862 Commits

Author SHA1 Message Date
dependabot[bot]
5ca1fe7399 ci: github: bump the actions-deps group across 1 directory with 15 updates
Bumps the actions-deps group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.2` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `11` | `12` |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.21.0` | `2.22.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.0` | `47.0.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5.0.0` | `6.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.1.0` | `5.1.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `6.0.0` | `7.0.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.1` | `5.5.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.2` | `4.31.10` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.0.0` | `6.2.0` |
| [zephyrproject-rtos/action-zephyr-setup](https://github.com/zephyrproject-rtos/action-zephyr-setup) | `1.0.11` | `1.0.12` |
| [carpentries/actions](https://github.com/carpentries/actions) | `0.15.0` | `0.17.0` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `4.0.0` | `4.0.1` |
| [actions/stale](https://github.com/actions/stale) | `10.1.0` | `10.1.1` |
| [codecov/test-results-action](https://github.com/codecov/test-results-action) | `1.1.1` | `1.2.1` |



Updates `actions/checkout` from 5.0.0 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](08c6903cd8...de0fac2e45)

Updates `dawidd6/action-download-artifact` from 11 to 12
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](ac66b43f0e...0bd50d53a6)

Updates `EnricoMi/publish-unit-test-result-action` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](34d7c956a5...27d65e188e)

Updates `tj-actions/changed-files` from 47.0.0 to 47.0.1
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](24d32ffd49...e002140703)

Updates `actions/upload-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](330a01c490...b7c566a772)

Updates `aws-actions/configure-aws-credentials` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](00943011d9...61815dcd50)

Updates `actions/download-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](018cc2cf5b...37930b1c2a)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](5a1091511a...671740ac38)

Updates `github/codeql-action` from 4.31.2 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0499de31b9...cdefb33c0f)

Updates `actions/setup-node` from 6.0.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](2028fbc5c2...6044e13b5d)

Updates `zephyrproject-rtos/action-zephyr-setup` from 1.0.11 to 1.0.12
- [Commits](cefbf9086c...360ff9b36e)

Updates `carpentries/actions` from 0.15.0 to 0.17.0
- [Release notes](https://github.com/carpentries/actions/releases)
- [Commits](2e20fd5ee5...083bb9952b)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](9e9574ef04...6124774845)

Updates `actions/stale` from 10.1.0 to 10.1.1
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](5f858e3efb...997185467f)

Updates `codecov/test-results-action` from 1.1.1 to 1.2.1
- [Release notes](https://github.com/codecov/test-results-action/releases)
- [Commits](47f89e9acb...0fa95f0e1e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '12'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/download-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/setup-node
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: zephyrproject-rtos/action-zephyr-setup
  dependency-version: 1.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: carpentries/actions
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/stale
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: codecov/test-results-action
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-22 13:03:37 -05:00
Fabio Baltieri
cf356b32a1 tests: twister: only instantiate the Linux instance
This test has been changed in d7a8f29ce7 to drop all the steps that
were running on the other platforms, change it to just instantiate the
Linux instance and drop the conditional.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2026-01-20 15:32:20 +00:00
Fabio Baltieri
fa646a28fc ci: pr_metadata_check: do not rerun on edited
This workflow used to host the "empty" description check and had to
rerun on PR title edit, but that has been moved to into the (faster) dnm
workflow in db18e4c507. Drop the "edited" trigger from this one as it's
not needed anymore.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2026-01-19 16:03:05 +00:00
Fabio Baltieri
1c353a3924 ci: twister_tests_blackbox: filter the toolchain list
Only install arm, riscv and x86 toolchains for the twister blackbox
workflow, save some space.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2026-01-16 11:38:31 +00:00
Fabio Baltieri
a10d932c17 workflows: manually update action-zephyr-setup
Current version as a fix for something that is currently causing
problems in CI and dependabot is failing too, update this one manually
for now.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2026-01-14 13:00:45 +00:00
Fabio Baltieri
9035b77251 github: hello_world_multiplatform: trim the sdk list further
Trim the sdk list down to arm and riscv64, should be good enough for
testing the buildsystem and saves some disk space.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2026-01-13 14:12:41 -06:00
Thomas Stranger
7eb623c035 github: dependabot: configure cooldown time for updates
This will delay non security dependabot updates to packages,
giving automated tools and researchers more time to catch updates
with malicious intent, thus reducing the supply chain security risks.

Signed-off-by: Thomas Stranger <thomas.stranger@outlook.com>
2026-01-05 09:21:03 +01:00
Anas Nashif
516bca6e05 ci: assigner: fix condition for running script
Wrong logic in condition results in running the script with the wrong
arguments.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-12-17 13:54:59 -05:00
Anas Nashif
172c403be5 Revert "ci: assigner: only run on main branch"
This reverts commit 79356f1385.

