diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 35288cf..7141d09 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -17,11 +17,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit - name: 'Checkout Repository' - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: 'Dependency Review' uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 8551df1..f82be58 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -13,7 +13,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Set up Python 3.10 uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 @@ -27,4 +27,4 @@ jobs: run: python -m build --sdist --wheel --outdir dist/ . - name: Publish distribution to PyPI - uses: pypa/gh-action-pypi-publish@3fbcf7ccf443305955ce16db9de8401f7dc1c7dd # release/v1 + uses: pypa/gh-action-pypi-publish@87b624f8716b1150d93f45fa364e49eceebf3ffd # release/v1 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7f7f603..cb2e408 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -12,7 +12,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -22,7 +22,7 @@ jobs: python-version: '3.11' - name: Checkout - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Install tox run: python -m pip install tox @@ -34,11 +34,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - run: python -m pip install -r requirements.txt -r requirements-dev.txt - run: black --check --diff . - run: pylint src @@ -49,7 +49,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -59,7 +59,7 @@ jobs: python-version: '3.11' - name: Checkout pgspot - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Ensure docs up-to-date run: | diff --git a/.github/workflows/timescaledb.yml b/.github/workflows/timescaledb.yml index 6a47dd8..06876af 100644 --- a/.github/workflows/timescaledb.yml +++ b/.github/workflows/timescaledb.yml @@ -18,14 +18,14 @@ jobs: python-version: '3.10' - name: Checkout pgspot - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Install pgspot run: | python -m pip install . - name: Checkout timescaledb - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 with: repository: 'timescale/timescaledb' path: 'timescaledb' diff --git a/requirements-dev.txt b/requirements-dev.txt index 3ea867b..c8b6ad9 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -5,12 +5,12 @@ filelock==3.14.0 mypy-extensions==1.0.0 packaging==24.0 pathspec==0.12.1 -platformdirs==4.2.1 +platformdirs==4.2.2 pluggy==1.5.0 -pylint==3.1.0 +pylint==3.2.2 pyparsing==3.1.2 six==1.16.0 toml==0.10.2 tomli==2.0.1 tox==4.15.0 -virtualenv==20.26.1 +virtualenv==20.26.2