* feat: hash-pin sensitive workflows
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
* feat: configure dependabot to run over github actions
This also is specifying how dependabot will work on updates for go
modules.
The config is set up to:
- Update github actions together in a single monthly PR
- Version updates for GO modules from "/go.mod" will be sent together in a weekly PR.
- Version updates for GO modules from "/v2/go.mod" will be sent separately from the
ones in "/go.mod", but will also be sent together in a weekly PR.
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
---------
Signed-off-by: Diogo Teles Sant'Anna <diogoteles@google.com>
* Upgrade python version being used by the ci workflow.
* Update the python version in instance_vm.go.
* Try to fix the v1 gomod test.
* Add export python3 back.
* Stop trying to find python2.7.
* Seems like we still need to install python3.
* There seems to be a mismatch between APPENGINE_DEV_APPSERVER_BINARY and APPENGINE_DEV_APPSERVER.
* Apply the same change to v2 ci.
* Install python2 needed for the tests.
* Update base image and install python2
* Adding python2
* adding python 2
* Add more go versions to test.
* remove 1.11
* Adding go get google.golang.org/appengine/v2/search missing from previous PR.
* Typo
* Install python2 needed for the tests.
* Update base image and install python2
* Adding python2
* adding python 2
* Add more go versions to test.
* remove 1.11
Kenneth Ye
Diogo Teles Sant'Anna
Jongwoo Han
Chi Zhang
jinglundong
Ludovic Champenois
Jihui Nie
Zev Goldstein
Benny Siegert
Kayla Nguyen
Lukas Berger