Merge pull request #1099 from nextcloud/automated/update-workflows/de…

…fault

.github/workflows/block-merge-eol.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2022-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Block merges for EOL
 
@@ -23,15 +26,15 @@ jobs:
  runs-on: ubuntu-latest-low
 
  steps:
- - name: Download updater config
- run: curl https://raw.githubusercontent.com/nextcloud/updater_server/production/config/config.php --output config.php
-
  - name: Set server major version environment
  run: |
  # retrieve version number from branch reference
  server_major=$(echo "${{ github.base_ref }}" | sed -En 's/stable//p')
  echo "server_major=$server_major" >> $GITHUB_ENV
+ echo "current_month=$(date +%Y-%m)" >> $GITHUB_ENV
 
  - name: Checking if ${{ env.server_major }} is EOL
  run: |
- php -r 'echo json_encode(require_once "config.php");' | jq --arg version "${{ env.server_major }}" '.stable[$version]["100"].eol // .beta[$version]["100"].eol' | grep --silent -i 'false'
+ curl -s https://raw.githubusercontent.com/nextcloud-releases/updater_server/production/config/major_versions.json \
+ | jq '.["${{ env.server_major }}"]["eol"] // "9999-99" | . >= "${{ env.current_month }}"' \
+ | grep -q true

.github/workflows/block-merge-freeze.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2022-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Block merges during freezes
 
@@ -27,10 +30,10 @@ jobs:
  steps:
  - name: Register server reference to fallback to master branch
  run: |
- server_ref="$(if [ "${{ github.base_ref }}" = "main" ]; then echo -n "master"; else echo -n "${{ github.base_ref }}"; fi)"
+ server_ref="$(if [ '${{ github.base_ref }}' = 'main' ]; then echo -n 'master'; else echo -n '${{ github.base_ref }}'; fi)"
  echo "server_ref=$server_ref" >> $GITHUB_ENV
  - name: Download version.php from ${{ env.server_ref }}
- run: curl https://raw.githubusercontent.com/nextcloud/server/${{ env.server_ref }}/version.php --output version.php
+ run: curl 'https://raw.githubusercontent.com/nextcloud/server/${{ env.server_ref }}/version.php' --output version.php
 
  - name: Run check
  run: cat version.php | grep 'OC_VersionString' | grep -i -v 'RC'

.github/workflows/command-compile.yml

@@ -1,3 +1,11 @@
+# This workflow is provided via the organization template repository
+#
+# https://github.com/nextcloud/.github
+# https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
+
 name: Compile Command
 on:
  issue_comment:
@@ -29,7 +37,7 @@ jobs:
  token: ${{ secrets.COMMAND_BOT_PAT }}
  repository: ${{ github.event.repository.full_name }}
  comment-id: ${{ github.event.comment.id }}
- reactions: "+1"
+ reactions: '+1'
 
  - name: Parse command
  uses: skjnldsv/parse-command-comment@5c955203c52424151e6d0e58fb9de8a9f6a605a1 # v2
@@ -61,19 +69,19 @@ jobs:
  key: git-repo
 
  - name: Checkout ${{ needs.init.outputs.head_ref }}
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  token: ${{ secrets.COMMAND_BOT_PAT }}
  fetch-depth: 0
  ref: ${{ needs.init.outputs.head_ref }}
 
  - name: Setup git
  run: |
- git config --local user.email "nextcloud-command@users.noreply.github.com"
- git config --local user.name "nextcloud-command"
+ git config --local user.email 'nextcloud-command@users.noreply.github.com'
+ git config --local user.name 'nextcloud-command'
 
  - name: Read package.json node and npm engines version
- uses: skjnldsv/read-package-engines-version-actions@8205673bab74a63eb9b8093402fd9e0e018663a1 # v2.2
+ uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
  id: package-engines-versions
  with:
  fallbackNode: '^20'
@@ -86,13 +94,13 @@ jobs:
  cache: npm
 
  - name: Set up npm ${{ steps.package-engines-versions.outputs.npmVersion }}
- run: npm i -g npm@"${{ steps.package-engines-versions.outputs.npmVersion }}"
+ run: npm i -g 'npm@${{ steps.package-engines-versions.outputs.npmVersion }}'
 
