commit d20a6a3f8fe808d04c71f9a70b8b3e1e6c752a2a · pyrox.dev/nixpkgs

+51

.github/actions/checkout/action.yml

···

       1
       1
       +
       name: Checkout

     

       2
       2
       +
       

     

       3
       3
       +
       description: 'Checkout into trusted / untrusted / pinned folders consistently.'

     

       4
       4
       +
       

     

       5
       5
       +
       inputs:

     

       6
       6
       +
         merged-as-untrusted-at:

     

       7
       7
       +
           description: "Whether and which SHA to checkout for the merge commit in the ./untrusted folder."

     

       8
       8
       +
         pinned-from:

     

       9
       9
       +
           description: "Whether to checkout the pinned nixpkgs for CI and from where (trusted, untrusted)."

     

       10
       10
       +
         target-as-trusted-at:

     

       11
       11
       +
           description: "Whether and which SHA to checkout for the target commit in the ./trusted folder."

     

       12
       12
       +
       

     

       13
       13
       +
       runs:

     

       14
       14
       +
         using: composite

     

       15
       15
       +
         steps:

     

       16
       16
       +
           - if: inputs.merged-as-untrusted-at

     

       17
       17
       +
             # Would be great to do the checkouts in git worktrees of the existing spare checkout instead,

     

       18
       18
       +
             # but Nix is broken with them:

     

       19
       19
       +
             # https://github.com/NixOS/nix/issues/6073

     

       20
       20
       +
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       21
       21
       +
             with:

     

       22
       22
       +
               ref: ${{ inputs.merged-as-untrusted-at }}

     

       23
       23
       +
               path: untrusted

     

       24
       24
       +
       

     

       25
       25
       +
           - if: inputs.target-as-trusted-at

     

       26
       26
       +
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       27
       27
       +
             with:

     

       28
       28
       +
               ref: ${{ inputs.target-as-trusted-at }}

     

       29
       29
       +
               path: trusted

     

       30
       30
       +
       

     

       31
       31
       +
           - if: inputs.pinned-from

     

       32
       32
       +
             id: pinned

     

       33
       33
       +
             uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

     

       34
       34
       +
             env:

     

       35
       35
       +
               PINNED_FROM: ${{ inputs.pinned-from }}

     

       36
       36
       +
             with:

     

       37
       37
       +
               script: |

     

       38
       38
       +
                 const path = require('node:path')

     

       39
       39
       +
                 const pinned = require(path.resolve(path.join(process.env.PINNED_FROM, 'ci', 'pinned.json')))

     

       40
       40
       +
                 core.setOutput('pinned-at', pinned.pins.nixpkgs.revision)

     

       41
       41
       +
       

     

       42
       42
       +
           - if: steps.pinned.outputs.pinned-at

     

       43
       43
       +
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       44
       44
       +
             with:

     

       45
       45
       +
               ref: ${{ steps.pinned.outputs.pinned-at }}

     

       46
       46
       +
               path: pinned

     

       47
       47
       +
               sparse-checkout: |

     

       48
       48
       +
                 lib

     

       49
       49
       +
                 maintainers

     

       50
       50
       +
                 nixos/lib

     

       51
       51
       +
                 pkgs

-80

.github/actions/get-merge-commit/action.yml

···

       1
       1
       -
       name: Get merge commit

     

       2
       2
       -
       

     

       3
       3
       -
       description: 'Checks whether the Pull Request is mergeable and checks out the repo at up to two commits: The result of a temporary merge of the head branch into the target branch ("merged"), and the parent of that commit on the target branch ("target"). Handles push events and merge conflicts gracefully.'

     

       4
       4
       -
       

     

       5
       5
       -
       inputs:

     

       6
       6
       -
         mergedSha:

     

       7
       7
       -
           description: "The merge commit SHA, previously collected."

     

       8
       8
       -
           type: string

     

       9
       9
       -
         merged-as-untrusted:

     

       10
       10
       -
           description: "Whether to checkout the merge commit in the ./untrusted folder."

