From f4138d6a13642a96e425140374ca5a3a34186dac Mon Sep 17 00:00:00 2001 From: Nate Bosch Date: Thu, 15 Oct 2026 21:34:46 +0000 Subject: [PATCH 1/3] Drop notifications to defunct chat The Build and Test set of projects was split between other teams and the chat room these notifications are going to is unused. Replace the BUILD_AND_TEST webhook secret with the WEBDEV webhook secret which is already used in other workflows. The team can re-evaluate the config as a followup if the notifications need adjustments. Regenerate with the latest mono_repo --- .github/workflows/dart.yml | 106 ++++++++++++++++++++++++++++++------- mono_repo.yaml | 2 +- tool/ci.sh | 2 +- 3 files changed, 90 insertions(+), 20 deletions(-) diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml index 0f43dd4a15..94f6ede372 100644 --- a/.github/workflows/dart.yml +++ b/.github/workflows/dart.yml @@ -1,11 +1,33 @@ -# Created with package:mono_repo v6.6.3 +# Created with package:mono_repo v6.8.2 name: Dart CI on: push: branches: - main - master + paths: + - .github/workflows/dart.yml + - mono_repo.yaml + - "**/mono_pkg.yaml" + - "dwds/**" + - "dwds_test_common/**" + - "dwds_test_common/fixtures/_webdev_smoke/**" + - "example/**" + - "frontend_server_client/**" + - "webdev/**" + - "!**/*.md" pull_request: + paths: + - .github/workflows/dart.yml + - mono_repo.yaml + - "**/mono_pkg.yaml" + - "dwds/**" + - "dwds_test_common/**" + - "dwds_test_common/fixtures/_webdev_smoke/**" + - "example/**" + - "frontend_server_client/**" + - "webdev/**" + - "!**/*.md" schedule: - cron: "0 0 * * 0" defaults: @@ -26,7 +48,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:stable" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted os:ubuntu-latest - name: Setup Dart SDK @@ -36,8 +58,10 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - name: mono_repo self validate - run: dart pub global activate mono_repo 6.6.3 + run: dart pub global activate mono_repo 6.8.2 - name: mono_repo self validate run: dart pub global run mono_repo generate --validate job_002: @@ -49,7 +73,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds;commands:format-analyze_0-test_0" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -61,6 +85,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -87,7 +113,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds_test_common-dwds_test_common/fixtures/_webdev_smoke-example-frontend_server_client;commands:format-analyze_0" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds_test_common-dwds_test_common/fixtures/_webdev_smoke-example-frontend_server_client os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -99,6 +125,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_test_common_pub_upgrade name: dwds_test_common; dart pub upgrade run: dart pub upgrade @@ -160,7 +188,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:webdev;commands:format-analyze_0-test_7" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:webdev os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -172,6 +200,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -198,7 +228,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds;commands:command-test_1" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -210,6 +240,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -237,7 +269,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds;commands:test_2" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -249,6 +281,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -272,7 +306,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds;commands:test_3" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -284,6 +318,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -307,7 +343,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds;commands:test_4" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -319,6 +355,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -342,7 +380,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds_test_common;commands:command-test_6" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:dwds_test_common os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -354,6 +392,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_test_common_pub_upgrade name: dwds_test_common; dart pub upgrade run: dart pub upgrade @@ -381,7 +421,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:frontend_server_client;commands:test_5" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:frontend_server_client os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -393,6 +433,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: frontend_server_client_pub_upgrade name: frontend_server_client; dart pub upgrade run: dart pub upgrade @@ -416,7 +458,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:webdev;commands:command-test_5" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:dev;packages:webdev os:ubuntu-latest;pub-cache-hosted;sdk:dev os:ubuntu-latest;pub-cache-hosted @@ -428,6 +470,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -457,6 +501,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -482,6 +528,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -507,6 +555,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -532,6 +582,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -557,6 +609,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_test_common_pub_upgrade