Commit graph

40 commits

Author SHA1 Message Date
Josh
2cf8d0afae add python 3.11 to CI, tox, and trove classifiers 2022-10-27 13:24:52 -05:00
Aleksi Häkli
b4c68154d0
Allow PyPy 3.8 test to fail for Django 4.1
Further information on

https://foss.heptapod.net/pypy/pypy/-/issues/3751
2022-08-16 15:10:44 +03:00
Hasan Ramezani
ddb618c276 Confirm Django 4.1 support 2022-08-16 15:09:00 +03:00
dependabot[bot]
408f0e6ace Bump actions/setup-python from 3 to 4
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-14 21:40:27 +03:00
Aleksi Häkli
54310f12ba Adjust version matrix for testing
Release tight PyPy version pinning
Drop Django upstrema main version from wide build matrix
as it is already overspecified in the narrow inclusion matrix
2022-05-16 10:41:07 +03:00
Aleksi Häkli
67189a48c9 Fix Python QA version
3.10 is used for QA runs in tox configuration
2022-05-16 10:41:07 +03:00
naveen
68a4827870 chore: Enable codeql action
This action runs GitHub's industry-leading semantic code analysis engine,
CodeQL, against a repository's source code to find security vulnerabilities.

https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql

https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-15 14:49:14 +03:00
naveensrinivasan
038dc7cd97 Set permissions for GitHub actions
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-05-02 19:24:17 +03:00
dependabot[bot]
6ccff1ff34 Bump actions/setup-python from 2 to 3
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:19 +03:00
dependabot[bot]
7bedbaf1aa Bump codecov/codecov-action from 1 to 3
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v1...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:14 +03:00
dependabot[bot]
214b1969c6 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:04 +03:00
dependabot[bot]
c5af43bd1d Bump actions/cache from 2 to 3
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:01:48 +03:00
Hasan Ramezani
60e4b5c6fc Pin pypy-3.8 version to fix SQLite error in CI. 2022-03-04 23:24:12 +02:00
Hasan Ramezani
9d39184179 Exclude running test for Python3.7 and Django main. 2022-02-17 15:23:55 +02:00
Hasan Ramezani
b60fecc373 Remove remaining items from Django 2.2 2022-01-19 10:58:54 +02:00
Aleksi Häkli
69c7a02183 Update Django and Python version support 2022-01-08 21:39:25 +02:00
Hasan Ramezani
03c6798ebe Add Django 4.0 to test matrix. 2021-12-14 21:29:34 +02:00
Hasan Ramezani
2c2fdbe0d9 Drop Django < 3.2 support. 2021-12-14 21:29:34 +02:00
Hugo van Kemenade
9581bffd10 CI: Replace deprecated pypy3 with pypy-3.8
pypy3 is deprecated and is not available in newer images:
https://github.com/actions/setup-python/issues/244#issuecomment-925966022

Instead explicitly specify the version:
https://github.com/actions/setup-python#specifying-a-pypy-version

Committed via https://github.com/asottile/all-repos
2021-11-15 11:30:16 +02:00
Hasan Ramezani
63b100c748 Add Python 3.10 for Django 3.2 and main test. 2021-11-04 19:52:19 +02:00
Aleksi Häkli
0e16b5827c
Remove CodeQL analysis from pipeline 2021-05-03 17:22:44 +03:00
Aleksi Häkli
1a94e3770c
Merge branch 'master' into drop_django3 2021-04-06 20:13:08 +03:00
Hasan Ramezani
80287bb10a Fix comment typo in github action test pipeline. 2021-04-06 20:11:14 +03:00
Hasan Ramezani
6b2da1f152 Add support for Django 3.2 2021-04-06 20:11:14 +03:00
Hasan Ramezani
dc8aa0df95
Drop Django3.0 support. 2021-04-06 17:13:24 +02:00
Jannis Leidel
0e922e0d9c
Rename Django's dev branch to main.
More information: https://groups.google.com/g/django-developers/c/tctDuKUGosc/
Refs: https://github.com/django/django/pull/14048
2021-03-09 12:40:04 +01:00
Aleksi Häkli
f6e6d32672
Create codeql-analysis.yml 2021-03-01 13:06:46 +02:00
Aleksi Häkli
a14f93459d
Reconfigure GitHub test matrix for Django 3.2
Drop unsupported Python versions
and run in experimental mode

pip failures fail the whole pipeline
when a package has mismatching version specifiers
2021-02-15 20:33:21 +02:00
Aleksi Häkli
e9a9a3e444
Fix CI matrix definition for tox-gh-actions 2021-01-06 15:19:25 +02:00
Aleksi Häkli
bc7be704c6 Remove max-parallel restriction from the build matrix 2021-01-05 19:16:25 +02:00
Aleksi Häkli
c998e7a595 Separate tox QA step from other commands 2021-01-05 19:16:25 +02:00
Aleksi Häkli
752ca62475
Use pip cache for tests 2020-12-15 19:04:48 +02:00
Aleksi Häkli
53b4448b13
Deprecate pip cache 2020-12-15 15:27:09 +02:00
Jannis Leidel
005313dcee
Remove unneeded cache key. 2020-11-26 11:36:06 +01:00
Jannis Leidel
d1fe6f23b7
Add release workflow. 2020-11-26 11:30:49 +01:00
Jannis Leidel
f156dd5158
Simplify matrix. 2020-11-26 11:20:05 +01:00
Jannis Leidel
f9ce96caeb
Change matrix strategy. 2020-11-26 11:14:04 +01:00
Jannis Leidel
0bf8ff9c34
Fix variable name. 2020-11-26 11:00:03 +01:00
Jannis Leidel
c53970631e
Quote DJANGO env var. 2020-11-26 10:44:32 +01:00
Jannis Leidel
5695e3f426
Add initial GitHub Actions test workflow. 2020-11-26 10:20:21 +01:00