Commit graph

235 commits

Author SHA1 Message Date
Gavin D'souza
593fd0a178 ci: Add audit for python dependencies via pip-audit 2022-06-22 15:02:18 +05:30
Suraj Shetty
ad89d07247
Merge pull request #17252 from frappe/dependabot/github_actions/actions/checkout-3
build(deps): bump actions/checkout from 2 to 3
2022-06-21 09:29:06 +05:30
dependabot[bot]
e12d37a943
build(deps): bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:35 +00:00
dependabot[bot]
4811c51ecc
build(deps): bump pre-commit/action from 2.0.3 to 3.0.0
Bumps [pre-commit/action](https://github.com/pre-commit/action) from 2.0.3 to 3.0.0.
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](https://github.com/pre-commit/action/compare/v2.0.3...v3.0.0)

---
updated-dependencies:
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-20 18:40:31 +00:00
dependabot[bot]
b04bffe439
build(deps): bump codecov/codecov-action from 2 to 3 (#17219)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:50:10 +05:30
dependabot[bot]
dd5a9e0d9c
build(deps): bump actions/cache from 2 to 3 (#17220)
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:49:09 +05:30
dependabot[bot]
7570c0e2a1
build(deps): bump actions/setup-node from 2 to 3 (#17222)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:32 +05:30
dependabot[bot]
dd8aabcc2f
build(deps): bump actions/setup-python from 2 to 4 (#17218)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 11:48:06 +05:30
Shariq Ansari
5ca7d6fab9
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 17:45:35 +05:30
dependabot[bot]
27b0b3669d
build(deps): bump bruceadams/get-release from 1.2.0 to 1.2.3
Bumps [bruceadams/get-release](https://github.com/bruceadams/get-release) from 1.2.0 to 1.2.3.
- [Release notes](https://github.com/bruceadams/get-release/releases)
- [Commits](https://github.com/bruceadams/get-release/compare/v1.2.0...v1.2.3)

