From 19864e04ecea9ed4b1c784ff8ec5c7db02e14395 Mon Sep 17 00:00:00 2001 From: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com> Date: Sat, 6 Apr 2024 18:21:37 +0530 Subject: [PATCH 1/8] =?UTF-8?q?=F0=9F=9A=A7=20Swap=20Sigstore=20signing=20?= =?UTF-8?q?and=20PyPI=20steps=20(#76)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/cd.yml | 15 +++++++-------- 1 file changed, 7 insertions(+), 8 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 368b3ac..901ac62 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -232,21 +232,20 @@ jobs: path: upload/ merge-multiple: true - - name: Sign artifacts with Sigstore - uses: sigstore/gh-action-sigstore-python@61f6a500bbfdd9a2a339cf033e5421951fbc1cd2 - with: - inputs: >- - ./upload/*.whl - ./upload/*.tar.gz - - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14 if: github.event_name == 'release' && github.event.action == 'published' with: - # Remember to tell (test-)pypi about this repo before publishing # Comment this line out to publish to PyPI # repository-url: https://test.pypi.org/legacy/ packages-dir: upload + - name: Sign artifacts with Sigstore + uses: sigstore/gh-action-sigstore-python@61f6a500bbfdd9a2a339cf033e5421951fbc1cd2 # v2.1.1 + with: + inputs: >- + ./upload/*.whl + ./upload/*.tar.gz + - name: Publish to GitHub Releases uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2.0.4 if: github.event_name == 'release' && github.event.action == 'published' From 31e09f4e09d9335e964496de6689385438c9587f Mon Sep 17 00:00:00 2001 From: "pre-commit-ci[bot]" <66853113+pre-commit-ci[bot]@users.noreply.github.com> Date: Tue, 9 Apr 2024 02:40:25 +0530 Subject: [PATCH 2/8] =?UTF-8?q?=F0=9F=93=88=20Update=20versions=20for=20pr?= =?UTF-8?q?e-commit=20hooks=20(#78)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit updates: - [github.com/pre-commit/pre-commit-hooks: v4.5.0 → v4.6.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.5.0...v4.6.0) Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index a81f40a..089f634 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -5,7 +5,7 @@ ci: repos: - repo: https://github.com/pre-commit/pre-commit-hooks - rev: "v4.5.0" + rev: "v4.6.0" hooks: - id: check-added-large-files - id: check-case-conflict From 27cb1721cbfb73915d15b6df39de4f4f9d309bd2 Mon Sep 17 00:00:00 2001 From: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com> Date: Thu, 11 Apr 2024 19:19:10 +0530 Subject: [PATCH 3/8] =?UTF-8?q?=E2=98=8E=EF=B8=8F=20Add=20contact=20method?= =?UTF-8?q?=20for=20enforcement?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CODE_OF_CONDUCT.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md index 20bcc4f..6bc3ec5 100644 --- a/CODE_OF_CONDUCT.md +++ b/CODE_OF_CONDUCT.md @@ -61,7 +61,7 @@ representative at an online or offline event. Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at -[INSERT CONTACT METHOD]. +`[agriyakhetarpal] (at) gmail (dot) com`. All complaints will be reviewed and investigated promptly and fairly. All community leaders are obligated to respect the privacy and security of the From 395536497faa055ed773af41b645170ad3c368d7 Mon Sep 17 00:00:00 2001 From: "pre-commit-ci[bot]" <66853113+pre-commit-ci[bot]@users.noreply.github.com> Date: Tue, 16 Apr 2024 07:32:30 +0530 Subject: [PATCH 4/8] =?UTF-8?q?=F0=9F=93=88=20Update=20versions=20for=20pr?= =?UTF-8?q?e-commit=20hooks=20(#79)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit updates: - [github.com/astral-sh/ruff-pre-commit: v0.3.5 → v0.3.7](https://github.com/astral-sh/ruff-pre-commit/compare/v0.3.5...v0.3.7) Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 089f634..2ecd5f7 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -18,7 +18,7 @@ repos: - id: trailing-whitespace - repo: https://github.com/astral-sh/ruff-pre-commit - rev: "v0.3.5" + rev: "v0.3.7" hooks: - id: ruff args: ["--fix", "--show-fixes"] From 78ddaa36bb4338332070c40c602a03f0bbc81e03 Mon Sep 17 00:00:00 2001 From: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com> Date: Tue, 16 Apr 2024 21:53:45 +0530 Subject: [PATCH 5/8] =?UTF-8?q?