chore: Use Renovate to update CI dependencies (#135)

Author: edgarrmondragon

.github/workflows/constraints.txt

@@ -9,32 +9,34 @@ permissions:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    name: Build and Inspect
+    runs-on: ubuntu-24.04
     outputs:
       package_version: ${{ steps.baipp.outputs.package_version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
-      - uses: hynek/build-and-inspect-python-package@v2
+      - uses: hynek/build-and-inspect-python-package@b5076c307dc91924a82ad150cdd1533b444d3310 # v2.12.0
         id: baipp
 
   publish:
-    runs-on: ubuntu-latest
+    name: Publish to PyPI
+    runs-on: ubuntu-24.04
     needs: build
     environment:
       name: publishing
       url: https://pypi.org/project/tap-betterstack/${{ needs.build.outputs.package_version }}
     if: startsWith(github.ref, 'refs/tags/')
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:
           name: Packages
           path: dist
-      - uses: svenstaro/upload-release-action@v2
+      - uses: svenstaro/upload-release-action@04733e069f2d7f7f0b4aebc4fbdbce8613b03ccd # 2.9.0
         with:
           file: dist/*
           tag: ${{ github.ref }}
           overwrite: true
           file_glob: true
-      - uses: pypa/gh-action-pypi-publish@release/v1
+      - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4

.github/workflows/release.yaml

@@ -10,7 +10,6 @@ on:
     - poetry.lock
     - pyproject.toml
     - .github/workflows/test.yml
-    - .github/workflows/constraints.txt
   pull_request:
     types: [opened, synchronize, reopened]
     paths:
@@ -20,7 +19,6 @@ on:
     - poetry.lock
     - pyproject.toml
     - .github/workflows/test.yml
-    - .github/workflows/constraints.txt
   workflow_dispatch:
   schedule:
   # Run weekly on Monday at 12:00 PM UTC
@@ -30,13 +28,25 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+env:
+  FORCE_COLOR: "1"
+  # renovate: datasource=pypi depName=nox
+  NOX_VERSION: 2024.10.9
+  # renovate: datasource=pypi depName=nox-poetry
+  NOX_POETRY_VERSION: 1.1.0
+  # renovate: datasource=pypi depName=pip
+  PIP_VERSION: 25.0.1
+  # renovate: datasource=pypi depName=poetry
+  POETRY_VERSION: 2.0.1
+  # renovate: datasource=pypi depName=poetry-plugin-export
+  POETRY_PLUGIN_EXPORT_VERSION: 1.9.0
+
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       NOXFORCEPYTHON: ${{ matrix.python-version }}
       NOXSESSION: tests
-      PIP_CONSTRAINT: ${{ github.workspace }}/.github/workflows/constraints.txt
       PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
     strategy:
       fail-fast: false
@@ -50,8 +60,8 @@ jobs:
         - "3.13"
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
@@ -60,20 +70,20 @@ jobs:
 
     - name: Upgrade pip
       run: |
-        pip install pip
+        pip install pip==${{ env.PIP_VERSION }}
         pip --version
 
     - name: Install Poetry
       run: |
-        pipx install poetry
-        pipx inject poetry poetry-plugin-export
+        pipx install poetry==${{ env.POETRY_VERSION }}
+        pipx inject poetry poetry-plugin-export==${{ env.POETRY_PLUGIN_EXPORT_VERSION }}
         poetry --version
         poetry self show plugins
 
     - name: Install Nox
       run: |
-        pipx install nox
-        pipx inject nox nox-poetry
+        pipx install nox==${{ env.NOX_VERSION }}
+        pipx inject nox nox-poetry==${{ env.NOX_POETRY_VERSION }}
         nox --version
 
     - name: Run tests
@@ -84,16 +94,15 @@ jobs:
         nox --verbose
 
   typing:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       NOXSESSION: mypy
-      PIP_CONSTRAINT: ${{ github.workspace }}/.github/workflows/constraints.txt
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Set up Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
       id: setup-python
       with:
         python-version: "3.x"
@@ -102,20 +111,20 @@ jobs:
 
     - name: Upgrade pip
       run: |
-        pip install pip
+        pip install pip==${{ env.PIP_VERSION }}
         pip --version
 
     - name: Install Poetry
       run: |
-        pipx install poetry --python ${{ steps.setup-python.outputs.python-path }}
-        pipx inject poetry poetry-plugin-export
+        pipx install poetry==${{ env.POETRY_VERSION }} --python ${{ steps.setup-python.outputs.python-path }}
+        pipx inject poetry poetry-plugin-export==${{ env.POETRY_PLUGIN_EXPORT_VERSION }}
         poetry --version
         poetry self show plugins
 
     - name: Install Nox
       run: |
-        pipx install nox --python ${{ steps.setup-python.outputs.python-path }}
-        pipx inject nox nox-poetry
+        pipx install nox==${{ env.NOX_VERSION }} --python ${{ steps.setup-python.outputs.python-path }}
+        pipx inject nox nox-poetry==${{ env.NOX_POETRY_VERSION }}
         nox --version
 
     - name: Run typing checks

.github/workflows/test.yml

@@ -72,7 +72,6 @@ lint.select = [
   "ALL",
 ]
 lint.ignore = [
-  "ANN101", # missing-type-self
   "COM812", # missing-trailing-comma
   "DJ",     # flake8-django
   "FIX002", # line-contains-todo