skip privilaged ci steps on project forks

ben-manes · Dec 29, 2023 · c79bcfc · c79bcfc
1 parent fd89232
commit c79bcfc
Show file tree

Hide file tree

Showing 16 changed files with 24 additions and 14 deletions.
diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
@@ -54,6 +54,7 @@ jobs:
         uses: exuanbo/actions-deploy-gist@47697fceaeea2006a90594ee24eb9cd0a1121ef8 # v1.1.4
         if: >
           github.event_name == 'push'
+          && github.event.repository.fork == false
           && endsWith(github.ref, github.event.repository.default_branch)
         with:
           token: ${{ secrets.GIST_TOKEN }}
@@ -74,6 +75,7 @@ jobs:
         uses: exuanbo/actions-deploy-gist@47697fceaeea2006a90594ee24eb9cd0a1121ef8 # v1.1.4
         if: >
           github.event_name == 'push'
+          && github.event.repository.fork == false
           && endsWith(github.ref, github.event.repository.default_branch)
         with:
           token: ${{ secrets.GIST_TOKEN }}

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -9,10 +9,10 @@ env:
   GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
   GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
   ALLOWED_ENDPOINTS: >
+    *.actions.githubusercontent.com:443
     api.adoptium.net:443
     api.github.com:443
     api.snapcraft.io:443
-    artifactcache.actions.githubusercontent.com:443
     caffeine.gradle-enterprise.cloud:443
     cdn.azul.com:443
     cloudflare.com:443
@@ -28,7 +28,6 @@ env:
     jcenter.bintray.com:443
     objects.githubusercontent.com:443
     oss.sonatype.org:443
-    pipelines.actions.githubusercontent.com:443
     plugins.gradle.org:443
     plugins-artifacts.gradle.org:443
     raw.githubusercontent.com:443
@@ -210,7 +209,7 @@ jobs:
     name: Coverage
     runs-on: ubuntu-latest
     needs: tests
-    if: github.event_name == 'push'
+    if: (github.event_name == 'push') && (github.event.repository.fork == false)
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
@@ -311,7 +310,8 @@ jobs:
       - name: Upload badge to Gist
         uses: popsiclestick/gist-sync-action@88f8633178625914f2a01abf1a765f7272a580fa # v1.2.0
         if: >
-          steps.test-badge.outcome == 'success'
+          github.event.repository.fork == false
+          && steps.test-badge.outcome == 'success'
           && endsWith(github.ref, github.event.repository.default_branch)
         with:
           gist_url: https://gist.githubusercontent.com/ben-manes/c20eb418f0e0bd6dfe1c25beb35faae4
@@ -326,6 +326,7 @@ jobs:
     needs: tests
     if: >
       github.event_name == 'push'
+      && github.event.repository.fork == false
       && endsWith(github.ref, github.event.repository.default_branch)
     steps:
       - name: Harden Runner

diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
@@ -10,6 +10,7 @@ jobs:
       actions: read
       contents: read
       security-events: write
+    if: github.event.repository.fork == false
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1

diff --git a/.github/workflows/examples.yml b/.github/workflows/examples.yml
@@ -6,7 +6,6 @@ env:
   GRADLE_ENTERPRISE_CACHE_PASSWORD: ${{ secrets.GRADLE_ENTERPRISE_CACHE_PASSWORD }}
   GRADLE_ENTERPRISE_ACCESS_KEY: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
   JAVA_VERSION: 21
-  SNAPSHOT: true
 
 jobs:
   examples:
@@ -110,12 +109,16 @@ jobs:
         run: ./gradlew build
       - name: Prepare for Graal Native Image
         uses: ./.github/actions/run-gradle
+        env:
+          SNAPSHOT: true
         with:
           java: GraalVM
           token: ${{ secrets.GITHUB_TOKEN }}
           arguments: -q caffeine:clean caffeine:jar
       - name: Graal Native Image
         uses: ./.github/actions/run-gradle
+        env:
+          SNAPSHOT: true
         with:
           java: GraalVM
           token: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ env:
 jobs:
   release:
     runs-on: ubuntu-latest
+    if: github.event.repository.fork == false
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1

diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
@@ -17,6 +17,7 @@ jobs:
       id-token: write
       actions: read
       contents: read
+    if: github.event.repository.fork == false
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1

diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -15,6 +15,7 @@ jobs:
       actions: read
       contents: read
       security-events: write
+    if: github.event.repository.fork == false
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1

diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
@@ -18,7 +18,7 @@ jobs:
             raw.githubusercontent.com:443
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Install
-        run: wget -O - -q https://raw.githubusercontent.com/client9/misspell/master/install-misspell.sh | sh -s -- -b .
+        run: curl -sfL https://raw.githubusercontent.com/golangci/misspell/master/install-misspell.sh | sh -s -- -b .
       - name: Spell Check with Misspell
         run: ./misspell -error .
       - name: Spell Check with Typos

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/jsr166/MapTest.java b/caffeine/src/test/java/com/github/benmanes/caffeine/jsr166/MapTest.java
@@ -120,7 +120,7 @@ class Key implements Comparable<Key> {
             final int i;
             Key(int i) { this.i = i; }
             @Override
-            public int hashCode() { return poorHash ? 0 : super.hashCode(); }
+            public int hashCode() { return poorHash ? 0 : System.identityHashCode(this); }
             @Override
             public int compareTo(Key x) {
                 return Integer.compare(this.i, x.i);

diff --git a/examples/coalescing-bulkloader-reactor/gradle/wrapper/gradle-wrapper.properties b/examples/coalescing-bulkloader-reactor/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME

diff --git a/examples/graal-native/gradle/wrapper/gradle-wrapper.properties b/examples/graal-native/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME

diff --git a/examples/hibernate/gradle/wrapper/gradle-wrapper.properties b/examples/hibernate/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME

diff --git a/examples/resilience-failsafe/gradle/wrapper/gradle-wrapper.properties b/examples/resilience-failsafe/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME

diff --git a/examples/write-behind-rxjava/gradle/wrapper/gradle-wrapper.properties b/examples/write-behind-rxjava/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -211,7 +211,7 @@ zstd = { module = "com.github.luben:zstd-jni", version.ref = "zstd" }
 [bundles]
 coherence = ["coherence-core", "json-bind"]
 constraints = ["bcel", "bouncycastle", "commons-text", "httpclient",
-  "jcommander", "jgit", "jsoup", "okhttp", "protobuf", "snakeyaml" ]
+  "guava", "jcommander", "jgit", "jsoup", "okhttp", "protobuf", "snakeyaml" ]
 errorprone-support = [ "errorprone-support", "errorprone-support-refaster" ]
 jmh = ["jmh-core", "jmh-plugin", "jmh-report"]
 junit = ["junit4", "junit5"]

diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
@@ -1,4 +1,4 @@
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-rc-1-bin.zip
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 zipStoreBase=GRADLE_USER_HOME