Merge pull request #4727 from DataDog/tonycthsu/signed-commit

Signed commit for automation

Author: TonyCTHsu

.github/workflows/generate-supported-versions.yml

@@ -46,6 +46,7 @@ jobs:
           labels: dev/internal, integrations
           commit-message: "Test creating supported versions"
           delete-branch: true
+          sign-commits: true
           body: |
             This is a PR to update the table for supported integration versions.
             The supported versions markdown is generated from the minimum and maximum tested versions of each integration,

.github/workflows/lock-dependency.yml

@@ -1,8 +1,5 @@
 name: Lock Dependencies
 
-# TODO: Make this job mandatory
-# TODO: Make this on workflow_dispatch
-
 on: # yamllint disable-line rule:truthy
   pull_request:
     branches:
@@ -18,7 +15,7 @@ permissions: {}
 jobs:
   dependency:
     name: Dependency changes
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       changes: ${{ steps.changes.outputs.dependencies }}
     steps:
@@ -31,7 +28,7 @@ jobs:
           filters: .github/dependency_filters.yml
 
   lock:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs: dependency
     if: ${{ needs.dependency.outputs.changes == 'true' }}
     strategy:
@@ -82,12 +79,10 @@ jobs:
           path: gemfiles/${{ matrix.engine.name }}_${{ matrix.engine.version }}*
           retention-days: 1
 
-  # TODO: Change token to trigger workflow automation
-  # > New commit by GITHUB_TOKEN does not trigger workflow automation to prevent infinite loop
   commit:
     name: Commit changes
     needs: lock
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Generate GitHub App Token
         id: generate-token
@@ -104,10 +99,16 @@ jobs:
           path: gemfiles
           pattern: lock-dependency-${{ github.run_id }}-*
           merge-multiple: true
-      - uses: stefanzweifel/git-auto-commit-action@b863ae1933cb653a53c021fe36dbb774e1fb9403 # v5.2.0
+      - run: git diff --color=always
+      - name: Commit changes
+        uses: planetscale/ghcommit-action@6a383e778f6620afde4bf4b45069d3c6983c1ae2 # v0.2.15
         with:
+          repo: ${{ github.repository }}
+          branch: ${{ github.head_ref }}
           file_pattern: 'gemfiles/*'
           commit_message: "[🤖] Lock Dependency: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+        env:
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
 
   complete:
     name: Lock Dependencies (complete)

.github/workflows/update-latest-dependency.yml

@@ -69,7 +69,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          persist-credentials: true # required for `git` operations (commit & push) at later steps
+          persist-credentials: false
 
       - name: Download artifacts for all runtimes
         uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
@@ -96,6 +96,7 @@ jobs:
           labels: dev/internal, integrations
           commit-message: "[🤖] Update Latest Dependency: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
           delete-branch: true
+          sign-commits: true
           body: |
             _This is an auto-generated PR from [here](https://github.com/DataDog/dd-trace-rb/blob/master/.github/workflows/update-latest-dependency.yml), which creates a pull request that will be continually updated with new changes until it is merged or closed)_
 

.github/workflows/update-system-tests.yml

@@ -70,10 +70,10 @@ jobs:
           branch: auto-generate/update-system-tests
           title: '[🤖] Update System Tests'
           base: master
-          sign-commits: true
           labels: dev/internal
           commit-message: "[🤖] Update System Tests: ${{github.server_url}}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
           delete-branch: true
+          sign-commits: true
           add-paths: |
             .github/
           body: |