  - name: Rebase to ${{ needs.init.outputs.base_ref }}
  if: ${{ contains(needs.init.outputs.arg1, 'rebase') }}
  run: |
- git fetch origin ${{ needs.init.outputs.base_ref }}:${{ needs.init.outputs.base_ref }}
- git rebase origin/${{ needs.init.outputs.base_ref }}
+ git fetch origin '${{ needs.init.outputs.base_ref }}:${{ needs.init.outputs.base_ref }}'
+ git rebase 'origin/${{ needs.init.outputs.base_ref }}'
 
  - name: Install dependencies & build
  env:
@@ -105,30 +113,30 @@ jobs:
  - name: Commit default
  if: ${{ !contains(needs.init.outputs.arg1, 'fixup') && !contains(needs.init.outputs.arg1, 'amend') }}
  run: |
- git add ${{ github.workspace }}${{ needs.init.outputs.git_path }}
+ git add '${{ github.workspace }}${{ needs.init.outputs.git_path }}'
  git commit --signoff -m 'chore(assets): Recompile assets'
  
  - name: Commit fixup
  if: ${{ contains(needs.init.outputs.arg1, 'fixup') }}
  run: |
- git add ${{ github.workspace }}${{ needs.init.outputs.git_path }}
+ git add '${{ github.workspace }}${{ needs.init.outputs.git_path }}'
  git commit --fixup=HEAD --signoff
 
  - name: Commit amend
  if: ${{ contains(needs.init.outputs.arg1, 'amend') }}
  run: |
- git add ${{ github.workspace }}${{ needs.init.outputs.git_path }}
+ git add '${{ github.workspace }}${{ needs.init.outputs.git_path }}'
  git commit --amend --no-edit --signoff
  # Remove any [skip ci] from the amended commit
  git commit --amend -m "$(git log -1 --format='%B' | sed '/\[skip ci\]/d')"
  
  - name: Push normally
  if: ${{ !contains(needs.init.outputs.arg1, 'rebase') && !contains(needs.init.outputs.arg1, 'amend') }}
- run: git push origin ${{ needs.init.outputs.head_ref }}
+ run: git push origin '${{ needs.init.outputs.head_ref }}'
 
  - name: Force push
  if: ${{ contains(needs.init.outputs.arg1, 'rebase') || contains(needs.init.outputs.arg1, 'amend') }}
- run: git push --force origin ${{ needs.init.outputs.head_ref }}
+ run: git push --force origin '${{ needs.init.outputs.head_ref }}'
 
  - name: Add reaction on failure
  uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
@@ -137,4 +145,4 @@ jobs:
  token: ${{ secrets.COMMAND_BOT_PAT }}
  repository: ${{ github.event.repository.full_name }}
  comment-id: ${{ github.event.comment.id }}
- reactions: "-1"
+ reactions: '-1'

.github/workflows/dependabot-approve-merge.yml

@@ -31,7 +31,7 @@ jobs:
  pull-requests: write
 
  steps:
- # Github actions bot approve
+ # GitHub actions bot approve
  - uses: hmarr/auto-approve-action@b40d6c9ed2fa10c9a2749eca7eb004418a705501 # v2
  with:
  github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/fixup.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Block fixup and squash commits
 
@@ -28,6 +31,6 @@ jobs:
 
  steps:
  - name: Run check
- uses: skjnldsv/block-fixup-merge-action@42d26e1b536ce61e5cf467d65fb76caf4aa85acf # v1
+ uses: skjnldsv/block-fixup-merge-action@c138ea99e45e186567b64cf065ce90f7158c236a # v2
  with:
  repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lint-eslint.yml

@@ -3,8 +3,8 @@
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
 #
-# Use lint-eslint together with lint-eslint-when-unrelated to make eslint a required check for GitHub actions
-# https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/troubleshooting-required-status-checks#handling-skipped-but-required-checks
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Lint eslint
 