---
updated-dependencies:
- dependency-name: bruceadams/get-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-16 10:24:59 +00:00
Suraj Shetty
717ad9e2ec
Merge pull request #17120 from turrisxyz/Dependabot-GitHub-Actions 2022-06-16 15:54:22 +05:30
Suraj Shetty
b0503fc839
Merge branch 'develop' into add-more-instance-for-UI 2022-06-16 12:25:09 +05:30
Suraj Shetty
1298b39bb3 ci: Add one more instance for faster UI tests execution 2022-06-16 12:07:19 +05:30
Gavin D'souza
21bad02b72 ci: Remove dependency on requirements.txt for builds 2022-06-15 15:25:26 +05:30
Gavin D'souza
59ab6531c9 ci: Invalidate GHA pip cache on pyproject or setup changes
- Cache invalidated if any of the files change: *requirements.txt,
pyproject.toml, setup.py or setup.cfg
- Updated boilerplate for new apps too
2022-06-15 15:05:37 +05:30
Gavin D'souza
601217a4a2 ci: Run tests bypassing roulette with labels "Run UI Tests", "Run Server Tests" 2022-06-13 19:38:30 +05:30
Ankush Menat
d47c52b614
Merge branch 'develop' into Dependabot-GitHub-Actions 2022-06-09 12:25:14 +05:30
Ankush Menat
5b0312c258 Revert "ci: correct last commit for patch test (#17113)"
This reverts commit 4c8787d523.
2022-06-09 11:13:31 +05:30
Ankush Menat
4c8787d523
ci: correct last commit for patch test (#17113) 2022-06-09 10:58:03 +05:30
naveen
e150d99ff0 chore: Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-09 01:29:31 +00:00
Naveen
fd8af163ba
ci: Set permissions for GitHub actions (#17102)
chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-08 11:55:16 +05:30
Ankush Menat
9137a597eb
ci: update apt cache (#17057) 2022-06-02 14:40:14 +05:30
Deepesh Garg
77e01ddb63 chore: Semantic releases for version-14 beta 2022-06-01 14:33:27 +05:30
Deepesh Garg
ef35653832 chore: Enable semantic release for version-14-beta branch 2022-05-31 18:32:06 +05:30
gavin
9bd79e80a6
Merge pull request #16902 from phot0n/ci-no-run
ci: `Skip CI` label for not running build processes
2022-05-24 11:25:15 +05:30
phot0n
909ce30f0a ci: Skip CI label for stopping build process 2022-05-23 13:01:31 +05:30
chillaranand
e2652daf73 chore: Added flake8 to pre-commit config 2022-05-19 15:34:35 +05:30
Gavin D'souza
b1effcab4b docs: Removed whitespace from Try on FC button 2022-04-28 14:52:29 +05:30
Ankush Menat
9bec3480ed
ci: failfast in case of conflicts (#16777) 2022-04-27 14:25:45 +05:30
Deepesh Garg
59ee952d82 chore: failing semantic release 2022-04-26 12:55:03 +05:30
Deepesh Garg
b59619f764
chore: Update creds to allow updates on protected branch (#16672) 2022-04-19 17:29:09 +05:30
Deepesh Garg
bf21d2fe2a chore: use ubuntu latest 2022-04-18 16:46:14 +05:30
Deepesh Garg
bafb1faa48 chore: Add semantic releases 2022-04-18 10:52:49 +05:30
ChillarAnand
b2fc959307 refactor: Clean up whitespace & add CI check 2022-02-25 20:01:29 +05:30
Suraj Shetty
21fcd00416 ci: While running all builds set build-server as well 2022-02-21 11:07:37 +05:30
Suraj Shetty
5de89df5b7 ci: Only upload server-side coverage report if .py files are changed 2022-02-21 09:32:44 +05:30
Suraj Shetty
e0dcabf224 ci: Build not required for UI tests
Since we build again after instrumentation
2022-02-17 09:52:49 +05:30
Suraj Shetty
4e24efda8f ci: Exclude coverage.py and build.py from the report 2022-02-16 17:44:14 +05:30
Suraj Shetty
20056a447f ci: Track server-side coverage as well while doing UI tests 2022-02-16 17:21:59 +05:30
Suraj Shetty
da5779dc43 ci: Run cypress tests on each re-run
- using $GITHUB_RUN_ID-$GITHUB_RUN_ATTEMPT to keep each re-run unique
- Previously, cypress used to just return "Run finished" (without actually re-running the test) after re-running the GA build (without updating the code). This used to give false impression that all tests are passed.
2022-01-25 13:46:18 +05:30
Ankush Menat
3d474b5927 fix: drop py3.7 support for v14 2022-01-10 13:45:18 +05:30
Faris Ansari
ad390aab22 fix: update docs link checker
since docs are moved to wiki
2021-12-14 16:31:02 +05:30
Ankush Menat
3baa09401e
ci: update apt cache before install (#15226) 2021-12-09 09:59:19 +05:30
Suraj Shetty
8a84ae4f08
ci: Use node version 14 to avoid node-sass failure in patch testing build (#15176) 2021-12-03 13:57:57 +05:30
Ankush Menat
d79450c501
ci: add timeout to CI jobs (#15000)
once a day some job gets stuck and default timeout is 6 hours.

Changed timeout to 1 hour which is 3-4x more than max running time of
all jobs.
2021-11-17 15:37:28 +05:30
Ankush Menat
b70251baba ci: user hotfix branches for patch test 2021-11-11 12:25:03 +05:30
Revant Nandgaonkar
9b68a9e5b4 ci: change GITHUB_PAT to CI_PAT 2021-11-03 13:51:46 +05:30
Revant Nandgaonkar
30992116ee chore: migrate docker to github actions 2021-11-02 12:12:49 +05:30
Ankush Menat
614423e41c
chore: change repo name 2021-10-22 22:37:06 +05:30
Ankush Menat
488cb31265 ci: move semgrep rules out of repo 2021-10-22 21:46:50 +05:30