Skip to content

Commit 20734d9

Browse files
hynekhynek
authored
Update dev (#1537)
1 parent 9c2b7ed commit 20734d9

File tree

9 files changed

+344
-342
lines changed

9 files changed

+344
-342
lines changed

‎.github/workflows/build-docset.yml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,16 @@ env:
1010
PIP_DISABLE_PIP_VERSION_CHECK: "1"
1111
PIP_NO_PYTHON_VERSION_WARNING: "1"
1212

13+
concurrency:
14+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
15+
cancel-in-progress: true
16+
1317
permissions: {}
1418

1519

1620
jobs:
1721
docset:
22+
name: Build Dash.app docset
1823
runs-on: ubuntu-latest
1924
steps:
2025
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -24,7 +29,7 @@ jobs:
2429
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2530
with:
2631
python-version: "3.x"
27-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
32+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
2833

2934
- run: uvx --with=tox-uv tox run -e docset
3035

‎.github/workflows/ci.yml‎

Lines changed: 17 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,10 @@ on:
99
pull_request:
1010
workflow_dispatch:
1111

12+
concurrency:
13+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
14+
cancel-in-progress: true
15+
1216
env:
1317
FORCE_COLOR: "1"
1418
PIP_DISABLE_PIP_VERSION_CHECK: "1"
@@ -28,7 +32,7 @@ jobs:
2832
fetch-depth: 0
2933
persist-credentials: false
3034

31-
- uses: hynek/build-and-inspect-python-package@efb823f52190ad02594531168b7a2d5790e66516 # v2.14.0
35+
- uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0
3236
id: baipp
3337

3438
outputs:
@@ -49,7 +53,7 @@ jobs:
4953

5054
steps:
5155
- name: Download pre-built packages
52-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
56+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
5357
with:
5458
name: Packages
5559
path: dist
@@ -58,7 +62,7 @@ jobs:
5862
with:
5963
python-version: ${{ matrix.python-version }}
6064
allow-prereleases: true
61-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
65+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
6266

6367
- name: Prepare tox
6468
env:
@@ -109,14 +113,14 @@ jobs:
109113

110114
steps:
111115
- name: Download pre-built packages
112-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
116+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
113117
with:
114118
name: Packages
115119
path: dist
116120
- run: |
117121
tar xf dist/*.tar.gz --strip-components=1
118122
rm -rf src # ensure tests run against wheel
119-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
123+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
120124

121125
- run: >
122126
uvx --with=tox-uv
@@ -131,15 +135,15 @@ jobs:
131135

132136
steps:
133137
- name: Download pre-built packages
134-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
138+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
135139
with:
136140
name: Packages
137141
path: dist
138142
- run: tar xf dist/*.tar.gz --strip-components=1
139-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
143+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
140144

141145
- name: Download coverage data
142-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
146+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
143147
with:
144148
pattern: coverage-data-*
145149
merge-multiple: true
@@ -170,12 +174,12 @@ jobs:
170174
needs: build-package
171175
steps:
172176
- name: Download pre-built packages
173-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
177+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
174178
with:
175179
name: Packages
176180
path: dist
177181
- run: tar xf dist/*.tar.gz --strip-components=1
178-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
182+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
179183

180184
- run: uvx --with=tox-uv tox run -e docs-doctests,changelog
181185

@@ -186,7 +190,7 @@ jobs:
186190
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
187191
with:
188192
persist-credentials: false
189-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
193+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
190194

191195
- run: >
192196
uvx --with=tox-uv
@@ -201,7 +205,7 @@ jobs:
201205
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
202206
with:
203207
persist-credentials: false
204-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
208+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
205209

206210
- run: uv sync --python $(cat .python-version-default)
207211

@@ -212,8 +216,8 @@ jobs:
212216
python -Ic 'import attr; print(attr.__version__)'
213217
python -Ic 'import attrs; print(attrs.__version__)'
214218
215-
# Ensure everything required is passing for branch protection.
216219
required-checks-pass:
220+
name: Ensure everything required is passing for branch protection
217221
if: always()
218222

219223
needs:

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,21 @@ name: CodeQL
33

44
on:
55
schedule:
6-
- cron: "30 22 * * 4"
6+
- cron: "41 3 * * 6"
7+
workflow_dispatch:
78

8-
permissions:
9-
contents: read
9+
concurrency:
10+
group: ${{ github.workflow }}
11+
cancel-in-progress: true
12+
13+
permissions: {}
1014

1115
jobs:
1216
analyze:
1317
name: Analyze
1418
runs-on: ubuntu-latest
1519
permissions:
16-
actions: read
17-
contents: read
18-
security-events: write
20+
security-events: write # necessary according to docs
1921

2022
strategy:
2123
fail-fast: false
@@ -29,12 +31,12 @@ jobs:
2931
persist-credentials: false
3032

3133
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
34+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
3335
with:
3436
languages: ${{ matrix.language }}
3537

3638
- name: Autobuild
37-
uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
39+
uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
3840

3941
- name: Perform CodeQL Analysis
40-
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
42+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1

