Skip to content

Commit 4cae5d8

Browse files
davidismdavidism
committed
Merge branch 'stable'
2 parents 3a9d54f + a197702 commit 4cae5d8

7 files changed

Lines changed: 457 additions & 379 deletions

File tree

‎.github/workflows/lock.yaml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,17 @@ name: Lock inactive closed issues
77
on:
88
schedule:
99
- cron: '0 0 * * *'
10-
permissions:
11-
issues: write
12-
pull-requests: write
13-
discussions: write
10+
permissions: {}
1411
concurrency:
1512
group: lock
13+
cancel-in-progress: true
1614
jobs:
1715
lock:
1816
runs-on: ubuntu-latest
17+
permissions:
18+
issues: write
19+
pull-requests: write
20+
discussions: write
1921
steps:
2022
- uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v6.0.0
2123
with:

‎.github/workflows/pre-commit.yaml‎

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,18 @@ on:
33
pull_request:
44
push:
55
branches: [main, stable]
6+
permissions: {}
7+
concurrency:
8+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
9+
cancel-in-progress: true
610
jobs:
711
main:
812
runs-on: ubuntu-latest
913
steps:
1014
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
11-
- uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
15+
with:
16+
persist-credentials: false
17+
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
1218
with:
1319
enable-cache: true
1420
prune-cache: false
@@ -21,5 +27,3 @@ jobs:
2127
path: ~/.cache/pre-commit
2228
key: pre-commit|${{ hashFiles('pyproject.toml', '.pre-commit-config.yaml') }}
2329
- run: uv run --locked --group pre-commit pre-commit run --show-diff-on-failure --color=always --all-files
24-
- uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
25-
if: ${{ !cancelled() }}

‎.github/workflows/publish.yaml‎

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@ name: Publish
22
on:
33
push:
44
tags: ['*']
5+
permissions: {}
6+
concurrency:
7+
group: publish-${{ github.event.push.ref }}
8+
cancel-in-progress: true
59
jobs:
610
build:
711
runs-on: ubuntu-latest
@@ -11,16 +15,16 @@ jobs:
1115
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1216
with:
1317
persist-credentials: false
14-
- uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
18+
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
1519
with:
16-
enable-cache: true
20+
enable-cache: false
1721
prune-cache: false
1822
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1923
with:
2024
python-version-file: pyproject.toml
2125
- run: echo "SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
2226
- run: uv build
23-
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
27+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
2428
id: upload-artifact
2529
with:
2630
name: dist
@@ -32,12 +36,12 @@ jobs:
3236
permissions:
3337
contents: write
3438
steps:
35-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
39+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
3640
with:
3741
artifact-ids: ${{ needs.build.outputs.artifact-id }}
3842
path: dist/
3943
- name: create release
40-
run: gh release create --draft --repo ${{ github.repository }} ${{ github.ref_name }} dist/*
44+
run: gh release create --draft --repo ${GITHUB_REPOSITORY} ${GITHUB_REF_NAME} dist/*
4145
env:
4246
GH_TOKEN: ${{ github.token }}
4347
publish-pypi:
@@ -49,7 +53,7 @@ jobs:
4953
permissions:
5054
id-token: write
5155
steps:
52-
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
56+
- uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
5357
with:
5458
artifact-ids: ${{ needs.build.outputs.artifact-id }}
5559
path: dist/

‎.github/workflows/tests.yaml‎

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,10 @@ on:
55
push:
66
branches: [main, stable]
77
paths-ignore: ['docs/**', 'README.md']
8+
permissions: {}
9+
concurrency:
10+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
11+
cancel-in-progress: true
812
jobs:
913
tests:
1014
name: ${{ matrix.name || matrix.python }}
@@ -26,19 +30,25 @@ jobs:
2630
- {name: Development Versions, python: '3.10', tox: tests-dev}
2731
steps:
2832
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
29-
- uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
33+
with:
34+
persist-credentials: false
35+
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
3036
with:
3137
enable-cache: true
3238
prune-cache: false
3339
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3440
with:
3541
python-version: ${{ matrix.python }}
36-
- run: uv run --locked tox run -e ${{ matrix.tox || format('py{0}', matrix.python) }}
42+
- run: uv run --locked tox run
43+
env:
44+
TOX_ENV: ${{ matrix.tox || format('py{0}', matrix.python) }}
3745
typing:
3846
runs-on: ubuntu-latest
3947
steps:
4048
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
41-
- uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
49+
with:
50+
persist-credentials: false
51+
- uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
4252
with:
4353
enable-cache: true
4454
prune-cache: false

‎.github/workflows/zizmor.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
name: GitHub Actions security analysis with zizmor
2+
on:
3+
pull_request:
4+
paths: ["**/*.yaml?"]
5+
push:
6+
branches: [main, stable]
7+
paths: ["**/*.yaml?"]
8+
permissions: {}
9+
concurrency:
10+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
11+
cancel-in-progress: true
12+
jobs:
13+
zizmor:
14+
runs-on: ubuntu-latest
15+
steps:
16+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
17+
with:
18+
persist-credentials: false
19+
- uses: zizmorcore/zizmor-action@195d10ad90f31d8cd6ea1efd6ecc12969ddbe73f # v0.5.1
20+
with:
21+
advanced-security: false
22+
annotations: true

‎.pre-commit-config.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
repos:
22
- repo: https://github.com/astral-sh/ruff-pre-commit
3-
rev: 0470f7c8a653e950f7cc5a653204ceb3fde4c02a # frozen: v0.15.0
3+
rev: b969e2851312ca2b24bbec879ba4954341d1bd12 # frozen: v0.15.5
44
hooks:
55
- id: ruff-check
66
- id: ruff-format
77
- repo: https://github.com/astral-sh/uv-pre-commit
8-
rev: 5419f5b504dd5329d26fdf936719cb3b08b3eadf # frozen: 0.9.28
8+
rev: e38709b2694c2988ab0c618ee63ac156e155d5c4 # frozen: 0.10.9
99
hooks:
1010
- id: uv-lock
1111
- repo: https://github.com/codespell-project/codespell
12-
rev: 63c8f8312b7559622c0d82815639671ae42132ac # frozen v2.4.1
12+
rev: 2ccb47ff45ad361a21071a7eedda4c37e6ae8c5a # frozen: v2.4.2
1313
hooks:
1414
- id: codespell
1515
args: ['--write-changes']

0 commit comments

Comments
 (0)