Commit graph

253 commits

Author SHA1 Message Date
Gavin D'souza
858735dfa9 ci(install): Use mariadb 10.6 client 2022-07-04 12:33:29 +05:30
Gavin D'souza
65c6914068 ci: Bump mariadb from 10.3 to 10.6 2022-07-04 12:33:29 +05:30
Ankush Menat
234c8beed6
ci: faster patch test (#17386)
* ci: slightly faster patch test

This workflow doesn't seem to properly cache built versions :)

* ci: bump pyenv action to latest version

latest version has fix for tool cache


[skip ci]
2022-07-04 12:09:03 +05:30
phot0n
b0cea224c8 ci: consider svg as docs as well 2022-07-03 21:03:44 +05:30
phot0n
6e818caa59 ci: use different reference for fetched label in has_label 2022-07-03 16:41:37 +05:30
Gavin D'souza
95ad77584a ci: Install bench CLI before switching pyenv 2022-06-30 15:49:27 +05:30
Gavin D'souza
80f36b255a ci: Install bench CLI to system python 2022-06-30 15:41:12 +05:30
Gavin D'souza
c2516c7460 ci(patch): Install bench CLI on all Python envs
\# HACK
2022-06-30 15:26:19 +05:30
Gavin D'souza
f44333a18e ci: Use bench commands with verbose option 2022-06-30 15:24:03 +05:30
Gavin D'souza
4451773daa ci: Fetch pyenv installed specific version 2022-06-30 15:12:03 +05:30
Gavin D'souza
f16a24a777 ci: Set pyenv version to 310 before running install step 2022-06-30 14:45:47 +05:30
Gavin D'souza
ab54e72cbc ci(patch): Switch Python env for each version 2022-06-30 13:11:26 +05:30
Gavin D'souza
404d5a3cd7 build!: Bump minimum Python version to 3.10
Given how widespread PY310's usage has become, and how we're just a
few months away from PY311 major release. This is a slightly late
bumping but necessary to ensure smoother updates & maintenance for
Frappe, ERPNext & other apps in the coming years. Almost all people
who participated in the pool from the community as well as Frappe team
voted (via active telegram groups) PY310 as their preferred minimum
requirement for v14.
2022-06-30 13:11:26 +05:30
Ankush Menat
181833848f
Merge pull request #17337 from ankush/lint_cleanup
fix: remove bare exception catching
2022-06-29 11:39:05 +05:30
Gavin D'souza
6862c10403 ci: PY38 compatible roulette 2022-06-29 11:04:01 +05:30
Gavin D'souza
bd3d7bf3ed ci: Run test builds on min requirement PY38
Since version pinned in pyproject.toml is 38 & we've been running on 39,
we've pushed a few incompatible changes since :crie:
2022-06-29 10:44:55 +05:30
Ankush Menat
d35d7ffbe2 fix: remove bare exception catching
A bare except catches lots of things (like generator iteration end) and should never be used.
2022-06-28 18:05:00 +05:30
Ankush Menat
9bd753551b
ci: temp fix for semgrep (#17228)
* ci: respekt my authoritah

* ci: use pip semgrep
2022-06-28 12:07:34 +05:30
Gavin D'souza
593fd0a178 ci: Add audit for python dependencies via pip-audit 2022-06-22 15:02:18 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
Bumps [pre-commit/action](https://github.com/pre-commit/action) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0)

---
updated-dependencies:
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
b04bffe439
build(deps): bump codecov/codecov-action from 2 to 3 (#17219)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:50:10 +05:30
dependabot[bot]
dd5a9e0d9c
build(deps): bump actions/cache from 2 to 3 (#17220)
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:49:09 +05:30
dependabot[bot]
7570c0e2a1
build(deps): bump actions/setup-node from 2 to 3 (#17222)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:32 +05:30
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
Shariq Ansari
5ca7d6fab9
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 17:45:35 +05:30
dependabot[bot]
27b0b3669d
build(deps): bump bruceadams/get-release from 1.2.0 to 1.2.3
Bumps [bruceadams/get-release](https://github.com/bruceadams/get-release) from 1.2.0 to 1.2.3.
- [Release notes](https://github.com/bruceadams/get-release/releases)
- [Commits](https://github.com/bruceadams/get-release/compare/v1.2.0...v1.2.3)

---
updated-dependencies:
- dependency-name: bruceadams/get-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-16 10:24:59 +00:00
Suraj Shetty
717ad9e2ec
Merge pull request #17120 from turrisxyz/Dependabot-GitHub-Actions 2022-06-16 15:54:22 +05:30
Suraj Shetty
b0503fc839
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 12:25:09 +05:30
Suraj Shetty
1298b39bb3 ci: Add one more instance for faster UI tests execution 2022-06-16 12:07:19 +05:30
Gavin D'souza
21bad02b72 ci: Remove dependency on requirements.txt for builds 2022-06-15 15:25:26 +05:30
Gavin D'souza
59ab6531c9 ci: Invalidate GHA pip cache on pyproject or setup changes
- Cache invalidated if any of the files change: *requirements.txt,
pyproject.toml, setup.py or setup.cfg
- Updated boilerplate for new apps too
2022-06-15 15:05:37 +05:30
Gavin D'souza
601217a4a2 ci: Run tests bypassing roulette with labels "Run UI Tests", "Run Server Tests" 2022-06-13 19:38:30 +05:30
Ankush Menat
d47c52b614
Merge branch 'develop' into Dependabot-GitHub-Actions 2022-06-09 12:25:14 +05:30
Ankush Menat
5b0312c258 Revert "ci: correct last commit for patch test (#17113)"
This reverts commit 4c8787d523.
2022-06-09 11:13:31 +05:30
Ankush Menat
4c8787d523
ci: correct last commit for patch test (#17113) 2022-06-09 10:58:03 +05:30
naveen
e150d99ff0 chore: Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-09 01:29:31 +00:00
Naveen
fd8af163ba
ci: Set permissions for GitHub actions (#17102)
chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Ankush Menat
9137a597eb
ci: update apt cache (#17057) 2022-06-02 14:40:14 +05:30
Deepesh Garg
77e01ddb63 chore: Semantic releases for version-14 beta 2022-06-01 14:33:27 +05:30
Deepesh Garg
ef35653832 chore: Enable semantic release for version-14-beta branch 2022-05-31 18:32:06 +05:30
gavin
9bd79e80a6
Merge pull request #16902 from phot0n/ci-no-run
ci: `Skip CI` label for not running build processes
2022-05-24 11:25:15 +05:30
phot0n
909ce30f0a ci: Skip CI label for stopping build process 2022-05-23 13:01:31 +05:30
chillaranand
e2652daf73 chore: Added flake8 to pre-commit config 2022-05-19 15:34:35 +05:30
Gavin D'souza
b1effcab4b docs: Removed whitespace from Try on FC button 2022-04-28 14:52:29 +05:30
Ankush Menat
9bec3480ed
ci: failfast in case of conflicts (#16777) 2022-04-27 14:25:45 +05:30
Deepesh Garg
59ee952d82 chore: failing semantic release 2022-04-26 12:55:03 +05:30
Deepesh Garg
b59619f764
chore: Update creds to allow updates on protected branch (#16672) 2022-04-19 17:29:09 +05:30
Deepesh Garg
bf21d2fe2a chore: use ubuntu latest 2022-04-18 16:46:14 +05:30