From 54fbb587f50b5468797b670bc11c4b6a562d8286 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:20:10 -0400 Subject: [PATCH 1/7] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/issue_to_jira.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/issue_to_jira.yml b/.github/workflows/issue_to_jira.yml index 057d078..3c007e7 100644 --- a/.github/workflows/issue_to_jira.yml +++ b/.github/workflows/issue_to_jira.yml @@ -6,7 +6,7 @@ on: jobs: call-workflow-create-jira-issue: - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v3 secrets: inherit with: project-key: 'GEOPY' From 685116f59931cc0538d56cec36bfaf95f2fc2c29 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:20:16 -0400 Subject: [PATCH 2/7] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/python_analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python_analysis.yml b/.github/workflows/python_analysis.yml index 0bbbf8c..0729d67 100644 --- a/.github/workflows/python_analysis.yml +++ b/.github/workflows/python_analysis.yml @@ -24,14 +24,14 @@ concurrency: jobs: call-workflow-static-analysis: name: Static analysis - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-static_analysis.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-static_analysis.yml@v3 with: package-manager: 'conda' app-name: 'surface_apps' python-version: '3.12' call-workflow-pytest: name: Pytest - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-pytest.yml@v3 with: package-manager: 'conda' python-versions: '["3.12", "3.13"]' From 8dbde6ae6f6893bf88fb1c74f03fd0a2a80699c1 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:20:23 -0400 Subject: [PATCH 3/7] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/python_deploy_dev.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python_deploy_dev.yml b/.github/workflows/python_deploy_dev.yml index 033320c..89c5b1d 100644 --- a/.github/workflows/python_deploy_dev.yml +++ b/.github/workflows/python_deploy_dev.yml @@ -12,7 +12,7 @@ concurrency: jobs: call-workflow-conda-publish: name: Publish development conda package on JFrog Artifactory - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_rattler_package.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_rattler_package.yml@v3 with: package-name: 'surface-apps' python-version: '3.12' @@ -25,7 +25,7 @@ jobs: JFROG_ARTIFACTORY_TOKEN: ${{ secrets.JFROG_ARTIFACTORY_TOKEN }} call-workflow-pypi-publish: name: Publish development pypi package (JFrog Artifactory, TestPyPI) - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_pypi_package.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-publish_pypi_package.yml@v3 with: package-manager: 'poetry' package-name: 'surface-apps' From 62155c61a972ccf3e313d9b8b7497a3aea4ed68e Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Mon, 6 Jul 2026 16:20:29 -0400 Subject: [PATCH 4/7] DEVOPS-1128: pin MiraGeoscience/CI-tools action/workflow refs to @v3 Authored using a powershell script with the help of Copilot. --- .github/workflows/python_deploy_prod.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python_deploy_prod.yml b/.github/workflows/python_deploy_prod.yml index 217b607..5584bdc 100644 --- a/.github/workflows/python_deploy_prod.yml +++ b/.github/workflows/python_deploy_prod.yml @@ -27,7 +27,7 @@ jobs: call-workflow-conda-release: name: Publish production Conda package on JFrog Artifactory if: ${{ github.event_name == 'release' || github.event.inputs.publish-conda == 'true' }} - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-release_conda_assets.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-release_conda_assets.yml@v3 with: virtual-repo-names: '["public-noremote-conda-prod"]' release-tag: ${{ github.event.release.tag_name || github.event.inputs.release-tag }} @@ -37,7 +37,7 @@ jobs: call-workflow-pypi-release: name: Publish production PyPI package (JFrog Artifactory, PyPI) if: ${{ github.event_name == 'release' || github.event.inputs.publish-pypi == 'true' }} - uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-release_pypi_assets.yml@main + uses: MiraGeoscience/CI-tools/.github/workflows/reusable-python-release_pypi_assets.yml@v3 with: package-name: 'surface-apps' virtual-repo-names: '["public-pypi-prod", "pypi"]' From b5996b96d7835a7ef4a141548740fde6c07f7971 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Tue, 7 Jul 2026 11:07:21 -0400 Subject: [PATCH 5/7] DEVOPS-1128: standardize dependabot.yml (ignore minor/patch CI-tools updates, groups, weekly schedule) Authored using a powershell script with the help of Copilot. --- .github/dependabot.yml | 23 +++++++++++++++++++++-- 1 file changed, 21 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 49ba8e6..fd7fa2b 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,25 @@ version: 2 updates: - package-ecosystem: "github-actions" directory: "/" - schedule: - interval: "monthly" target-branch: "develop" + schedule: + interval: "weekly" + cooldown: + default-days: 4 + ignore: + - dependency-name: "MiraGeoscience/CI-tools/.github/actions/*" + update-types: + - "version-update:semver-minor" + - "version-update:semver-patch" + - dependency-name: "MiraGeoscience/CI-tools/.github/workflows/*" + update-types: + - "version-update:semver-minor" + - "version-update:semver-patch" + groups: + github-actions: + patterns: + - actions/* + mirageo-ci-tools: + patterns: + - MiraGeoscience/CI-tools/.github/actions/* + - MiraGeoscience/CI-tools/.github/workflows/* From 3be1d5beee66208a1aa0b54dad2521ba86df18a4 Mon Sep 17 00:00:00 2001 From: RomainFloreani Date: Fri, 10 Jul 2026 11:14:21 -0400 Subject: [PATCH 6/7] DEVOPS-1128: drop the minor/patch ignore rule for CI-tools dependencies (decided not to proceed with it) Authored using a powershell script with the help of Copilot. --- .github/dependabot.yml | 9 --------- 1 file changed, 9 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index fd7fa2b..1874a35 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -12,15 +12,6 @@ updates: interval: "weekly" cooldown: default-days: 4 - ignore: - - dependency-name: "MiraGeoscience/CI-tools/.github/actions/*" - update-types: - - "version-update:semver-minor" - - "version-update:semver-patch" - - dependency-name: "MiraGeoscience/CI-tools/.github/workflows/*" - update-types: - - "version-update:semver-minor" - - "version-update:semver-patch" groups: github-actions: patterns: From 45f3bd262c701b920c69509c1cc303968a8decbb Mon Sep 17 00:00:00 2001 From: Romain Floreani Date: Fri, 10 Jul 2026 11:46:42 -0400 Subject: [PATCH 7/7] Update Jira issue workflow permissions and secrets --- .github/workflows/issue_to_jira.yml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/issue_to_jira.yml b/.github/workflows/issue_to_jira.yml index 3c007e7..7765352 100644 --- a/.github/workflows/issue_to_jira.yml +++ b/.github/workflows/issue_to_jira.yml @@ -7,6 +7,11 @@ on: jobs: call-workflow-create-jira-issue: uses: MiraGeoscience/CI-tools/.github/workflows/reusable-jira-issue_to_jira.yml@v3 - secrets: inherit + permissions: + issues: write + secrets: + JIRA_BASE_URL: ${{ secrets.JIRA_BASE_URL }} + JIRA_USER_EMAIL: ${{ secrets.JIRA_USER_EMAIL_WRITE }} + JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN_WRITE }} with: - project-key: 'GEOPY' + project_key: 'GEOPY'