Commit Graph

17 Commits

Author SHA1 Message Date
Thomas Gummerer 0db436a64a
do dev releases post merge ()
Currently we do our dev releases while running CI for the merge queue,
which adds to the time it takes for things to get through the merge
queue, slowing our development process down.

However there's no really good reason to do dev releases pre-merge. The
pre-merge checks are there to make sure the main branch is always green.
We already know the binaries will be able to be built successfully since
we do that for integration tests. And if the network fails for uploading
the binaries we can always just retry the CI job, which we can do for a
on-push CI job, but isn't useful for the merge CI job since the PR will
already have been taken out of the queue.

h/t to @iamricard who suggested this during a conversation this weekend.

I really don't see a reason not to do this. We should probably do the
same for the release builds, but it's probably best to start with dev
releases since those are less important, and this should be hopefully
not very controversial.

/xref https://github.com/pulumi/pulumi/issues/15416
2024-03-18 09:56:10 +00:00
Fraser Waters fa1e90d32f
Fix dev release versions ()
Fixes https://github.com/pulumi/pulumi/issues/15471.
2024-02-20 12:13:17 +00:00
Thomas Gummerer e58eab9c3d
correct latest-dev-version file ()
In https://github.com/pulumi/pulumi/pull/15299 we changed the versioning
scheme of dev releases slightly, as npm and python have slightly
different requirements. However this also means that names of CLI dev
releases changed, and thus downloads failed.

Fix that by updating the latest-dev-version file to the new versioning
scheme.

Fixes https://github.com/pulumi/pulumi/issues/15443

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2024-02-15 23:45:38 +00:00
Thomas Gummerer 936ffe5d59
strip the v prefix from the latest-dev-version file ()
The latest-dev-version file is not supposed to include a 'v' prefix.
However the `git describe` output includes it. Strip that from the
string before dispatching the CI job that updates the latest-dev-version
file.

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-12-19 16:59:15 +00:00
Thomas Gummerer b348119730
do update-dev-version before ci-ok ()
The reason for this is twofold:
- Once ci-ok is run, GitHub deletes the merge queue branch, and thus the
checkout in the update-dev-version step fails.
- If we do the update-dev-version after ci-ok, we might still merge the
changes even though we haven't updated the dev version properly. This
isn't a big deal, but can be confusing nonetheless.


## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-12-15 18:03:46 +00:00
Thomas Gummerer c16bcf9e5f
on-merge: add steps to update the latest dev version ()
If CI succeeds for the merge, we'll want to update the latest dev
version, as we know this is going to be merged, and we published the
binaries to AWS.  Dispatch the correct event to update that file in
the pulumi/docs repository.

/xref https://github.com/pulumi/pulumi/issues/14623

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-12-15 13:56:02 +00:00
Thomas Gummerer 9f3e478e99
create CI job to upload dev artifacts to S3 ()
Create a CI job that uploads artifacts to S3 after every build. These
artifacts will have a version number derived from `git describe` so they
can be uniquely identified. After this PR is merged, these artifacts
will be able to be downloaded through `get.pulumi.com` by specifying the
exact version number, and in the future through a dev channel.

Fixes 

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-12-13 17:25:14 +00:00
Kyle Dixler 50f6008681
[ci] Re-enable code coverage and rebuild release binaries without coverage ()
Fixes  

As a follow-up to , we need to re-enable code coverage without
releases being built with coverage.  includes a test in the
release job to catch `pulumi` being released with coverage data.

Also fixes the test to check that the pulumi binary is not built with
coverage.

Background:
Coverage was disabled on merge jobs in order to fix
[].
[] removed nightly coverage workflows in favor of
collecting coverage on merges [].
The binaries built with coverage were used in the downstream
prepare-release job causing a noticable bug [].
2023-12-12 15:52:54 +00:00
Kyle Dixler 061d10b4e2
Revert "[ci] enable coverage on merge job" ()
Fixes https://github.com/pulumi/pulumi/issues/14799
Reverts 

This PR reverts enabling coverage on the merge job.
prepare-release uses the binaries built during tests which were built
with coverage.
2023-12-08 18:18:13 +00:00
Kyle Dixler b353d95e1a
[ci] enable coverage on merge job ()
CodeCov was skipped on
https://github.com/pulumi/pulumi/actions/runs/7081061983

On further inspection, `enable-coverage` was not set to true on the
on-merge job.
2023-12-04 05:47:37 +00:00
Bryce Lampe d83d06faaf
ci: Fix ci-ok check on merge ()
<!--- 
Thanks so much for your contribution! If this is your first time
contributing, please ensure that you have read the
[CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md)
documentation.
-->

# Description

I'm not sure why `success()` and `failure()` don't work as expected
here, but the [needs
context](https://docs.github.com/en/actions/learn-github-actions/contexts#needs-context)
does do what we want.

