       - name: Install dependencies

.github/workflows/pypi-release.yml

@@ -11,7 +11,7 @@ jobs:
   finalize-release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
           token: "${{ secrets.RENKUBOT_GITHUB_TOKEN }}"

.github/workflows/release.yml

@@ -21,7 +21,7 @@ jobs:
   create-release-pr:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v3.5.2
         with:
           fetch-depth: 0
           token: "${{ secrets.RENKUBOT_GITHUB_TOKEN }}"

.github/workflows/semantic_pr.yml

@@ -10,6 +10,6 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v5.1.0
+      - uses: amannn/action-semantic-pull-request@v5.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}