From 3215e4e4e7ce3ca23ee46c7ece344c28f78963f8 Mon Sep 17 00:00:00 2001 From: Roberto Polli Date: Thu, 14 Aug 2025 12:19:09 +0200 Subject: [PATCH 1/5] Bump gh-action to v4. --- .github/workflows/lint.yml | 2 +- .github/workflows/security-bandit.yml | 4 ++-- .github/workflows/test.yml | 8 ++++---- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index a135621..fec061a 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -18,7 +18,7 @@ jobs: steps: # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Super-Linter uses: github/super-linter@v3.15.5 diff --git a/.github/workflows/security-bandit.yml b/.github/workflows/security-bandit.yml index e357e36..6de2048 100644 --- a/.github/workflows/security-bandit.yml +++ b/.github/workflows/security-bandit.yml @@ -23,7 +23,7 @@ jobs: # Steps represent a sequence of tasks that will be executed as part of the job steps: # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 # Runs a single command using the runners shell - name: Python security check using Bandit @@ -36,7 +36,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Test run: | echo UID=$(id -u) >> .env diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index f19c9fb..1189085 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -40,10 +40,10 @@ jobs: # to checkout tags and branches too (eg. to auto-version your deployments) # you need to pass the `fetch-depth: 0` option. eg # - # uses: actions/checkout@v2 + # uses: actions/checkout@v4 # with: # fetch-depth: 0 - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Run tests. run: | @@ -54,7 +54,7 @@ jobs: runs-on: ubuntu-latest container: python:3.9 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Run commit hooks. run: | @@ -69,7 +69,7 @@ jobs: # Store (expiring) logs on failure. # Retrieve artifacts via `gh run download`. - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 if: failure() with: name: pre-commit.log From 52aa1e3d5748735ff2edae77ccd3537a54823ca3 Mon Sep 17 00:00:00 2001 From: Roberto Polli Date: Thu, 14 Aug 2025 12:23:17 +0200 Subject: [PATCH 2/5] Bump super-linter to v8.0.0 --- .github/workflows/lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index fec061a..d4735bb 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -21,7 +21,7 @@ jobs: - uses: actions/checkout@v4 - name: Super-Linter - uses: github/super-linter@v3.15.5 + uses: super-linter/super-linter@v8.0.0 env: VALIDATE_MARKDOWN: false # Disabled for conflicts with the isort version used in pre-commit From 792f8aa87ddfeae78cddfc1d571dc8b5c1c32d25 Mon Sep 17 00:00:00 2001 From: Roberto Polli Date: Thu, 14 Aug 2025 12:28:02 +0200 Subject: [PATCH 3/5] add fetch-depth for super-linter --- .github/workflows/lint.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index d4735bb..dfc6fef 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -19,6 +19,8 @@ jobs: steps: # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - uses: actions/checkout@v4 + with: + fetch-depth: 0 - name: Super-Linter uses: super-linter/super-linter@v8.0.0 From 8ea933dcc83c78c73281bc7db839eadb8a1de65c Mon Sep 17 00:00:00 2001 From: Roberto Polli Date: Thu, 14 Aug 2025 12:48:25 +0200 Subject: [PATCH 4/5] Allow super-linter to use gh api --- .github/workflows/lint.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index dfc6fef..1870d4b 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -23,8 +23,10 @@ jobs: fetch-depth: 0 - name: Super-Linter - uses: super-linter/super-linter@v8.0.0 + uses: super-linter/super-linter@v8.0.0 env: + # To report GitHub Actions status checks + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} VALIDATE_MARKDOWN: false # Disabled for conflicts with the isort version used in pre-commit # you can re-enable it if you align your local isort with From 47dd8cd8be846e81c89b14c4a6c6013cf08735c7 Mon Sep 17 00:00:00 2001 From: Roberto Polli Date: Thu, 14 Aug 2025 12:50:01 +0200 Subject: [PATCH 5/5] pre-commit --- .github/workflows/lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 1870d4b..0d47abe 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -23,7 +23,7 @@ jobs: fetch-depth: 0 - name: Super-Linter - uses: super-linter/super-linter@v8.0.0 + uses: super-linter/super-linter@v8.0.0 env: # To report GitHub Actions status checks GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}