chore(deps): update dependency pip to v23.2 #198
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Test" | |
| # Build on pull requests and pushes to `main`. The PR builds will be | |
| # non-blocking for now, but that is configured elsewhere. | |
| on: | |
| # Start these builds on pushes (think "after the merge") too. Normally there | |
| # are no `ci-gha**` branches in our repository. The contributors to the repo | |
| # can create such branches when testing or troubleshooting builds. In such | |
| # branches we can disable builds (to speed up the testing) or add new ones, | |
| # without impacting the rest of the team. | |
| push: | |
| branches: [ 'main', 'v[2-9]**', 'ci-gha**' ] | |
| # Start the build in the context of the target branch. This is considered | |
| # "safe", as the workflow files are already committed. These types of builds | |
| # have access to the secrets in the build, which we need to use the remote | |
| # caches (Bazel and sccache). | |
| pull_request_target: | |
| jobs: | |
| pre-flight: | |
| # For external contributors, run the build in the `external` environment. | |
| # This requires manual approval from a contributor. It also saves the | |
| # `ref` of the pull request, so downstream jobs know what to checkout. | |
| environment: ${{ (github.event_name != 'pull_request_target' && 'internal') || (github.event.pull_request.head.repo.full_name == github.repository && 'internal') || (contains(fromJSON(vars.TRUSTED_FORKS), github.actor) && 'internal') || 'external' }} | |
| name: Require Approval for External PRs | |
| runs-on: ubuntu-latest | |
| outputs: | |
| checkout-sha: ${{ steps.safe-checkout.outputs.sha }} | |
| steps: | |
| - name: Save Pull Request | |
| id: save-pull-request | |
| run: > | |
| echo "sha=${{ github.event.pull_request.head.sha || github.ref }}" >> $GITHUB_OUTPUT | |
| # Run other jobs once the `pre-flight` job passes. When the `pre-flight` | |
| # job requires approval, these blocks all the other jobs. The jobs are defined | |
| # in separate files to keep the size of this file under control. Note how | |
| # the additional jobs inherit any secrets needed to use the remote caches and | |
| # receive what version to checkout as an input. | |
| external-account-integration: | |
| name: External Account Integration | |
| needs: [pre-flight] | |
| uses: ./.github/workflows/external-account-integration.yml | |
| with: | |
| checkout-ref: ${{ needs.pre-flight.outputs.checkout-sha }} | |
| secrets: inherit | |
| macos: | |
| name: macOS | |
| needs: [pre-flight] | |
| uses: ./.github/workflows/macos.yml | |
| with: | |
| checkout-ref: ${{ needs.pre-flight.outputs.checkout-sha }} | |
| secrets: inherit |