Commit graph

55 commits

Author SHA1 Message Date
dependabot[bot]
bd55542b80
chore(deps): bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-14 13:01:27 +00:00
dependabot[bot]
aafc24e479
chore(deps): bump actions/setup-python from 4 to 5
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-06 12:24:36 +00:00
dependabot[bot]
28849e0e61 chore(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-08 22:30:46 +03:00
Maksim Zayakin
b5a3e7ddf5 fix: rename ISSUE_TEMPLATES to ISSUE_TEMPLATE (typo) 2023-07-21 21:28:53 +03:00
Maksim Zayakin
498a691e5d chore: add pull request template 2023-06-13 19:09:57 +03:00
Maksim Zayakin
b8afdf13cf chore: add feature request template 2023-06-13 19:09:57 +03:00
Maksim Zayakin
ba96c12507 chore: add bug report template 2023-06-13 19:09:57 +03:00
Aleksi Häkli
fcdeb4ae3f
Update release.yml
Use repository-url instead of repository_url 
as parameter name for the PyPI release task
2023-05-17 20:51:51 +03:00
Aleksi Häkli
1be420b95c
Update release.yml
Use stable v1 PyPI release task
2023-05-17 20:45:50 +03:00
Aleksi Häkli
33cfcb9656 Drop Python 3.7 support 2023-05-17 20:33:11 +03:00
Aleksi Häkli
700ea46607
Adjust GitHub and tox matrix to match current version support state 2023-04-28 13:08:26 +03:00
Hasan Ramezani
a2a5507963 Run tests for Django main for Python >= 3.10 2023-01-21 18:40:20 +02:00
Josh
26a435e76e code review updates 2022-11-08 09:32:14 -06:00
Josh
2cf8d0afae add python 3.11 to CI, tox, and trove classifiers 2022-10-27 13:24:52 -05:00
Aleksi Häkli
b4c68154d0
Allow PyPy 3.8 test to fail for Django 4.1
Further information on

https://foss.heptapod.net/pypy/pypy/-/issues/3751
2022-08-16 15:10:44 +03:00
Hasan Ramezani
ddb618c276 Confirm Django 4.1 support 2022-08-16 15:09:00 +03:00
dependabot[bot]
408f0e6ace Bump actions/setup-python from 3 to 4
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-14 21:40:27 +03:00
Aleksi Häkli
54310f12ba Adjust version matrix for testing
Release tight PyPy version pinning
Drop Django upstrema main version from wide build matrix
as it is already overspecified in the narrow inclusion matrix
2022-05-16 10:41:07 +03:00
Aleksi Häkli
67189a48c9 Fix Python QA version
3.10 is used for QA runs in tox configuration
2022-05-16 10:41:07 +03:00
naveen
68a4827870 chore: Enable codeql action
This action runs GitHub's industry-leading semantic code analysis engine,
CodeQL, against a repository's source code to find security vulnerabilities.

https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql

https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-05-15 14:49:14 +03:00
naveensrinivasan
038dc7cd97 Set permissions for GitHub actions
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
2022-05-02 19:24:17 +03:00
dependabot[bot]
6ccff1ff34 Bump actions/setup-python from 2 to 3
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:19 +03:00
dependabot[bot]
7bedbaf1aa Bump codecov/codecov-action from 1 to 3
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v1...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:14 +03:00
dependabot[bot]
214b1969c6 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:02:04 +03:00
dependabot[bot]
c5af43bd1d Bump actions/cache from 2 to 3
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-02 19:01:48 +03:00
neil
1dfcb233b4 chore: Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: neil <42328488+neilnaveen@users.noreply.github.com>
2022-05-02 18:22:43 +03:00
Hasan Ramezani
60e4b5c6fc Pin pypy-3.8 version to fix SQLite error in CI. 2022-03-04 23:24:12 +02:00
Hasan Ramezani
9d39184179 Exclude running test for Python3.7 and Django main. 2022-02-17 15:23:55 +02:00
Hasan Ramezani
b60fecc373 Remove remaining items from Django 2.2 2022-01-19 10:58:54 +02:00
Aleksi Häkli
69c7a02183 Update Django and Python version support 2022-01-08 21:39:25 +02:00
Hasan Ramezani
03c6798ebe Add Django 4.0 to test matrix. 2021-12-14 21:29:34 +02:00
Hasan Ramezani
2c2fdbe0d9 Drop Django < 3.2 support. 2021-12-14 21:29:34 +02:00
Hugo van Kemenade
9581bffd10 CI: Replace deprecated pypy3 with pypy-3.8
pypy3 is deprecated and is not available in newer images:
https://github.com/actions/setup-python/issues/244#issuecomment-925966022

Instead explicitly specify the version:
https://github.com/actions/setup-python#specifying-a-pypy-version

Committed via https://github.com/asottile/all-repos
2021-11-15 11:30:16 +02:00
Hasan Ramezani
63b100c748 Add Python 3.10 for Django 3.2 and main test. 2021-11-04 19:52:19 +02:00
Aleksi Häkli
0e16b5827c
Remove CodeQL analysis from pipeline 2021-05-03 17:22:44 +03:00
Aleksi Häkli
1a94e3770c
Merge branch 'master' into drop_django3 2021-04-06 20:13:08 +03:00
Hasan Ramezani
80287bb10a Fix comment typo in github action test pipeline. 2021-04-06 20:11:14 +03:00
Hasan Ramezani
6b2da1f152 Add support for Django 3.2 2021-04-06 20:11:14 +03:00
Hasan Ramezani
dc8aa0df95
Drop Django3.0 support. 2021-04-06 17:13:24 +02:00
Jannis Leidel
0e922e0d9c
Rename Django's dev branch to main.
More information: https://groups.google.com/g/django-developers/c/tctDuKUGosc/
Refs: https://github.com/django/django/pull/14048
2021-03-09 12:40:04 +01:00
Aleksi Häkli
f6e6d32672
Create codeql-analysis.yml 2021-03-01 13:06:46 +02:00
Aleksi Häkli
0eaa5b077b
Create Dependabot config file 2021-03-01 13:05:18 +02:00
Aleksi Häkli
a14f93459d
Reconfigure GitHub test matrix for Django 3.2
Drop unsupported Python versions
and run in experimental mode

pip failures fail the whole pipeline
when a package has mismatching version specifiers
2021-02-15 20:33:21 +02:00
Aleksi Häkli
e9a9a3e444
Fix CI matrix definition for tox-gh-actions 2021-01-06 15:19:25 +02:00
Aleksi Häkli
bc7be704c6 Remove max-parallel restriction from the build matrix 2021-01-05 19:16:25 +02:00
Aleksi Häkli
c998e7a595 Separate tox QA step from other commands 2021-01-05 19:16:25 +02:00
Aleksi Häkli
752ca62475
Use pip cache for tests 2020-12-15 19:04:48 +02:00
Aleksi Häkli
53b4448b13
Deprecate pip cache 2020-12-15 15:27:09 +02:00
Jannis Leidel
005313dcee
Remove unneeded cache key. 2020-11-26 11:36:06 +01:00
Jannis Leidel
d1fe6f23b7
Add release workflow. 2020-11-26 11:30:49 +01:00