luarocks/.github/workflows/pr-gh-actions.yml, branch dependabot/github_actions/github-actions-74a77d9f2fA mirror of https://github.com/luarocks/luarocks.git
https://git.lua4.win/luarocks/atom?h=dependabot%2Fgithub_actions%2Fgithub-actions-74a77d9f2f2026-08-15T20:02:18+00:00ci: disable `persist-credentials` on jobs that don't need it2026-08-15T20:02:18+00:00Christian Clausscclauss@me.com2026-08-15T20:02:18+00:00urn:sha1:8d40d6dfa96839d5572489199bde9b9cb8f32c1c
See #1909.chore(ci): bump deps and other minor changes2026-07-21T22:33:50+00:00Luau Projectluau.project@gmail.com2026-07-21T22:33:50+00:00urn:sha1:ba3a5ad5d61e8985329b52d3dc93357eb24d6628
Changes worth noting:
* following `leafo/gh-actions-lua`, `luarocks/gh-actions-lua` and `luarocks/gh-actions-luarocks`, changed the action to setup MSVC from `ilammy/msvc-dev-cmd` to `step-security/msvc-dev-cmd` due warnings related to the use of EOL nodejs versions;
* replaced actions from `hishamhm` acc to `luarocks` org acc.ci: automate PR to update LuaRocks version on gh-actions-luarocks (#1808)2025-06-30T15:17:42+00:00Luau Projectluau.project@gmail.com2025-06-30T15:17:42+00:00urn:sha1:b45502ab0f1b7e1a02313036f115c213c8ee0ef9
On every tagged release of LuaRocks, there is the need to update LuaRocks version at [https://github.com/luarocks/gh-actions-luarocks/blob/22fa5618dc4ddff1fb251b3b38a0766a8c9ae47f/action.yml#L13](https://github.com/luarocks/gh-actions-luarocks/blob/22fa5618dc4ddff1fb251b3b38a0766a8c9ae47f/action.yml#L13) in the repository [https://github.com/luarocks/gh-actions-luarocks](https://github.com/luarocks/gh-actions-luarocks). Often forgotten, the default LuaRocks version on `gh-actions-luarocks` may lag behind the latest LuaRocks release.
Motivated by this comment [https://github.com/luarocks/gh-actions-luarocks/pull/7#issuecomment-2997223378](https://github.com/luarocks/gh-actions-luarocks/pull/7#issuecomment-2997223378), to address this problem, incorporating the changes on this pull request, a new workflow was created to proceed in the following manner:
1. Once a tag is pushed (in the usual format `vX.Y.Z`) on [https://github.com/luarocks/luarocks](https://github.com/luarocks/luarocks), or in a manual workflow triggered by the tag ref, a sanitization step is performed to extract `X.Y.Z` from the `vX.Y.Z` in the job `SanitizeVersion`;
2. In a subsequent job (`CreatePullRequest`), a PR is created at [https://github.com/luarocks/gh-actions-luarocks](https://github.com/luarocks/gh-actions-luarocks) replacing the outdated version by the value `X.Y.Z` extracted earlier.