Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/actions/get-shards/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ runs:
using: "composite"
steps:
- name: Install nf-test
uses: nf-core/setup-nf-test@4069fbbaabe94c08faba4ad261bfa88225ba133f # v2
uses: nf-core/setup-nf-test@v2
with:
version: ${{ env.NFT_VER }}
- name: Get number of shards
Expand Down
12 changes: 6 additions & 6 deletions .github/actions/nf-test/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,24 +20,24 @@ runs:
using: "composite"
steps:
- name: Setup Nextflow
uses: nf-core/setup-nextflow@893c28b667aedeba26e37f296d260ccc5bc4d914 # v3
uses: nf-core/setup-nextflow@v3
with:
version: "${{ env.NXF_VERSION }}"

- name: Set up Python
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
with:
python-version: "3.14"
python-version: "3.15"

- name: Install nf-test
uses: nf-core/setup-nf-test@4069fbbaabe94c08faba4ad261bfa88225ba133f # v2
uses: nf-core/setup-nf-test@v2
with:
version: "${{ env.NFT_VER }}"
install-pdiff: true

- name: Setup apptainer
if: contains(inputs.profile, 'singularity')
uses: eWaterCycle/setup-apptainer@3f706d898c9db585b1d741b4692e66755f3a1b40 # v2.0.0
uses: eWaterCycle/setup-apptainer@3f706d898c9db585b1d741b4692e66755f3a1b40 # v2

- name: Set up Singularity
if: contains(inputs.profile, 'singularity')
Expand All @@ -48,7 +48,7 @@ runs:

- name: Conda setup
if: contains(inputs.profile, 'conda')
uses: conda-incubator/setup-miniconda@8ee1f361103df19b6f8c8655fd3967a8ecb162d5 # v4
uses: conda-incubator/setup-miniconda@be893c923ea9cf1cf7cd510fbdde27c7e18cbdcb # v4.1.0
with:
auto-update-conda: true
conda-solver: libmamba
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/branch.yml
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ jobs:

- name: Upload PR comment artifact
if: failure()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: pr-comment
path: pr-comment/
12 changes: 6 additions & 6 deletions .github/workflows/download_pipeline.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,18 +42,18 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Install Nextflow
uses: nf-core/setup-nextflow@893c28b667aedeba26e37f296d260ccc5bc4d914 # v3
uses: nf-core/setup-nextflow@v3

- name: Disk space cleanup
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
uses: jlumbroso/free-disk-space@ceedf095f4ec1a097402bc6bd80831f2e1a6fde6 # v2.0.0

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
- uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
with:
python-version: "3.14"
python-version: "3.15"
architecture: "x64"

- name: Setup Apptainer
uses: eWaterCycle/setup-apptainer@4bb22c52d4f63406c49e94c804632975787312b3 # v2.0.0
uses: eWaterCycle/setup-apptainer@3f706d898c9db585b1d741b4692e66755f3a1b40 # v2
with:
apptainer-version: 1.3.4

Expand Down Expand Up @@ -135,7 +135,7 @@ jobs:
fi
- name: Upload Nextflow logfile for debugging purposes
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: nextflow_logfile.txt
path: .nextflow.log*
Expand Down
21 changes: 21 additions & 0 deletions .github/workflows/fix-linting.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
name: Fix linting from a comment
on:
issue_comment:
types: [created] # Add "@nf-core-bot fix linting" as a PR comment to trigger this workflow.

concurrency:
group: ${{ github.workflow }}-${{ github.event.issue.number }}

jobs:
fix-linting:
uses: nf-core/actions/.github/workflows/fix-linting.yml@v1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This calls a reusable workflow by the mutable tag @v1 and passes it BOT_TOKEN (nf_core_bot_auth_token), a token that can push. The old fix_linting.yml pinned every action by SHA and also had a github.repository == 'IntGenomicsLab/lrsomatic' guard, which is gone here.

The same PR also unpins nf-core/setup-nextflow@v3 and nf-core/setup-nf-test@v2 from SHAs to tags. That happens in .github/actions/nf-test/action.yml, .github/actions/get-shards/action.yml, linting.yml and download_pipeline.yml, while every other action stays SHA-pinned. The PR description calls these changes "pin bumps".

If unpinning the nf-core-owned actions is intended, please say so in the PR. Otherwise, pin them (and this reusable workflow) to commit SHAs with a # vX comment, as the rest of the workflows do.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Kept as is on purpose. These lines are exactly what the nf-core/tools 4.2.1 template ships (origin/TEMPLATE has nf-core/setup-nextflow@v3, nf-core/setup-nf-test@v2 and fix-linting.yml@v1). Re-pinning them here would make every future template sync conflict on these lines. Third-party actions stay SHA-pinned, as in the template.