=F0=9F=A5=A4=20Bump=20to=20Go=20v1.22.2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/cd.yml | 6 +++--- .github/workflows/ci.yml | 4 ++-- scripts/ci/tools/linux/install_go.sh | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 901ac62..4cee3f7 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -53,7 +53,7 @@ jobs: - name: Set up Go toolchain uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 with: - go-version: '1.22.1' + go-version: '1.22.2' cache: false - name: Install MinGW compiler(s) @@ -149,7 +149,7 @@ jobs: - name: Set up Go toolchain uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 with: - go-version: '1.22.1' + go-version: '1.22.2' cache: false check-latest: true @@ -183,7 +183,7 @@ jobs: - name: Set up Go toolchain uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 with: - go-version: '1.22.1' + go-version: '1.22.2' cache: false check-latest: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fcff45f..5adc9f3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -52,7 +52,7 @@ jobs: id: setup-go uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 with: - go-version: "1.22.1" + go-version: '1.22.2' cache: false check-latest: true @@ -108,7 +108,7 @@ jobs: id: setup-go uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 with: - go-version: "1.22.1" + go-version: '1.22.2' cache: false check-latest: true diff --git a/scripts/ci/tools/linux/install_go.sh b/scripts/ci/tools/linux/install_go.sh index e36c50e..2d4c619 100644 --- a/scripts/ci/tools/linux/install_go.sh +++ b/scripts/ci/tools/linux/install_go.sh @@ -7,9 +7,9 @@ yum install -y wget arch=$(uname -m) if [ "$arch" == "x86_64" ]; then - tarball="go1.22.1.linux-amd64.tar.gz" + tarball="go1.22.2.linux-amd64.tar.gz" elif [[ "$arch" == "aarch64" || "$arch" == "arm64" ]]; then - tarball="go1.22.1.linux-arm64.tar.gz" + tarball="go1.22.2.linux-arm64.tar.gz" else echo "Unsupported architecture: $arch" exit 1 From ba08e3ab8bf65735497f5697dc80ce62daebac92 Mon Sep 17 00:00:00 2001 From: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com> Date: Tue, 16 Apr 2024 21:55:07 +0530 Subject: [PATCH 6/8] =?UTF-8?q?=F0=9F=92=9E=20Bump=20to=20Hugo=200.125.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- setup.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/setup.py b/setup.py index 0299dfb..c67bd1b 100644 --- a/setup.py +++ b/setup.py @@ -13,17 +13,17 @@ from setuptools.command.build_py import build_py from wheel.bdist_wheel import bdist_wheel -HUGO_VERSION = "0.124.1" +HUGO_VERSION = "0.125.0" HUGO_RELEASE = ( f"https://github.com/gohugoio/hugo/archive/refs/tags/v{HUGO_VERSION}.tar.gz" ) # Commit hash for current HUGO_VERSION, needs to be updated when HUGO_VERSION is updated # Tip: git ls-remote --tags https://github.com/gohugoio/hugo v -HUGO_RELEASE_COMMIT_HASH = "db083b05f16c945fec04f745f0ca8640560cf1ec" +HUGO_RELEASE_COMMIT_HASH = "a32400b5f4e704daf7de19f44584baf77a4501ab" # The pooch tool will download the tarball into the hugo_cache/ directory. # We will point the build command to that location to build Hugo from source HUGO_CACHE_DIR = "hugo_cache" -HUGO_SHA256 = "0beb0436f6bd90abb425523229a37f1d31e2e9c7ba9fac4556a72aab3b11bfef" +HUGO_SHA256 = "035535de873ce70da5bb39872a860b42134364b3a6a95f075cbc07e96b7ef127" FILE_EXT = ( ".exe" if (sys.platform == "win32" or os.environ.get("GOOS") == "windows") else "" ) From 3e5a3be733a7d1f7e3df3ea70a3d094f1d984783 Mon Sep 17 00:00:00 2001 From: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com> Date: Thu, 18 Apr 2024 16:17:21 +0530 Subject: [PATCH 7/8] =?UTF-8?q?