tools: order dependency jobs alphabetically

Refs: nodejs/security-wg#973
lutaok · May 26, 2023 · c90e7ac · c90e7ac
1 parent 847b9e0
commit c90e7ac
Showing 1 changed file with 98 additions and 98 deletions.
diff --git a/.github/workflows/tools.yml b/.github/workflows/tools.yml
@@ -48,70 +48,30 @@ jobs:
     if: github.repository == 'nodejs/node'
     runs-on: ubuntu-latest
     strategy:
-      fail-fast: false  # Prevent other jobs from aborting if one fails
+      fail-fast: false # Prevent other jobs from aborting if one fails
       matrix:
         include:
-          - id: eslint
-            subsystem: tools
-            label: tools
+          - id: acorn
+            subsystem: deps
+            label: dependencies
             run: |
-              ./tools/dep_updaters/update-eslint.sh > temp-output
+              ./tools/dep_updaters/update-acorn.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: corepack
-            subsystem: deps
-            label: dependencies
-            run: |
-              make corepack-update
-              echo "NEW_VERSION=$(node deps/corepack/dist/corepack.js --version)" >> $GITHUB_ENV
-          - id: lint-md-dependencies
-            subsystem: tools
-            label: tools
-            run: |
-              cd tools/lint-md
-              npm ci
-              NEW_VERSION=$(npm outdated --parseable | cut -d: -f4 | xargs)
-              if [ "$NEW_VERSION" != "" ]; then
-                echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_ENV
-                rm -rf package-lock.json node_modules
-                # Include $NEW_VERSION to explicitly update the package.json
-                # entry for the dependency and also so that semver-major updates
-                # are not skipped.
-                npm install --ignore-scripts $NEW_VERSION
-                npm install --ignore-scripts
-                cd ../..
-                make lint-md-rollup
-              fi
-          - id: doc
-            subsystem: tools
-            label: tools
-            run: |
-              cd tools/doc
-              npm ci
-              NEW_VERSION=$(npm outdated --parseable | cut -d: -f4 | xargs)
-              if [ "$NEW_VERSION" != "" ]; then
-                echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_ENV
-                rm -rf package-lock.json node_modules
-                # Include $NEW_VERSION to explicitly update the package.json
-                # entry for the dependency and also so that semver-major updates
-                # are not skipped.
-                npm install --ignore-scripts $NEW_VERSION
-                npm install --ignore-scripts
-              fi
-          - id: undici
+          - id: acorn-walk
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-undici.sh > temp-output
+              ./tools/dep_updaters/update-acorn-walk.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: postject
-            subsystem: deps,test
-            label: test
+          - id: ada
+            subsystem: deps
+            label: dependencies
             run: |
-              ./tools/dep_updaters/update-postject.sh > temp-output
+              ./tools/dep_updaters/update-ada.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
@@ -123,96 +83,131 @@ jobs:
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: acorn
+          - id: brotli
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-acorn.sh > temp-output
+              ./tools/dep_updaters/update-brotli.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: acorn-walk
+          - id: c-ares
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-acorn-walk.sh > temp-output
+              ./tools/dep_updaters/update-c-ares.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: libuv
+          - id: cjs-module-lexer
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-libuv.sh > temp-output
+              ./tools/dep_updaters/update-cjs-module-lexer.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: simdutf
+          - id: corepack
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-simdutf.sh > temp-output
+              make corepack-update
+              echo "NEW_VERSION=$(node deps/corepack/dist/corepack.js --version)" >> $GITHUB_ENV
+          - id: doc
+            subsystem: tools
+            label: tools
+            run: |
+              cd tools/doc
+              npm ci
+              NEW_VERSION=$(npm outdated --parseable | cut -d: -f4 | xargs)
+              if [ "$NEW_VERSION" != "" ]; then
+                echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_ENV
+                rm -rf package-lock.json node_modules
+                # Include $NEW_VERSION to explicitly update the package.json
+                # entry for the dependency and also so that semver-major updates
+                # are not skipped.
+                npm install --ignore-scripts $NEW_VERSION
+                npm install --ignore-scripts
+              fi
+          - id: eslint
+            subsystem: tools
+            label: tools
+            run: |
+              ./tools/dep_updaters/update-eslint.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: ada
+          - id: googletest
             subsystem: deps
-            label: dependencies
+            label: dependencies, test
             run: |
-              ./tools/dep_updaters/update-ada.sh > temp-output
+              ./tools/dep_updaters/update-googletest.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: nghttp2
+          - id: icu
             subsystem: deps
-            label: dependencies
+            label: dependencies, test
             run: |
-              ./tools/dep_updaters/update-nghttp2.sh > temp-output
+              ./tools/dep_updaters/update-icu.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: llhttp
+          - id: libuv
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-llhttp.sh > temp-output
+              ./tools/dep_updaters/update-libuv.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: c-ares
+          - id: lint-md-dependencies
+            subsystem: tools
+            label: tools
+            run: |
+              cd tools/lint-md
+              npm ci
+              NEW_VERSION=$(npm outdated --parseable | cut -d: -f4 | xargs)
+              if [ "$NEW_VERSION" != "" ]; then
+                echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_ENV
+                rm -rf package-lock.json node_modules
+                # Include $NEW_VERSION to explicitly update the package.json
+                # entry for the dependency and also so that semver-major updates
+                # are not skipped.
