Commit graph

33 commits

Author SHA1 Message Date
barredterra
ce50162213 Merge branch 'develop' into copy-config-to-new-app 2024-01-29 15:07:13 +01:00
dependabot[bot]
44e4c87636
chore(deps): bump actions/cache from 3 to 4
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-22 18:49:28 +00:00
Ankush Menat
885fab62f2
ci: split pre-commit config (#24437) 2024-01-18 10:45:17 +05:30
barredterra
95d0fb57cd feat: linter workflow for new apps 2024-01-14 17:36:47 +01:00
barredterra
504654e73f Merge remote-tracking branch 'upstream/develop' into drop-giturlparse 2024-01-14 16:49:01 +01:00
barredterra
a6d0969ebd chore: drop git-url-parse dependency 2024-01-14 16:47:25 +01:00
barredterra
cfae292d3e chore: bump dropbox 2024-01-14 15:41:37 +01:00
dependabot[bot]
fff9635328
build(deps): bump actions/setup-python from 4 to 5 (#23743)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 14:10:44 +05:30
dependabot[bot]
8b0efd5d4f
chore(deps): bump actions/setup-node from 3 to 4 (#22881)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-24 12:14:47 +05:30
dependabot[bot]
78d481760c
chore(deps): bump actions/checkout from 3 to 4 (#22310)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:41:55 +05:30
Ankush Menat
6dda420176 ci: dont run tests on every push
Rationale:
- PRs already run test by merging PR in develop branch (this is how
  github works)
- Running tests on practically identical code JUST after merge rarely
  helpes. This has found failures from conflicting changes maybe once or
  twice a year. That much CO2 is not justified.
- Instead added daily scheduled tests so things like cypress dashboards
  still work and a *bisect* if requried in future can be done.
2023-07-19 12:15:41 +05:30
Ankush Menat
c3119af5b6 ci: unpin semgrep 2023-07-14 14:29:21 +05:30
Suraj Shetty
5581f960da chore: Update node version requirement in build config 2023-06-26 09:14:17 +05:30
Ankush Menat
6f4a7ddf10 Revert "build(deps)!: Require NodeJS 18 as minimum version (#21303)"
This reverts commit 67cd951013.
2023-06-11 11:40:22 +05:30
Ankush Menat
67cd951013
build(deps)!: Require NodeJS 18 as minimum version (#21303) 2023-06-10 19:22:57 +05:30
Sagar Vora
6065179080
chore: bump requests, chardet, and dropbox to latest versions (#21080)
* chore: bump `requests` and `chardet`

* chore: bump `dropbox` to `11.36.0`, ignore `GHSA-4xqq-73wg-5mjp` during pip-audit
2023-05-24 15:05:50 +05:30
Sagar Vora
41dc220e02
ci: name step that installs and runs pip-audit (#20591) 2023-04-05 06:12:15 +05:30
Raffael Meyer
d8101cdf69
ci: print any vulnerabilities found (#20044)
[skip ci]
2023-02-15 11:41:50 +05:30
Ankush Menat
c0fab395a7 ci(vuln check): skip dropbox package and use cache 2023-01-27 09:05:56 +05:30
Sagar Vora
0e40dff4d7
chore: bump gitpython to 3.1.30 (#19446) 2023-01-01 16:00:11 +05:30
Sagar Vora
1fbead137c
chore: ignore vuln GHSA-hcpj-qp55-gfph during pip audit (#19328) 2022-12-17 11:51:23 +05:30
Ankush Menat
43ccb40d0e chore: rollback to 3.10 for vuln checks
cython dependency fails

[skip ci]
2022-11-05 18:33:50 +05:30
Ankush Menat
0ed7600604
build: py3.11 support (#18550)
* chore: bump RestrictedPython

* ci: use py3.11 on development version

* fix: py311 compat changes

* chore: bump to final versions
2022-11-03 20:49:05 +05:30
Ankush Menat
b46ea3eb0b ci: concurrency group per even types
refer: https://github.com/frappe/erpnext/pull/31806
2022-08-09 17:07:51 +05:30
Gavin D'souza
d2a5b8b002 ci: Skip pre-commit on branch builds 2022-07-25 16:30:11 +05:30
Gavin D'souza
de97eaf603 ci: Merge vulnerable dependency check to linter action 2022-07-25 15:26:17 +05:30
Gavin D'souza
4289e7c7ea ci: Merge PR linter checks
* Combine jobs to be triggered at pull_request events: commit-lint,
  docs-required, linter
* PY310-ize helper scripts
2022-07-25 14:33:30 +05:30
Ankush Menat
9bd753551b
ci: temp fix for semgrep (#17228)
* ci: respekt my authoritah

* ci: use pip semgrep
2022-06-28 12:07:34 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
Bumps [pre-commit/action](https://github.com/pre-commit/action) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0)

---
updated-dependencies:
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
ChillarAnand
b2fc959307 refactor: Clean up whitespace & add CI check 2022-02-25 20:01:29 +05:30
Renamed from .github/workflows/semgrep.yml (Browse further)