     

       11
       11
       -
           type: boolean

     

       12
       12
       -
         pinnedFrom:

     

       13
       13
       -
           description: "Whether to checkout the pinned nixpkgs for CI and from where (trusted, untrusted)."

     

       14
       14
       -
           type: string

     

       15
       15
       -
         targetSha:

     

       16
       16
       -
           description: "The target commit SHA, previously collected."

     

       17
       17
       -
           type: string

     

       18
       18
       -
         target-as-trusted:

     

       19
       19
       -
           description: "Whether to checkout the target commit in the ./trusted folder."

     

       20
       20
       -
           type: boolean

     

       21
       21
       -
       

     

       22
       22
       -
       outputs:

     

       23
       23
       -
         mergedSha:

     

       24
       24
       -
           description: "The merge commit SHA"

     

       25
       25
       -
           value: ${{ steps.commits.outputs.mergedSha }}

     

       26
       26
       -
         targetSha:

     

       27
       27
       -
           description: "The target commit SHA"

     

       28
       28
       -
           value: ${{ steps.commits.outputs.targetSha }}

     

       29
       29
       -
       

     

       30
       30
       -
       runs:

     

       31
       31
       -
         using: composite

     

       32
       32
       -
         steps:

     

       33
       33
       -
           - id: commits

     

       34
       34
       -
             if: ${{ !inputs.mergedSha && !inputs.targetSha }}

     

       35
       35
       -
             uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

     

       36
       36
       -
             with:

     

       37
       37
       -
               script: |

     

       38
       38
       -
                 require('./ci/github-script/prepare.js')({

     

       39
       39
       -
                   github,

     

       40
       40
       -
                   context,

     

       41
       41
       -
                   core,

     

       42
       42
       -
                 })

     

       43
       43
       -
       

     

       44
       44
       -
           - if: inputs.merged-as-untrusted && (inputs.mergedSha || steps.commits.outputs.mergedSha)

     

       45
       45
       -
             # Would be great to do the checkouts in git worktrees of the existing spare checkout instead,

     

       46
       46
       -
             # but Nix is broken with them:

     

       47
       47
       -
             # https://github.com/NixOS/nix/issues/6073

     

       48
       48
       -
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       49
       49
       -
             with:

     

       50
       50
       -
               ref: ${{ inputs.mergedSha || steps.commits.outputs.mergedSha }}

     

       51
       51
       -
               path: untrusted

     

       52
       52
       -
       

     

       53
       53
       -
           - if: inputs.target-as-trusted && (inputs.targetSha || steps.commits.outputs.targetSha)

     

       54
       54
       -
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       55
       55
       -
             with:

     

       56
       56
       -
               ref: ${{ inputs.targetSha || steps.commits.outputs.targetSha }}

     

       57
       57
       -
               path: trusted

     

       58
       58
       -
       

     

       59
       59
       -
           - if: inputs.pinnedFrom

     

       60
       60
       -
             id: pinned

     

       61
       61
       -
             uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

     

       62
       62
       -
             env:

     

       63
       63
       -
               PINNED_FROM: ${{ inputs.pinnedFrom }}

     

       64
       64
       -
             with:

     

       65
       65
       -
               script: |

     

       66
       66
       -
                 const path = require('node:path')

     

       67
       67
       -
                 const pinned = require(path.resolve(path.join(process.env.PINNED_FROM, 'ci', 'pinned.json')))

     

       68
       68
       -
                 core.setOutput('pinnedSha', pinned.pins.nixpkgs.revision)

     

       69
       69
       -
       

     

       70
       70
       -
           - if: steps.pinned.outputs.pinnedSha

     

       71
       71
       -
             uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       72
       72
       -
             with:

     

       73
       73
       -
               ref: ${{ steps.pinned.outputs.pinnedSha }}

     

       74
       74
       -
               path: pinned

     

       75
       75
       -
               sparse-checkout: |

     

       76
       76
       -
                 lib

     

       77
       77
       -
                 maintainers

     

       78
       78
       -
                 nixos/lib

     

       79
       79
       -
                 pkgs

     

       80
       80
       -

+1 -1

.github/workflows/README.md

···

       17
       17
        
         This is a temporary commit that GitHub creates automatically as "what would happen, if this PR was merged into the base branch now?".

