From dcdeec34f62108d0df57c7bb762afa834348081f Mon Sep 17 00:00:00 2001 From: Patrick Oyarzun Date: Tue, 26 May 2026 12:19:34 -0400 Subject: [PATCH 1/5] Add cleanup-branches workflow (dry-run) --- .github/workflows/cleanup-branches.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 .github/workflows/cleanup-branches.yml diff --git a/.github/workflows/cleanup-branches.yml b/.github/workflows/cleanup-branches.yml new file mode 100644 index 00000000..e4990a1d --- /dev/null +++ b/.github/workflows/cleanup-branches.yml @@ -0,0 +1,18 @@ +name: Clean up orphaned branches +on: + schedule: + - cron: "0 9 * * 1" + workflow_dispatch: + +jobs: + cleanup-branches: + runs-on: ubuntu-latest + permissions: + contents: write + pull-requests: read + steps: + - uses: actions/checkout@v4 + - uses: grafana/shared-workflows/actions/cleanup-branches@cleanup-branches/v0.2.1 + with: + dry-run: "true" + From 802ee868d48b060c10404693c43c110f9b06b673 Mon Sep 17 00:00:00 2001 From: Patrick Oyarzun Date: Tue, 26 May 2026 12:25:32 -0400 Subject: [PATCH 2/5] Pin actions to commit SHAs and set persist-credentials: false --- .github/workflows/cleanup-branches.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cleanup-branches.yml b/.github/workflows/cleanup-branches.yml index e4990a1d..f37c1667 100644 --- a/.github/workflows/cleanup-branches.yml +++ b/.github/workflows/cleanup-branches.yml @@ -11,8 +11,10 @@ jobs: contents: write pull-requests: read steps: - - uses: actions/checkout@v4 - - uses: grafana/shared-workflows/actions/cleanup-branches@cleanup-branches/v0.2.1 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + with: + persist-credentials: false + - uses: grafana/shared-workflows/actions/cleanup-branches@c906affb19f070fde9dce56e0db8053c490946cc # cleanup-branches/v0.2.1 with: dry-run: "true" From feb8c9a893a22ff2915d623c301b2a2a271565f0 Mon Sep 17 00:00:00 2001 From: Patrick Oyarzun Date: Tue, 26 May 2026 12:30:08 -0400 Subject: [PATCH 3/5] Bump actions/checkout to v6.0.2 --- .github/workflows/cleanup-branches.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cleanup-branches.yml b/.github/workflows/cleanup-branches.yml index f37c1667..ba38e3d1 100644 --- a/.github/workflows/cleanup-branches.yml +++ b/.github/workflows/cleanup-branches.yml @@ -11,7 +11,7 @@ jobs: contents: write pull-requests: read steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: grafana/shared-workflows/actions/cleanup-branches@c906affb19f070fde9dce56e0db8053c490946cc # cleanup-branches/v0.2.1 From 6a153e86655be5d4ff211c7a46896020030f5476 Mon Sep 17 00:00:00 2001 From: Patrick Oyarzun Date: Tue, 26 May 2026 12:45:01 -0400 Subject: [PATCH 4/5] Remove persist-credentials: false (action needs git creds for fetch) --- .github/workflows/cleanup-branches.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/cleanup-branches.yml b/.github/workflows/cleanup-branches.yml index ba38e3d1..11fa507f 100644 --- a/.github/workflows/cleanup-branches.yml +++ b/.github/workflows/cleanup-branches.yml @@ -12,8 +12,6 @@ jobs: pull-requests: read steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - persist-credentials: false - uses: grafana/shared-workflows/actions/cleanup-branches@c906affb19f070fde9dce56e0db8053c490946cc # cleanup-branches/v0.2.1 with: dry-run: "true" From 16337c5a78a08b9d5bf6e83459738efa42f7343c Mon Sep 17 00:00:00 2001 From: Patrick Oyarzun Date: Tue, 26 May 2026 13:45:04 -0400 Subject: [PATCH 5/5] chore: trigger CI