Bump the promci group across 4 directories with 3 updates (#129)

Bumps the promci group with 2 updates in the /build directory: prometheus/promci-setup and prometheus/promci-artifacts/save. Bumps the promci group with 1 update in the /examples directory: prometheus/promci-setup. Bumps the promci group with 2 updates in the /publish_main directory: prometheus/promci-setup and prometheus/promci-artifacts/restore. Bumps the promci group with 2 updates in the /publish_release directory: prometheus/promci-setup and prometheus/promci-artifacts/restore.

Updates prometheus/promci-setup from 0.2.1 to 0.2.2

Updates prometheus/promci-artifacts/save from 0.1.0 to 0.1.1

Updates prometheus/promci-setup from 0.2.1 to 0.2.2

Updates prometheus/promci-artifacts/restore from 0.1.0 to 0.1.1

Updates prometheus/promci-setup from 0.2.1 to 0.2.2

Updates prometheus/promci-artifacts/restore from 0.1.0 to 0.1.1

Updates prometheus/promci-setup from 0.2.1 to 0.2.2

Updates prometheus/promci-artifacts/restore from 0.1.0 to 0.1.1

Updates prometheus/promci-setup from 0.2.1 to 0.2.2

Updates prometheus/promci-artifacts/restore from 0.1.0 to 0.1.1

updated-dependencies:

dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-artifacts/save dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-artifacts/restore dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-artifacts/restore dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-artifacts/restore dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-setup dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci
dependency-name: prometheus/promci-artifacts/restore dependency-version: 0.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: promci …

Signed-off-by: dependabot[bot] support@github.com Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Prometheus Github Actions

Set of GitHub actions shared by GitHub projects in the Prometheus Ecosystem.

Usage

For a full working release example, see examples/ci.yml.

jobs:
  build:
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - uses: prometheus/promci/build@<sha> # v0.6.0

  publish_main:
    needs: [build]
    steps:
        uses: prometheus/promci/publish_main@<sha> # v0.6.0
        with:
          docker_hub_password: ${{ secrets.docker_hub_password }}
          quay_io_password: ${{ secrets.quay_io_password }}

  publish_release:
    needs: [build]
    permissions:
      contents: write
    steps:
        uses: prometheus/promci/publish_release@<sha> # v0.6.0
        with:
          docker_hub_password: ${{ secrets.docker_hub_password }}
          quay_io_password: ${{ secrets.quay_io_password }}
          github_token: ${{ github.token }}

Approving pull request workflows

The workflow approval action lets a trusted collaborator approve CI runs from public forks when the collaborator comments /workflow-approve on the pull request. The commenter must have triage access or higher.

Use the action from a workflow triggered by issue_comment:

jobs:
  approve:
    runs-on: ubuntu-latest
    permissions:
      actions: write
      contents: read
      pull-requests: write
    steps:
      - uses: prometheus/promci/approve_workflows@<sha>
        with:
          github_token: ${{ github.token }}

Pin the action to a full commit SHA.

Secondary images

To publish an additional image from a subdirectory Makefile (for example generator/ in snmp_exporter), pass working_directory and disable manifests when that Makefile has no docker-manifest target. For docker-only release publishes, set skip_github_release: true so promu does not attach tarballs to the GitHub release:

publish_generator_main:
  steps:
    - uses: prometheus/promci/publish_main@<sha>
      with:
        docker_hub_password: ${{ secrets.docker_hub_password }}
        ghcr_io_password: ${{ github.token }}
        quay_io_password: ${{ secrets.quay_io_password }}
        working_directory: generator
        skip_manifest: true

publish_generator_release:
  steps:
    - uses: prometheus/promci/publish_release@<sha>
      with:
        docker_hub_password: ${{ secrets.docker_hub_password }}
        ghcr_io_password: ${{ github.token }}
        quay_io_password: ${{ secrets.quay_io_password }}
        working_directory: generator
        skip_manifest: true
        skip_github_release: true