Ankush Menat
21a7291d00
ci: Stripped down config for Semantic checks ( #17542 )
...
* ci: Stripped down config for Semantic checks
Conventional commit enforces too many pointless rules, all we care about
is type and subject.
* ci: auto merge on commit pass
2022-07-19 14:32:34 +05:30
Ankush Menat
4eb1fe74a5
chore: dont fetch full repo
...
In most cases we need 10-50 previous commits. Checking out full repo is
time consuming and not required.
2022-07-19 12:03:18 +05:30
Ankush Menat
8ac7e32214
ci: check commit messages with commitlint ( #17541 )
2022-07-19 11:50:48 +05:30
Ankush Menat
c200f5b3ae
ci: check build requirement before setting up python
...
[skip ci]
2022-07-15 12:03:47 +05:30
Ankush Menat
3a7c7ff182
ci: ignore HTML files for server tests
2022-07-13 20:30:07 +05:30
Gavin D'souza
db53813a68
ci(install): Set mariadb root password via envvar
...
ref: https://github.com/frappe/frappe/runs/7175643618
2022-07-04 20:21:28 +05:30
Gavin D'souza
858735dfa9
ci(install): Use mariadb 10.6 client
2022-07-04 12:33:29 +05:30
Gavin D'souza
65c6914068
ci: Bump mariadb from 10.3 to 10.6
2022-07-04 12:33:29 +05:30
Ankush Menat
234c8beed6
ci: faster patch test ( #17386 )
...
* ci: slightly faster patch test
This workflow doesn't seem to properly cache built versions :)
* ci: bump pyenv action to latest version
latest version has fix for tool cache
[skip ci]
2022-07-04 12:09:03 +05:30
phot0n
b0cea224c8
ci: consider svg as docs as well
2022-07-03 21:03:44 +05:30
phot0n
6e818caa59
ci: use different reference for fetched label in has_label
2022-07-03 16:41:37 +05:30
Gavin D'souza
95ad77584a
ci: Install bench CLI before switching pyenv
2022-06-30 15:49:27 +05:30
Gavin D'souza
80f36b255a
ci: Install bench CLI to system python
2022-06-30 15:41:12 +05:30
Gavin D'souza
c2516c7460
ci(patch): Install bench CLI on all Python envs
...
\# HACK
2022-06-30 15:26:19 +05:30
Gavin D'souza
f44333a18e
ci: Use bench commands with verbose option
2022-06-30 15:24:03 +05:30
Gavin D'souza
4451773daa
ci: Fetch pyenv installed specific version
2022-06-30 15:12:03 +05:30
Gavin D'souza
f16a24a777
ci: Set pyenv version to 310 before running install step
2022-06-30 14:45:47 +05:30
Gavin D'souza
ab54e72cbc
ci(patch): Switch Python env for each version
2022-06-30 13:11:26 +05:30
Gavin D'souza
404d5a3cd7
build!: Bump minimum Python version to 3.10
...
Given how widespread PY310's usage has become, and how we're just a
few months away from PY311 major release. This is a slightly late
bumping but necessary to ensure smoother updates & maintenance for
Frappe, ERPNext & other apps in the coming years. Almost all people
who participated in the pool from the community as well as Frappe team
voted (via active telegram groups) PY310 as their preferred minimum
requirement for v14.
2022-06-30 13:11:26 +05:30
Ankush Menat
181833848f
Merge pull request #17337 from ankush/lint_cleanup
...
fix: remove bare exception catching
2022-06-29 11:39:05 +05:30
Gavin D'souza
6862c10403
ci: PY38 compatible roulette
2022-06-29 11:04:01 +05:30
Gavin D'souza
bd3d7bf3ed
ci: Run test builds on min requirement PY38
...
Since version pinned in pyproject.toml is 38 & we've been running on 39,
we've pushed a few incompatible changes since :crie:
2022-06-29 10:44:55 +05:30
Ankush Menat
d35d7ffbe2
fix: remove bare exception catching
...
A bare except catches lots of things (like generator iteration end) and should never be used.
