From 9443ebcf6d62bc51bd4dd37dfcd2b7d091915813 Mon Sep 17 00:00:00 2001 From: Gregor Zeitlinger Date: Fri, 21 Aug 2026 12:51:44 +0000 Subject: [PATCH 1/2] chore: enable Flint GitHub Actions tracking Signed-off-by: Gregor Zeitlinger --- .github/config/flint.toml | 2 +- .github/renovate-tracked-deps.json | 266 +++++++++++++++++++++++++---- .github/renovate.json5 | 2 +- mise.lock | 44 ++--- mise.toml | 2 +- 5 files changed, 260 insertions(+), 56 deletions(-) diff --git a/.github/config/flint.toml b/.github/config/flint.toml index 45ec061d4..690e8caff 100644 --- a/.github/config/flint.toml +++ b/.github/config/flint.toml @@ -2,4 +2,4 @@ exclude = ["docs/themes/**", "mvnw", "simpleclient-archive/**"] [checks.renovate-deps] -exclude_managers = ["github-actions", "github-runners", "maven"] +exclude_managers = ["github-runners", "maven"] diff --git a/.github/renovate-tracked-deps.json b/.github/renovate-tracked-deps.json index 292f6b0d8..0578feabc 100644 --- a/.github/renovate-tracked-deps.json +++ b/.github/renovate-tracked-deps.json @@ -12,85 +12,218 @@ ] }, ".github/workflows/acceptance-tests.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/api-diff.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/approve-workflows.yml": { + "github-actions": [ + "prometheus/promci", + "ubuntu" ] }, ".github/workflows/build.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/bump-api-diff-baseline.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/codeql.yml": { + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/setup-java", + "github/codeql-action", + "ubuntu" + ] + }, + ".github/workflows/detect-api-changes.yml": { + "github-actions": [ + "ubuntu" ] }, ".github/workflows/generate-protobuf.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/download-artifact", + "actions/upload-artifact", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/github-pages.yaml": { - "regex": [ - "mise" + "github-actions": [ + "actions/checkout", + "actions/configure-pages", + "actions/deploy-pages", + "actions/upload-pages-artifact", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/issue-management-stale-action.yml": { + "github-actions": [ + "actions/stale", + "ubuntu" ] }, ".github/workflows/java-version-matrix-tests.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/jmx-exporter-compatibility.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/lint.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/micrometer-compatibility.yml": { + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ], "regex": [ "micrometer-metrics/micrometer", - "mise", "zeitlinger/micrometer" ] }, + ".github/workflows/multi-version-test.yml": { + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/setup-java", + "ubuntu" + ] + }, ".github/workflows/native-tests.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".github/workflows/nightly-benchmarks.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/download-artifact", + "actions/upload-artifact", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/pr-benchmark-report.yml": { + "github-actions": [ + "ubuntu" ] }, ".github/workflows/pr-benchmarks.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/download-artifact", + "actions/upload-artifact", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/pr-title.yml": { + "github-actions": [ + "grafana/shared-workflows", + "ubuntu" ] }, ".github/workflows/regenerate-api-diff-otel.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "actions/download-artifact", + "actions/upload-artifact", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/release-please.yml": { + "github-actions": [ + "googleapis/release-please-action", + "ubuntu" ] }, ".github/workflows/release.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/checkout", + "actions/setup-java", + "jdx/mise", + "jdx/mise-action", + "ubuntu" + ] + }, + ".github/workflows/scorecard.yml": { + "github-actions": [ + "actions/checkout", + "actions/upload-artifact", + "github/codeql-action", + "ossf/scorecard-action", + "ubuntu" ] }, ".github/workflows/test-release-build.yml": { - "regex": [ - "mise" + "github-actions": [ + "actions/cache", + "actions/checkout", + "jdx/mise", + "jdx/mise-action", + "ubuntu" ] }, ".mise/envs/jmx-exporter/mise.toml": { @@ -196,5 +329,76 @@ "maven-wrapper" ] } + }, + "actionMeta": { + "actions/cache": { + "packageName": "actions/cache", + "refKind": "version-tag" + }, + "actions/checkout": { + "packageName": "actions/checkout", + "refKind": "version-tag" + }, + "actions/configure-pages": { + "packageName": "actions/configure-pages", + "refKind": "version-tag" + }, + "actions/deploy-pages": { + "packageName": "actions/deploy-pages", + "refKind": "version-tag" + }, + "actions/download-artifact": { + "packageName": "actions/download-artifact", + "refKind": "version-tag" + }, + "actions/setup-java": { + "packageName": "actions/setup-java", + "refKind": "version-tag" + }, + "actions/stale": { + "packageName": "actions/stale", + "refKind": "version-tag" + }, + "actions/upload-artifact": { + "packageName": "actions/upload-artifact", + "refKind": "version-tag" + }, + "actions/upload-pages-artifact": { + "packageName": "actions/upload-pages-artifact", + "refKind": "version-tag" + }, + "github/codeql-action/analyze": { + "packageName": "github/codeql-action", + "refKind": "version-tag" + }, + "github/codeql-action/init": { + "packageName": "github/codeql-action", + "refKind": "version-tag" + }, + "github/codeql-action/upload-sarif": { + "packageName": "github/codeql-action", + "refKind": "version-tag" + }, + "googleapis/release-please-action": { + "packageName": "googleapis/release-please-action", + "refKind": "version-tag" + }, + "grafana/shared-workflows/actions/lint-pr-title": { + "packageName": "grafana/shared-workflows", + "refKind": "version-tag", + "compatibility": "lint-pr-title" + }, + "jdx/mise-action": { + "packageName": "jdx/mise-action", + "refKind": "version-tag" + }, + "ossf/scorecard-action": { + "packageName": "ossf/scorecard-action", + "refKind": "version-tag" + }, + "prometheus/promci/approve_workflows": { + "packageName": "prometheus/promci", + "refKind": "version-tag" + } } } diff --git a/.github/renovate.json5 b/.github/renovate.json5 index 720659e04..8df93bc0b 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -1,6 +1,6 @@ { $schema: "https://docs.renovatebot.com/renovate-schema.json", - extends: ["config:best-practices", "config:recommended", "github>grafana/flint#v0.22.10"], + extends: ["config:best-practices", "config:recommended", "github>grafana/flint#v0.22.11"], platformCommit: "enabled", automerge: true, ignorePaths: [ diff --git a/mise.lock b/mise.lock index fb1773f67..d938ee354 100644 --- a/mise.lock +++ b/mise.lock @@ -47,49 +47,49 @@ url_api = "https://api.github.com/repos/rhysd/actionlint/releases/assets/3849249 provenance = "github-attestations" [[tools."aqua:grafana/flint"]] -version = "0.22.10" +version = "0.22.11" backend = "aqua:grafana/flint" [tools."aqua:grafana/flint"."platforms.linux-arm64"] -checksum = "sha256:6dec82cb6486b7e645e0b1674493497191d92a8e28c5c79194e5553882d213de" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-aarch64-unknown-linux-gnu.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491750275" +checksum = "sha256:a197969873591f857833f7c71ab66506a4050e0a12cf1872b09741652d20e99c" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-aarch64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522530497" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.linux-arm64-musl"] -checksum = "sha256:373060c08a4cdd905d6e8e83f62ef43da8778d9133cb66b7801f392587812e8f" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-aarch64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491750193" +checksum = "sha256:1797194efc0843a0a2c001a235ca91cc09aee9a5a7dc74d25c190ae42445099b" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-aarch64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522530700" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.linux-x64"] -checksum = "sha256:a9f7f3768ec02cdd082c12cea0e815fc142d3ee721f4d8485f4ba9fc2c7d0521" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-x86_64-unknown-linux-gnu.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491749844" +checksum = "sha256:8c2400345fee126864183b96f8ec8a0f646b2c09abcd9ff25c7a0e56caa6f822" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522529698" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.linux-x64-musl"] -checksum = "sha256:3b174b31f10b1ded2cf0a54e8b62e5526713a49816c1fd74b00073519044f7bb" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-x86_64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491750257" +checksum = "sha256:bde67006096e2c38d4140d6362a6a83a9047cbe8bd1e4fcdeb7e7c0166b0f02c" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522530534" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.macos-arm64"] -checksum = "sha256:f9aa1a95aa5953f7f5a64c0d72f86e634c4930e9cb73422a95e342c6cb9be5d5" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-aarch64-apple-darwin.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491750245" +checksum = "sha256:a93e428a2561af80bad79810ce23dbab13e9d39519bfdbb6625e902d2b06f8fa" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522531026" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.macos-x64"] -checksum = "sha256:b55731f1b74196afea675bdbd6ebbbd94171b4e9d31f79ecee36372bdf8818cf" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-x86_64-apple-darwin.tar.gz" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491752660" +checksum = "sha256:c42ceb2cc835ec37b04f78215c243ebd24109f713757fbfffe7e4bc0c537a2ac" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522533290" provenance = "github-attestations" [tools."aqua:grafana/flint"."platforms.windows-x64"] -checksum = "sha256:494f16ad4d2d8eae137438832e544675d196a2887086ab8070a5a346d70650be" -url = "https://github.com/grafana/flint/releases/download/v0.22.10/flint-x86_64-pc-windows-msvc.zip" -url_api = "https://api.github.com/repos/grafana/flint/releases/assets/491751016" +checksum = "sha256:7474be1f55fc003dedf5e49da55f65b490f7783b49e6322cfabfb95930baba1a" +url = "https://github.com/grafana/flint/releases/download/v0.22.11/flint-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/grafana/flint/releases/assets/522531464" provenance = "github-attestations" [[tools."aqua:grafana/gcx"]] diff --git a/mise.toml b/mise.toml index 29085c417..db680ef98 100644 --- a/mise.toml +++ b/mise.toml @@ -13,7 +13,7 @@ protoc = "36.0" # Linters actionlint = "1.7.12" -"aqua:grafana/flint" = "0.22.10" +"aqua:grafana/flint" = "0.22.11" "aqua:jonwiggins/xmloxide" = "v0.5.0" "aqua:owenlamont/ryl" = "0.21.0" biome = "2.5.8" From f78b1adcd3ab04d0a63ee5de8dda2d8863307d71 Mon Sep 17 00:00:00 2001 From: Gregor Zeitlinger Date: Fri, 21 Aug 2026 13:06:53 +0000 Subject: [PATCH 2/2] chore: exclude Slack workspace from lychee Signed-off-by: Gregor Zeitlinger --- .github/config/lychee.toml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/config/lychee.toml b/.github/config/lychee.toml index d9c1cffa5..27f6f84df 100644 --- a/.github/config/lychee.toml +++ b/.github/config/lychee.toml @@ -16,6 +16,9 @@ exclude = [ # excluding links to pull requests and issues is done for performance "^https://github.com/prometheus/client_java/(issues|pull)/\\d+$", + # Slack workspace links return 403 to unauthenticated link checkers + "^https://cloud-native\\.slack\\.com/?$", + # exclude localhost URLs as they require running services "^http://localhost", "^https://localhost",