Sep 4, 2024 · Sep 4, 2024
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
        run: |
          echo "${{ toJSON(steps.filter )}}"

  update-flake:
    needs: changes
    if: needs.changes.outputs.gomod == 'true'
    runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
          # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
          token: ${{ secrets.CDRCI_GITHUB_TOKEN }}

      - name: Setup Go
        uses: ./.github/actions/setup-go

      - name: Update Nix Flake SRI Hash
        run: ./scripts/update-flake.sh

      # auto update flake for dependabot
      - uses: stefanzweifel/git-auto-commit-action@v5
        if: github.actor == 'dependabot[bot]'
        with:
          # Allows dependabot to still rebase!
          commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
          commit_user_name: "dependabot[bot]"
          commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
          commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"

      # require everyone else to update it themselves
      - name: Ensure No Changes
        if: github.actor != 'dependabot[bot]'
        run: git diff --exit-code
  # Disabled due to instability. See: https://github.com/coder/coder/issues/14553
  # Re-enable once the flake hash calculation is stable.
  # update-flake:
  #   needs: changes
  #   if: needs.changes.outputs.gomod == 'true'
  #   runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
  #   steps:
  #     - name: Checkout
  #       uses: actions/checkout@v4
  #       with:
  #         fetch-depth: 1
  #         # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
  #         token: ${{ secrets.CDRCI_GITHUB_TOKEN }}

  #     - name: Setup Go
  #       uses: ./.github/actions/setup-go

  #     - name: Update Nix Flake SRI Hash
  #       run: ./scripts/update-flake.sh

  #     # auto update flake for dependabot
  #     - uses: stefanzweifel/git-auto-commit-action@v5
  #       if: github.actor == 'dependabot[bot]'
  #       with:
  #         # Allows dependabot to still rebase!
  #         commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
  #         commit_user_name: "dependabot[bot]"
  #         commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
  #         commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"

  #     # require everyone else to update it themselves
  #     - name: Ensure No Changes
  #       if: github.actor != 'dependabot[bot]'
  #       run: git diff --exit-code

  lint:
    needs: changes
Original file line number	Diff line number	Diff line change
Expand Up		@@ -117,38 +117,40 @@ jobs:
		run: \|
		echo "${{ toJSON(steps.filter )}}"

		update-flake:
		needs: changes
		if: needs.changes.outputs.gomod == 'true'
		runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' \|\| 'ubuntu-latest' }}
		steps:
		- name: Checkout
		uses: actions/checkout@v4
		with:
		fetch-depth: 1
		# See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
		token: ${{ secrets.CDRCI_GITHUB_TOKEN }}

		- name: Setup Go
		uses: ./.github/actions/setup-go

		- name: Update Nix Flake SRI Hash
		run: ./scripts/update-flake.sh

		# auto update flake for dependabot
		- uses: stefanzweifel/git-auto-commit-action@v5
		if: github.actor == 'dependabot[bot]'
		with:
		# Allows dependabot to still rebase!
		commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
		commit_user_name: "dependabot[bot]"
		commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
		commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"

		# require everyone else to update it themselves
		- name: Ensure No Changes
		if: github.actor != 'dependabot[bot]'
		run: git diff --exit-code
		# Disabled due to instability. See: https://github.com/coder/coder/issues/14553
		# Re-enable once the flake hash calculation is stable.
		# update-flake:
		# needs: changes
		# if: needs.changes.outputs.gomod == 'true'
		# runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' \|\| 'ubuntu-latest' }}
		# steps:
		# - name: Checkout
		# uses: actions/checkout@v4
		# with:
		# fetch-depth: 1
		# # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
		# token: ${{ secrets.CDRCI_GITHUB_TOKEN }}

		# - name: Setup Go
		# uses: ./.github/actions/setup-go

		# - name: Update Nix Flake SRI Hash
		# run: ./scripts/update-flake.sh

		# # auto update flake for dependabot
		# - uses: stefanzweifel/git-auto-commit-action@v5
		# if: github.actor == 'dependabot[bot]'
		# with:
		# # Allows dependabot to still rebase!
		# commit_message: "[dependabot skip] Update Nix Flake SRI Hash"
		# commit_user_name: "dependabot[bot]"
		# commit_user_email: "49699333+dependabot[bot]@users.noreply.github.com>"
		# commit_author: "dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>"

		# # require everyone else to update it themselves
		# - name: Ensure No Changes
		# if: github.actor != 'dependabot[bot]'
		# run: git diff --exit-code

		lint:
		needs: changes
Expand Down