@@ -20,6 +20,9 @@ concurrency:
 jobs:
  changes:
  runs-on: ubuntu-latest-low
+ permissions:
+ contents: read
+ pull-requests: read
 
  outputs:
  src: ${{ steps.changes.outputs.src}}
@@ -53,10 +56,10 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
  - name: Read package.json node and npm engines version
- uses: skjnldsv/read-package-engines-version-actions@8205673bab74a63eb9b8093402fd9e0e018663a1 # v2.2
+ uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
  id: versions
  with:
  fallbackNode: '^20'
@@ -68,7 +71,7 @@ jobs:
  node-version: ${{ steps.versions.outputs.nodeVersion }}
 
  - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
- run: npm i -g npm@"${{ steps.versions.outputs.npmVersion }}"
+ run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'
 
  - name: Install dependencies
  env:

.github/workflows/lint-php-cs.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Lint php-cs
 
@@ -22,14 +25,14 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
  - name: Get php version
  id: versions
  uses: icewind1991/nextcloud-version-matrix@58becf3b4bb6dc6cef677b15e2fd8e7d48c0908f # v1.3.1
 
  - name: Set up php${{ steps.versions.outputs.php-available }}
- uses: shivammathur/setup-php@a4e22b60bbb9c1021113f2860347b0759f66fe5d # v2
+ uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2.31.0
  with:
  php-version: ${{ steps.versions.outputs.php-available }}
  extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite

.github/workflows/lint-php.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Lint php
 
@@ -21,7 +24,7 @@ jobs:
  php-versions: ${{ steps.versions.outputs.php-versions }}
  steps:
  - name: Checkout app
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  - name: Get version matrix
  id: versions
  uses: icewind1991/nextcloud-version-matrix@58becf3b4bb6dc6cef677b15e2fd8e7d48c0908f # v1.0.0
@@ -37,10 +40,10 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
  - name: Set up php ${{ matrix.php-versions }}
- uses: shivammathur/setup-php@a4e22b60bbb9c1021113f2860347b0759f66fe5d # v2
+ uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2.31.0
  with:
  php-version: ${{ matrix.php-versions }}
  extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite

.github/workflows/lint-stylelint.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Lint stylelint
 
@@ -22,10 +25,10 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
  - name: Read package.json node and npm engines version
- uses: skjnldsv/read-package-engines-version-actions@8205673bab74a63eb9b8093402fd9e0e018663a1 # v2.2
+ uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
  id: versions
  with:
  fallbackNode: '^20'
@@ -37,7 +40,7 @@ jobs:
  node-version: ${{ steps.versions.outputs.nodeVersion }}
 
  - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
- run: npm i -g npm@"${{ steps.versions.outputs.npmVersion }}"
+ run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'
 
  - name: Install dependencies
  env:

.github/workflows/node.yml

@@ -2,6 +2,9 @@
 #
 # https://github.com/nextcloud/.github
 # https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization
+#
+# SPDX-FileCopyrightText: 2021-2024 Nextcloud GmbH and Nextcloud contributors
+# SPDX-License-Identifier: MIT
 
 name: Node
 
@@ -17,6 +20,9 @@ concurrency:
 jobs:
  changes:
  runs-on: ubuntu-latest-low
+ permissions:
+ contents: read
+ pull-requests: read
 
  outputs:
  src: ${{ steps.changes.outputs.src}}
@@ -47,10 +53,10 @@ jobs:
  name: NPM build
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
  - name: Read package.json node and npm engines version
- uses: skjnldsv/read-package-engines-version-actions@8205673bab74a63eb9b8093402fd9e0e018663a1 # v2.2
+ uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3
  id: versions
  with:
  fallbackNode: '^20'
@@ -62,7 +68,7 @@ jobs:
  node-version: ${{ steps.versions.outputs.nodeVersion }}
 
  - name: Set up npm ${{ steps.versions.outputs.npmVersion }}
- run: npm i -g npm@"${{ steps.versions.outputs.npmVersion }}"
+ run: npm i -g 'npm@${{ steps.versions.outputs.npmVersion }}'
 
  - name: Install dependencies & build
  env: