Releases: gsuquet/workflows
Releases Β· gsuquet/workflows
v1.2.6
What's Changed
Fixes & Improvements
- instantiate python integration matrix for multiple versions by @gsuquet in #102
- renovate: use the new config file located in a dedicated repo by @gsuquet in #103
- deps: update github/codeql-action action to v3.25.11 by @renovate-gsuquet in #104
- deps: update python-semantic-release/python-semantic-release action to v9.8.4 by @renovate-gsuquet in #105
- deps: update python-semantic-release/upload-to-gh-release action to v9.8.4 by @renovate-gsuquet in #106
- deps: update actions/download-artifact action to v4.1.8 by @renovate-gsuquet in #107
- deps: update actions/upload-artifact action to v4.3.4 by @renovate-gsuquet in #108
- deps: update python-semantic-release/python-semantic-release action to v9.8.5 by @renovate-gsuquet in #109
- deps: update python-semantic-release/upload-to-gh-release action to v9.8.5 by @renovate-gsuquet in #110
- deps: update mcr.microsoft.com/devcontainers/python docker tag to v1.1.12 by @renovate-gsuquet in #111
- deps: update actions/setup-python action to v5.1.1 by @renovate-gsuquet in #112
- deps: update actions/dependency-review-action action to v4.3.4 by @renovate-gsuquet in #113
- deps: update codacy/codacy-analysis-cli-action action to v4.4.4 by @renovate-gsuquet in #114
- deps: update github/codeql-action action to v3.25.12 by @renovate-gsuquet in #115
Full Changelog: v1.2.5...v1.2.6
v1.2.5
What's Changed
Fixes & Improvements
- deps: bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 by @dependabot in #86
- deps: bump python-semantic-release/python-semantic-release from 9.8.1 to 9.8.3 by @dependabot in #87
- precommit: pin version to be installed in workflow by @gsuquet in #99
- deps: update dependency pre-commit/pre-commit to v3.7.1 by @renovate-gsuquet in #101
Documentation
Miscellaneous Chores
- chore(config dependabot): use the conventional commit convention instead of gitmoji by @gsuquet in #85
- chore(renovate): display action version in comment for renovate format by @gsuquet in #90
- chore(renovate): onboarding and configuration by @renovate-gsuquet in #89
- chore(deps): update mcr.microsoft.com/devcontainers/python docker digest to d793532 by @renovate-gsuquet in #91
- chore(deps): update python-semantic-release/upload-to-gh-release action to v9.8.3 by @renovate-gsuquet in #92
- chore(renovate): update README automatically with new github releases by @gsuquet in #94
- chore(config dev): actionlint for github and dev container image tag by @gsuquet in #98
New Contributors
- @renovate-gsuquet made their first contribution in #89
Full Changelog: v1.2.4...v1.2.5
v1.2.4
What's Changed
Fixes & Improvements
- integration commit: define convention and input in workflow level env and allow for scopes by @gsuquet in #84
Dependencies Updates
- bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #83
- bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #80
- bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #81
- bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #82
Full Changelog: v1.2.3...v1.2.4
v1.2.3
What's Changed
Dependencies updates
- π Bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #75
- π Bump python-semantic-release/python-semantic-release from 9.7.3 to 9.8.0 by @dependabot in #76
- π Bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #79
- π Bump python-semantic-release/python-semantic-release from 9.8.0 to 9.8.1 by @dependabot in #77
- π Bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in #78
Full Changelog: v1.2.2...v1.2.3
v1.2.2
What's Changed
Dependencies updates
- π Bump python-semantic-release/upload-to-gh-release from 0f96c02a48278aff14251e9f1a0d73122a8c638b to cd7c5a2a25d118881aa9058d225e29427e640127 by @dependabot in #71
- π Bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #73
- π Bump codecov/codecov-action from 4.3.1 to 4.4.1 by @dependabot in #74
- π Bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #72
Full Changelog: v1.2.1...v1.2.2
v1.2.1
What's Changed
Fixes and Improvements
- π Bump actions/checkout from 4.1.4 to 4.1.6 by @dependabot in #68
- π Bump github/codeql-action from 3.25.3 to 3.25.5 by @dependabot in #67
- π Bump codacy/codacy-analysis-cli-action from 4.4.0 to 4.4.1 by @dependabot in #62
- π Bump python-semantic-release/python-semantic-release from 9.5.0 to 9.7.3 by @dependabot in #66
- π Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #64
- π Update ossf scorecard & dependencies scanning allowed endpoints policies by @gsuquet in #69
Full Changelog: v1.2.0...v1.2.1
v1.2.0
What's Changed
Features
Fixes and Improvements
- π Bump github/codeql-action from 3.24.7 to 3.25.3 by @dependabot in #56
- π Bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #57
- π Bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in #58
- π Bump actions/checkout from 4.1.2 to 4.1.4 by @dependabot in #59
- π Bump codecov/codecov-action from 4.3.0 to 4.3.1 by @dependabot in #60
Full Changelog: v1.1.2...v1.2.0
v1.1.2
What's Changed
Fixes and Improvements
- π Bump codecov/codecov-action from 4.1.0 to 4.3.0 by @dependabot in #47
- π Bump github/codeql-action from 3.24.7 to 3.24.10 by @dependabot in #45
- π Bump python-semantic-release/python-semantic-release from 9.1.1 to 9.4.1 by @dependabot in #46
- π Bump actions/dependency-review-action from 4.1.3 to 4.2.5 by @dependabot in #42
- π Bump actions/download-artifact from 4.1.4 to 4.1.7 by @dependabot in #54
- π Bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in #53
- π Bump actions/setup-python from 5.0.0 to 5.1.0 by @dependabot in #41
- π Bump github/codeql-action from 3.24.10 to 3.25.3 by @dependabot in #52
- π Bump python-semantic-release/python-semantic-release from 9.4.1 to 9.5.0 by @dependabot in #55
Full Changelog: v1.1.1...v1.1.2
v1.1.1
What's Changed
Features
- β¨ Python package integration and deployment workflows by @gsuquet in #20
- β¨ Analyze supply chain security and generate scorecard workflow by @gsuquet in #22
- β¨ Add the ability to harden the runner in the reusable workflows by @gsuquet in #26
Fixes and Improvements
- π§ Add devcontainer to the dependabot update schedule and add pr concurrency for integration by @gsuquet in #19
- π Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 by @dependabot in #21
- π Pin used actions versions with commit sha & set github token permissions at job level by @gsuquet in #23
- π Add security mesures to the python workflows by @gsuquet in #24
- π Set workflow level permissions to none by @gsuquet in #25
- π Bump ossf/scorecard-action from 2.1.2 to 2.3.1 by @dependabot in #28
- π Allow runner to call oss-fuzz-build-logs.storage.googleapis.com using https by @gsuquet in #29
- π Update runner policy to audit by @gsuquet in #30
- π Bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 by @dependabot in #27
- π Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #31
- π Bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #32
- π Update hardened runner policy to block for the ossf scorecard security workflow by @gsuquet in #33
Full Changelog: v1.0.1...v1.1.1
v1.0.1
What's Changed
Fixes and Improvements
- β¬οΈ Bump actions/dependency-review-action from 3 to 4 by @dependabot in #18
Full Changelog: v1.0.0...v1.0.1