diff --git a/.github/workflows/__check_pr.yaml b/.github/workflows/__check_pr.yaml index 8046d6bd..20f6999c 100644 --- a/.github/workflows/__check_pr.yaml +++ b/.github/workflows/__check_pr.yaml @@ -15,3 +15,4 @@ jobs: name: Check pull request uses: $/.github/workflows/check_python_package_pr.yaml permissions: {} + cache-mode: none diff --git a/.github/workflows/__lint.yaml b/.github/workflows/__lint.yaml index 5f8f0c25..6c5c2e66 100644 --- a/.github/workflows/__lint.yaml +++ b/.github/workflows/__lint.yaml @@ -11,3 +11,4 @@ jobs: uses: $/.github/workflows/lint_workflows.yaml permissions: contents: read + cache-mode: none diff --git a/.github/workflows/__release.yaml b/.github/workflows/__release.yaml index 6e2f1a32..ebfc70c2 100644 --- a/.github/workflows/__release.yaml +++ b/.github/workflows/__release.yaml @@ -37,3 +37,4 @@ jobs: RELEASE_TAG: ${{ steps.create-tag.outputs.tag }} permissions: contents: write # Needed to create release + cache-mode: none diff --git a/.github/workflows/_mirror_charm.md b/.github/workflows/_mirror_charm.md index 7200d60e..bc409985 100644 --- a/.github/workflows/_mirror_charm.md +++ b/.github/workflows/_mirror_charm.md @@ -29,6 +29,7 @@ jobs: token: ${{ secrets.MIRROR_REPOS_PAT }} permissions: contents: read + cache-mode: none ``` Add `MIRROR_REPOS_PAT` as an environment secret for the `mirror-repos` environment: https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/use-secrets#creating-secrets-for-an-environment. **Do not** add it as a repository secret. diff --git a/.github/workflows/_mirror_charm.yaml b/.github/workflows/_mirror_charm.yaml index 72f53a95..23377ee5 100644 --- a/.github/workflows/_mirror_charm.yaml +++ b/.github/workflows/_mirror_charm.yaml @@ -43,3 +43,4 @@ jobs: VAR_REPOSITORY: ${{ inputs.repository }} permissions: contents: read + cache-mode: none diff --git a/.github/workflows/_promote_charm_legacy_1.md b/.github/workflows/_promote_charm_legacy_1.md index 492d19bd..f0696408 100644 --- a/.github/workflows/_promote_charm_legacy_1.md +++ b/.github/workflows/_promote_charm_legacy_1.md @@ -47,6 +47,7 @@ jobs: charmhub-token: ${{ secrets.CHARMHUB_TOKEN_PROMOTION }} permissions: contents: write # Needed to edit GitHub releases + cache-mode: none ``` ### Step 2: Add `check_pr.yaml` file to `.github/workflows/` ```yaml @@ -69,6 +70,7 @@ jobs: name: Check pull request uses: canonical/data-platform-workflows/.github/workflows/check_charm_pr.yaml@v0.0.0 permissions: {} + cache-mode: none ``` Update `branches` to include all branches that [`release_charm_edge.yaml`](release_charm_edge.md) runs on diff --git a/.github/workflows/_promote_charm_legacy_1.yaml b/.github/workflows/_promote_charm_legacy_1.yaml index 9304a1c7..b5f2bbf2 100644 --- a/.github/workflows/_promote_charm_legacy_1.yaml +++ b/.github/workflows/_promote_charm_legacy_1.yaml @@ -96,3 +96,4 @@ jobs: run: cat ~/.local/state/charmcraft/log/* permissions: contents: write # Needed to edit GitHub releases + cache-mode: none diff --git a/.github/workflows/_promote_charms.md b/.github/workflows/_promote_charms.md index 0b6cc210..e9f8392c 100644 --- a/.github/workflows/_promote_charms.md +++ b/.github/workflows/_promote_charms.md @@ -48,6 +48,7 @@ jobs: charmhub-token: ${{ secrets.CHARMHUB_TOKEN_PROMOTION }} permissions: contents: write # Needed to edit GitHub releases + cache-mode: none ``` ### Step 2: Add `check_pr.yaml` file to `.github/workflows/` @@ -70,6 +71,7 @@ jobs: name: Check pull request uses: canonical/data-platform-workflows/.github/workflows/check_charm_pr.yaml@v0.0.0 permissions: {} + cache-mode: none ``` Update `branches` to include all branches that [`release_charm_edge.yaml`](release_charm_edge.md) runs on diff --git a/.github/workflows/_promote_charms.yaml b/.github/workflows/_promote_charms.yaml index 00c71340..5ee6cc6e 100644 --- a/.github/workflows/_promote_charms.yaml +++ b/.github/workflows/_promote_charms.yaml @@ -87,3 +87,4 @@ jobs: run: cat ~/.local/state/charmcraft/log/* permissions: contents: write # Needed to edit GitHub releases + cache-mode: none diff --git a/.github/workflows/_promote_charms_legacy_2.md b/.github/workflows/_promote_charms_legacy_2.md index 49418735..a60bda4e 100644 --- a/.github/workflows/_promote_charms_legacy_2.md +++ b/.github/workflows/_promote_charms_legacy_2.md @@ -49,6 +49,7 @@ jobs: charmhub-token: ${{ secrets.CHARMHUB_TOKEN_PROMOTION }} permissions: contents: write # Needed to edit GitHub releases + cache-mode: none ``` ### Step 2: Add `check_pr.yaml` file to `.github/workflows/` ```yaml @@ -70,6 +71,7 @@ jobs: name: Check pull request uses: canonical/data-platform-workflows/.github/workflows/check_charm_pr.yaml@v0.0.0 permissions: {} + cache-mode: none ``` Update `branches` to include all branches that [`release_charm_edge.yaml`](release_charm_edge.md) runs on diff --git a/.github/workflows/_promote_charms_legacy_2.yaml b/.github/workflows/_promote_charms_legacy_2.yaml index b0f71985..2b0967cf 100644 --- a/.github/workflows/_promote_charms_legacy_2.yaml +++ b/.github/workflows/_promote_charms_legacy_2.yaml @@ -91,3 +91,4 @@ jobs: run: cat ~/.local/state/charmcraft/log/* permissions: contents: write # Needed to edit GitHub releases + cache-mode: none diff --git a/.github/workflows/_promote_snaps.md b/.github/workflows/_promote_snaps.md index 0a3cffe0..18d20599 100644 --- a/.github/workflows/_promote_snaps.md +++ b/.github/workflows/_promote_snaps.md @@ -42,6 +42,7 @@ jobs: snapcraft-token: ${{ secrets.SNAPCRAFT_TOKEN }} permissions: contents: write # Needed to edit GitHub releases + cache-mode: none ``` ### Step 2: Add `.github/release.yaml` file diff --git a/.github/workflows/_promote_snaps.yaml b/.github/workflows/_promote_snaps.yaml index dc318fc4..a1b46fcb 100644 --- a/.github/workflows/_promote_snaps.yaml +++ b/.github/workflows/_promote_snaps.yaml @@ -77,3 +77,4 @@ jobs: run: cat ~/.local/state/snapcraft/log/* permissions: contents: write # Needed to edit GitHub releases + cache-mode: none diff --git a/.github/workflows/_update_bundle.md b/.github/workflows/_update_bundle.md index fd5c07ff..7f17f407 100644 --- a/.github/workflows/_update_bundle.md +++ b/.github/workflows/_update_bundle.md @@ -26,6 +26,7 @@ jobs: permissions: contents: write # Needed to push branch pull-requests: write # Needed to create PR + cache-mode: none ``` Add `CREATE_PR_APP_TOKEN` as an environment secret for the `update-bundle` environment: https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/use-secrets#creating-secrets-for-an-environment. **Do not** add it as a repository secret. diff --git a/.github/workflows/_update_bundle.yaml b/.github/workflows/_update_bundle.yaml index 6b3bb64a..32c32d90 100644 --- a/.github/workflows/_update_bundle.yaml +++ b/.github/workflows/_update_bundle.yaml @@ -79,3 +79,4 @@ jobs: permissions: contents: write # Needed to push branch pull-requests: write # Needed to create PR + cache-mode: none diff --git a/.github/workflows/approve_renovate_pr.md b/.github/workflows/approve_renovate_pr.md index 7c4726d0..85688463 100644 --- a/.github/workflows/approve_renovate_pr.md +++ b/.github/workflows/approve_renovate_pr.md @@ -19,4 +19,5 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/approve_renovate_pr.yaml@v0.0.0 permissions: pull-requests: write # Needed to approve PR + cache-mode: none ``` diff --git a/.github/workflows/approve_renovate_pr.yaml b/.github/workflows/approve_renovate_pr.yaml index 324cf47f..c485af30 100644 --- a/.github/workflows/approve_renovate_pr.yaml +++ b/.github/workflows/approve_renovate_pr.yaml @@ -16,3 +16,4 @@ jobs: VAR_PR_NUMBER: ${{ github.event.pull_request.number }} permissions: pull-requests: write # Needed to approve PR + cache-mode: none diff --git a/.github/workflows/build_charm.md b/.github/workflows/build_charm.md index 0a394ec0..30d27958 100644 --- a/.github/workflows/build_charm.md +++ b/.github/workflows/build_charm.md @@ -10,6 +10,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_charm.yaml@v0.0.0 