Skip to content

Releases: gsuquet/workflows

v1.2.6

19 Jul 17:42
43c6852
Compare
Choose a tag to compare

What's Changed

Fixes & Improvements

  • instantiate python integration matrix for multiple versions by @gsuquet in #102
  • renovate: use the new config file located in a dedicated repo by @gsuquet in #103
  • deps: update github/codeql-action action to v3.25.11 by @renovate-gsuquet in #104
  • deps: update python-semantic-release/python-semantic-release action to v9.8.4 by @renovate-gsuquet in #105
  • deps: update python-semantic-release/upload-to-gh-release action to v9.8.4 by @renovate-gsuquet in #106
  • deps: update actions/download-artifact action to v4.1.8 by @renovate-gsuquet in #107
  • deps: update actions/upload-artifact action to v4.3.4 by @renovate-gsuquet in #108
  • deps: update python-semantic-release/python-semantic-release action to v9.8.5 by @renovate-gsuquet in #109
  • deps: update python-semantic-release/upload-to-gh-release action to v9.8.5 by @renovate-gsuquet in #110
  • deps: update mcr.microsoft.com/devcontainers/python docker tag to v1.1.12 by @renovate-gsuquet in #111
  • deps: update actions/setup-python action to v5.1.1 by @renovate-gsuquet in #112
  • deps: update actions/dependency-review-action action to v4.3.4 by @renovate-gsuquet in #113
  • deps: update codacy/codacy-analysis-cli-action action to v4.4.4 by @renovate-gsuquet in #114
  • deps: update github/codeql-action action to v3.25.12 by @renovate-gsuquet in #115

Full Changelog: v1.2.5...v1.2.6

v1.2.5

24 Jun 13:17
0f7c5d8
Compare
Choose a tag to compare

What's Changed

Fixes & Improvements

  • deps: bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 by @dependabot in #86
  • deps: bump python-semantic-release/python-semantic-release from 9.8.1 to 9.8.3 by @dependabot in #87
  • precommit: pin version to be installed in workflow by @gsuquet in #99
  • deps: update dependency pre-commit/pre-commit to v3.7.1 by @renovate-gsuquet in #101

Documentation

  • reduce line length to match the markdown linter 80 chars limit by @gsuquet in #100

Miscellaneous Chores

  • chore(config dependabot): use the conventional commit convention instead of gitmoji by @gsuquet in #85
  • chore(renovate): display action version in comment for renovate format by @gsuquet in #90
  • chore(renovate): onboarding and configuration by @renovate-gsuquet in #89
  • chore(deps): update mcr.microsoft.com/devcontainers/python docker digest to d793532 by @renovate-gsuquet in #91
  • chore(deps): update python-semantic-release/upload-to-gh-release action to v9.8.3 by @renovate-gsuquet in #92
  • chore(renovate): update README automatically with new github releases by @gsuquet in #94
  • chore(config dev): actionlint for github and dev container image tag by @gsuquet in #98

New Contributors

  • @renovate-gsuquet made their first contribution in #89

Full Changelog: v1.2.4...v1.2.5

v1.2.4

19 Jun 14:45
1dd95c8
Compare
Choose a tag to compare

What's Changed

Fixes & Improvements

  • integration commit: define convention and input in workflow level env and allow for scopes by @gsuquet in #84

Dependencies Updates

  • bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #83
  • bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #80
  • bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #81
  • bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #82

Full Changelog: v1.2.3...v1.2.4

v1.2.3

07 Jun 16:59
7e887cf
Compare
Choose a tag to compare

What's Changed

Dependencies updates

  • πŸ’š Bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #75
  • πŸ’š Bump python-semantic-release/python-semantic-release from 9.7.3 to 9.8.0 by @dependabot in #76
  • πŸ’š Bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #79
  • πŸ’š Bump python-semantic-release/python-semantic-release from 9.8.0 to 9.8.1 by @dependabot in #77
  • πŸ’š Bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in #78

Full Changelog: v1.2.2...v1.2.3

v1.2.2

28 May 18:57
6ca0dde
Compare
Choose a tag to compare

What's Changed

Dependencies updates

  • πŸ’š Bump python-semantic-release/upload-to-gh-release from 0f96c02a48278aff14251e9f1a0d73122a8c638b to cd7c5a2a25d118881aa9058d225e29427e640127 by @dependabot in #71
  • πŸ’š Bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #73
  • πŸ’š Bump codecov/codecov-action from 4.3.1 to 4.4.1 by @dependabot in #74
  • πŸ’š Bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #72

