Skip to content

Validate tag input on release#493

Merged
dimitris-m merged 1 commit intoopengrep:mainfrom
amplify-security:feature/release-tag-validation
Dec 16, 2025
Merged

Validate tag input on release#493
dimitris-m merged 1 commit intoopengrep:mainfrom
amplify-security:feature/release-tag-validation

Conversation

@lae
Copy link
Contributor

@lae lae commented Dec 16, 2025

This adds a step to the release workflow to help prevent releases being created without the v prefix (or failing semver in general), like in #492.

@dimitris-m
Copy link
Collaborator

This adds a step to the release workflow to help prevent releases being created without the v prefix (or failing semver in general), like in #492.

I'm afraid we can't always force that, we frequently run this to test things and in such cases we intentionally put a dummy tag like DO-NOT-RELEASE.

@lae
Copy link
Contributor Author

lae commented Dec 16, 2025

Ah okay, in that case would it still be valid to just check for TEST-\s+ as well? (I popped into the Actions history and I guess I see a few that are TEST-DO-NOT-RELEASE)

@dimitris-m
Copy link
Collaborator

Ah okay, in that case would it still be valid to just check for TEST-\s+ as well? (I popped into the Actions history and I guess I see a few that are TEST-DO-NOT-RELEASE)

How about something much more liberal:

  • it does not start with a digit
  • if it starts with 'v', then it respects the format.

This way we don't have any accidental omission of the 'v' without disruption to our workflows.

It's not worth to put very strict conditions especially for something that is fixable easily if it happens (and only happened once).

@lae lae force-pushed the feature/release-tag-validation branch from a8482a4 to dbcbd48 Compare December 16, 2025 03:14
@lae
Copy link
Contributor Author

lae commented Dec 16, 2025

That works. Updated the commit.

@dimitris-m
Copy link
Collaborator

I did it again yesterday it seems, only realised now!

Copy link
Collaborator

@dimitris-m dimitris-m left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Isn't it easier to copy paste the check inside the 5 workflows?

Because I suspect it will be much slower the way it's done as separate job?

@dimitris-m
Copy link
Collaborator

Isn't it easier to copy paste the check inside the 5 workflows?

Because I suspect it will be much slower the way it's done as separate job?

Sorry my bad
It's fine

@dimitris-m dimitris-m merged commit 7d8a66a into opengrep:main Dec 16, 2025
6 checks passed
@maciejpirog maciejpirog mentioned this pull request Dec 17, 2025
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Dec 18, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [opengrep/opengrep](https://github.com/opengrep/opengrep) | minor | `v1.12.1` -> `v1.13.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>opengrep/opengrep (opengrep/opengrep)</summary>

### [`v1.13.2`](https://github.com/opengrep/opengrep/releases/tag/v1.13.2): Opengrep 1.13.2

[Compare Source](opengrep/opengrep@v1.13.1...v1.13.2)

#### Improvements

- C#: Add matching on function argument modifiers (ref, in, scoped, etc.) by [@&#8203;maciejpirog](https://github.com/maciejpirog) in [#&#8203;494](opengrep/opengrep#494)
- C#: Support extension blocks by [@&#8203;maciejpirog](https://github.com/maciejpirog) in [#&#8203;496](opengrep/opengrep#496)

#### Release process

- Validate tag input on release by [@&#8203;lae](https://github.com/lae) in [#&#8203;493](opengrep/opengrep#493)

**Full Changelog**: <opengrep/opengrep@v1.13.1...v1.13.2>

### [`v1.13.1`](https://github.com/opengrep/opengrep/releases/tag/v1.13.1): Opengrep 1.13.1

[Compare Source](opengrep/opengrep@v1.12.1...v1.13.1)

#### Improvements

- Improve handling of patterns and `AST_to_IL` translation by [@&#8203;dimitris-m](https://github.com/dimitris-m) in [#&#8203;483](opengrep/opengrep#483)
- Improve rust tainting by [@&#8203;dimitris-m](https://github.com/dimitris-m) in [#&#8203;485](opengrep/opengrep#485)
- Dump generic AST to HTML by [@&#8203;maciejpirog](https://github.com/maciejpirog) in [#&#8203;484](opengrep/opengrep#484)
- Modernise C# by [@&#8203;maciejpirog](https://github.com/maciejpirog) in [#&#8203;487](opengrep/opengrep#487)

#### Bug fixes

- Fix for kotlin double-annotation bug by [@&#8203;maciejpirog](https://github.com/maciejpirog) in [#&#8203;480](opengrep/opengrep#480)
- Fix PCRE2 test making OSX build fail by [@&#8203;dimitris-m](https://github.com/dimitris-m) in [#&#8203;486](opengrep/opengrep#486)
- Fix: in `LetPattern(pat, e)`, `e` should be visited first by [@&#8203;dimitris-m](https://github.com/dimitris-m) in [#&#8203;488](opengrep/opengrep#488)

#### CI fixes

- Force python 3.13 for osx binary workflow by [@&#8203;dimitris-m](https://github.com/dimitris-m) in [#&#8203;490](opengrep/opengrep#490)

##### Notes

- Version 1.13.0 ([#&#8203;489](opengrep/opengrep#489)) intentionally skipped due to CI errors, fixed in [#&#8203;490](opengrep/opengrep#490).

**Full Changelog**: <opengrep/opengrep@v1.12.1...v1.13.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41Ny4xIiwidXBkYXRlZEluVmVyIjoiNDIuNTcuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants