File tree Expand file tree Collapse file tree 4 files changed +17
-26
lines changed Expand file tree Collapse file tree 4 files changed +17
-26
lines changed Original file line number Diff line number Diff line change 2424 - uses : actions/checkout@v4
2525 with :
2626 fetch-depth : 0
27+ persist-credentials : false
2728
2829 - uses : hynek/build-and-inspect-python-package@v2
2930
5051 - name : Publish to Test PyPI
5152 uses : pypa/gh-action-pypi-publish@release/v1
5253 with :
53- attestations : true
5454 repository-url : https://test.pypi.org/legacy/
5555
5656 # Publish to PyPI on GitHub Releases.
7575
7676 - name : Publish to PyPI
7777 uses : pypa/gh-action-pypi-publish@release/v1
78- with :
79- attestations : true
Original file line number Diff line number Diff line change @@ -14,16 +14,11 @@ jobs:
1414
1515 steps :
1616 - uses : actions/checkout@v4
17+ with :
18+ persist-credentials : false
1719 - uses : actions/setup-python@v5
1820 with :
1921 python-version : " 3.x"
20- cache : pip
21- cache-dependency-path : .github/workflows/lint.yml
22- - uses : pre-commit/action@v3.0.1
23- - name : Install dependencies
24- run : |
25- python -m pip install --upgrade pip wheel
26- python -m pip install --upgrade safety
27- python -m pip install --editable .
22+ - uses : tox-dev/action-pre-commit-uv@v1
2823 # Ignore 70612 / CVE-2019-8341, Jinja2 is a safety dep, not ours
29- - run : safety check --ignore 70612
24+ - run : uvx safety check --ignore 70612
Original file line number Diff line number Diff line change @@ -23,21 +23,19 @@ jobs:
2323 # fetch all branches and tags
2424 # ref actions/checkout#448
2525 fetch-depth : 0
26+ persist-credentials : false
2627
2728 - name : Set up Python ${{ matrix.python-version }}
2829 uses : actions/setup-python@v5
2930 with :
3031 python-version : ${{ matrix.python-version }}
3132 allow-prereleases : true
32- cache : pip
33- cache-dependency-path : pyproject.toml
3433
35- - name : Install tox
36- run : |
37- python -m pip install tox
34+ - name : Install uv
35+ uses : hynek/setup-cached-uv@v2
3836
3937 - name : Run tests
40- run : tox -e py
38+ run : uvx --with tox-uv tox -e py
4139
4240 - name : Upload coverage
4341 uses : codecov/codecov-action@v4
Original file line number Diff line number Diff line change 11repos :
22 - repo : https://github.com/astral-sh/ruff-pre-commit
3- rev : v0.6.8
3+ rev : v0.7.4
44 hooks :
55 - id : ruff
66 args : [--exit-non-zero-on-fix]
77
88 - repo : https://github.com/psf/black-pre-commit-mirror
9- rev : 24.8 .0
9+ rev : 24.10 .0
1010 hooks :
1111 - id : black
1212
1313 - repo : https://github.com/pre-commit/pre-commit-hooks
14- rev : v4.6 .0
14+ rev : v5.0 .0
1515 hooks :
1616 - id : check-added-large-files
1717 - id : check-case-conflict
@@ -25,18 +25,18 @@ repos:
2525 - id : trailing-whitespace
2626
2727 - repo : https://github.com/python-jsonschema/check-jsonschema
28- rev : 0.29.2
28+ rev : 0.29.4
2929 hooks :
3030 - id : check-dependabot
3131 - id : check-github-workflows
3232
3333 - repo : https://github.com/rhysd/actionlint
34- rev : v1.7.2
34+ rev : v1.7.4
3535 hooks :
3636 - id : actionlint
3737
3838 - repo : https://github.com/pre-commit/mirrors-mypy
39- rev : v1.11.2
39+ rev : v1.13.0
4040 hooks :
4141 - id : mypy
4242 args :
@@ -50,12 +50,12 @@ repos:
5050 additional_dependencies : ["types-requests"]
5151
5252 - repo : https://github.com/tox-dev/pyproject-fmt
53- rev : 2.2.4
53+ rev : v2.5.0
5454 hooks :
5555 - id : pyproject-fmt
5656
5757 - repo : https://github.com/abravalheri/validate-pyproject
58- rev : v0.20.2
58+ rev : v0.23
5959 hooks :
6060 - id : validate-pyproject
6161
You can’t perform that action at this time.
0 commit comments