Skip to content

fix(deps): update dependency react-router-dom to v7 #10960

fix(deps): update dependency react-router-dom to v7

fix(deps): update dependency react-router-dom to v7 #10960

name: PR conventions checks
# This workflow should work for forks without requiring manual run.
# It avoids jobs that require elevated write permissions/secrets on fork PRs; PR-write operations should live in a separate workflow.
on:
pull_request_target:
types: [opened, edited, reopened, ready_for_review, synchronize]
permissions: {}
jobs:
check-pr-title-convention:
name: Check that PR title follows convention
if: ${{ github.event.pull_request.user.login != 'renovate[bot]' }}
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Check PR title matches convention
env:
PR_TITLE: ${{ github.event.pull_request.title }}
run: |
PATTERN='^(feat|fix|chore|docs|style|refactor|perf|test|build|ci|revert)(\([a-z0-9._/-]+\))?!?: .+ \(#[0-9]+(, ?#[0-9]+)*\)$'
if ! echo "$PR_TITLE" | grep -Pq "$PATTERN"; then
echo "::error::PR title does not match convention: '$PR_TITLE'"
echo "Format: 'type(scope?): description (#issue)' for example 'docs: updating a doc page (#1234)'. see https://github.com/OpenCTI-Platform/opencti/blob/master/CONTRIBUTING.md#how-can-you-contribute"
exit 1
fi
echo "PR title is valid: '$PR_TITLE'"
check-signed-commits:
name: Check signed commits in PR
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Check signed commits in PR
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
UNSIGNED=$(gh api repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/commits \
--jq '[.[] | select(.commit.verification.verified != true)] | length')
if [ "$UNSIGNED" -gt 0 ]; then
echo "::error::Found $UNSIGNED unsigned commit(s). Please sign your commits: https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits"
exit 1
fi
echo "All commits are signed."