Merge branch 'main' into dependabot/pip/kaleido-lt-1.1

Author: tpvasconcelos

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 0.3.2
+current_version = 0.4.0
 commit = True
 commit_args = -s
 message = Release version {new_version}

.github/workflows/check-release-notes.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 1
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Default MISSING_CHANGELOG_ENTRY to 1
         run: echo 'MISSING_CHANGELOG_ENTRY=1' >> "$GITHUB_ENV"
@@ -86,7 +86,7 @@ jobs:
 
       - name: Resolve comment
         if: ${{ env.MISSING_CHANGELOG_ENTRY == '0' && steps.fc.outputs.comment-id != '' }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             query = `mutation minimizeComment {
@@ -104,7 +104,7 @@ jobs:
 
       - name: Unresolve comment
         if: ${{ env.MISSING_CHANGELOG_ENTRY == '1' && steps.fc.outputs.comment-id != '' }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             query = `mutation unminimizeComment {

.github/workflows/ci.yml

@@ -16,16 +16,16 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 jobs:
-  # Run static checks only for Ubuntu and Python 3.9
+  # Run static checks only for Ubuntu and the lowest support version of Python
   static-checks:
     name: Static checks
     runs-on: ubuntu-latest
     timeout-minutes: 6
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: ./.github/actions/setup-python
         with:
-          python-version: "3.9"
+          python-version: "3.10"
           requirements: tox
       # Instead of running all checks in one task (i.e., `tox -m static`),
       # we'll instead run them one-by-one, so that it's easier to
@@ -47,11 +47,11 @@ jobs:
     strategy:
       matrix:
         python-version:
-          - "3.9"
           - "3.10"
           - "3.11"
           - "3.12"
           - "3.13"
+          #- "3.14"
         os:
           - ubuntu-latest
           # There shouldn't be any behavior differences between OSes,
@@ -66,7 +66,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 8
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # TODO: This can be very expensive for large repos. Is there a better way to do this?
           # Fetch all history and tags for setuptools_scm to work

.github/workflows/codeql.yml

@@ -29,7 +29,7 @@ jobs:
       # actions: read
       # contents: read
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - uses: github/codeql-action/init@v3
       with:

.github/workflows/greet-new-users.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 1
     steps:
-      - uses: actions/first-interaction@v1
+      - uses: actions/first-interaction@v3
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           issue-message: |

.github/workflows/release.yml

@@ -32,14 +32,14 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 6
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # TODO: This can be very expensive for large repos. Is there a better way to do this?
           # Fetch all history and tags for setuptools_scm to work
           fetch-depth: 0
       - uses: ./.github/actions/setup-python
         with:
-          python-version: "3.9"
+          python-version: "3.10"
           requirements: tox
       - name: Build source (sdist) and binary (wheel) distributions
         run: tox -e build-dists
@@ -61,7 +61,7 @@ jobs:
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: python-package-distributions
           path: dist/
@@ -84,7 +84,7 @@ jobs:
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: python-package-distributions
           path: dist/
@@ -105,26 +105,26 @@ jobs:
     steps:
 
       # Generate the release notes
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # TODO: This can be very expensive for large repos. Is there a better way to do this?
           # Fetch all history and tags for setuptools_scm to work
           fetch-depth: 0
       - uses: ./.github/actions/setup-python
         with:
-          python-version: "3.9"
+          python-version: "3.10"
           requirements: tox
       - name: Generate release notes
         run: tox -e release-notes
 
       # Sign the package distributions with Sigstore
       # https://github.com/marketplace/actions/gh-action-sigstore-python
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: python-package-distributions
           path: dist/
       - name: Sign the dists with Sigstore
-        uses: sigstore/gh-action-sigstore-python@v3.0.0
+        uses: sigstore/gh-action-sigstore-python@v3.0.1
         with:
           inputs: >-
             ./dist/*.tar.gz

.pre-commit-config.yaml

@@ -1,5 +1,5 @@
 default_language_version:
-  python: python3.9
+  python: python3.10
 
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
@@ -43,7 +43,7 @@ repos:
         exclude: ^\.bumpversion\.cfg$
 
   - repo: https://github.com/python-jsonschema/check-jsonschema.git
-    rev: 0.33.3
+    rev: 0.34.0
     hooks:
       - id: check-github-actions
       - id: check-github-workflows
@@ -75,6 +75,8 @@ repos:
     rev: v0.11.0.1
     hooks:
       - id: shellcheck
+        # Exclude zsh scripts (unsupported by shellcheck)
+        exclude: ^cicd_utils/find-unmentioned-prs\.sh$
 
   # mdformat is not enabled by default, but can be run manually with:
   #   pre-commit run mdformat --all-files --hook-stage manual
@@ -102,7 +104,7 @@ repos:
         additional_dependencies: [setuptools-scm]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.12.10
+    rev: v0.13.1
     hooks:
       - id: ruff-format
       - id: ruff

.readthedocs.yaml

@@ -5,7 +5,7 @@ version: 2
 build:
   os: ubuntu-lts-latest
   tools:
-    python: "3.9"
+    python: "3.10"
   apt_packages:
     # chromium-browser is required by Kaleido to generate Plotly figures via fig.write_image()
     - chromium-browser

MANIFEST.in

@@ -33,7 +33,7 @@ prune docs/api/public
 
 # Misc
 recursive-include .github *.yml *.yaml
-recursive-include cicd_utils README.md *.py
+recursive-include cicd_utils README.md *.py *.sh
 recursive-include misc *.py *.ipynb *.txt *.png
 recursive-include requirements *.txt
 recursive-include tests *.py

Makefile

@@ -2,7 +2,7 @@
 # >>>  Variables
 # ==============================================================
 
-BASE_PYTHON ?= python3.9
+BASE_PYTHON ?= python3.10
 
 VENV_PATH := .venv
 VENV_BIN  := $(VENV_PATH)/bin