Commit graph

9 commits

Author SHA1 Message Date
Gavin D'souza
404d5a3cd7 build!: Bump minimum Python version to 3.10
Given how widespread PY310's usage has become, and how we're just a
few months away from PY311 major release. This is a slightly late
bumping but necessary to ensure smoother updates & maintenance for
Frappe, ERPNext & other apps in the coming years. Almost all people
who participated in the pool from the community as well as Frappe team
voted (via active telegram groups) PY310 as their preferred minimum
requirement for v14.
2022-06-30 13:11:26 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
Naveen
fd8af163ba
ci: Set permissions for GitHub actions (#17102)
chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Ankush Menat
3d474b5927 fix: drop py3.7 support for v14 2022-01-10 13:45:18 +05:30
Gavin D'souza
a0e2d0ec20 fix: Drop support for Python 3.6
* Bumping iPython by a minor version broke 3.6 installs for us via https://github.com/frappe/frappe/pull/14192
* We could just add another line in requirements.txt to solve this, but
  since PY36 is reaching end of life by end of this year and release of
  3.10 is just around the corner, might as well just drop it now than
    later
* Frappe v14 would probably have the support range of 3.7-3.10/11 given
  when we release it. Maintaining dependencies for such a large range
  can become cumbersome
2021-09-17 11:24:51 +05:30
Gavin D'souza
7c6cd34c51 ci: Update names for GHA workflows and jobs 2020-11-04 12:27:14 +05:30
gavin
e24c01f798
ci: Rename jobs (#11858) 2020-11-04 12:18:18 +05:30
gavin
012c637c30
chore: Replace existing Docs required check (#11618) 2020-10-02 16:58:45 +05:30