2022-06-28 18:05:00 +05:30
Ankush Menat
9bd753551b
ci: temp fix for semgrep ( #17228 )
...
* ci: respekt my authoritah
* ci: use pip semgrep
2022-06-28 12:07:34 +05:30
Gavin D'souza
593fd0a178
ci: Add audit for python dependencies via pip-audit
2022-06-22 15:02:18 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
...
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
...
Bumps [pre-commit/action](https://github.com/pre-commit/action ) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases )
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0 )
---
updated-dependencies:
- dependency-name: pre-commit/action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
b04bffe439
build(deps): bump codecov/codecov-action from 2 to 3 ( #17219 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 2 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:50:10 +05:30
dependabot[bot]
dd5a9e0d9c
build(deps): bump actions/cache from 2 to 3 ( #17220 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:49:09 +05:30
dependabot[bot]
7570c0e2a1
build(deps): bump actions/setup-node from 2 to 3 ( #17222 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:32 +05:30
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 ( #17218 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v2...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
Shariq Ansari
5ca7d6fab9
Merge branch 'develop' into add-more-instance-for-UI
2022-06-16 17:45:35 +05:30
dependabot[bot]
27b0b3669d
build(deps): bump bruceadams/get-release from 1.2.0 to 1.2.3
...
Bumps [bruceadams/get-release](https://github.com/bruceadams/get-release ) from 1.2.0 to 1.2.3.
- [Release notes](https://github.com/bruceadams/get-release/releases )
- [Commits](https://github.com/bruceadams/get-release/compare/v1.2.0...v1.2.3 )
---
updated-dependencies:
- dependency-name: bruceadams/get-release
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-06-16 10:24:59 +00:00
Suraj Shetty
717ad9e2ec
Merge pull request #17120 from turrisxyz/Dependabot-GitHub-Actions
2022-06-16 15:54:22 +05:30
Suraj Shetty
b0503fc839
Merge branch 'develop' into add-more-instance-for-UI
2022-06-16 12:25:09 +05:30
Suraj Shetty
1298b39bb3
ci: Add one more instance for faster UI tests execution
2022-06-16 12:07:19 +05:30
Gavin D'souza
21bad02b72
ci: Remove dependency on requirements.txt for builds
2022-06-15 15:25:26 +05:30
Gavin D'souza
59ab6531c9
ci: Invalidate GHA pip cache on pyproject or setup changes
...
- Cache invalidated if any of the files change: *requirements.txt,
pyproject.toml, setup.py or setup.cfg
- Updated boilerplate for new apps too
2022-06-15 15:05:37 +05:30
Gavin D'souza
601217a4a2
ci: Run tests bypassing roulette with labels "Run UI Tests", "Run Server Tests"
2022-06-13 19:38:30 +05:30
Ankush Menat
d47c52b614
Merge branch 'develop' into Dependabot-GitHub-Actions
2022-06-09 12:25:14 +05:30
Ankush Menat
5b0312c258
Revert "ci: correct last commit for patch test ( #17113 )"
...
This reverts commit 4c8787d523 .
2022-06-09 11:13:31 +05:30
Ankush Menat
4c8787d523
ci: correct last commit for patch test ( #17113 )
2022-06-09 10:58:03 +05:30
naveen
e150d99ff0
chore: Included githubactions in the dependabot config
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-09 01:29:31 +00:00
Naveen
fd8af163ba
ci: Set permissions for GitHub actions ( #17102 )
...
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Ankush Menat
9137a597eb
ci: update apt cache ( #17057 )
2022-06-02 14:40:14 +05:30
Deepesh Garg
77e01ddb63
chore: Semantic releases for version-14 beta
2022-06-01 14:33:27 +05:30
Deepesh Garg
ef35653832
chore: Enable semantic release for version-14-beta branch
2022-05-31 18:32:06 +05:30
gavin
9bd79e80a6
Merge pull request #16902 from phot0n/ci-no-run
...
ci: `Skip CI` label for not running build processes
2022-05-24 11:25:15 +05:30
phot0n
909ce30f0a
ci: Skip CI label for stopping build process
2022-05-23 13:01:31 +05:30