Merge pull request #416 from balena-io-modules/ab77/operational

Update dependencies

.github/actions/test/action.yml

@@ -12,7 +12,7 @@ inputs:
   # --- custom environment
   NODE_VERSION:
     type: string
-    default: "14.x"
+    default: "16.x"
   VERBOSE:
     type: string
     default: "true"
@@ -45,7 +45,7 @@ runs:
 
     - name: Test release (Linux)
       if: runner.os == 'Linux'
-      shell: bash --noprofile --norc -eo pipefail -x {0}
+      shell: bash
       run: |
         set -ea
 
@@ -56,7 +56,7 @@ runs:
 
     - name: Test release (macOS)
       if: runner.os == 'macOS'
-      shell: bash --noprofile --norc -eo pipefail -x {0}
+      shell: bash
       run: |
         set -ea
 

.github/workflows/flowzone.yml

@@ -1,17 +1,26 @@
----
 name: Flowzone
 
 on:
   pull_request:
     types: [opened, synchronize, closed]
-    branches:
-      - "main"
-      - "master"
+    branches: [main, master]
+  # allow external contributions to use secrets within trusted code
+  pull_request_target:
+    types: [opened, synchronize, closed]
+    branches: [main, master]
 
 jobs:
   flowzone:
     name: Flowzone
-    uses: product-os/flowzone/.github/workflows/flowzone.yml@ab77/operational
+    uses: product-os/flowzone/.github/workflows/flowzone.yml@master
+    # prevent duplicate workflows and only allow one `pull_request` or `pull_request_target` for
+    # internal or external contributions respectively
+    if: |
+      (github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request') ||
+      (github.event.pull_request.head.repo.full_name != github.repository && github.event_name == 'pull_request_target')
     secrets: inherit
     with:
-      custom_runs_on: '["ubuntu-latest","macos-latest","windows-2019"]'
+      tests_run_on: '["ubuntu-latest","macos-latest","windows-2019"]'
+      restrict_custom_actions: false
+      repo_config: true
+      repo_description: "List all connected drives in your computer, in all major operating systems"