=E2=9C=8C=EF=B8=8F=20Bump=20to=20Hugo=200.1?= =?UTF-8?q?25.1?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- setup.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/setup.py b/setup.py index c67bd1b..4156686 100644 --- a/setup.py +++ b/setup.py @@ -13,17 +13,17 @@ from setuptools.command.build_py import build_py from wheel.bdist_wheel import bdist_wheel -HUGO_VERSION = "0.125.0" +HUGO_VERSION = "0.125.1" HUGO_RELEASE = ( f"https://github.com/gohugoio/hugo/archive/refs/tags/v{HUGO_VERSION}.tar.gz" ) # Commit hash for current HUGO_VERSION, needs to be updated when HUGO_VERSION is updated # Tip: git ls-remote --tags https://github.com/gohugoio/hugo v -HUGO_RELEASE_COMMIT_HASH = "a32400b5f4e704daf7de19f44584baf77a4501ab" +HUGO_RELEASE_COMMIT_HASH = "68c5ad638c2072969e47262926b912e80fd71a77" # The pooch tool will download the tarball into the hugo_cache/ directory. # We will point the build command to that location to build Hugo from source HUGO_CACHE_DIR = "hugo_cache" -HUGO_SHA256 = "035535de873ce70da5bb39872a860b42134364b3a6a95f075cbc07e96b7ef127" +HUGO_SHA256 = "dc902d7a2983925b218e17d21e510867a97e0b8c0e0093e4a6a22dabdb21c230" FILE_EXT = ( ".exe" if (sys.platform == "win32" or os.environ.get("GOOS") == "windows") else "" ) From 1d947a1057ccbfe1cc1bf177ec0a96e498210dc4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 19 Apr 2024 08:19:50 +0530 Subject: [PATCH 8/8] =?UTF-8?q?=F0=9F=A6=84=20(deps):=20Bump=20the=20actio?= =?UTF-8?q?ns=20group=20with=202=20updates=20(#80)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/upload-artifact` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...1746f4ab65b179e0ea60a494b83293b640dd5bba) Updates `actions/download-artifact` from 4.1.4 to 4.1.5 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/c850b930e6ba138125429b7e5c93fc707a7f8427...8caf195ad4b1dee92908e23f56eeb0696f1dd42d) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/cd.yml | 14 +++++++------- .github/workflows/ci.yml | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 4cee3f7..50f05f9 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -35,7 +35,7 @@ jobs: git apply scripts/ci/tools/patches/0001-use-temporary-directory-to-store-eggs.patch pipx run build --sdist --outdir dist/ - - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + - uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: source_distribution path: dist @@ -70,7 +70,7 @@ jobs: hugo env --logLevel debug - name: Upload wheels - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_windows_amd64 path: ./wheelhouse/*.whl @@ -98,7 +98,7 @@ jobs: hugo env --logLevel debug - name: Upload wheels - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_linux_amd64 path: ./wheelhouse/*.whl @@ -131,7 +131,7 @@ jobs: hugo env --logLevel debug - name: Upload wheels - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_linux_aarch64 path: ./wheelhouse/*.whl @@ -165,7 +165,7 @@ jobs: hugo env --logLevel debug - name: Upload wheels - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_macos_x86_64 path: ./wheelhouse/*.whl @@ -199,7 +199,7 @@ jobs: hugo env --logLevel debug - name: Upload wheels - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_macos_arm64 path: ./wheelhouse/*.whl @@ -227,7 +227,7 @@ jobs: steps: - name: Download all artifacts - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5 with: path: upload/ merge-multiple: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5adc9f3..73b1b30 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -176,7 +176,7 @@ jobs: hugo env --logLevel debug - name: Upload artifacts for debugging - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2 with: name: wheels_${{ matrix.runs-on }}_${{ matrix.architecture }}_py${{ matrix.python-version }} path: ./wheelhouse/*.whl