mirror of
https://github.com/comfyanonymous/ComfyUI.git
synced 2026-03-30 21:43:43 +08:00
8eccdc0a23
Did some research into the CodeQL envvar-injection-critical guidance (https://codeql.github.com/codeql-query-help/actions/actions-envvar-injection-critical/) and wanted to add this additional change to prevent shell injection through attacker-controllable values like ref names and workflow inputs, and to prevent unexpected behavior from special characters in secret values. Before: echo ${REF_NAME} After: echo "${REF_NAME}"
62 lines
1.8 KiB
YAML
62 lines
1.8 KiB
YAML
name: Update Version File
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- "pyproject.toml"
|
|
branches:
|
|
- master
|
|
- release/**
|
|
|
|
jobs:
|
|
update-version:
|
|
runs-on: ubuntu-latest
|
|
# Don't run on fork PRs
|
|
if: github.event.pull_request.head.repo.full_name == github.repository
|
|
permissions:
|
|
pull-requests: write
|
|
contents: write
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v4
|
|
with:
|
|
python-version: "3.11"
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
python -m pip install --upgrade pip
|
|
|
|
- name: Update comfyui_version.py
|
|
run: |
|
|
# Read version from pyproject.toml and update comfyui_version.py
|
|
python -c '
|
|
import tomllib
|
|
|
|
# Read version from pyproject.toml
|
|
with open("pyproject.toml", "rb") as f:
|
|
config = tomllib.load(f)
|
|
version = config["project"]["version"]
|
|
|
|
# Write version to comfyui_version.py
|
|
with open("comfyui_version.py", "w") as f:
|
|
f.write("# This file is automatically generated by the build process when version is\n")
|
|
f.write("# updated in pyproject.toml.\n")
|
|
f.write(f"__version__ = \"{version}\"\n")
|
|
'
|
|
|
|
- name: Commit changes
|
|
run: |
|
|
git config --local user.name "github-actions"
|
|
git config --local user.email "github-actions@github.com"
|
|
git fetch origin "${HEAD_REF}"
|
|
git checkout -B "${HEAD_REF}" "origin/${HEAD_REF}"
|
|
git add comfyui_version.py
|
|
git diff --quiet && git diff --staged --quiet || git commit -m "chore: Update comfyui_version.py to match pyproject.toml"
|
|
git push origin "HEAD:${HEAD_REF}"
|
|
|
|
env:
|
|
HEAD_REF: ${{ github.head_ref }} |