From 4d54d015d987c8ed9d3e081f7bc2464dcc011d20 Mon Sep 17 00:00:00 2001 From: Earl Warren Date: Tue, 29 Apr 2025 15:53:08 +0000 Subject: [PATCH] chore(release): next-digest moved to invisible.forgejo.org (#7720) In order to improve the security of the Forgejo infrastructure the next-digest repository was moved to a private instance. ## Testing - After the merge, trigger a mirror to build a new v12.0-test release - Verify in experimental that the workflows works as expected - Verify v12.next.forgejo.org is upgraded with the latest commit - Once the test completes - Tag for backport to v11 & v7 - Manual backport to v7 because it conflicts Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7720 Co-authored-by: Earl Warren Co-committed-by: Earl Warren --- .forgejo/workflows/publish-release.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.forgejo/workflows/publish-release.yml b/.forgejo/workflows/publish-release.yml index 0863a1597c..27d3b9383e 100644 --- a/.forgejo/workflows/publish-release.yml +++ b/.forgejo/workflows/publish-release.yml @@ -2,6 +2,8 @@ # # See also https://forgejo.org/docs/next/contributor/release/#stable-release-process # +# TOKEN_NEXT_DIGEST is a token with write repository access to https://invisible.forgejo.org/infrastructure/next-digest issued by https://invisible.forgejo.org/forgejo-next-digest +# # https://codeberg.org/forgejo-experimental/forgejo # # Copies a release from codeberg.org/forgejo-integration to codeberg.org/forgejo-experimental @@ -14,7 +16,7 @@ # vars.DOER: forgejo-experimental-ci # secrets.TOKEN: # -# http://private.forgejo.org/forgejo/forgejo +# http://invisible.forgejo.org/forgejo/forgejo # # Copies & sign a release from codeberg.org/forgejo-integration to codeberg.org/forgejo # @@ -80,7 +82,7 @@ jobs: - name: upgrade v*.next.forgejo.org uses: https://data.forgejo.org/infrastructure/next-digest@v1.1.0 with: - url: https://placeholder:${{ secrets.TOKEN_NEXT_DIGEST }}@code.forgejo.org/infrastructure/next-digest + url: https://placeholder:${{ secrets.TOKEN_NEXT_DIGEST }}@invisible.forgejo.org/infrastructure/next-digest ref_name: '${{ github.ref_name }}' image: 'codeberg.org/forgejo-experimental/forgejo' tag_suffix: '-rootless'