Commit graph

148 commits

Author SHA1 Message Date
Gavin D'souza
bd3d7bf3ed ci: Run test builds on min requirement PY38
Since version pinned in pyproject.toml is 38 & we've been running on 39,
we've pushed a few incompatible changes since :crie:
2022-06-29 10:44:55 +05:30
Ankush Menat
9bd753551b
ci: temp fix for semgrep (#17228)
* ci: respekt my authoritah

* ci: use pip semgrep
2022-06-28 12:07:34 +05:30
Gavin D'souza
593fd0a178 ci: Add audit for python dependencies via pip-audit 2022-06-22 15:02:18 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
Bumps [pre-commit/action](https://github.com/pre-commit/action) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0)

---
updated-dependencies:
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
b04bffe439
build(deps): bump codecov/codecov-action from 2 to 3 (#17219)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:50:10 +05:30
dependabot[bot]
dd5a9e0d9c
build(deps): bump actions/cache from 2 to 3 (#17220)
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:49:09 +05:30
dependabot[bot]
7570c0e2a1
build(deps): bump actions/setup-node from 2 to 3 (#17222)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:32 +05:30
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
Shariq Ansari
5ca7d6fab9
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 17:45:35 +05:30
dependabot[bot]
27b0b3669d
build(deps): bump bruceadams/get-release from 1.2.0 to 1.2.3
Bumps [bruceadams/get-release](https://github.com/bruceadams/get-release) from 1.2.0 to 1.2.3.
- [Release notes](https://github.com/bruceadams/get-release/releases)
- [Commits](https://github.com/bruceadams/get-release/compare/v1.2.0...v1.2.3)

---
updated-dependencies:
- dependency-name: bruceadams/get-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-16 10:24:59 +00:00
Suraj Shetty
b0503fc839
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 12:25:09 +05:30
Suraj Shetty
1298b39bb3 ci: Add one more instance for faster UI tests execution 2022-06-16 12:07:19 +05:30
Gavin D'souza
21bad02b72 ci: Remove dependency on requirements.txt for builds 2022-06-15 15:25:26 +05:30
Gavin D'souza
59ab6531c9 ci: Invalidate GHA pip cache on pyproject or setup changes
- Cache invalidated if any of the files change: *requirements.txt,
pyproject.toml, setup.py or setup.cfg
- Updated boilerplate for new apps too
2022-06-15 15:05:37 +05:30
Ankush Menat
5b0312c258 Revert "ci: correct last commit for patch test (#17113)"
This reverts commit 4c8787d523.
2022-06-09 11:13:31 +05:30
Ankush Menat
4c8787d523
ci: correct last commit for patch test (#17113) 2022-06-09 10:58:03 +05:30
Naveen
fd8af163ba
ci: Set permissions for GitHub actions (#17102)
chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Deepesh Garg
77e01ddb63 chore: Semantic releases for version-14 beta 2022-06-01 14:33:27 +05:30
Deepesh Garg
ef35653832 chore: Enable semantic release for version-14-beta branch 2022-05-31 18:32:06 +05:30
Deepesh Garg
59ee952d82 chore: failing semantic release 2022-04-26 12:55:03 +05:30
Deepesh Garg
b59619f764
chore: Update creds to allow updates on protected branch (#16672) 2022-04-19 17:29:09 +05:30
Deepesh Garg
bf21d2fe2a chore: use ubuntu latest 2022-04-18 16:46:14 +05:30
Deepesh Garg
bafb1faa48 chore: Add semantic releases 2022-04-18 10:52:49 +05:30
ChillarAnand
b2fc959307 refactor: Clean up whitespace & add CI check 2022-02-25 20:01:29 +05:30
Suraj Shetty
5de89df5b7 ci: Only upload server-side coverage report if .py files are changed 2022-02-21 09:32:44 +05:30
Suraj Shetty
4e24efda8f ci: Exclude coverage.py and build.py from the report 2022-02-16 17:44:14 +05:30
Suraj Shetty
20056a447f ci: Track server-side coverage as well while doing UI tests 2022-02-16 17:21:59 +05:30
Suraj Shetty
da5779dc43 ci: Run cypress tests on each re-run
- using $GITHUB_RUN_ID-$GITHUB_RUN_ATTEMPT to keep each re-run unique
- Previously, cypress used to just return "Run finished" (without actually re-running the test) after re-running the GA build (without updating the code). This used to give false impression that all tests are passed.
2022-01-25 13:46:18 +05:30
Ankush Menat
3d474b5927 fix: drop py3.7 support for v14 2022-01-10 13:45:18 +05:30
Suraj Shetty
8a84ae4f08
ci: Use node version 14 to avoid node-sass failure in patch testing build (#15176) 2021-12-03 13:57:57 +05:30
Ankush Menat
d79450c501
ci: add timeout to CI jobs (#15000)
once a day some job gets stuck and default timeout is 6 hours.

