David Lord
11c15ddfeb
Bump the python-requirements group in /requirements with 3 updates ( #5468 )
2024-04-23 16:54:09 -07:00
dependabot[bot]
224c639bf9
Bump the python-requirements group in /requirements with 3 updates
...
Bumps the python-requirements group in /requirements with 3 updates: [pallets-sphinx-themes](https://github.com/pallets/pallets-sphinx-themes ), [sphinx](https://github.com/sphinx-doc/sphinx ) and [pyright](https://github.com/RobertCraigie/pyright-python ).
Updates `pallets-sphinx-themes` from 2.1.1 to 2.1.2
- [Release notes](https://github.com/pallets/pallets-sphinx-themes/releases )
- [Changelog](https://github.com/pallets/pallets-sphinx-themes/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/pallets-sphinx-themes/compare/2.1.1...2.1.2 )
Updates `sphinx` from 7.2.6 to 7.3.7
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v7.2.6...v7.3.7 )
Updates `pyright` from 1.1.357 to 1.1.359
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases )
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.359 )
---
updated-dependencies:
- dependency-name: pallets-sphinx-themes
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: sphinx
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-requirements
- dependency-name: pyright
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 23:52:58 +00:00
David Lord
f48802acbb
Bump the github-actions group across 1 directory with 4 updates ( #5470 )
2024-04-23 16:52:13 -07:00
dependabot[bot]
b7278186c4
Bump the github-actions group across 1 directory with 4 updates
...
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [actions/upload-artifact](https://github.com/actions/upload-artifact ), [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/checkout` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9bb56186c3...1d96c772d1 )
Updates `actions/upload-artifact` from 3.1.3 to 4.3.3
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](a8a3f3ad30...65462800fd )
Updates `slsa-framework/slsa-github-generator` from 1.10.0 to 2.0.0
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.10.0...v2.0.0 )
Updates `actions/download-artifact` from 3.0.2 to 4.1.6
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9bc31d5ccc...9c19ed7fe5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 23:50:43 +00:00
David Lord
ccf125bf30
fix mypy findings
2024-04-23 16:49:42 -07:00
David Lord
db0fe9436e
unignore upload/download-artifact
2024-04-23 16:31:03 -07:00
David Lord
2c7f57ad5b
Merge branch '3.0.x'
2024-04-08 15:29:31 -07:00
David Lord
f958b6500b
build docs from scratch each test
2024-04-08 15:28:57 -07:00
David Lord
346d1abaff
remove install and contribute sections
...
install leads people to install into the system instead of a virtualenv,
and readme isn't the place to teach that
contribute is now linked in the github interface above the readme
2024-04-08 15:28:28 -07:00
David Lord
19610a9e46
start version 3.1.0
2024-04-07 12:29:49 -07:00
David Lord
aee16df63b
Merge branch '3.0.x'
2024-04-07 12:28:51 -07:00
David Lord
61182249cb
release version 3.0.3 ( #5461 )
2024-04-07 12:27:04 -07:00
David Lord
c12a5d874c
release version 3.0.3
2024-04-07 12:17:41 -07:00
David Lord
5e22cc9eec
Don't set the cli attribute in the sansio scaffold ( #5270 )
2024-04-07 12:16:22 -07:00
pgjones
5fdce4c331
Don't set the cli attribute in the sansio scaffold
...
It is (currently) Flask specific and hence cannot be shared in the
sansio shared code.
2024-04-07 12:13:02 -07:00
David Lord
adb7dd99c2
don't access app.logger when configuring app.logger
2024-04-07 12:03:19 -07:00
David Lord
b739390955
support FIPS builds without SHA-1 ( #5460 )
2024-04-07 11:42:24 -07:00
David Lord
db461112c7
access sha1 lazily
2024-04-07 11:41:13 -07:00
David Lord
7320e311a0
start version 3.0.3
2024-04-07 11:22:02 -07:00
David Lord
a855756017
Bump the github-actions group with 3 updates ( #5459 )
2024-04-07 11:11:26 -07:00
dependabot[bot]
be508c6184
Bump the github-actions group with 3 updates
...
Bumps the github-actions group with 3 updates: [dessant/lock-threads](https://github.com/dessant/lock-threads ), [actions/checkout](https://github.com/actions/checkout ) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ).
Updates `dessant/lock-threads` from 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 to 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md )
- [Commits](7de207be1d...1bf7ec2505 )
Updates `actions/checkout` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](b4ffde65f4...9bb56186c3 )
Updates `pypa/gh-action-pypi-publish` from 68e62d4871ad9d14a9d55f114e6ac71f0b408ec0 to 81e9d935c883d0b210363ab89cf05f3894778450
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](68e62d4871...81e9d935c8 )
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-07 18:04:59 +00:00
David Lord
6ab71ed7cf
Merge branch '3.0.x'
2024-04-07 11:03:46 -07:00
David Lord
87d5f5b9a9
update project files ( #5457 )
...