     

       18
       18
        
         The checkout could be done via the virtual branch `refs/pull/<pr-number>/merge`, but doing so would cause failures when this virtual branch doesn't exist (anymore).

     

       19
       19
        
         This can happen when the PR has conflicts, in which case the virtual branch is not created, or when the PR is getting merged while workflows are still running, in which case the branch won't exist anymore at the time of checkout.

     

       20
       20
       -
         Thus, we use the `get-merge-commit.yml` workflow to check whether the PR is mergeable and the test merge commit exists and only then run the relevant jobs.

     

       20
       20
       +
         Thus, we use the `prepare` job to check whether the PR is mergeable and the test merge commit exists and only then run the relevant jobs.

     

       21
       21
        
       

     

       22
       22
        
       - Various workflows need to make comparisons against the base branch.

     

       23
       23
        
         In this case, we checkout the parent of the "test merge commit" for best results.

+4 -5

.github/workflows/build.yml

···

       47
       47
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       48
       48
        
               with:

     

       49
       49
        
                 sparse-checkout: .github/actions

     

       50
       50
       -
             - name: Check if the PR can be merged and checkout the merge commit

     

       51
       51
       -
               uses: ./.github/actions/get-merge-commit

     

       50
       50
       +
             - name: Checkout the merge commit

     

       51
       51
       +
               uses: ./.github/actions/checkout

     

       52
       52
        
               with:

     

       53
       53
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       54
       54
       -
                 merged-as-untrusted: true

     

       55
       55
       -
                 pinnedFrom: untrusted

     

       53
       53
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       54
       54
       +
                 pinned-from: untrusted

     

       56
       55
        
       

     

       57
       56
        
             - uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     

       58
       57
        
               with:

+5 -7

.github/workflows/check.yml

···

       99
       99
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       100
       100
        
               with:

     

       101
       101
        
                 sparse-checkout: .github/actions

     

       102
       102
       -
             - name: Check if the PR can be merged and checkout the merge and target commits

     

       103
       103
       -
               uses: ./.github/actions/get-merge-commit

     

       102
       102
       +
             - name: Checkout merge and target commits

     

       103
       103
       +
               uses: ./.github/actions/checkout

     

       104
       104
        
               with:

     

       105
       105
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       106
       106
       -
                 merged-as-untrusted: true

     

       107
       107
       -
                 pinnedFrom: trusted

     

       108
       108
       -
                 targetSha: ${{ inputs.targetSha }}

     

       109
       109
       -
                 target-as-trusted: true

     

       105
       105
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       106
       106
       +
                 pinned-from: trusted

     

       107
       107
       +
                 target-as-trusted-at: ${{ inputs.targetSha }}

     

       110
       108
        
       

     

       111
       109
        
             - uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     

       112
       110

+9 -12

.github/workflows/eval.yml

···

       90
       90
        
               with:

     

       91
       91
        
                 sparse-checkout: .github/actions

     

       92
       92
        
             - name: Check out the PR at the test merge commit

     

       93
       93
       -
               uses: ./.github/actions/get-merge-commit

     

       93
       93
       +
               uses: ./.github/actions/checkout

     

       94
       94
        
               with:

     

       95
       95
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       96
       96
       -
                 merged-as-untrusted: true

     

       97
       97
       -
                 pinnedFrom: untrusted

     

       95
       95
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       96
       96
       +
                 pinned-from: untrusted

     

       98
       97
        
       

     

       99
       98
        
             - name: Install Nix

     

       100
       99
        
               uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     
···

       216
       215
        
               with:

     

       217
       216
        
                 sparse-checkout: .github/actions

     

       218
       217
        
             - name: Check out the PR at the target commit

     

       219
       219
       -
               uses: ./.github/actions/get-merge-commit

     

       218
       218
       +
               uses: ./.github/actions/checkout

     

       220
       219
        
               with:

     

       221
       221
       -
                 targetSha: ${{ inputs.targetSha }}

     