On the token:

  • This repository has no nf_core_bot_auth_token secret (only CLAUDE_CODE_OAUTH_TOKEN is set), so BOT_TOKEN resolves to an empty string. Nothing with push rights is passed to the reusable workflow.
  • nf-core/actions fix-linting.yml@v1 only runs on PR comments that contain @nf-core-bot fix linting, and it checks that the commenter has repository permission before doing anything.
  • issue_comment workflows from a fork run in the fork's own context, so the dropped github.repository guard didn't protect anything here.

You're right that "pin bumps" in the PR description was misleading. I've corrected it to say the nf-core-owned actions now follow the template's tags.

with:
nextflow-versions: '["25.10.4","latest-everything"]'
permissions:
actions: read
contents: read
issues: write
pull-requests: write

secrets:
BOT_TOKEN: ${{ secrets.nf_core_bot_auth_token }}
85 changes: 0 additions & 85 deletions .github/workflows/fix_linting.yml

This file was deleted.

14 changes: 7 additions & 7 deletions .github/workflows/linting.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Install Nextflow
uses: nf-core/setup-nextflow@893c28b667aedeba26e37f296d260ccc5bc4d914 # v3
uses: nf-core/setup-nextflow@v3

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
with:
Expand All @@ -37,15 +37,15 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Install Nextflow
uses: nf-core/setup-nextflow@893c28b667aedeba26e37f296d260ccc5bc4d914 # v3
uses: nf-core/setup-nextflow@v3

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
- uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7
with:
python-version: "3.14"
python-version: "3.15"
architecture: "x64"

- name: Setup uv
uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2

- name: read .nf-core.yml
uses: pietrobolcato/action-read-yaml@9f13718d61111b69f30ab4ac683e67a56d254e1d # 1.1.0
Expand Down Expand Up @@ -78,7 +78,7 @@ jobs:

- name: Upload linting log file artifact
if: ${{ always() }}
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: linting-logs
path: |
Expand All @@ -99,7 +99,7 @@ jobs:

- name: Upload PR comment artifact
if: ${{ always() }}
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: pr-comment
path: pr-comment/
6 changes: 3 additions & 3 deletions .github/workflows/nf-test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -127,7 +127,7 @@ jobs:

- name: Upload PR comment fragment
if: ${{ always() && steps.run_nf_test.outcome == 'failure' && matrix.NXF_VER == 'latest-everything' }}
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
with:
name: pr-comment-fragment-${{ strategy.job-index }}
path: pr-comment-fragment/
Expand Down Expand Up @@ -160,7 +160,7 @@ jobs:

- name: Download PR comment fragments
if: ${{ always() }}
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
continue-on-error: true
with:
pattern: pr-comment-fragment-*
Expand Down Expand Up @@ -194,7 +194,7 @@ jobs:

- name: Upload PR comment artifact
if: ${{ always() }}
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
with:
name: pr-comment
path: pr-comment/
2 changes: 1 addition & 1 deletion .github/workflows/pr-comment.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
if: github.event.workflow_run.event == 'pull_request'
steps:
- name: Download PR comment artifact
uses: dawidd6/action-download-artifact@b6e2e70617bc3265edd6dab6c906732b2f1ae151 # v21
uses: dawidd6/action-download-artifact@eab87c9830c39eff17e5a6eadb20bfb4bc880477 # v27
with:
run_id: ${{ github.event.workflow_run.id }}
name: pr-comment
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/template-version-comment.yml
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ jobs:
fi
- name: Upload PR comment artifact
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: pr-comment
path: pr-comment/
2 changes: 1 addition & 1 deletion .nf-core.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ lint:
# a -preview run publishes nothing, so this test asserts on the workflow graph instead of a versions.yml snapshot
nf_test_content:
- tests/sv_annotation_compose.nf.test
nf_core_version: 4.1.0
nf_core_version: 4.2.1
repository_type: pipeline
template:
author: Robert Forsyth & Luuk Harbers
Expand Down
2 changes: 1 addition & 1 deletion .pre-commit-config.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ repos:
hooks:
- id: prettier
additional_dependencies:
- prettier@3.9.6
- prettier@3.9.10
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v6.0.0
hooks:
Expand Down
12 changes: 12 additions & 0 deletions .vscode/extensions.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
{
// See https://github.com/nf-core/vscode-extensionpack
"recommendations": [
"codezombiech.gitignore",
"esbenp.prettier-vscode",
"jebbs.markdown-extended",
"mechatroner.rainbow-csv",
"nextflow.nextflow",
"onnovalkering.vscode-singularity",
"redhat.vscode-yaml"
]
}
3 changes: 2 additions & 1 deletion .vscode/settings.json
Original file line number Diff line number Diff line change
@@ -1,3 +1,4 @@
{
"markdown.styles": ["public/vscode_markdown.css"]
// Render nf-core website admonitions nicely in markdown previews
"markdown.styles": ["https://nf-co.re/vscode_markdown.css"]
}
Loading
Loading