Commit graph

48 commits

Author SHA1 Message Date
sokumon
8b3ff45780 chore: ignore pygaments vuln 2026-03-28 11:51:22 +05:30
Sagar Vora
a2604cfff5 revert: undo ignore vuln 2026-01-23 13:23:28 +05:30
sokumon
0694aa7126 chore: ignore weasyprint vuln 2026-01-22 22:59:02 +05:30
Akhil Narang
345f17558a
build(deps): bump to python>=3.14, nodejs>=24
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-22 20:33:11 +05:30
dependabot[bot]
a8d4fc9cd1
chore(deps): bump actions/checkout from 5 to 6 (#34871)
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-25 11:16:16 +05:30
Akhil Narang
9f2dba7bef
chore(ci): bump python version
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
dependabot[bot]
c88cf29a0c
chore(deps): bump actions/setup-node from 5 to 6 (#34461)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-24 16:07:35 +05:30
dependabot[bot]
37787da28c
chore(deps): bump actions/setup-node from 4 to 5 (#33951)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 10:56:59 +05:30
dependabot[bot]
02522c7cd3
chore(deps): bump actions/setup-python from 5 to 6 (#33952)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-09 10:56:49 +05:30
dependabot[bot]
c8835d7403
chore(deps): bump actions/checkout from 4 to 5 (#33612)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-12 11:03:25 +05:30
Soham Kulkarni
9d82fe62cc
ci: skip redis vuln check (#32787) 2025-06-04 23:50:28 +05:30
Akhil Narang
4671552fe6
build: switch to node 22 (#32421)
It has LTS, 20 is in maintenance mode

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-05-07 10:43:00 +05:30
Akhil Narang
a390992408
chore: python3.13 support (#28624)
* chore: python3.13 support

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

* chore: bump pydantic

```
  error: the configured Python interpreter version (3.13) is newer than PyO3's maximum supported version (3.12)
        = help: please check if an updated version of PyO3 is available. Current version: 0.21.2
        = help: set PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1 to suppress this check and build anyway using the stable ABI
```

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

* chore: bump uuid-utils

https://katb.in/ahaqabugefo

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

* chore: bump RestrictedPython

7.4 has support for py3.13
https://restrictedpython.readthedocs.io/en/latest/changes.html#id1

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

* fix(deprecation_dumpster): import functools uncondtionally

Used here: 60f0b1d5c7/frappe/deprecation_dumpster.py (L177C10-L177C19)

