diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..0fd615c --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,53 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/check.yaml': + - 'actions/checkout@v7.0.1' + - 'astral-sh/setup-uv@v10.3.3' + - 'tox-dev/github-workflows@6.8.0' + '.github/workflows/codeql.yaml': [] + '.github/workflows/news.yaml': + - 'actions/checkout@v7.0.1' + - 'astral-sh/setup-uv@v10.3.3' + - 'tox-dev/github-workflows@6.8.0' + '.github/workflows/prepare-release.yaml': [] + '.github/workflows/release.yaml': + - 'actions/download-artifact@v8.0.2' + - 'pypa/gh-action-pypi-publish@v1.14.3' + '.github/workflows/scorecard.yaml': [] + '.github/workflows/upgrade-release-tools.yaml': [] +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405': + ref: 'v6.2.0' + commit: 'sha1-a309ff8b426b58ec0e2a45f0f869d46889d02405' + owner_id: 44036562 + repo_id: 192625525 + 'astral-sh/setup-uv@v10.3.3': + ref: 'v10.3.3' + commit: 'sha1-68559e99cc807c1eb7e9238fd43a15bba460eec2' + owner_id: 115962839 + repo_id: 846733598 + 'pypa/gh-action-pypi-publish@v1.14.3': + ref: 'v1.14.3' + commit: 'sha1-7245906fb61fa33a13554f9d5fb856fe61758086' + owner_id: 647025 + repo_id: 178055147 + uses: + - 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405' + 'tox-dev/github-workflows@6.8.0': + ref: '6.8.0' + commit: 'sha1-bf1c3ab0aa137d307a07aad844d507af73039387' + owner_id: 20345659 + repo_id: 1426182029 diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml index 850ddc0..0a32ce7 100644 --- a/.github/workflows/check.yaml +++ b/.github/workflows/check.yaml @@ -16,7 +16,7 @@ permissions: jobs: test: name: ๐Ÿงช Test - uses: tox-dev/github-workflows/.github/workflows/check.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/check.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read with: @@ -40,12 +40,12 @@ jobs: runs-on: ubuntu-26.04 steps: - name: ๐Ÿ“ฅ Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 + uses: astral-sh/setup-uv@v10.3.3 with: version: latest-known python-version: "3.15" @@ -73,7 +73,7 @@ jobs: dry-run: true hooks: name: ๐Ÿงน Hooks under the cooldown - uses: tox-dev/github-workflows/.github/workflows/cooled-hooks.yaml@0c4cffd63033d38196319524d101caae1eef925b # 6.7.2 + uses: tox-dev/github-workflows/.github/workflows/cooled-hooks.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read gate: @@ -84,6 +84,6 @@ jobs: permissions: {} steps: - name: ๐Ÿšฆ Require all needed jobs to pass - uses: tox-dev/github-workflows/required-checks@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/required-checks@6.8.0 with: needs: ${{ toJSON(needs) }} diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index a3ec67d..6ff2ac3 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -13,7 +13,7 @@ permissions: {} jobs: analyze: name: ๐Ÿ›ก๏ธ Analyze - uses: tox-dev/github-workflows/.github/workflows/codeql.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/codeql.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read security-events: write diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml index 88f1eb4..3da3795 100644 --- a/.github/workflows/news.yaml +++ b/.github/workflows/news.yaml @@ -11,20 +11,20 @@ jobs: runs-on: ubuntu-26.04 steps: - name: ๐Ÿ“ฅ Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 + uses: astral-sh/setup-uv@v10.3.3 with: version: latest-known python-version: "3.15" enable-cache: false - name: ๐Ÿ“ฆ Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/install-locked-tools@6.8.0 with: groups: release-news venv: ${{ runner.temp }}/release-tools - name: ๐Ÿ” Validate news fragments - uses: tox-dev/github-workflows/validate-news@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/validate-news@6.8.0 diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml index 740db4a..485aa56 100644 --- a/.github/workflows/prepare-release.yaml +++ b/.github/workflows/prepare-release.yaml @@ -18,7 +18,7 @@ permissions: {} jobs: prepare: name: ๐Ÿท๏ธ Prepare Towncrier release - uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@0c4cffd63033d38196319524d101caae1eef925b # 6.7.2 + uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read pull-requests: read diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 78f5d72..3a010a7 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -10,12 +10,12 @@ concurrency: jobs: build: name: ๐Ÿ—๏ธ Build - uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read notes: name: ๐Ÿ“ Render GitHub Release notes - uses: tox-dev/github-workflows/.github/workflows/release-notes.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/release-notes.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read with: @@ -33,18 +33,18 @@ jobs: id-token: write steps: - name: ๐Ÿ“ฉ Download distributions - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 + uses: actions/download-artifact@v8.0.2 with: artifact-ids: ${{ needs.build.outputs.distributions-artifact-id }} path: dist/ - name: ๐Ÿš€ Publish to PyPI - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 + uses: pypa/gh-action-pypi-publish@v1.14.3 with: packages-dir: dist github-release: name: ๐Ÿš€ Publish GitHub Release needs: [build, notes, release] - uses: tox-dev/github-workflows/.github/workflows/github-release.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/github-release.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: write with: diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 99f5a28..4f52b17 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -23,4 +23,4 @@ jobs: pull-requests: read # read reviews for the Code-Review check security-events: write # upload the SARIF results to code scanning statuses: read # read commit statuses for the CI-Tests check - uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 diff --git a/.github/workflows/upgrade-release-tools.yaml b/.github/workflows/upgrade-release-tools.yaml index 77a9837..a0e561b 100644 --- a/.github/workflows/upgrade-release-tools.yaml +++ b/.github/workflows/upgrade-release-tools.yaml @@ -10,7 +10,7 @@ concurrency: jobs: upgrade: name: ๐Ÿ”€ Upgrade release tools - uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@bf1c3ab0aa137d307a07aad844d507af73039387 # 6.8.0 permissions: contents: read secrets: diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 2222e7f..cda4695 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -81,7 +81,7 @@ repos: additional_dependencies: - "sphinx==9.2.0" - repo: https://github.com/zizmorcore/zizmor-pre-commit - rev: c92afdf2c6ca336aaa8f39e2bd8d48f62dbd8e1f # frozen: v1.31.1 + rev: 06a39750ec31860bb44f2acf67182c40016cd1e7 # frozen: v1.32.0 hooks: - id: zizmor priority: 8