Repository navigation
[major] Release 3.0.0 #55
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync release version with PR title | |
| on: | |
| pull_request: | |
| types: | |
| - edited | |
| - synchronize | |
| permissions: | |
| contents: read | |
| jobs: | |
| sync: | |
| name: Recompute release version from title tag | |
| # head.repo check rejects fork PRs pretending to be our own release branches - | |
| # legitimate release/prep-* branches are always pushed by our own automation into this repo. | |
| # (Fork check itself is enforced inside the reusable workflow too; this is just | |
| # a cheap skip so we don't even spin up a job run for irrelevant PRs.) | |
| if: > | |
| startsWith(github.head_ref, 'release/prep-') && | |
| github.event.pull_request.head.repo.full_name == github.repository | |
| # Reusable workflow: secure-software-engineering/actions/release/README.md | |
| uses: secure-software-engineering/actions/.github/workflows/maven-release-title-sync.yml@7458a0f725752b2bf928c2f9e42c818b6abad742 # develop | |
| with: | |
| java_version: '21' | |
| tag_pattern: 'V{major}.{minor}.{patch}' | |
| secrets: | |
| release_pat: ${{ secrets.AUTO_MERGE_PAT }} # default GITHUB_TOKEN is blocked by branch protection |