From 79961f0fd1bca7c5ca1cdc5df98d7dd4abd6a151 Mon Sep 17 00:00:00 2001 From: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Date: Tue, 11 Feb 2025 13:00:59 +0200 Subject: [PATCH] Bump pre-commit and fix zizmor's excessive-permissions warnings --- .github/workflows/source-and-docs-release.yml | 2 ++ .github/workflows/test.yml | 2 ++ .pre-commit-config.yaml | 15 ++++++--------- 3 files changed, 10 insertions(+), 9 deletions(-) diff --git a/.github/workflows/source-and-docs-release.yml b/.github/workflows/source-and-docs-release.yml index f6c02dd9..d5d74dd0 100644 --- a/.github/workflows/source-and-docs-release.yml +++ b/.github/workflows/source-and-docs-release.yml @@ -37,6 +37,8 @@ on: name: "Build Python source and docs artifacts" +permissions: {} + # Set from inputs for workflow_dispatch, or set defaults to test push/PR events env: GIT_REMOTE: ${{ github.event.inputs.git_remote || 'python' }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 499391c6..ea31d654 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -2,6 +2,8 @@ name: Test on: [push, pull_request, workflow_dispatch] +permissions: {} + env: FORCE_COLOR: 1 diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 0aed1878..5aef38c1 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,12 +1,12 @@ repos: - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.8.2 + rev: v0.9.6 hooks: - id: ruff args: [--exit-non-zero-on-fix] - repo: https://github.com/psf/black-pre-commit-mirror - rev: 24.10.0 + rev: 25.1.0 hooks: - id: black @@ -25,18 +25,18 @@ repos: - id: trailing-whitespace - repo: https://github.com/python-jsonschema/check-jsonschema - rev: 0.30.0 + rev: 0.31.1 hooks: - id: check-dependabot - id: check-github-workflows - repo: https://github.com/rhysd/actionlint - rev: v1.7.4 + rev: v1.7.7 hooks: - id: actionlint - repo: https://github.com/woodruffw/zizmor-pre-commit - rev: v0.8.0 + rev: v1.3.1 hooks: - id: zizmor @@ -51,7 +51,7 @@ repos: - id: validate-pyproject - repo: https://github.com/tox-dev/tox-ini-fmt - rev: 1.4.1 + rev: 1.5.0 hooks: - id: tox-ini-fmt @@ -59,6 +59,3 @@ repos: hooks: - id: check-hooks-apply - id: check-useless-excludes - -ci: - autoupdate_schedule: quarterly