permissions: contents: read + cache-mode: none ``` Unless you disable caching (with `cache: false`), remember to add your charm's branch(es) to charmcraftcache: https://github.com/canonical/charmcraftcache?tab=readme-ov-file#usage diff --git a/.github/workflows/build_charm.yaml b/.github/workflows/build_charm.yaml index cc2c57fc..9ab977c6 100644 --- a/.github/workflows/build_charm.yaml +++ b/.github/workflows/build_charm.yaml @@ -78,6 +78,7 @@ jobs: platforms: ${{ steps.collect.outputs.platforms }} permissions: contents: read + cache-mode: none build: strategy: @@ -185,3 +186,4 @@ jobs: if-no-files-found: error permissions: contents: read + cache-mode: none diff --git a/.github/workflows/build_rock.md b/.github/workflows/build_rock.md index 38cfab12..981a4589 100644 --- a/.github/workflows/build_rock.md +++ b/.github/workflows/build_rock.md @@ -10,6 +10,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v0.0.0 permissions: contents: read + cache-mode: none ``` ### Supported `platforms` syntax in rockcraft.yaml diff --git a/.github/workflows/build_rock.yaml b/.github/workflows/build_rock.yaml index 49207406..b1e3aafa 100644 --- a/.github/workflows/build_rock.yaml +++ b/.github/workflows/build_rock.yaml @@ -74,6 +74,7 @@ jobs: platforms: ${{ steps.collect.outputs.platforms }} permissions: contents: read + cache-mode: none build: strategy: @@ -164,3 +165,4 @@ jobs: if-no-files-found: error permissions: contents: read + cache-mode: none diff --git a/.github/workflows/build_snap.md b/.github/workflows/build_snap.md index c9d81e85..d4d1a759 100644 --- a/.github/workflows/build_snap.md +++ b/.github/workflows/build_snap.md @@ -10,6 +10,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_snap.yaml@v0.0.0 permissions: contents: read + cache-mode: none ``` ### Supported `platforms` and `architectures` syntax in snapcraft.yaml diff --git a/.github/workflows/build_snap.yaml b/.github/workflows/build_snap.yaml index d354cac9..7df80ff4 100644 --- a/.github/workflows/build_snap.yaml +++ b/.github/workflows/build_snap.yaml @@ -82,6 +82,7 @@ jobs: platforms: ${{ steps.collect.outputs.platforms }} permissions: contents: read + cache-mode: none build: strategy: @@ -173,3 +174,4 @@ jobs: if-no-files-found: error permissions: contents: read + cache-mode: none diff --git a/.github/workflows/check_charm_pr.yaml b/.github/workflows/check_charm_pr.yaml index bd72ce5f..dbeb88d2 100644 --- a/.github/workflows/check_charm_pr.yaml +++ b/.github/workflows/check_charm_pr.yaml @@ -33,3 +33,4 @@ jobs: env: LABELS: ${{ toJSON(github.event.pull_request.labels.*.name) }} permissions: {} + cache-mode: none diff --git a/.github/workflows/check_python_package_pr.yaml b/.github/workflows/check_python_package_pr.yaml index 5dcaf5c9..16f76623 100644 --- a/.github/workflows/check_python_package_pr.yaml +++ b/.github/workflows/check_python_package_pr.yaml @@ -17,3 +17,4 @@ jobs: env: TITLE: ${{ github.event.pull_request.title }} permissions: {} + cache-mode: none diff --git a/.github/workflows/lint_workflows.md b/.github/workflows/lint_workflows.md index f65a7391..4f25bc7e 100644 --- a/.github/workflows/lint_workflows.md +++ b/.github/workflows/lint_workflows.md @@ -11,6 +11,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/lint_workflows.yaml@v0.0.0 permissions: contents: read + cache-mode: none ``` ### Step 2: Add `.github/zizmor.yaml` file diff --git a/.github/workflows/lint_workflows.yaml b/.github/workflows/lint_workflows.yaml index 300c5b8e..aa621371 100644 --- a/.github/workflows/lint_workflows.yaml +++ b/.github/workflows/lint_workflows.yaml @@ -22,3 +22,4 @@ jobs: run: zizmor . permissions: contents: read + cache-mode: none diff --git a/.github/workflows/release_charm_edge.md b/.github/workflows/release_charm_edge.md index c1ec0b5f..ffb25fe2 100644 --- a/.github/workflows/release_charm_edge.md +++ b/.github/workflows/release_charm_edge.md @@ -22,6 +22,7 @@ jobs: track: 'latest' permissions: contents: write # Needed to create git tag + cache-mode: none build: name: Build charm @@ -30,6 +31,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_charm.yaml@v0.0.0 permissions: contents: read + cache-mode: none release: name: Release charm @@ -44,6 +46,7 @@ jobs: charmhub-token: ${{ secrets.CHARMHUB_TOKEN_EDGE }} permissions: contents: write # Needed to create git tags + cache-mode: none ``` ### Step 2: Add Charmhub token diff --git a/.github/workflows/release_charm_edge.yaml b/.github/workflows/release_charm_edge.yaml index cf4d5060..32551747 100644 --- a/.github/workflows/release_charm_edge.yaml +++ b/.github/workflows/release_charm_edge.yaml @@ -111,3 +111,4 @@ jobs: run: cat ~/.local/state/charmcraft/log/* permissions: contents: write # Needed to create git tags + cache-mode: none diff --git a/.github/workflows/release_charm_pr.md b/.github/workflows/release_charm_pr.md index 0d3a721c..ecc7a8e0 100644 --- a/.github/workflows/release_charm_pr.md +++ b/.github/workflows/release_charm_pr.md @@ -14,6 +14,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_charm.yaml@v0.0.0 permissions: contents: read + cache-mode: none release: name: Release charm to Charmhub branch @@ -27,6 +28,7 @@ jobs: charmhub-token: ${{ secrets.CHARMHUB_TOKEN_EDGE_PR }} permissions: contents: read + cache-mode: none ``` ### Step 2: Add Charmhub token diff --git a/.github/workflows/release_charm_pr.yaml b/.github/workflows/release_charm_pr.yaml index 286dd88e..f1f26bc0 100644 --- a/.github/workflows/release_charm_pr.yaml +++ b/.github/workflows/release_charm_pr.yaml @@ -109,3 +109,4 @@ jobs: run: cat ~/.local/state/charmcraft/log/* permissions: contents: read + cache-mode: none diff --git a/.github/workflows/release_python_package.md b/.github/workflows/release_python_package.md index 2ac32b65..589d6f7a 100644 --- a/.github/workflows/release_python_package.md +++ b/.github/workflows/release_python_package.md @@ -45,6 +45,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/release_python_package_part1.yaml@v0.0.0 permissions: contents: write # Needed to create git tag + cache-mode: none # Separate job needed to workaround https://github.com/pypi/warehouse/issues/11096 release-trusted-publishing: @@ -66,6 +67,7 @@ jobs: uses: pypa/gh-action-pypi-publish@release/v1 permissions: id-token: write # Needed for PyPI trusted publishing + cache-mode: none release-part2: name: Release to PyPI (part 2) @@ -77,6 +79,7 @@ jobs: git-tag: ${{ needs.release-part1.outputs.git-tag }} permissions: contents: write # Needed to create GitHub release + cache-mode: none ``` ### Step 3: Add `check_pr.yaml` file to `.github/workflows/` @@ -98,6 +101,7 @@ jobs: name: Check pull request uses: canonical/data-platform-workflows/.github/workflows/check_python_package_pr.yaml@v0.0.0 permissions: {} + cache-mode: none ``` ### Step 4: Configure GitHub repository settings diff --git a/.github/workflows/release_python_package_part1.yaml b/.github/workflows/release_python_package_part1.yaml index 61a691ac..88b0d1ad 100644 --- a/.github/workflows/release_python_package_part1.yaml +++ b/.github/workflows/release_python_package_part1.yaml @@ -30,7 +30,8 @@ jobs: tag: ${{ steps.create-tag.outputs.tag }} permissions: contents: write # Needed to create git tag - + cache-mode: none + build: name: Build package needs: @@ -56,3 +57,4 @@ jobs: path: dist/ permissions: contents: read + cache-mode: none diff --git a/.github/workflows/release_python_package_part2.yaml b/.github/workflows/release_python_package_part2.yaml index c607e3be..0cda829b 100644 --- a/.github/workflows/release_python_package_part2.yaml +++ b/.github/workflows/release_python_package_part2.yaml @@ -36,3 +36,4 @@ jobs: VAR_LATEST: ${{ case(github.ref_name == github.event.repository.default_branch && startsWith(github.ref, 'refs/heads/'), '--latest', '--latest=false') }} permissions: contents: write # Needed to create GitHub release + cache-mode: none diff --git a/.github/workflows/release_rock_edge.md b/.github/workflows/release_rock_edge.md index ceea92ab..a3335d84 100644 --- a/.github/workflows/release_rock_edge.md +++ b/.github/workflows/release_rock_edge.md @@ -22,6 +22,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_rock.yaml@v0.0.0 permissions: contents: read + cache-mode: none release: name: Release rock @@ -33,6 +34,7 @@ jobs: permissions: packages: write # Needed to publish to GitHub Container Registry contents: write # Needed to create git tags + cache-mode: none ``` Grant package `Write` role to GitHub Actions for the source GitHub repository: https://docs.github.com/en/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility#ensuring-workflow-access-to-your-package diff --git a/.github/workflows/release_rock_edge.yaml b/.github/workflows/release_rock_edge.yaml index ea77dda1..98772de5 100644 --- a/.github/workflows/release_rock_edge.yaml +++ b/.github/workflows/release_rock_edge.yaml @@ -70,3 +70,4 @@ jobs: permissions: packages: write # Needed to publish to GitHub Container Registry contents: write # Needed to create git tags + cache-mode: none diff --git a/.github/workflows/release_snap_edge.md b/.github/workflows/release_snap_edge.md index 39820f61..2b7cfc58 100644 --- a/.github/workflows/release_snap_edge.md +++ b/.github/workflows/release_snap_edge.md @@ -22,6 +22,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_snap.yaml@v0.0.0 permissions: contents: read + cache-mode: none release: name: Release snap @@ -35,6 +36,7 @@ jobs: snap-store-token: ${{ secrets.SNAP_STORE_TOKEN_EDGE }} permissions: contents: write # Needed to create git tags + cache-mode: none ``` ### Step 2: Add Snap Store token diff --git a/.github/workflows/release_snap_edge.yaml b/.github/workflows/release_snap_edge.yaml index 9328afcc..fe9acea0 100644 --- a/.github/workflows/release_snap_edge.yaml +++ b/.github/workflows/release_snap_edge.yaml @@ -97,3 +97,4 @@ jobs: run: cat ~/.local/state/snapcraft/log/* permissions: contents: write # Needed to create git tags + cache-mode: none diff --git a/.github/workflows/release_snap_pr.md b/.github/workflows/release_snap_pr.md index f31cd127..213fb098 100644 --- a/.github/workflows/release_snap_pr.md +++ b/.github/workflows/release_snap_pr.md @@ -14,6 +14,7 @@ jobs: uses: canonical/data-platform-workflows/.github/workflows/build_snap.yaml@v0.0.0 permissions: contents: read + cache-mode: none release: name: Release snap to Snap Store branch @@ -27,6 +28,7 @@ jobs: snap-store-token: ${{ secrets.SNAP_STORE_TOKEN_EDGE_PR }} permissions: contents: read + cache-mode: none ``` ### Step 2: Add Snap Store token diff --git a/.github/workflows/release_snap_pr.yaml b/.github/workflows/release_snap_pr.yaml index d6813fd0..278cb338 100644 --- a/.github/workflows/release_snap_pr.yaml +++ b/.github/workflows/release_snap_pr.yaml @@ -93,3 +93,4 @@ jobs: run: cat ~/.local/state/snapcraft/log/* permissions: contents: read + cache-mode: none diff --git a/.github/workflows/sync_docs.md b/.github/workflows/sync_docs.md index c9a1c663..640facb5 100644 --- a/.github/workflows/sync_docs.md +++ b/.github/workflows/sync_docs.md @@ -25,6 +25,7 @@ jobs: permissions: contents: write # Needed to push branch & tag pull-requests: write # Needed to create PR + cache-mode: none ``` ### metadata.yaml required diff --git a/.github/workflows/sync_docs.yaml b/.github/workflows/sync_docs.yaml index 14a72dba..5ab1e5ee 100644 --- a/.github/workflows/sync_docs.yaml +++ b/.github/workflows/sync_docs.yaml @@ -61,3 +61,4 @@ jobs: permissions: contents: write # Needed to push branch & tag pull-requests: write # Needed to create PR + cache-mode: none diff --git a/.github/workflows/tag_charm_edge.yaml b/.github/workflows/tag_charm_edge.yaml index 87bfc12b..87cab600 100644 --- a/.github/workflows/tag_charm_edge.yaml +++ b/.github/workflows/tag_charm_edge.yaml @@ -31,3 +31,4 @@ jobs: VAR_TRACK: ${{ inputs.track }} permissions: contents: write # Needed to create git tag + cache-mode: none