Previously, if the CI job failed the job `ci-ok` job would still pass:
```
❯ act --detect-event
WARN  ⚠ You are using Apple M-series chip and you have not specified container architecture, you might encounter issues while running act. If so, try running it with '--container-architecture linux/amd64'. ⚠
[Merge/info] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/info]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/info]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]  Run Main exit 0
[Merge/info]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/info]     Success - Main exit 0
[Merge/info] 🏁  Job succeeded
[Merge/CI  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/CI  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/CI  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]  Run Main exit 1
[Merge/CI  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/CI  ]     Failure - Main exit 1
[Merge/CI  ] exitcode '1': failure
[Merge/CI  ] 🏁  Job failed
[Merge/ci-ok  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/ci-ok  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/ci-ok  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]  Run Main CI succeeded
[Merge/ci-ok  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/1.sh] user= workdir=
[Merge/ci-ok  ]     Success - Main CI succeeded
[Merge/ci-ok  ] 🏁  Job succeeded
Error: Job 'CI' failed
```

Now if CI fails we also see `ci-ok` fail as expected:
```
❯ act --detect-event
WARN  ⚠ You are using Apple M-series chip and you have not specified container architecture, you might encounter issues while running act. If so, try running it with '--container-architecture linux/amd64'. ⚠
[Merge/info] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/info]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/info]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]  Run Main exit 0
[Merge/info]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/info]     Success - Main exit 0
[Merge/info] 🏁  Job succeeded
[Merge/CI  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/CI  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/CI  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]  Run Main exit 1
[Merge/CI  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/CI  ]     Failure - Main exit 1
[Merge/CI  ] exitcode '1': failure
[Merge/CI  ] 🏁  Job failed
[Merge/ci-ok  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/ci-ok  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/ci-ok  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]  Run Main Release failed
[Merge/ci-ok  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/ci-ok  ]     Failure - Main Release failed
[Merge/ci-ok  ] exitcode '1': failure
[Merge/ci-ok  ] 🏁  Job failed
Error: Job 'CI' failed
```

If release fails:
```
WARN  ⚠ You are using Apple M-series chip and you have not specified container architecture, you might encounter issues while running act. If so, try running it with '--container-architecture linux/amd64'. ⚠
[Merge/info] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/info]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/info]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]  Run Main exit 0
[Merge/info]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/info]     Success - Main exit 0
[Merge/info] 🏁  Job succeeded
[Merge/CI  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/CI  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/CI  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]  Run Main exit 0
[Merge/CI  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/CI  ]     Success - Main exit 0
[Merge/CI  ] 🏁  Job succeeded
[Merge/prepare] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/prepare]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/prepare]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/prepare]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/prepare]  Run Main exit 1
[Merge/prepare]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/prepare]     Failure - Main exit 1
[Merge/prepare] exitcode '1': failure
[Merge/prepare] 🏁  Job failed
[Merge/ci-ok  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/ci-ok  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/ci-ok  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]  Run Main Release failed
[Merge/ci-ok  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/1.sh] user= workdir=
[Merge/ci-ok  ]     Failure - Main Release failed
[Merge/ci-ok  ] exitcode '1': failure
[Merge/ci-ok  ] 🏁  Job failed
Error: Job 'prepare' failed
```

And if everything passes:
```
❯ act --detect-event && echo success
WARN  ⚠ You are using Apple M-series chip and you have not specified container architecture, you might encounter issues while running act. If so, try running it with '--container-architecture linux/amd64'. ⚠
[Merge/info] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/info]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/info]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/info]  Run Main exit 0
[Merge/info]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/info]     Success - Main exit 0
[Merge/info] 🏁  Job succeeded
[Merge/CI  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/CI  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/CI  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/CI  ]  Run Main exit 0
[Merge/CI  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/CI  ]     Success - Main exit 0
[Merge/CI  ] 🏁  Job succeeded
[Merge/prepare] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/prepare]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/prepare]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/prepare]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/prepare]  Run Main exit 0
[Merge/prepare]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/0.sh] user= workdir=
[Merge/prepare]     Success - Main exit 0
[Merge/prepare] 🏁  Job succeeded
[Merge/ci-ok  ] 🚀  Start image=ghcr.io/catthehacker/ubuntu:act-latest
[Merge/ci-ok  ]   🐳  docker pull image=ghcr.io/catthehacker/ubuntu:act-latest platform= username= forcePull=true
[Merge/ci-ok  ]   🐳  docker create image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]   🐳  docker run image=ghcr.io/catthehacker/ubuntu:act-latest platform= entrypoint=["tail" "-f" "/dev/null"] cmd=[]
[Merge/ci-ok  ]  Run Main CI succeeded
[Merge/ci-ok  ]   🐳  docker exec cmd=[bash --noprofile --norc -e -o pipefail /var/run/act/workflow/2.sh] user= workdir=
[Merge/ci-ok  ]     Success - Main CI succeeded
[Merge/ci-ok  ] 🏁  Job succeeded
```