‎.github/workflows/codspeed.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,9 @@ on:
1616
- .github/workflows/codspeed.yml
1717
workflow_dispatch:
1818

19+
concurrency:
20+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
21+
cancel-in-progress: true
1922

2023
env:
2124
FORCE_COLOR: "1"
@@ -36,11 +39,10 @@ jobs:
3639
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3740
with:
3841
python-version-file: .python-version-default
39-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
42+
- uses: hynek/setup-cached-uv@4300ec2180bc77d705e626a34e381b81a4772c51 # v2.5.0
4043

4144
- name: Run CodSpeed benchmarks
42-
uses: CodSpeedHQ/action@281164b0f014a4e7badd2c02cecad9b595b70537 # v4.11.1
45+
uses: CodSpeedHQ/action@1c8ae4843586d3ba879736b7f6b7b0c990757fab # v4.12.1
4346
with:
4447
mode: simulation
45-
token: ${{ secrets.CODSPEED_TOKEN }}
4648
run: uvx --with tox-uv tox run -e codspeed

‎.github/workflows/pinact.yml‎

Lines changed: 0 additions & 23 deletions
This file was deleted.

‎.github/workflows/pypi-package.yml‎

Lines changed: 12 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,27 +10,31 @@ on:
1010
- published
1111
workflow_dispatch:
1212

13+
concurrency:
14+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
15+
cancel-in-progress: true
16+
17+
permissions: {}
1318

1419
jobs:
1520
# Always build & lint package.
1621
build-package:
1722
name: Build & verify package
1823
runs-on: ubuntu-latest
1924
permissions:
20-
attestations: write
21-
id-token: write
25+
attestations: write # necessary for GitHub attestations
26+
id-token: write # necessary for GitHub attestations
2227

2328
steps:
2429
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2530
with:
2631
fetch-depth: 0
2732
persist-credentials: false
2833

29-
- uses: hynek/build-and-inspect-python-package@efb823f52190ad02594531168b7a2d5790e66516 # v2.14.0
34+
- uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0
3035
with:
3136
attest-build-provenance-github: 'true'
3237

33-
3438
# Upload to Test PyPI on every commit on main.
3539
release-test-pypi:
3640
name: Publish in-dev package to test.pypi.org
@@ -40,22 +44,20 @@ jobs:
4044
needs: build-package
4145

4246
permissions:
43-
id-token: write
47+
id-token: write # necessary for trusted publishing
4448

4549
steps:
4650
- name: Download packages built by build-and-inspect-python-package
47-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
51+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
4852
with:
4953
name: Packages
5054
path: dist
5155

5256
- name: Upload package to Test PyPI
5357
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
5458
with:
55-
attestations: true
5659
repository-url: https://test.pypi.org/legacy/
5760

58-
5961
# Upload to real PyPI on GitHub Releases.
6062
release-pypi:
6163
name: Publish released package to pypi.org
@@ -65,11 +67,11 @@ jobs:
6567
needs: build-package
6668

6769
permissions:
68-
id-token: write
70+
id-token: write # necessary for trusted publishing
6971

7072
steps:
7173
- name: Download packages built by build-and-inspect-python-package
72-
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
74+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
7375
with:
7476
name: Packages
7577
path: dist

‎.github/workflows/zizmor.yml‎

Lines changed: 12 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,33 @@
1+
---
12
# https://github.com/woodruffw/zizmor
2-
name: Zizmor
3+
name: Zizmor 🌈
34

45
on:
56
push:
67
branches: ["main"]
78
pull_request:
8-
branches: ["*"]
9+
branches: ["**"]
910

10-
permissions:
11-
contents: read
11+
concurrency:
12+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
13+
cancel-in-progress: true
1214

15+
permissions: {}
1316

1417
jobs:
1518
zizmor:
16-
name: Zizmor latest via PyPI
19+
name: Run zizmor 🌈
1720
runs-on: ubuntu-latest
1821
permissions:
19-
security-events: write
22+
security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
2023
steps:
2124
- name: Checkout repository
2225
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2326
with:
2427
persist-credentials: false
25-
- uses: hynek/setup-cached-uv@757bedc3f972eb7227a1aa657651f15a8527c817 # v2.3.0
2628

2729
- name: Run zizmor 🌈
28-
run: uvx zizmor --format sarif . > results.sarif
29-
env:
30-
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
31-
32-
- name: Upload SARIF file
33-
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
30+
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
3431
with:
35-
# Path to SARIF file relative to the root of the repository
36-
sarif_file: results.sarif
37-
# Optional category for the results
38-
# Used to differentiate multiple results for one commit
39-
category: zizmor
32+
persona: pedantic
33+
...

‎.pre-commit-config.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ ci:
44

55
repos:
66
- repo: https://github.com/astral-sh/ruff-pre-commit
7-
rev: v0.15.6
7+
rev: v0.15.8
88
hooks:
99
- id: ruff-check
1010
args: [--fix, --exit-non-zero-on-fix]

0 commit comments

Comments
 (0)