       222
       222
       -
                 target-as-trusted: true

     

       223
       223
       -
                 pinnedFrom: trusted

     

       220
       220
       +
                 target-as-trusted-at: ${{ inputs.targetSha }}

     

       221
       221
       +
                 pinned-from: trusted

     

       224
       222
        
       

     

       225
       223
        
             - name: Download output paths and eval stats for all systems

     

       226
       224
        
               uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0

     
···

       385
       383
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       386
       384
        
               with:

     

       387
       385
        
                 sparse-checkout: .github/actions

     

       388
       388
       -
             - name: Check if the PR can be merged and checkout the merge commit

     

       389
       389
       -
               uses: ./.github/actions/get-merge-commit

     

       386
       386
       +
             - name: Checkout the merge commit

     

       387
       387
       +
               uses: ./.github/actions/checkout

     

       390
       388
        
               with:

     

       391
       391
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       392
       392
       -
                 merged-as-untrusted: true

     

       389
       389
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       393
       390
        
       

     

       394
       391
        
             - name: Install Nix

     

       395
       392
        
               uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

+13 -17

.github/workflows/lint.yml

···

       27
       27
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       28
       28
        
               with:

     

       29
       29
        
                 sparse-checkout: .github/actions

     

       30
       30
       -
             - name: Check if the PR can be merged and checkout the merge commit

     

       31
       31
       -
               uses: ./.github/actions/get-merge-commit

     

       30
       30
       +
             - name: Checkout the merge commit

     

       31
       31
       +
               uses: ./.github/actions/checkout

     

       32
       32
        
               with:

     

       33
       33
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       34
       34
       -
                 merged-as-untrusted: true

     

       35
       35
       -
                 pinnedFrom: untrusted

     

       33
       33
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       34
       34
       +
                 pinned-from: untrusted

     

       36
       35
        
       

     

       37
       36
        
             - uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     

       38
       37
        
       

     
···

       63
       62
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       64
       63
        
               with:

     

       65
       64
        
                 sparse-checkout: .github/actions

     

       66
       66
       -
             - name: Check if the PR can be merged and checkout the merge commit

     

       67
       67
       -
               uses: ./.github/actions/get-merge-commit

     

       65
       65
       +
             - name: Checkout the merge commit

     

       66
       66
       +
               uses: ./.github/actions/checkout

     

       68
       67
        
               with:

     

       69
       69
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       70
       70
       -
                 merged-as-untrusted: true

     

       71
       71
       -
                 pinnedFrom: untrusted

     

       68
       68
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       69
       69
       +
                 pinned-from: untrusted

     

       72
       70
        
       

     

       73
       71
        
             - uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     

       74
       72
        
       

     
···

       92
       90
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       93
       91
        
               with:

     

       94
       92
        
                 sparse-checkout: .github/actions

     

       95
       95
       -
             - name: Check if the PR can be merged and checkout merged and target commits

     

       96
       96
       -
               uses: ./.github/actions/get-merge-commit

     

       93
       93
       +
             - name: Checkout merge and target commits

     

       94
       94
       +
               uses: ./.github/actions/checkout

     

       97
       95
        
               with:

     

       98
       98
       -
                 mergedSha: ${{ inputs.mergedSha }}

     

       99
       99
       -
                 merged-as-untrusted: true

     

       100
       100
       -
                 pinnedFrom: untrusted

     

       101
       101
       -
                 targetSha: ${{ inputs.targetSha }}

     

       102
       102
       -
                 target-as-trusted: true

     

       96
       96
       +
                 merged-as-untrusted-at: ${{ inputs.mergedSha }}

     

       97
       97
       +
                 pinned-from: untrusted

     

       98
       98
       +
                 target-as-trusted-at: ${{ inputs.targetSha }}

     

       103
       99
        
       

     

       104
       100
        
             - uses: cachix/install-nix-action@fc6e360bedc9ee72d75e701397f0bb30dce77568 # v31

     

       105
       101

+14 -49

.github/workflows/pr.yml

···

       3
       3
        
       on:

     

       4
       4
        
         pull_request:

     

       5
       5
        
           paths:

     

       6
       6
       -
             - .github/actions/get-merge-commit/action.yml

     

       6
       6
       +
             - .github/actions/checkout/action.yml

     

       7
       7
        
             - .github/workflows/build.yml

     

       8
       8
        
             - .github/workflows/check.yml

     

       9
       9
        
             - .github/workflows/eval.yml

     
···

       23
       23
        
         prepare:

     

       24
       24
        
           runs-on: ubuntu-24.04-arm

     

       25
       25
        
           outputs:

     

       26
       26
       -
             baseBranch: ${{ steps.branches.outputs.base }}

     

       27
       27
       -
             headBranch: ${{ steps.branches.outputs.head }}

     

       28
       28
       -
             mergedSha: ${{ steps.get-merge-commit.outputs.mergedSha }}

     

       29
       29
       -
             targetSha: ${{ steps.get-merge-commit.outputs.targetSha }}

     

       30
       30
       -
             systems: ${{ steps.systems.outputs.systems }}

     

       31
       31
       -
             touched: ${{ steps.files.outputs.touched }}

     

       26
       26
       +
             baseBranch: ${{ steps.prepare.outputs.base }}

     

       27
       27
       +
             headBranch: ${{ steps.prepare.outputs.head }}

     

       28
       28
       +
             mergedSha: ${{ steps.prepare.outputs.mergedSha }}

     

       29
       29
       +
             targetSha: ${{ steps.prepare.outputs.targetSha }}

     

       30
       30
       +
             systems: ${{ steps.prepare.outputs.systems }}

     

       31
       31
       +
             touched: ${{ steps.prepare.outputs.touched }}

     

       32
       32
        
           steps:

     

       33
       33
        
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

     

       34
       34
        
               with:

     

       35
       35
       +
                 sparse-checkout-cone-mode: true # default, for clarity

     

       35
       36
        
                 sparse-checkout: |

     

       36
       36
       -
                   .github/actions

     

       37
       37
        
                   ci/github-script

     

       38
       38
       -
                   ci/supportedBranches.js

     

       39
       39
       -
                   ci/supportedSystems.json

     

       40
       40
       -
             - name: Check if the PR can be merged and get the test merge commit

     

       41
       41
       -
               uses: ./.github/actions/get-merge-commit

     

       42
       42
       -
               id: get-merge-commit

     

       43
       43
       -
       

     

       44
       44
       -
             - name: Load supported systems

     

       45
       45
       -
               id: systems

     

       46
       46
       -
               run: |

     

       47
       47
       -
                 echo "systems=$(jq -c <ci/supportedSystems.json)" >> "$GITHUB_OUTPUT"

     

       48
       48
       -
       

     

       49
       49
       -
             - name: Determine branch type

     

       50
       50
       -
               id: branches

     

       38
       38
       +
             - id: prepare

     

       51
       39
        
               uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

     

       52
       40
        
               with:

     

       53
       41
        
                 script: |

     

       54
       54
       -
                   const { classify } = require('./ci/supportedBranches.js')

     

       55
       55
       -
                   const { base, head } = context.payload.pull_request

     

       56
       56
       -
       

     

       57
       57
       -
                   const baseClassification = classify(base.ref)

     

       58
       58
       -
                   core.setOutput('base', baseClassification)

     

       59
       59
       -
                   core.info('base classification:', baseClassification)

     

       60
       60
       -
       

     

       61
       61
       -
                   const headClassification =

     

       62
       62
       -
                     (base.repo.full_name == head.repo.full_name) ?

     

       63
       63
       -
                     classify(head.ref) :

     

       64
       64
       -
                     // PRs from forks are always considered WIP.