Full Changelog: v1.2.1...v1.2.2

v1.2.1

17 May 17:20
c694c4a
Compare
Choose a tag to compare

What's Changed

Fixes and Improvements

  • πŸ’š Bump actions/checkout from 4.1.4 to 4.1.6 by @dependabot in #68
  • πŸ’š Bump github/codeql-action from 3.25.3 to 3.25.5 by @dependabot in #67
  • πŸ’š Bump codacy/codacy-analysis-cli-action from 4.4.0 to 4.4.1 by @dependabot in #62
  • πŸ’š Bump python-semantic-release/python-semantic-release from 9.5.0 to 9.7.3 by @dependabot in #66
  • πŸ’š Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #64
  • πŸ”’ Update ossf scorecard & dependencies scanning allowed endpoints policies by @gsuquet in #69

Full Changelog: v1.2.0...v1.2.1

v1.2.0

03 May 17:24
c3bcc21
Compare
Choose a tag to compare

What's Changed

Features

  • ✨ codacy: Workflow to analyze programming and configuration langages by @gsuquet in #34

Fixes and Improvements

  • πŸ’š Bump github/codeql-action from 3.24.7 to 3.25.3 by @dependabot in #56
  • πŸ’š Bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #57
  • πŸ’š Bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in #58
  • πŸ’š Bump actions/checkout from 4.1.2 to 4.1.4 by @dependabot in #59
  • πŸ’š Bump codecov/codecov-action from 4.3.0 to 4.3.1 by @dependabot in #60

Full Changelog: v1.1.2...v1.2.0

v1.1.2

30 Apr 20:18
ed8968f
Compare
Choose a tag to compare

What's Changed

Fixes and Improvements

  • πŸ’š Bump codecov/codecov-action from 4.1.0 to 4.3.0 by @dependabot in #47
  • πŸ’š Bump github/codeql-action from 3.24.7 to 3.24.10 by @dependabot in #45
  • πŸ’š Bump python-semantic-release/python-semantic-release from 9.1.1 to 9.4.1 by @dependabot in #46
  • πŸ’š Bump actions/dependency-review-action from 4.1.3 to 4.2.5 by @dependabot in #42
  • πŸ’š Bump actions/download-artifact from 4.1.4 to 4.1.7 by @dependabot in #54
  • πŸ’š Bump actions/upload-artifact from 4.3.1 to 4.3.3 by @dependabot in #53
  • πŸ’š Bump actions/setup-python from 5.0.0 to 5.1.0 by @dependabot in #41
  • πŸ’š Bump github/codeql-action from 3.24.10 to 3.25.3 by @dependabot in #52
  • πŸ’š Bump python-semantic-release/python-semantic-release from 9.4.1 to 9.5.0 by @dependabot in #55

Full Changelog: v1.1.1...v1.1.2

v1.1.1

18 Mar 16:10
9b80814
Compare
Choose a tag to compare

What's Changed

Features

  • ✨ Python package integration and deployment workflows by @gsuquet in #20
  • ✨ Analyze supply chain security and generate scorecard workflow by @gsuquet in #22
  • ✨ Add the ability to harden the runner in the reusable workflows by @gsuquet in #26

Fixes and Improvements

  • πŸ”§ Add devcontainer to the dependabot update schedule and add pr concurrency for integration by @gsuquet in #19
  • πŸ’š Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 by @dependabot in #21
  • πŸ”’ Pin used actions versions with commit sha & set github token permissions at job level by @gsuquet in #23
  • πŸ”’ Add security mesures to the python workflows by @gsuquet in #24
  • πŸ”’ Set workflow level permissions to none by @gsuquet in #25
  • πŸ’š Bump ossf/scorecard-action from 2.1.2 to 2.3.1 by @dependabot in #28
  • πŸ› Allow runner to call oss-fuzz-build-logs.storage.googleapis.com using https by @gsuquet in #29
  • πŸ› Update runner policy to audit by @gsuquet in #30
  • πŸ’š Bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 by @dependabot in #27
  • πŸ’š Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #31
  • πŸ’š Bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #32
  • πŸ”’ Update hardened runner policy to block for the ossf scorecard security workflow by @gsuquet in #33

Full Changelog: v1.0.1...v1.1.1

v1.0.1

03 Feb 17:36
94480f6
Compare
Choose a tag to compare

What's Changed

Fixes and Improvements

  • ⬆️ Bump actions/dependency-review-action from 3 to 4 by @dependabot in #18

Full Changelog: v1.0.0...v1.0.1