Signed-off-by: Akhil Narang <me@akhilnarang.dev>

* chore(docref): improve error message

* fix: error on unability to hash; TypeError expected

* fix: migrate from 3.10 onwards

---------

Signed-off-by: Akhil Narang <me@akhilnarang.dev>
Co-authored-by: David <dgx.arnold@gmail.com>
2024-12-04 15:35:06 +00:00
David
b830482c13
ci: join pre-commit with linters 2024-11-19 22:38:06 +01:00
David Arnold
93d25424b8
build: pin node version to release-tested version 20 (#28201) 2024-10-20 18:24:39 +00:00
barredterra
ce50162213 Merge branch 'develop' into copy-config-to-new-app 2024-01-29 15:07:13 +01:00
dependabot[bot]
44e4c87636
chore(deps): bump actions/cache from 3 to 4
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 18:49:28 +00:00
Ankush Menat
885fab62f2
ci: split pre-commit config (#24437) 2024-01-18 10:45:17 +05:30
barredterra
95d0fb57cd feat: linter workflow for new apps 2024-01-14 17:36:47 +01:00
barredterra
504654e73f Merge remote-tracking branch 'upstream/develop' into drop-giturlparse 2024-01-14 16:49:01 +01:00
barredterra
a6d0969ebd chore: drop git-url-parse dependency 2024-01-14 16:47:25 +01:00
barredterra
cfae292d3e chore: bump dropbox 2024-01-14 15:41:37 +01:00
dependabot[bot]
fff9635328
build(deps): bump actions/setup-python from 4 to 5 (#23743)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 14:10:44 +05:30
dependabot[bot]
8b0efd5d4f
chore(deps): bump actions/setup-node from 3 to 4 (#22881)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-24 12:14:47 +05:30
dependabot[bot]
78d481760c
chore(deps): bump actions/checkout from 3 to 4 (#22310)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:41:55 +05:30
Ankush Menat
6dda420176 ci: dont run tests on every push
Rationale:
- PRs already run test by merging PR in develop branch (this is how
  github works)
- Running tests on practically identical code JUST after merge rarely
  helpes. This has found failures from conflicting changes maybe once or
  twice a year. That much CO2 is not justified.
- Instead added daily scheduled tests so things like cypress dashboards
  still work and a *bisect* if requried in future can be done.
2023-07-19 12:15:41 +05:30
Ankush Menat
c3119af5b6 ci: unpin semgrep 2023-07-14 14:29:21 +05:30
Suraj Shetty
5581f960da chore: Update node version requirement in build config 2023-06-26 09:14:17 +05:30
Ankush Menat
6f4a7ddf10 Revert "build(deps)!: Require NodeJS 18 as minimum version (#21303)"
This reverts commit 67cd951013.
2023-06-11 11:40:22 +05:30
Ankush Menat
67cd951013
build(deps)!: Require NodeJS 18 as minimum version (#21303) 2023-06-10 19:22:57 +05:30
Sagar Vora
6065179080
chore: bump requests, chardet, and dropbox to latest versions (#21080)
* chore: bump `requests` and `chardet`

* chore: bump `dropbox` to `11.36.0`, ignore `GHSA-4xqq-73wg-5mjp` during pip-audit
2023-05-24 15:05:50 +05:30
Sagar Vora
41dc220e02
ci: name step that installs and runs pip-audit (#20591) 2023-04-05 06:12:15 +05:30
Raffael Meyer
d8101cdf69
ci: print any vulnerabilities found (#20044)
[skip ci]
2023-02-15 11:41:50 +05:30
Ankush Menat
c0fab395a7 ci(vuln check): skip dropbox package and use cache 2023-01-27 09:05:56 +05:30
Sagar Vora
0e40dff4d7
chore: bump gitpython to 3.1.30 (#19446) 2023-01-01 16:00:11 +05:30
Sagar Vora
1fbead137c
chore: ignore vuln GHSA-hcpj-qp55-gfph during pip audit (#19328) 2022-12-17 11:51:23 +05:30
Ankush Menat
43ccb40d0e chore: rollback to 3.10 for vuln checks
cython dependency fails

[skip ci]
2022-11-05 18:33:50 +05:30
Ankush Menat
0ed7600604
build: py3.11 support (#18550)
* chore: bump RestrictedPython

* ci: use py3.11 on development version

* fix: py311 compat changes

* chore: bump to final versions
2022-11-03 20:49:05 +05:30
Ankush Menat
b46ea3eb0b ci: concurrency group per even types
refer: https://github.com/frappe/erpnext/pull/31806
2022-08-09 17:07:51 +05:30
Gavin D'souza
d2a5b8b002 ci: Skip pre-commit on branch builds 2022-07-25 16:30:11 +05:30
Gavin D'souza
de97eaf603 ci: Merge vulnerable dependency check to linter action 2022-07-25 15:26:17 +05:30
Gavin D'souza
4289e7c7ea ci: Merge PR linter checks
* Combine jobs to be triggered at pull_request events: commit-lint,
  docs-required, linter
* PY310-ize helper scripts
2022-07-25 14:33:30 +05:30
Ankush Menat
9bd753551b
ci: temp fix for semgrep (#17228)
* ci: respekt my authoritah

* ci: use pip semgrep
2022-06-28 12:07:34 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
Bumps [pre-commit/action](https://github.com/pre-commit/action) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0)

---
updated-dependencies:
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
ChillarAnand
b2fc959307 refactor: Clean up whitespace & add CI check 2022-02-25 20:01:29 +05:30
Renamed from .github/workflows/semgrep.yml (Browse further)