Was the wrong "fix".

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-12-10 17:36:29 +00:00
Anas Nashif
51a6e8b6f6 ci: assigner: do not check permission/manifest on branches
Workaround GH running workflows from main on release branches.
The assignment script fails and does wrong assignments based on wrong
versions of the maintainer file and manifest.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-12-10 17:36:29 +00:00
Anas Nashif
79356f1385 ci: assigner: only run on main branch
See if this fixes the issue where this workflow runs on released
branches.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-12-10 07:23:52 -05:00
Anas Nashif
d7a8f29ce7 tests: twister: keep this workflow for pytest only
Do not use this workflow for running tests, it should be limited to
blackbox tests only testing command line already happens somewhere else.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-12-08 13:08:57 -05:00
Fabio Baltieri
db1a4f6e54 ci: pr_metadata_check: add a concurrency key
Add a concurrency key so old runs are cancelled automatically.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-12-02 15:18:18 -05:00
Fabio Baltieri
d646664406 ci: pr_metadata_check: timeout after 30mins
This workflow spins forever if the manifest workflow does not run, and
apparently sometimes GitHub "forgets" to run it.

Add a timeout so that this fails after some time rather than the whole
6h timeout.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-12-02 15:18:18 -05:00
Benjamin Cabé
a8fac553b6 ci: doc-build: update to Doxygen 1.15.0
Update to Doxygen 1.15.0 version (html build uses doxygen from the
docker image but PDF build uses vanilla Ubuntu runner from GitHub
so installation is done manually).
Replace MD5SUM by SHA256SUM since Doxygen project now conveniently makes
the checksums available on their Github releases page.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-12-01 12:41:04 -05:00
Benjamin Cabé
8e687fc0dd ci: Switch to CI image v0.28.7
This commit updates the CI workflows to use the CI image v0.28.7, which
updates versions of the following components:
- Doxygen 1.15.0.
- Renode 1.16.0.
- BSIM 3.0.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-11-27 11:25:47 -05:00
Anas Nashif
13bf9895d8 ci: twister: pull testing group in manifest
We need the tests in CI to be able to run them on supported platforms.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-11-25 13:01:12 +01:00
Anas Nashif
4758cfadf5 tests: twister blackbox: filter module installation
Do not install modules we do not need for testing to save space.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-11-19 09:18:56 -05:00
Stephanos Ioannidis
da53769d26 ci: assigner: Fix maintainer file check
The commit 1fe332de61 moved the maintainer
file check step from a standalone workflow to the assigner workflow, which
uses the `action-python-env` action to install the Python requirements.

The version of PyGithub package installed by the `action-python-env` action
in the assigner workflow is 2.6.1, which is older than the minimum required
version 2.7.0 (see 5a4b0ac4d7 for more
details), and this caused the maintainer file check to erroneously flag the
users with "Triage" role.

This commit updates the assigner workflow to use the
action-python-env@32e53bef090c33d53aa94f1d9a9d29c93cfdc5f7, the latest
version at the time of this change with up-to-date requirements file, in
order to ensure that PyGithub>=2.7.0 is installed.

Signed-off-by: Stephanos Ioannidis <root@stephanos.io>
2025-11-19 06:48:14 -05:00
Anas Nashif
19cb7f031b scripts: set_assignee: request review from maintainers of changed areas
Also request reviewes from maintainers of changes areas in the
maintainer file.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-11-18 17:44:53 -05:00
Anas Nashif
616e8d6602 scripts: move set_assignee.py into scripts/ci
Scripts only used by CI, so move it into that directory.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-11-18 17:44:53 -05:00
Anas Nashif
1fe332de61 ci: assigner: merge maintainer check into assigner workflow
Merge two workflows into one for code sharing an efficiency.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-11-18 17:44:53 -05:00
dependabot[bot]
5e650e783b ci: github: bump the actions-deps group across 1 directory with 5 updates
Bumps the actions-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.20.0` | `2.21.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.0.0` | `5.1.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `6.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.30.6` | `4.31.2` |



Updates `EnricoMi/publish-unit-test-result-action` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](3a74b29574...34d7c956a5)

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](ea165f8d65...330a01c490)

Updates `aws-actions/configure-aws-credentials` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](a03048d875...00943011d9)

Updates `actions/download-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](634f93cb29...018cc2cf5b)

Updates `github/codeql-action` from 3.30.6 to 4.31.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](64d10c1313...0499de31b9)

---
updated-dependencies:
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 09:27:46 +02:00
Johan Hedberg
c88d9d531e github: Update security page for 4.3.0 release
Update the GitHub security page to include the recently released 4.3.0
version.

