@@ -346,7 +346,7 @@ jobs:
346346 uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
347347
348348 - name : Install uv
349- uses : astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3 .0
349+ uses : astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6 .0
350350 with :
351351 version : " 0.6.5"
352352
@@ -362,14 +362,14 @@ jobs:
362362 fi
363363
364364 # Trigger integration tests in a separate repository.
365- # Requires secrets from "test-trigger-is" environment (not available for fork PRs).
365+ # Requires secrets from "test-trigger-is" environment (not available for fork PRs or dependabot ).
366366 # Auto-approves for merge groups to avoid running twice and queue timeouts.
367367 integration-trigger :
368368 needs :
369369 - testmask
370370
371371 if : >-
372- (github.event_name == 'pull_request' && !github.event.pull_request.head.repo.fork) ||
372+ (github.event_name == 'pull_request' && !github.event.pull_request.head.repo.fork && github.actor != 'dependabot[bot]' ) ||
373373 (github.event_name == 'merge_group') ||
374374 (github.event_name == 'push')
375375
@@ -387,7 +387,7 @@ jobs:
387387 - name : Generate GitHub App Token
388388 if : ${{ github.event_name == 'pull_request' || github.event_name == 'push' }}
389389 id : generate-token
390- uses : actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2 .0.6
390+ uses : actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3 .0.0
391391 with :
392392 app-id : ${{ secrets.DECO_WORKFLOW_TRIGGER_APP_ID }}
393393 private-key : ${{ secrets.DECO_WORKFLOW_TRIGGER_PRIVATE_KEY }}
@@ -399,7 +399,7 @@ jobs:
399399 (github.event_name == 'merge_group') ||
400400 (github.event_name == 'pull_request' && !contains(fromJSON(needs.testmask.outputs.targets), 'test'))
401401 id : generate-check-token
402- uses : actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2 .0.6
402+ uses : actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3 .0.0
403403 with :
404404 app-id : ${{ secrets.DECO_TEST_APPROVAL_APP_ID }}
405405 private-key : ${{ secrets.DECO_TEST_APPROVAL_PRIVATE_KEY }}
@@ -468,3 +468,37 @@ jobs:
468468 gh workflow run cli-isolated-nightly.yml -R ${{ secrets.ORG_NAME }}/${{ secrets.REPO_NAME }} \
469469 --ref main \
470470 -f commit_sha=${{ github.event.after }}
471+
472+ # Skip integration tests for dependabot PRs.
473+ # Dependabot has no access to the "test-trigger-is" environment secrets,
474+ # so we use the built-in GITHUB_TOKEN to mark the required "Integration
475+ # Tests" check as passed.
476+ integration-trigger-dependabot :
477+ if : >-
478+ github.event_name == 'pull_request' &&
479+ github.actor == 'dependabot[bot]'
480+
481+ runs-on :
482+ group : databricks-deco-testing-runner-group
483+ labels : ubuntu-latest-deco
484+
485+ permissions :
486+ checks : write
487+
488+ steps :
489+ - name : Skip integration tests
490+ uses : actions/github-script@v8
491+ with :
492+ script : |-
493+ await github.rest.checks.create({
494+ owner: context.repo.owner,
495+ repo: context.repo.repo,
496+ name: 'Integration Tests',
497+ head_sha: '${{ github.event.pull_request.head.sha }}',
498+ status: 'completed',
499+ conclusion: 'success',
500+ output: {
501+ title: 'Integration Tests',
502+ summary: '⏭️ Skipped (dependabot PR)'
503+ }
504+ });
0 commit comments