Fixes 

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-08-21 23:04:33 +00:00
Bryce Lampe 93bb093478
ci: Always report a ci-ok status on merge ()
<!--- 
Thanks so much for your contribution! If this is your first time
contributing, please ensure that you have read the
[CONTRIBUTING](https://github.com/pulumi/pulumi/blob/master/CONTRIBUTING.md)
documentation.
-->

# Description

<!--- Please include a summary of the change and which issue is fixed.
Please also include relevant motivation and context. -->

Fixes # (issue)

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!--- 
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-08-21 20:42:58 +00:00
Bryce Lampe f3d0feb8b2
ci: Remove Bors ()
# Description

This PR removes Bors in favor of native GitHub merge queues. A very
similar
cutover was tested and verified in
https://github.com/pulumi/watchutil-rs/pull/39.

# Deployment plan

* [x] Find some time where PRs aren't being merged. This is mostly to
minimize confusion
  while we're futzing with branch protections. 
* [x] Update the repo's branch protection rules to match
  https://github.com/pulumi/watchutil-rs/pull/38:
* "Allow specified actors to bypass required pull requests": "bors" →
Unchecked
    * "Status checks that are required": "bors" → "ci-ok"
    * "Require merge queue": Unchecked → Checked
        * "Only merge non-failing pull requests" → Unchecked
        * "Merge method" → Squash and merge
* [ ] Merge this PR using the "Merge when ready" button.
* [ ] If it merges successfully: confirm the prepare-release step ran
and published
      pre-release artifacts.
* [ ] If the merge fails: it's possible we'll need to tweak steps
slightly
(e.g. if the step's name doesn't match the branch protection rule). The
      end goal is a "ci-ok" step in both the PR and merge workflows that
      captures whether everything is green.
* [ ] If the issues aren't immediately resolvable, revert the changes
made
to branch protection settings. Folks will continue to merge with
          Bors.

If all goes well, we should be able to continue merging with MQ for a
while --
at least long enough to cut a new CLI release. Once we're confident we
won't
need to roll back:
* [ ] Delete branch protection rules for:
    * staging
    * testing
* [ ] Remove pu/pu from https://app.bors.tech/repositories

Fixes https://github.com/pulumi/pulumi/issues/13501

## Checklist

- [ ] I have run `make tidy` to update any new dependencies
- [ ] I have run `make lint` to verify my code passes the lint check
  - [ ] I have formatted my code using `gofumpt`

<!--- Please provide details if the checkbox below is to be left
unchecked. -->
- [ ] I have added tests that prove my fix is effective or that my
feature works
<!---
User-facing changes require a CHANGELOG entry.
-->
- [ ] I have run `make changelog` and committed the
`changelog/pending/<file>` documenting my change
<!--
If the change(s) in this PR is a modification of an existing call to the
Pulumi Cloud,
then the service should honor older versions of the CLI where this
change would not exist.
You must then bump the API version in
/pkg/backend/httpstate/client/api.go, as well as add
it to the service.
-->
- [ ] Yes, there are changes in this PR that warrants bumping the Pulumi
Cloud API version
<!-- @Pulumi employees: If yes, you must submit corresponding changes in
the service repo. -->
2023-08-12 01:36:48 +00:00
Bryce Lampe 9411d2c332 ci: Preliminary support for GitHub merge queues 2023-08-10 16:07:09 -07:00
Engin Diri 7d9fb008a0 feat: sign pulumi binaries with cosign
Co-authored-by: Aaron Friel <mayreply@aaronfriel.com>
2022-12-16 09:32:51 -08:00
Aaron Friel 6ef7ef64d6 ci: Enable testing of language version sets 2022-09-21 09:48:38 -07:00
Aaron Friel 272b987791 ci: ensure trunk is always green 2022-09-13 13:38:14 -07:00