+                npm install --ignore-scripts $NEW_VERSION
+                npm install --ignore-scripts
+                cd ../..
+                make lint-md-rollup
+              fi
+          - id: llhttp
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-c-ares.sh > temp-output
+              ./tools/dep_updaters/update-llhttp.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: brotli
+          - id: minimatch
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-brotli.sh > temp-output
+              ./tools/dep_updaters/update-minimatch.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: minimatch
+          - id: nghttp2
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-minimatch.sh > temp-output
+              ./tools/dep_updaters/update-nghttp2.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: root-certificates
-            subsystem: crypto
-            label: crypto, notable-change
-            run: |
-              node ./tools/dep_updaters/update-root-certs.mjs -v -f "$GITHUB_ENV"
-          - id: cjs-module-lexer
+          - id: nghttp3
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-cjs-module-lexer.sh > temp-output
+              ./tools/dep_updaters/update-nghttp3.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
@@ -224,54 +219,59 @@ jobs:
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: nghttp3
-            subsystem: deps
-            label: dependencies
+          - id: postject
+            subsystem: deps,test
+            label: test
             run: |
-              ./tools/dep_updaters/update-nghttp3.sh > temp-output
+              ./tools/dep_updaters/update-postject.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: uvwasi
+          - id: root-certificates
+            subsystem: crypto
+            label: crypto, notable-change
+            run: |
+              node ./tools/dep_updaters/update-root-certs.mjs -v -f "$GITHUB_ENV"
+          - id: simdutf
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-uvwasi.sh > temp-output
+              ./tools/dep_updaters/update-simdutf.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: zlib
+          - id: undici
             subsystem: deps
             label: dependencies
             run: |
-              ./tools/dep_updaters/update-zlib.sh > temp-output
+              ./tools/dep_updaters/update-undici.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: googletest
+          - id: uvwasi
             subsystem: deps
-            label: dependencies, test
+            label: dependencies
             run: |
-              ./tools/dep_updaters/update-googletest.sh > temp-output
+              ./tools/dep_updaters/update-uvwasi.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
-          - id: icu
+          - id: zlib
             subsystem: deps
-            label: dependencies, test
+            label: dependencies
             run: |
-              ./tools/dep_updaters/update-icu.sh > temp-output
+              ./tools/dep_updaters/update-zlib.sh > temp-output
               cat temp-output
               tail -n1 temp-output | grep "NEW_VERSION=" >> "$GITHUB_ENV" || true
               rm temp-output
     steps:
-      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab  # v3.5.2
+      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
         if: github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id
         with:
           persist-credentials: false
       - name: Set up Python ${{ env.PYTHON_VERSION }}
         if: matrix.id == 'icu' && (github.event_name == 'schedule' || inputs.id == 'all' || inputs.id == matrix.id)
-        uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b  # v4.6.0
+        uses: actions/setup-python@57ded4d7d5e986d7296eab16560982c6dd7c923b # v4.6.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
       - run: ${{ matrix.run }}
@@ -291,15 +291,15 @@ jobs:
         with:
           author: Node.js GitHub Bot <github-bot@iojs.org>
           body: This is an automated update of ${{ matrix.id }} to ${{ env.NEW_VERSION }}.
-          branch: actions/tools-update-${{ matrix.id }}  # Custom branch *just* for this Action.
+          branch: actions/tools-update-${{ matrix.id }} # Custom branch *just* for this Action.
           commit-message: ${{ env.COMMIT_MSG }}
           labels: ${{ matrix.label }}
           title: '${{ matrix.subsystem }}: update ${{ matrix.id }} to ${{ env.NEW_VERSION }}'
           update-pull-request-title-and-body: true
       - name: Open issue on fail
         id: create-issue
         if: github.event_name == 'schedule' && ${{ failure() }}
-        uses: JasonEtco/create-an-issue@e27dddc79c92bc6e4562f268fffa5ed752639abd  # 2.9.1
+        uses: JasonEtco/create-an-issue@e27dddc79c92bc6e4562f268fffa5ed752639abd # 2.9.1
         env:
           GITHUB_TOKEN: ${{ secrets.GH_USER_TOKEN }}
           FAILED_DEP: ${{ matrix.id }}