Merge pull request #460 from tkt-actions/next

release: v1.8.2

.devcontainer/devcontainer.json

@@ -1,21 +1,23 @@
 {
   "name": "add-issue-links",
-  "image": "mcr.microsoft.com/devcontainers/universal:linux",
 
-  // Add the IDs of extensions you want installed when the container is created.
-  "extensions": [
-    "ms-azuretools.vscode-docker",
-    "GitHub.copilot",
-    "donjayamanne.githistory",
-    "mhutchie.git-graph",
-    "steoates.autoimport",
-    "Atishay-Jain.All-Autocomplete",
-    "usernamehw.errorlens",
-    "dbaeumer.vscode-eslint",
-    "wix.vscode-import-cost",
-    "pflannery.vscode-versionlens",
-    "editorconfig.editorconfig"
-  ],
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "ms-azuretools.vscode-docker",
+        "GitHub.copilot",
+        "donjayamanne.githistory",
+        "mhutchie.git-graph",
+        "steoates.autoimport",
+        "Atishay-Jain.All-Autocomplete",
+        "usernamehw.errorlens",
+        "dbaeumer.vscode-eslint",
+        "wix.vscode-import-cost",
+        "pflannery.vscode-versionlens",
+        "editorconfig.editorconfig"
+      ]
+    }
+  },
 
   // Use 'forwardPorts' to make a list of ports inside the container available locally.
   // "forwardPorts": [],

.github/workflows/build-push.yml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
 
@@ -68,7 +68,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.3.5
+        uses: dependabot/fetch-metadata@v1.6.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Enable auto-merge for Dependabot PRs

.github/workflows/codeql-analysis.yml

@@ -36,7 +36,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/issue-link-comment.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   issue-link:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Add issue links with link-style option
         uses: ./
         with:

.github/workflows/issue-link-noprefix.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   issue-link:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: issue link comment
         uses: ./
         with:

.github/workflows/issue-link-repo.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   issue-link:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Add issue links with repository option
         uses: ./
         with:

.github/workflows/issue-link-top.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   issue-link:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Add issue links to Top
         uses: ./
         with:

.github/workflows/issue-link.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   issue-link:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Add issue links
         uses: ./
         with:

.github/workflows/pr-auto-assign.yml

@@ -7,4 +7,4 @@ jobs:
   add-reviews:
     runs-on: ubuntu-latest
     steps:
-      - uses: kentaro-m/[email protected].4
+      - uses: kentaro-m/[email protected].5

.github/workflows/test.yml

@@ -10,7 +10,7 @@ jobs:
     timeout-minutes: 5
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
         with:
           node-version: '16.x'

README.md

@@ -30,6 +30,9 @@ on:
 jobs:
   issue-links:
     runs-on: ubuntu-latest
+    # https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
+    permissions:
+      pull-requests: write
     steps:
       - uses: tkt-actions/[email protected]
         with:
@@ -79,6 +82,8 @@ on:
 jobs:
   issue-links:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: tkt-actions/[email protected]
         with:
@@ -102,6 +107,8 @@ on:
 jobs:
   issue-links:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: tkt-actions/[email protected]
         with:

docker-compose.yml

@@ -2,7 +2,7 @@ version: "3.7"
 services:
   app:
     command: /bin/bash -c "while true; do echo 'hello world'; sleep 1000; done"
-    build: .
+    image: node:16.15.0-bullseye-slim
     working_dir: /app
     volumes:
       - .:/app