     

       65
       65
       -
                     { type: ['wip'] }

     

       66
       66
       -
                   core.setOutput('head', headClassification)

     

       67
       67
       -
                   core.info('head classification:', headClassification)

     

       68
       68
       -
       

     

       69
       69
       -
             - name: Determine changed files

     

       70
       70
       -
               id: files

     

       71
       71
       -
               uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

     

       72
       72
       -
               with:

     

       73
       73
       -
                 script: |

     

       74
       74
       -
                   const files = (await github.paginate(github.rest.pulls.listFiles, {

     

       75
       75
       -
                     ...context.repo,

     

       76
       76
       -
                     pull_number: context.payload.pull_request.number,

     

       77
       77
       -
                     per_page: 100,

     

       78
       78
       -
                   })).map(file => file.filename)

     

       79
       79
       -
       

     

       80
       80
       -
                   if (files.includes('ci/pinned.json')) core.setOutput('touched', ['pinned'])

     

       81
       81
       -
                   else core.setOutput('touched', [])

     

       42
       42
       +
                   require('./ci/github-script/prepare.js')({

     

       43
       43
       +
                     github,

     

       44
       44
       +
                     context,

     

       45
       45
       +
                     core,

     

       46
       46
       +
                   })

     

       82
       47
        
       

     

       83
       48
        
         check:

     

       84
       49
        
           name: Check

+31 -1

ci/github-script/prepare.js

···

       1
       1
       +
       const { classify } = require('../supportedBranches.js')

     

       2
       2
       +
       

     

       1
       3
        
       module.exports = async ({ github, context, core }) => {

     

       2
       4
        
         const pull_number = context.payload.pull_request.number

     

       3
       5
        
       

     
···

       19
       21
        
             await new Promise((resolve) => setTimeout(resolve, retryInterval * 1000))

     

       20
       22
        
             continue

     

       21
       23
        
           }

     

       24
       24
       +
       

     

       25
       25
       +
           const { base, head } = prInfo

     

       22
       26
        
       

     

       23
       27
        
           let mergedSha, targetSha

     

       24
       28
        
       

     
···

       39
       43
        
             targetSha = (

     

       40
       44
        
               await github.rest.repos.compareCommitsWithBasehead({

     

       41
       45
        
                 ...context.repo,

     

       42
       42
       -
                 basehead: `${prInfo.base.sha}...${prInfo.head.sha}`,

     

       46
       46
       +
                 basehead: `${base.sha}...${head.sha}`,

     

       43
       47
        
               })

     

       44
       48
        
             ).data.merge_base_commit.sha

     

       45
       49
        
           }

     
···

       49
       53
        
           )

     

       50
       54
        
           core.setOutput('mergedSha', mergedSha)

     

       51
       55
        
           core.setOutput('targetSha', targetSha)

     

       56
       56
       +
       

     

       57
       57
       +
           core.setOutput('systems', require('../supportedSystems.json'))

     

       58
       58
       +
       

     

       59
       59
       +
           const baseClassification = classify(base.ref)

     

       60
       60
       +
           core.setOutput('base', baseClassification)

     

       61
       61
       +
           console.log('base classification:', baseClassification)

     

       62
       62
       +
       

     

       63
       63
       +
           const headClassification =

     

       64
       64
       +
             base.repo.full_name === head.repo.full_name

     

       65
       65
       +
               ? classify(head.ref)

     

       66
       66
       +
               : // PRs from forks are always considered WIP.

     

       67
       67
       +
                 { type: ['wip'] }

     

       68
       68
       +
           core.setOutput('head', headClassification)

     

       69
       69
       +
           console.log('head classification:', headClassification)

     

       70
       70
       +
       

     

       71
       71
       +
           const files = (

     

       72
       72
       +
             await github.paginate(github.rest.pulls.listFiles, {

     

       73
       73
       +
               ...context.repo,

     

       74
       74
       +
               pull_number: context.payload.pull_request.number,

     

       75
       75
       +
               per_page: 100,

     

       76
       76
       +
             })

     

       77
       77
       +
           ).map((file) => file.filename)

     

       78
       78
       +
       

     

       79
       79
       +
           if (files.includes('ci/pinned.json')) core.setOutput('touched', ['pinned'])

     

       80
       80
       +
           else core.setOutput('touched', [])

     

       81
       81
       +
       

     

       52
       82
        
           return

     

       53
       83
        
         }

     

       54
       84
        
         throw new Error(