From 59a583fedd1467f26cbd79b68a83ccd3262d60f8 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:18:14 -0400 Subject: [PATCH 1/5] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/issue_to_jira.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/issue_to_jira.yml b/.github/workflows/issue_to_jira.yml index ee6f8d5..3065f2b 100644 --- a/.github/workflows/issue_to_jira.yml +++ b/.github/workflows/issue_to_jira.yml @@ -6,7 +6,7 @@ on: jobs: call-workflow-create-jira-issue: - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v1.0.0 + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v3 secrets: inherit with: project_key: 'GEOPY' From 462d1e8888051127e03d51df53be0a6d83b1c6eb Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:18:19 -0400 Subject: [PATCH 2/5] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/python_analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python_analysis.yml b/.github/workflows/python_analysis.yml index 0aecba6..0502b2e 100644 --- a/.github/workflows/python_analysis.yml +++ b/.github/workflows/python_analysis.yml @@ -24,14 +24,14 @@ concurrency: jobs: call-workflow-static-analysis: name: Static analysis - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-static_analysis.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-static_analysis.yml@v3 with: package-manager: 'poetry' app-name: 'mirageoscience' python-version: '3.10' call-workflow-pytest: name: Pytest - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@v3 with: package-manager: 'poetry' python-versions: '["3.10", "3.11", "3.12"]' From afae798e47be7eaa90c40f46889d302dfe13aee8 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Tue, 7 Jul 2026 11:05:16 -0400 Subject: [PATCH 3/5] DEVOPS-1128: standardize dependabot.yml (ignore minor/patch CI-tools updates, groups, weekly schedule) Authored using a powershell script with the help of Copilot. --- .github/dependabot.yml | 25 ++++++++++++++++++++++--- 1 file changed, 22 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5990d9c..535d979 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,11 +1,30 @@ # To get started with Dependabot version updates, you'll need to specify which # package ecosystems to update and where the package manifests are located. # Please see the documentation for all configuration options: -# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates version: 2 updates: - - package-ecosystem: "" # See documentation for possible values - directory: "/" # Location of package manifests + - package-ecosystem: "github-actions" + directory: "/" schedule: interval: "weekly" + cooldown: + default-days: 4 + ignore: + - dependency-name: "MiraGeoscience/CI-tools/.github/actions/*" + update-types: + - "version-update:semver-minor" + - "version-update:semver-patch" + - dependency-name: "MiraGeoscience/CI-tools/.github/workflows/*" + update-types: + - "version-update:semver-minor" + - "version-update:semver-patch" + groups: + github-actions: + patterns: + - actions/* + mirageo-ci-tools: + patterns: + - MiraGeoscience/CI-tools/.github/actions/* + - MiraGeoscience/CI-tools/.github/workflows/* From bc5e773ba2259a8b12ab09d2672ec66bd008a479 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Fri, 10 Jul 2026 11:14:01 -0400 Subject: [PATCH 4/5] DEVOPS-1128: drop the minor/patch ignore rule for CI-tools dependencies (decided not to proceed with it) Authored using a powershell script with the help of Copilot. --- .github/dependabot.yml | 9 --------- 1 file changed, 9 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 535d979..887dca8 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,15 +11,6 @@ updates: interval: "weekly" cooldown: default-days: 4 - ignore: - - dependency-name: "MiraGeoscience/CI-tools/.github/actions/*" - update-types: - - "version-update:semver-minor" - - "version-update:semver-patch" - - dependency-name: "MiraGeoscience/CI-tools/.github/workflows/*" - update-types: - - "version-update:semver-minor" - - "version-update:semver-patch" groups: github-actions: patterns: From 3f12fb12d85c9232b41c77a1f1ab4ab384f09b0a Mon Sep 17 00:00:00 2001 From: Romain Floreani Date: Fri, 10 Jul 2026 11:45:55 -0400 Subject: [PATCH 5/5] Add permissions and secrets for JIRA issue creation --- .github/workflows/issue_to_jira.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/issue_to_jira.yml b/.github/workflows/issue_to_jira.yml index 3065f2b..7765352 100644 --- a/.github/workflows/issue_to_jira.yml +++ b/.github/workflows/issue_to_jira.yml @@ -7,6 +7,11 @@ on: jobs: call-workflow-create-jira-issue: uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v3 - secrets: inherit + permissions: + issues: write + secrets: + JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }} + JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL_WRITE }} + JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN_WRITE }} with: project_key: 'GEOPY'