Skip to content

Commit 56a37f0

Browse files
dependabot[bot]jmeridth
dependabot[bot]
and
jmeridth
authored
chore(deps): bump the dependencies group with 3 updates (#364)
* chore(deps): bump the dependencies group with 3 updates Bumps the dependencies group with 3 updates: [github/ospo-reusable-workflows](https://github.com/github/ospo-reusable-workflows), [super-linter/super-linter](https://github.com/super-linter/super-linter) and [github/codeql-action](https://github.com/github/codeql-action). Updates `github/ospo-reusable-workflows` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/github/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github/ospo-reusable-workflows/blob/main/docs/release-image.md) - [Commits](github/ospo-reusable-workflows@ebb4e21...c9afb9b) Updates `super-linter/super-linter` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](super-linter/super-linter@5119dcd...ffde3b2) Updates `github/codeql-action` from 3.29.9 to 3.29.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@df55935...3c3833e) --- updated-dependencies: - dependency-name: github/ospo-reusable-workflows dependency-version: 0.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: super-linter/super-linter dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: 3.29.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * fix: linting and copilot setup - ensure credentials are not persisted past checkout of code - add zizmor.yml file to linters to allow pull_request_target in actions for auto-labeler to work on fork pull requests - add trivy.yml file to linters to ignore mypy_cache directory - add HEALTHCHECK and non-root user to Dockerfile - setup copilot files Signed-off-by: jmeridth <jmeridth@gmail.com> * fix: linting of major version updater file Signed-off-by: jmeridth <jmeridth@gmail.com> * linting: prettier Signed-off-by: jmeridth <jmeridth@gmail.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: jmeridth <jmeridth@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: jmeridth <jmeridth@gmail.com>
1 parent 28b18e0 commit 56a37f0

14 files changed

+115
-11
lines changed

‎.github/copilot-instructions.md‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# Copilot Instructions
2+
3+
This is a GitHub Action identifies and reports repositories with no activity for configurable amount of time, in order to surface inactive repos to be considered for archival.
4+
5+
## Code Standards
6+
7+
### Required Before Each Commit
8+
9+
- Run `make lint` before committing any changes to ensure proper code linting and formatting.
10+
11+
### Development Flow
12+
13+
- Lint: `make lint`
14+
- Test: `make test`
15+
16+
## Repository Structure
17+
18+
- `Makefile`: Contains commands for linting, testing, and other tasks
19+
- `requirements.txt`: Python dependencies for the project
20+
- `requirements-test.txt`: Python dependencies for testing
21+
- `README.md`: Project documentation and setup instructions
22+
- `setup.py`: Python package setup configuration
23+
- `test_*.py`: Python test files matching the naming convention for test discovery
24+
25+
## Key Guidelines
26+
27+
1. Follow Python best practices and idiomatic patterns
28+
2. Maintain existing code structure and organization
29+
3. Write unit tests for new functionality.
30+
4. Document changes to environment variables in the `README.md` file.

‎.github/linters/trivy.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
scan:
2+
skip-dirs:
3+
- .mypy_cache

‎.github/linters/zizmor.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
rules:
2+
dangerous-triggers: # to allow pull_request_target for auto-labelling fork pull requests
3+
ignore:
4+
- auto-labeler.yml
5+
- pr-title.yml
6+
- release.yml

‎.github/workflows/auto-labeler.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
permissions:
1212
contents: read
1313
pull-requests: write
14-
uses: github/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@ebb4e218b75c6043139fd69a4c9bb5a465fb696b
14+
uses: github/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@c9afb9b655e0f5d2b3abe9c93cee54fa2992c2e0
1515
with:
1616
config-name: release-drafter.yml
1717
secrets:

‎.github/workflows/copilot-setup-steps.yml‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
name: "Copilot Setup Steps"
2+
3+
# Automatically run the setup steps when they are changed to allow for easy validation, and
4+
# allow manual testing through the repository's "Actions" tab
5+
on:
6+
workflow_dispatch:
7+
push:
8+
paths:
9+
- .github/workflows/copilot-setup-steps.yml
10+
pull_request:
11+
paths:
12+
- .github/workflows/copilot-setup-steps.yml
13+
14+
# Set the permissions to the lowest permissions possible needed for your steps.
15+
# Copilot will be given its own token for its operations.
16+
permissions:
17+
# If you want to clone the repository as part of your setup steps, for example to install dependencies, you'll need the `contents: read` permission. If you don't clone the repository in your setup steps, Copilot will do this for you automatically after the steps complete.
18+
contents: read
19+
20+
jobs:
21+
# The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
22+
copilot-setup-steps:
23+
runs-on: ubuntu-latest
24+
25+
# You can define any steps you want, and they will run before the agent starts.
26+
# If you do not check out your code, Copilot will do this for you.
27+
steps:
28+
- name: Checkout code
29+
uses: actions/checkout@v5.0.0
30+
with:
31+
persist-credentials: false
32+
33+
- name: Set up Python
34+
uses: actions/setup-python@v6.0.0
35+
with:
36+
python-version: 3.12
37+
38+
- name: Install dependencies
39+
run: |
40+
pip install -r requirements.txt -r requirements-test.txt

‎.github/workflows/docker-image.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,5 +15,7 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- uses: actions/checkout@v5.0.0
18+
with:
19+
persist-credentials: false
1820
- name: Build the Docker image
1921
run: docker build . --file Dockerfile --platform linux/amd64 --tag stale_repos:"$(date +%s)"

‎.github/workflows/linter.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,12 +23,17 @@ jobs:
2323
# Full git history is needed to get a proper
2424
# list of changed files within `super-linter`
2525
fetch-depth: 0
26+
persist-credentials: false
27+
- name: Setup Python
28+
uses: actions/setup-python@v6.0.0
29+
with:
30+
python-version: "3.12"
2631
- name: Install dependencies
2732
run: |
2833
python -m pip install --upgrade pip
2934
pip install -r requirements.txt -r requirements-test.txt
3035
- name: Lint Code Base
31-
uses: super-linter/super-linter@5119dcd8011e92182ce8219d9e9efc82f16fddb6
36+
uses: super-linter/super-linter@ffde3b2b33b745cb612d787f669ef9442b1339a6
3237
env:
3338
DEFAULT_BRANCH: main
3439
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/major-version-updater.yml‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,7 @@ jobs:
2121
with:
2222
fetch-tags: true
2323
ref: ${{ github.event.inputs.TAG_NAME || github.ref }}
24+
persist-credentials: false
2425
- name: version
2526
id: version
2627
run: |
@@ -30,5 +31,8 @@ jobs:
3031
{ echo "tag=${tag}"; echo "version=${version}"; echo "major=${major}"; } >> "$GITHUB_OUTPUT"
3132
- name: force update major tag
3233
run: |
33-
git tag -f v${{ steps.version.outputs.major }} ${{ steps.version.outputs.tag }}
34-
git push -f origin v${{ steps.version.outputs.major }}
34+
git tag -f v${STEPS_VERSION_OUTPUTS_MAJOR} ${STEPS_VERSION_OUTPUTS_TAG}
35+
git push -f origin v${STEPS_VERSION_OUTPUTS_MAJOR}
36+
env:
37+
STEPS_VERSION_OUTPUTS_MAJOR: ${{ steps.version.outputs.major }}
38+
STEPS_VERSION_OUTPUTS_TAG: ${{ steps.version.outputs.tag }}

‎.github/workflows/pr-title.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,6 @@ jobs:
1212
contents: read
1313
pull-requests: read
1414
statuses: write
15-
uses: github/ospo-reusable-workflows/.github/workflows/pr-title.yaml@ebb4e218b75c6043139fd69a4c9bb5a465fb696b
15+
uses: github/ospo-reusable-workflows/.github/workflows/pr-title.yaml@c9afb9b655e0f5d2b3abe9c93cee54fa2992c2e0
1616
secrets:
1717
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/python-package.yml‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,8 +20,10 @@ jobs:
2020
python-version: [3.11, 3.12, 3.13]
2121
steps:
2222
- uses: actions/checkout@v5.0.0
23+
with:
24+
persist-credentials: false
2325
- name: Set up Python ${{ matrix.python-version }}
24-
uses: actions/setup-python@v5.6.0
26+
uses: actions/setup-python@v6.0.0
2527
with:
2628
python-version: ${{ matrix.python-version }}
2729
- name: Install dependencies

0 commit comments

Comments
 (0)