Changed timeout to 1 hour which is 3-4x more than max running time of
all jobs.
2021-11-17 15:37:28 +05:30
Ankush Menat
b70251baba ci: user hotfix branches for patch test 2021-11-11 12:25:03 +05:30
Revant Nandgaonkar
9b68a9e5b4 ci: change GITHUB_PAT to CI_PAT 2021-11-03 13:51:46 +05:30
Revant Nandgaonkar
30992116ee chore: migrate docker to github actions 2021-11-02 12:12:49 +05:30
Ankush Menat
614423e41c
chore: change repo name 2021-10-22 22:37:06 +05:30
Ankush Menat
488cb31265 ci: move semgrep rules out of repo 2021-10-22 21:46:50 +05:30
Gavin D'souza
42acb7647f ci: Upgrade Py37 to Py39 2021-10-07 20:33:50 +05:30
Suraj Shetty
db9b3e1313
Merge pull request #14269 from mituldavid/coverage 2021-10-06 13:29:40 +05:30
MitulDavid
b798b96deb ci: Set Codecov flags to categorize coverage 2021-10-04 08:21:40 +05:30
Suraj Shetty
4d435e271e
Merge branch 'develop' into coverage 2021-09-30 23:11:26 +05:30
Ankush Menat
c1f9231d72
fix: install future and minor changes
minor changes:
1. quitely checkout new tags
2. avoid changing directory
3. use pip instead of bench to install deps.
2021-09-28 17:28:24 +05:30
Ankush Menat
42791744ff
test: migration tests each version at a time 2021-09-26 13:18:21 +05:30
MitulDavid
eeae52bbf9 ci: Use file-existence-action instead of hashFiles() 2021-09-22 19:07:32 +05:30
Mitul David
eb16a09a57
ci: Upload coverage only if report is generated 2021-09-21 20:26:14 +05:30
Ankush Menat
b140bb3f43
test: run patch test to last release and PR
In the patch test, instead of migrating to the current SHA directly.
Migrate to the latest release (with code at the time of release) and
then migrate to last commit in PR.

Why? When directly migrating, the previous patches that would've run
with old code have access to the new code and it's not realistic. This
change brings it a little bit closer to reality. Hence missing failures
that would occur with IRL installations.
2021-09-21 18:14:17 +05:30
MitulDavid
d8d8c8e54e ci: Code coverage for JS files 2021-09-20 21:11:47 +05:30
Gavin D'souza
a0e2d0ec20 fix: Drop support for Python 3.6
* Bumping iPython by a minor version broke 3.6 installs for us via https://github.com/frappe/frappe/pull/14192
* We could just add another line in requirements.txt to solve this, but
  since PY36 is reaching end of life by end of this year and release of
  3.10 is just around the corner, might as well just drop it now than
    later
* Frappe v14 would probably have the support range of 3.7-3.10/11 given
  when we release it. Maintaining dependencies for such a large range
  can become cumbersome
2021-09-17 11:24:51 +05:30
Ankush Menat
b33b469aff
Merge branch 'develop' into ci_ubuntu_latest 2021-09-07 13:10:56 +05:30