Signed-off-by: Johan Hedberg <johan.hedberg@silabs.com>
2025-11-14 15:27:53 +02:00
Jamie McCrae
c060a33bb0 github: workflows: Disable getting all toolchains
This fixes an issue of CI failing due to the github runner being
out of memory when cleaning up, and speed up the build prep stage

Signed-off-by: Jamie McCrae <jamie.mccrae@nordicsemi.no>
2025-11-04 16:53:31 +02:00
Kyle Bonnici
d18c4db7f1 CI: dts-linter: Move package.json to ./scripts/ci
Move package.json and package-lock.json to ./scripts/ci

Signed-off-by: Kyle Bonnici <kylebonnici@hotmail.com>
2025-10-31 22:40:20 +02:00
Kyle Micallef Bonnici
1dc7eb995d CI: devicetree: linting to check_compliance.py
Use dts-linter to check each touched file in PR

Signed-off-by: Kyle Micallef Bonnici <kylebonnici@hotmail.com>
2025-10-23 16:04:38 -04:00
Benjamin Cabé
0191b0e921 ci: doc-build: fix the "on:" clause
In commit f3edf52264, I erroneously put
"main" under the existing "tags" entry which is obvisouly wrong, it
should be under "branches". Sorry :|

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-10-20 19:15:02 -04:00
Benjamin Cabé
e389df9754 ci: doc-build: increase timeout for html build
For a reason that escapes me for now, the doc build is not particularly
fast on our hosted runners, and we are starting to hit the 20 minutes
timeout. Increase to 60 minutes to be safe for now.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-10-20 14:22:17 -04:00
Benjamin Cabé
f3edf52264 ci: doc-build: build full docs on push, drop cron
Building the full docs every 3 hours is not really the best approach
given we end up building "for nothing" when things are quiet, and on the
other hand introduce a 3-hours-at-most delay for changes to be reflected
on the public docs after a merge/push.
Therefore, drop cron and do the full build on every push to main.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-10-20 14:22:17 -04:00
Benjamin Cabé
61d38979fc ci: doc-build.yml: do not tweak manifest.project-filter unnecessarily
The documentation build shouldn't need to pull in anything beyond what's
active by default in the west.yml manifest. In fact, due to the way the
manifest_projects_table.py script currently works, it is important that
have a local west config that's "vanilla" so that the table of
active/inactive projects is correct.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-10-16 17:09:36 +03:00
dependabot[bot]
472c29a0af ci: github: bump the actions-deps group with 4 updates
Bumps the actions-deps group with 4 updates: [github/codeql-action](https://github.com/github/codeql-action), [fsfe/reuse-action](https://github.com/fsfe/reuse-action), [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [actions/stale](https://github.com/actions/stale).


Updates `github/codeql-action` from 3.30.5 to 3.30.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3599b3baa1...64d10c1313)

Updates `fsfe/reuse-action` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/fsfe/reuse-action/releases)
- [Commits](bb774aa972...676e2d560c)

Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](05b42c6244...4eaacf0543)

Updates `actions/stale` from 10.0.0 to 10.1.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](3a9db7e6a4...5f858e3efb)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: fsfe/reuse-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/stale
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-08 15:06:50 -04:00
Fabio Baltieri
28ac3b5a88 ci: set two more ccache-cache-key false flags
These two were introduced after the previous commit, disable the cache
for them as well, reduce some noise from the github caches page.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-10-05 06:17:16 -04:00
dependabot[bot]
3165d3c617 ci: github: bump the actions-deps group with 2 updates
Bumps the actions-deps group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions).


Updates `github/codeql-action` from 3.30.3 to 3.30.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](192325c861...3599b3baa1)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.25 to 4.0.0
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](fc87bb5b5a...9e9574ef04)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-03 21:13:05 -04:00
Stephanos Ioannidis
c44cb7309b ci: Switch to CI image v0.28.6
This commit updates the CI workflows to use the CI image v0.28.6, which
adds libfuse3 and additional Clang dependencies such as libclang-rt.

Signed-off-by: Stephanos Ioannidis <root@stephanos.io>
2025-10-03 16:53:41 -05:00
Anas Nashif
3d7aa4a407 ci: errno: use action-zephyr-setup action
Do not use docker image, use action for setting up zephyr instead.
We need the SDK here to check the headers.

Signed-off-by: Anas Nashif <anas.nashif@intel.com>
2025-10-03 16:50:13 -05:00
Stephanos Ioannidis
36bc2f38b7 ci: Switch to CI image v0.28.5
This commit updates the CI workflows to use the CI image v0.28.5, which
adds Node.js runtime and the TF-M Python dependencies.