name: dwds_test_common; dart pub upgrade run: dart pub upgrade @@ -582,6 +636,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: frontend_server_client_pub_upgrade name: frontend_server_client; dart pub upgrade run: dart pub upgrade @@ -607,6 +663,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -631,7 +689,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:dwds;commands:command-test_5" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:beta os:ubuntu-latest;pub-cache-hosted @@ -643,6 +701,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -685,7 +745,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:webdev;commands:command-test_5" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:webdev os:ubuntu-latest;pub-cache-hosted;sdk:beta os:ubuntu-latest;pub-cache-hosted @@ -697,6 +757,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -739,7 +801,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:dwds;commands:analyze_1" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:dwds os:ubuntu-latest;pub-cache-hosted;sdk:beta os:ubuntu-latest;pub-cache-hosted @@ -751,6 +813,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -789,7 +853,7 @@ jobs: with: path: "~/.pub-cache/hosted" key: "os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:webdev;commands:analyze_1" - restore-keys: | + restore-keys: |- os:ubuntu-latest;pub-cache-hosted;sdk:beta;packages:webdev os:ubuntu-latest;pub-cache-hosted;sdk:beta os:ubuntu-latest;pub-cache-hosted @@ -801,6 +865,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -841,6 +907,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: dwds_pub_upgrade name: dwds; dart pub upgrade run: dart pub upgrade @@ -881,6 +949,8 @@ jobs: - id: checkout name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + with: + persist-credentials: false - id: webdev_pub_upgrade name: webdev; dart pub upgrade run: dart pub upgrade @@ -919,7 +989,7 @@ jobs: "{'text':'Build failed! ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}'}" \ "${CHAT_WEBHOOK_URL}" env: - CHAT_WEBHOOK_URL: "${{ secrets.BUILD_AND_TEST_TEAM_CHAT_WEBHOOK_URL }}" + CHAT_WEBHOOK_URL: "${{ secrets.WEBDEV_NOTIFICATION_CHAT_WEBHOOK }}" needs: - job_001 - job_002 diff --git a/mono_repo.yaml b/mono_repo.yaml index 09f5dee1d1..746d605edc 100644 --- a/mono_repo.yaml +++ b/mono_repo.yaml @@ -15,7 +15,7 @@ github: "{'text':'Build failed! ${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}'}" \ "${CHAT_WEBHOOK_URL}" env: - CHAT_WEBHOOK_URL: ${{ secrets.BUILD_AND_TEST_TEAM_CHAT_WEBHOOK_URL }} + CHAT_WEBHOOK_URL: ${{ secrets.WEBDEV_NOTIFICATION_CHAT_WEBHOOK }} stages: - name: beta_cron # Only run this stage for scheduled cron jobs diff --git a/tool/ci.sh b/tool/ci.sh index 67171c3f9f..12b66a8217 100755 --- a/tool/ci.sh +++ b/tool/ci.sh @@ -1,5 +1,5 @@ #!/bin/bash -# Created with package:mono_repo v6.6.3 +# Created with package:mono_repo v6.8.2 # Support built in commands on windows out of the box. From 814f6d254c8b85eb56e4f09530ea2226724b8eaf Mon Sep 17 00:00:00 2001 From: Nate Bosch Date: Thu, 15 Oct 2026 22:09:39 +0000 Subject: [PATCH 2/3] Appease zizmor --- .github/workflows/dart.yml | 3 ++- mono_repo.yaml | 2 ++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml index 94f6ede372..49599bc5a9 100644 --- a/.github/workflows/dart.yml +++ b/.github/workflows/dart.yml @@ -36,7 +36,8 @@ defaults: env: PUB_ENVIRONMENT: bot.github DISPLAY: ":99" -permissions: read-all +permissions: + contents: read jobs: job_001: diff --git a/mono_repo.yaml b/mono_repo.yaml index 746d605edc..ca93812ef4 100644 --- a/mono_repo.yaml +++ b/mono_repo.yaml @@ -1,6 +1,8 @@ # See https://pub.dev/packages/mono_repo for details self_validate: analyzer_and_format github: + permissions: + contents: read env: DISPLAY: ':99' cron: '0 0 * * 0' # "At 00:00 (UTC) on Sunday." From 4e77e4ee931868a64092f0162cc14d97b824160f Mon Sep 17 00:00:00 2001 From: Nate Bosch Date: Thu, 15 Oct 2026 22:45:44 +0000 Subject: [PATCH 3/3] Use default through mono_repo --- .github/workflows/dart.yml | 4 ++-- mono_repo.yaml | 2 -- tool/ci.sh | 2 +- 3 files changed, 3 insertions(+), 5 deletions(-) diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml index 49599bc5a9..fc8c20ce2d 100644 --- a/.github/workflows/dart.yml +++ b/.github/workflows/dart.yml @@ -1,4 +1,4 @@ -# Created with package:mono_repo v6.8.2 +# Created with package:mono_repo v6.9.0 name: Dart CI on: push: @@ -62,7 +62,7 @@ jobs: with: persist-credentials: false - name: mono_repo self validate - run: dart pub global activate mono_repo 6.8.2 + run: dart pub global activate mono_repo 6.9.0 - name: mono_repo self validate run: dart pub global run mono_repo generate --validate job_002: diff --git a/mono_repo.yaml b/mono_repo.yaml index ca93812ef4..746d605edc 100644 --- a/mono_repo.yaml +++ b/mono_repo.yaml @@ -1,8 +1,6 @@ # See https://pub.dev/packages/mono_repo for details self_validate: analyzer_and_format github: - permissions: - contents: read env: DISPLAY: ':99' cron: '0 0 * * 0' # "At 00:00 (UTC) on Sunday." diff --git a/tool/ci.sh b/tool/ci.sh index 12b66a8217..7e7595854f 100755 --- a/tool/ci.sh +++ b/tool/ci.sh @@ -1,5 +1,5 @@ #!/bin/bash -# Created with package:mono_repo v6.8.2 +# Created with package:mono_repo v6.9.0 # Support built in commands on windows out of the box.