Skip to content

Bump brace-expansion from 1.1.18 to 1.1.21 in /generate-release-notes/generate-release-notes #291

Bump brace-expansion from 1.1.18 to 1.1.21 in /generate-release-notes/generate-release-notes

Bump brace-expansion from 1.1.18 to 1.1.21 in /generate-release-notes/generate-release-notes #291

Workflow file for this run

# ********************************************************************************

Check warning on line 1 in .github/workflows/code-freeze.yml

View workflow run for this annotation

GitHub Actions / Code Freeze Bot

Workflow execution policy warning (evaluate mode)

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# Copyright (c) 2023, 2024 Contributors to the Eclipse Foundation
#
# See the NOTICE file(s) with this work for additional
# information regarding copyright ownership.
#
# This program and the accompanying materials are made
# available under the terms of the Apache Software License 2.0
# which is available at https://www.apache.org/licenses/LICENSE-2.0.
#
# SPDX-License-Identifier: Apache-2.0
# ********************************************************************************
name: Code Freeze Bot
# Controls when the workflow will run
on:
pull_request_target:
issue_comment:
types: [created]
permissions:
contents: write
pull-requests: write
jobs:
# Check if the pull request target branch matches the required branch-regex?
codefreeze_branch_check:
uses: adoptium/.github/.github/workflows/code-freeze-regex-branch.yml@main
with:
branch-regex: "^master$"
# Code freeze if branch-regex matches
codefreeze_if_branch_match:
needs: codefreeze_branch_check
uses: adoptium/.github/.github/workflows/code-freeze.yml@main
if: (github.event_name == 'pull_request_target' || (github.event_name == 'issue_comment' && github.event.issue.pull_request)) && needs.codefreeze_branch_check.outputs.regex-matches == 'true'
secrets: inherit