Signed-off-by: Stephanos Ioannidis <root@stephanos.io>
2025-10-03 04:57:55 -05:00
Fabio Baltieri
98a20b2b18 ci: set various ccache-cache-key parameters for the setup action
The setup action now supports caching the ccache objects, set a
ccache-cache-key for the jobs that can benefit from it, disable it from
the ones that don't really build anything.

Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-10-02 21:57:17 +02:00
Benjamin Cabé
0a9c7634a0 ci: workflows: doc: use self-hosted runner
Running full documentation build on GH hosted runners is not really
working for us anymore as we run out of disk space.
Switch (back) to our self-hosted runners.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-10-01 20:23:51 -04:00
dependabot[bot]
39a0ee117c ci: github: bump the actions-deps group with 3 updates
Bumps the actions-deps group with 3 updates: [tj-actions/changed-files](https://github.com/tj-actions/changed-files), [github/codeql-action](https://github.com/github/codeql-action) and [zephyrproject-rtos/action-zephyr-setup](https://github.com/zephyrproject-rtos/action-zephyr-setup).


Updates `tj-actions/changed-files` from 46.0.5 to 47.0.0
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](ed68ef82c0...24d32ffd49)

Updates `github/codeql-action` from 3.30.1 to 3.30.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f1f6e5f6af...192325c861)

Updates `zephyrproject-rtos/action-zephyr-setup` from 1.0.8 to 1.0.9
- [Commits](6a744370a2...c125c5ebee)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: zephyrproject-rtos/action-zephyr-setup
  dependency-version: 1.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-26 09:35:50 -04:00
Benjamin Cabé
b8e446b27a .github: workflows: clang: install python packages
Always install current python dependencies required for CI as part of
setting up the workflow, since the ones pulled in the docker image may
be out of date.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-23 13:52:26 +01:00
Benjamin Cabé
071d6166e1 .github: workflows: bsim-tests: install python packages
A bit confused as to how this worked before, maybe the docker image had
pykwalify pre-installed or something, but we do need python dependencies
properly installed to run CI - here this commit is specifically fixing
an issue with jsonschema not being found.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-23 12:18:28 +01:00
Fabio Baltieri
ae0e5b1fb5 github: hello_world_multiplatform: retire macos-13
This runner is going to go away soon, drop it.

Link: https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/
Suggested-by: Thomas Stranger <thomas.stranger@outlook.com>
Signed-off-by: Fabio Baltieri <fabiobaltieri@google.com>
2025-09-23 09:42:26 +01:00
Benjamin Cabé
364c153cfe ci: workflows: greet_first_time_contributor: update stale link
Update stale link to PR escalation guidelines.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-22 17:52:37 -04:00
Benjamin Cabé
1717b6c212 ci: compliance: treat LicenseAndCopyrightCheck warnings as ...warnings
Warnings related to the LicenseAndCopyrightCheck should not be blocking.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-19 21:24:13 +02:00
Henrik Brix Andersen
52efda972b ci: workflows: hello_world: multiplatform: invoke twister via west
Invoke twister via west instead of invoking it directly. This tests the
twister integration in west across host platforms.

Signed-off-by: Henrik Brix Andersen <henrik@brixandersen.dk>
2025-09-18 15:42:15 +01:00
Benjamin Cabé
cb65ff9fc6 ci: workflows: codecov: run codecov workflow on push
Code coverage is currently executed and uploaded to codecov twice a day.
Now that "twister on push" also uploads stuff (test results) to codecov,
it is preferrable to have each push commit known to codecov to have both
tests and coverage results, since otherwise the "compare" feature that
allows to see the delta between two commits might not work as expected.

We do an average of ~4 merge batches per day so overhead is pretty
minimal.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-17 16:32:27 +02:00
Benjamin Cabé
12c6c19541 ci: workflows: upload doxygen coverage to codecov together w/ unittests
Remove codecov upload from doc build workflow and instead ensure both
test and doxygen coverage is uploaded in the same codecov.yml workflow,
this way codecov report will accurately show the consolidated coverage
for each "push" commit.

Signed-off-by: Benjamin Cabé <benjamin@zephyrproject.org>
2025-09-16 13:05:23 -04:00
Thomas Stranger
9fad64c754 github: workflows: stale-workflow no branch filter for wf dispatch
workflow_dispatch can't filter on branches therefore remove it.
To keep the intended behaviour add a condition on main
to the job of the stale-workflow-queue-cleanup workflow.

Signed-off-by: Thomas Stranger <thomas.stranger@outlook.com>
2025-09-16 06:56:26 -04:00
Thomas Stranger
ecad2e9e27 github: workflows: bug_snapshot no branch filter for wf dispatch
workflow_dispatch can't filter on branches therefore remove it.
To keep the intended behaviour add a condition on main
to the job.

Signed-off-by: Thomas Stranger <thomas.stranger@outlook.com>
2025-09-16 06:56:26 -04:00