Log clarifications for handleBackupSecretReceived
#25609
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Pull Request | |
| on: | |
| # Privilege escalation necessary access members of the review teams | |
| # 🚨 We must not execute any checked out code here, and be careful around use of user-controlled inputs. | |
| # FIXME: only `community-prs` job needs this privilege, so it should be in its own workflow file. | |
| pull_request_target: # zizmor: ignore[dangerous-triggers] | |
| types: [opened, edited, labeled, unlabeled, synchronize] | |
| merge_group: | |
| types: [checks_requested] | |
| workflow_call: | |
| secrets: | |
| ELEMENT_BOT_TOKEN: | |
| required: true | |
| concurrency: ${{ github.workflow }}-${{ github.event.pull_request.head.ref || github.head_ref || github.ref }} | |
| permissions: {} # We use ELEMENT_BOT_TOKEN instead | |
| jobs: | |
| changelog: | |
| name: Preview Changelog | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe # v5 | |
| if: github.event_name != 'merge_group' | |
| with: | |
| labels: | | |
| X-Breaking-Change | |
| T-Deprecation | |
| T-Enhancement | |
| T-Defect | |
| T-Task | |
| Dependencies | |
| mode: minimum | |
| count: 1 | |
| prevent-blocked: | |
| name: Prevent Blocked | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| pull-requests: read | |
| steps: | |
| - name: Add notice | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 | |
| if: contains(github.event.pull_request.labels.*.name, 'X-Blocked') | |
| with: | |
| script: | | |
| core.setFailed("Preventing merge whilst PR is marked blocked!"); | |
| community-prs: | |
| name: Label Community PRs | |
| runs-on: ubuntu-24.04 | |
| if: github.event.action == 'opened' | |
| permissions: | |
| pull-requests: write | |
| steps: | |
| - name: Check membership | |
| if: github.event.pull_request.user.login != 'renovate[bot]' && github.event.pull_request.user.login != 'dependabot[bot]' | |
| uses: tspascoal/get-user-teams-membership@57e9f42acd78f4d0f496b3be4368fc5f62696662 # v3 | |
| id: teams | |
| with: | |
| username: ${{ github.event.pull_request.user.login }} | |
| organization: matrix-org | |
| team: Core Team | |
| GITHUB_TOKEN: ${{ secrets.ELEMENT_BOT_TOKEN }} | |
| - name: Add label | |
| if: steps.teams.outputs.isTeamMember == 'false' | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 | |
| with: | |
| script: | | |
| github.rest.issues.addLabels({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| labels: ['Z-Community-PR'] | |
| }); | |
| close-if-fork-develop: | |
| name: Forbid develop branch fork contributions | |
| runs-on: ubuntu-24.04 | |
| permissions: | |
| pull-requests: write | |
| if: > | |
| github.event.action == 'opened' && | |
| github.event.pull_request.head.ref == 'develop' && | |
| github.event.pull_request.head.repo.full_name != github.repository | |
| steps: | |
| - name: Close pull request | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 | |
| with: | |
| script: | | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: "Thanks for opening this pull request, unfortunately we do not accept contributions from the main" + | |
| " branch of your fork, please re-open once you switch to an alternative branch for everyone's sanity." + | |
| " See https://github.com/matrix-org/matrix-js-sdk/blob/develop/CONTRIBUTING.md", | |
| }); | |
| github.rest.pulls.update({ | |
| pull_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| state: 'closed' | |
| }); |