From ad3c99546c1ddaa8fc1ff98e99780109b1f874f7 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 14 Jan 2025 21:29:51 +0000 Subject: [PATCH 1/3] chore(deps): update actions/checkout action to v4.2.2 --- .github/workflows/build-image-test.yaml | 2 +- .github/workflows/build-image.yaml | 2 +- .github/workflows/ci-cd.yml | 4 ++-- .github/workflows/pre-commit.yaml | 4 ++-- .github/workflows/release.yml | 2 +- .github/workflows/reusable-tox.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/build-image-test.yaml b/.github/workflows/build-image-test.yaml index 7c43a42f5..b8d97a8a3 100644 --- a/.github/workflows/build-image-test.yaml +++ b/.github/workflows/build-image-test.yaml @@ -16,7 +16,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/build-image.yaml b/.github/workflows/build-image.yaml index ebc2e8911..1bdce1288 100644 --- a/.github/workflows/build-image.yaml +++ b/.github/workflows/build-image.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Set up QEMU # yamllint disable-line rule:line-length uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0 diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index 4f05785af..dba7a6254 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -110,7 +110,7 @@ jobs: with: python-version: 3.13 - name: Check out src from Git - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: >- @@ -273,7 +273,7 @@ jobs: python-version: 3.13 - name: Grab the source from Git - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml index ab6337910..c6b17d203 100644 --- a/.github/workflows/pre-commit.yaml +++ b/.github/workflows/pre-commit.yaml @@ -8,7 +8,7 @@ jobs: pre-commit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - run: >- git fetch --no-tags --prune --depth=1 origin +refs/heads/*:refs/remotes/origin/* @@ -44,7 +44,7 @@ jobs: > hadolint && chmod +x hadolint && sudo mv hadolint /usr/bin/ # Need to success pre-commit fix push - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e2fe69053..307dc0615 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/reusable-tox.yml b/.github/workflows/reusable-tox.yml index bcd1a2182..cfa02ef62 100644 --- a/.github/workflows/reusable-tox.yml +++ b/.github/workflows/reusable-tox.yml @@ -165,7 +165,7 @@ jobs: - name: Grab the source from Git if: >- contains(fromJSON('["pre-commit", "spellcheck-docs"]'), inputs.toxenv) - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: ref: ${{ github.event.inputs.release-committish }} - name: Retrieve the project source from an sdist inside the GHA artifact From 521d4c2386c2868d2d8cf6bce2c0f11371d030c4 Mon Sep 17 00:00:00 2001 From: Maksym Vlasov Date: Tue, 14 Jan 2025 23:37:33 +0200 Subject: [PATCH 2/3] Apply suggestions from code review --- .github/workflows/ci-cd.yml | 2 ++ .github/workflows/reusable-tox.yml | 1 + 2 files changed, 3 insertions(+) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index dba7a6254..eb143a229 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -110,6 +110,7 @@ jobs: with: python-version: 3.13 - name: Check out src from Git + # yamllint disable-line rule:line-length uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -273,6 +274,7 @@ jobs: python-version: 3.13 - name: Grab the source from Git + # yamllint disable-line rule:line-length uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/reusable-tox.yml b/.github/workflows/reusable-tox.yml index cfa02ef62..cb532dae3 100644 --- a/.github/workflows/reusable-tox.yml +++ b/.github/workflows/reusable-tox.yml @@ -165,6 +165,7 @@ jobs: - name: Grab the source from Git if: >- contains(fromJSON('["pre-commit", "spellcheck-docs"]'), inputs.toxenv) + # yamllint disable-line rule:line-length uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: ref: ${{ github.event.inputs.release-committish }} From 7a2a72c673262ebe8063cd68d030a6e95b5d8ce3 Mon Sep 17 00:00:00 2001 From: Maksym Vlasov Date: Tue, 14 Jan 2025 23:41:14 +0200 Subject: [PATCH 3/3] Apply suggestions from code review --- .github/workflows/ci-cd.yml | 4 ++-- .github/workflows/reusable-tox.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index eb143a229..b1907e4ac 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -111,7 +111,7 @@ jobs: python-version: 3.13 - name: Check out src from Git # yamllint disable-line rule:line-length - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: >- @@ -275,7 +275,7 @@ jobs: - name: Grab the source from Git # yamllint disable-line rule:line-length - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/reusable-tox.yml b/.github/workflows/reusable-tox.yml index cb532dae3..3b198364e 100644 --- a/.github/workflows/reusable-tox.yml +++ b/.github/workflows/reusable-tox.yml @@ -166,7 +166,7 @@ jobs: if: >- contains(fromJSON('["pre-commit", "spellcheck-docs"]'), inputs.toxenv) # yamllint disable-line rule:line-length - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: ref: ${{ github.event.inputs.release-committish }} - name: Retrieve the project source from an sdist inside the GHA artifact