From d5109ee6ae129c72b038e58150e98ca613dba7a0 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 11 Mar 2024 21:55:56 +0000 Subject: [PATCH 1/2] chore(deps): update codecov/codecov-action to v4 --- .github/workflows/flutter.analyze-test.action.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/flutter.analyze-test.action.yaml b/.github/workflows/flutter.analyze-test.action.yaml index 6604056f..92a2760c 100644 --- a/.github/workflows/flutter.analyze-test.action.yaml +++ b/.github/workflows/flutter.analyze-test.action.yaml @@ -57,7 +57,7 @@ jobs: - name: 'Flutter test (with coverage)' run: flutter test -r github --coverage --test-randomize-ordering-seed random - name: 'Upload coverage report' - uses: codecov/codecov-action@v3.1.6 + uses: codecov/codecov-action@v4.1.0 with: token: ${{ secrets.CODECOV_TOKEN }} directory: ./coverage/ From 38279cd29d26b2a204b0de19159f25cebf9c7f5d Mon Sep 17 00:00:00 2001 From: Valentin REVERSAT Date: Mon, 11 Mar 2024 23:05:06 +0100 Subject: [PATCH 2/2] =?UTF-8?q?chore(ci):=20pass=20all=20secrets=20vie=20?= =?UTF-8?q?=C2=B4secrets:=20inherit=C2=B4=20directive?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/default.yaml | 7 ++----- .github/workflows/dev.yaml | 10 +++------- .github/workflows/fastlane.action.yaml | 6 +----- .../workflows/flutter.analyze-test.action.yaml | 6 +----- .github/workflows/flutter.build.action.yaml | 15 ++++----------- .github/workflows/main.yaml | 10 +++------- .github/workflows/tag.yaml | 10 +++------- 7 files changed, 17 insertions(+), 47 deletions(-) diff --git a/.github/workflows/default.yaml b/.github/workflows/default.yaml index f6e6dad2..2f36093d 100644 --- a/.github/workflows/default.yaml +++ b/.github/workflows/default.yaml @@ -11,8 +11,7 @@ jobs: uses: ./.github/workflows/flutter.analyze-test.action.yaml with: flutter_version: '3.19.3' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit flutter-build: needs: [flutter-test-analyze] uses: ./.github/workflows/flutter.build.action.yaml @@ -20,6 +19,4 @@ jobs: flutter_version: '3.19.3' android_output: 'apk' env: 'dev' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} - sentry_dsn: ${{ secrets.SENTRY_DSN }} + secrets: inherit diff --git a/.github/workflows/dev.yaml b/.github/workflows/dev.yaml index a04576b8..fe00cd5c 100644 --- a/.github/workflows/dev.yaml +++ b/.github/workflows/dev.yaml @@ -10,8 +10,7 @@ jobs: uses: ./.github/workflows/flutter.analyze-test.action.yaml with: flutter_version: '3.19.3' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit page: uses: ./.github/workflows/pages.deploy.yaml flutter-build: @@ -21,13 +20,10 @@ jobs: flutter_version: '3.19.3' android_output: 'aab' env: 'dev' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} - sentry_dsn: ${{ secrets.SENTRY_DSN }} + secrets: inherit fastlane-dry-run: needs: [ flutter-build ] uses: ./.github/workflows/fastlane.action.yaml with: lane: 'dry_run' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit diff --git a/.github/workflows/fastlane.action.yaml b/.github/workflows/fastlane.action.yaml index 0e91969b..d96fe150 100644 --- a/.github/workflows/fastlane.action.yaml +++ b/.github/workflows/fastlane.action.yaml @@ -7,10 +7,6 @@ on: description: 'Lane version (alpha, beta, or production)' required: true type: string - secrets: - passphrase: - description: 'The passphrase to decrypt the configuration' - required: true jobs: play_store: @@ -24,7 +20,7 @@ jobs: - name: 'Decrypt secret configuration' run: ./.github/scripts/decrypt_secret.sh env: - PASSPHRASE: ${{ secrets.passphrase }} + PASSPHRASE: ${{ secrets.PASSPHRASE }} - name: 'Check secret configuration' run: ./.github/scripts/check_secrets_decryption.sh - name: 'Download Artifact' diff --git a/.github/workflows/flutter.analyze-test.action.yaml b/.github/workflows/flutter.analyze-test.action.yaml index 92a2760c..4b41c626 100644 --- a/.github/workflows/flutter.analyze-test.action.yaml +++ b/.github/workflows/flutter.analyze-test.action.yaml @@ -7,10 +7,6 @@ on: description: 'The Flutter used (ex: 2.5.1)' required: true type: string - secrets: - passphrase: - description: 'The passphrase to decrypt the configuration' - required: true jobs: @@ -47,7 +43,7 @@ jobs: - name: 'Decrypt secret configuration' run: ./.github/scripts/decrypt_secret.sh env: - PASSPHRASE: ${{ secrets.passphrase }} + PASSPHRASE: ${{ secrets.PASSPHRASE }} - name: 'Check secret configuration' run: ./.github/scripts/check_secrets_decryption.sh - name: 'Setup flutter action' diff --git a/.github/workflows/flutter.build.action.yaml b/.github/workflows/flutter.build.action.yaml index 0a598a18..e4d3656b 100644 --- a/.github/workflows/flutter.build.action.yaml +++ b/.github/workflows/flutter.build.action.yaml @@ -15,13 +15,6 @@ on: description: 'Environment in which the application will be build' required: true type: string - secrets: - passphrase: - description: 'The passphrase to decrypt the configuration' - required: true - sentry_dsn: - description: 'Secret URL to send live info to sentry tenant' - required: true jobs: @@ -36,7 +29,7 @@ jobs: - name: 'Decrypt secret configuration' run: ./.github/scripts/decrypt_secret.sh env: - PASSPHRASE: ${{ secrets.passphrase }} + PASSPHRASE: ${{ secrets.PASSPHRASE }} - name: 'Check secret configuration' run: ./.github/scripts/check_secrets_decryption.sh - name: 'Set up JAVA' @@ -70,7 +63,7 @@ jobs: run: flutter build appbundle --build-number="$BUILD_NUMBER" --dart-define=SENTRY_DSN="$SENTRY_DSN" --dart-define=ENV="$ENV" env: BUILD_NUMBER: ${{ env.BUILD_NUMBER }} - SENTRY_DSN: ${{ secrets.sentry_dsn }} + SENTRY_DSN: ${{ secrets.SENTRY_DSN }} ENV: ${{ inputs.env }} - name: 'Save AAB' if: ${{ inputs.android_output == 'aab' }} @@ -87,7 +80,7 @@ jobs: - name: 'Decrypt secret configuration' run: ./.github/scripts/decrypt_secret.sh env: - PASSPHRASE: ${{ secrets.passphrase }} + PASSPHRASE: ${{ secrets.PASSPHRASE }} - name: 'Check secret configuration' run: ./.github/scripts/check_secrets_decryption.sh - name: '🥺' @@ -101,7 +94,7 @@ jobs: - name: 'Decrypt secret configuration' run: ./.github/scripts/decrypt_secret.sh env: - PASSPHRASE: ${{ secrets.passphrase }} + PASSPHRASE: ${{ secrets.PASSPHRASE }} - name: 'Check secret configuration' run: ./.github/scripts/check_secrets_decryption.sh - name: '🥺' diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index ec32bb05..4b38312f 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -10,8 +10,7 @@ jobs: uses: ./.github/workflows/flutter.analyze-test.action.yaml with: flutter_version: '3.19.3' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit flutter-build: needs: [flutter-test-analyze] uses: ./.github/workflows/flutter.build.action.yaml @@ -19,13 +18,10 @@ jobs: flutter_version: '3.19.3' android_output: 'aab' env: 'prd' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} - sentry_dsn: ${{ secrets.SENTRY_DSN }} + secrets: inherit fastlane: needs: [flutter-build] uses: ./.github/workflows/fastlane.action.yaml with: lane: 'prd' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml index d605df06..4ce4f265 100644 --- a/.github/workflows/tag.yaml +++ b/.github/workflows/tag.yaml @@ -10,8 +10,7 @@ jobs: uses: ./.github/workflows/flutter.analyze-test.action.yaml with: flutter_version: '3.19.3' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit flutter-build: needs: [flutter-test-analyze] uses: ./.github/workflows/flutter.build.action.yaml @@ -19,13 +18,10 @@ jobs: flutter_version: '3.19.3' android_output: 'aab' env: 'beta' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} - sentry_dsn: ${{ secrets.SENTRY_DSN }} + secrets: inherit fastlane: needs: [flutter-build] uses: ./.github/workflows/fastlane.action.yaml with: lane: 'beta' - secrets: - passphrase: ${{ secrets.PASSPHRASE }} + secrets: inherit