* update pre-commit hook
* upgrade pip with venv
* update description and version
* show url in publish environment
* update versions
* update versions, separate typing job
* use dependabot grouped updates
ignore upload/download-artifact until slsa updates
* use sphinx.ext.extlinks instead of sphinx-issues
* update dev dependencies
* update editorconfig
* update gitignore
* update .readthedocs.yaml
* license is txt, readme is md
* update pyproject.toml
add typed classifier
add pyright config
simplify urls
* tox builds docs in place
* update min test py version
* add tox env to update all dev dependencies
* update issue and pr templates
* rename security docs page to not conflict with org policy file
* simplify matrix
2024-04-07 10:24:40 -07:00
David Lord
98a7f9fcf0
Use per-release URLs in GH env UI when publishing to the PyPI ( #5423 )
2024-04-06 16:17:13 -07:00
Sviatoslav Sydorenko (Святослав Сидоренко)
0e59442f6c
Use per-release URLs in GH env UI when publishing to the PyPI
...
This essentially, makes the UI nicer in a few places with a clickable link to the released version being presented in the web interface of GitHub.
2024-02-27 01:24:27 +01:00
David Lord
b90a4f1f4a
[pre-commit.ci] pre-commit autoupdate ( #5404 )
2024-02-12 12:50:45 -08:00
pre-commit-ci[bot]
ad36383951
[pre-commit.ci] pre-commit autoupdate
...
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.1.13 → v0.2.0](https://github.com/astral-sh/ruff-pre-commit/compare/v0.1.13...v0.2.0 )
2024-02-05 20:28:43 +00:00
David Lord
6b422a05f3
Merge branch '3.0.x'
2024-02-03 13:13:41 -08:00
David Lord
d5e321b792
release version 3.0.2 ( #5403 )
2024-02-03 13:12:15 -08:00
David Lord
d2030595dc
release version 3.0.2
2024-02-03 12:54:41 -08:00
David Lord
d7209a9570
fix super call in list comprehension ( #5393 )
2024-02-03 12:39:33 -08:00
Tony Huang
1af8f95785
fix super call in list comprehension
2024-02-03 12:36:06 -08:00
David Lord
3435d2ff15
Fix jinja_loader typehint ( #5389 )
2024-02-03 12:18:40 -08:00
Cody Scott
ecc057dd48
fix jinja_loader annotation
2024-02-03 12:14:38 -08:00
David Lord
3207af8827
start version 3.0.2
2024-02-03 09:41:38 -08:00
David Lord
94e80b3da9
Bump the python-requirements group in /requirements with 6 updates ( #5401 )
2024-02-03 07:40:27 -08:00
David Lord
f32dddc71c
Bump the github-actions group with 2 updates ( #5400 )
2024-02-03 07:35:16 -08:00
dependabot[bot]
484a7cc9a7
Bump the python-requirements group in /requirements with 6 updates
...
Bumps the python-requirements group in /requirements with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [sphinx-issues](https://github.com/sloria/sphinx-issues ) | `3.0.1` | `4.0.0` |
| [sphinx-tabs](https://github.com/executablebooks/sphinx-tabs ) | `3.4.4` | `3.4.5` |
| [cryptography](https://github.com/pyca/cryptography ) | `41.0.7` | `42.0.2` |
| [pytest](https://github.com/pytest-dev/pytest ) | `7.4.4` | `8.0.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv ) | `1.0.0` | `1.0.1` |
| [tox](https://github.com/tox-dev/tox ) | `4.12.0` | `4.12.1` |
Updates `sphinx-issues` from 3.0.1 to 4.0.0
- [Commits](https://github.com/sloria/sphinx-issues/compare/3.0.1...4.0.0 )
Updates `sphinx-tabs` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/executablebooks/sphinx-tabs/releases )
- [Changelog](https://github.com/executablebooks/sphinx-tabs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/executablebooks/sphinx-tabs/compare/v3.4.4...v3.4.5 )
Updates `cryptography` from 41.0.7 to 42.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/41.0.7...42.0.2 )
Updates `pytest` from 7.4.4 to 8.0.0
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/7.4.4...8.0.0 )
Updates `python-dotenv` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/theskumar/python-dotenv/releases )
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md )
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.0.0...v1.0.1 )
Updates `tox` from 4.12.0 to 4.12.1
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.12.0...4.12.1 )
---
updated-dependencies:
- dependency-name: sphinx-issues
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: python-requirements
- dependency-name: sphinx-tabs
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: cryptography
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: python-requirements
- dependency-name: pytest
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: python-requirements
- dependency-name: python-dotenv
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: tox
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-requirements
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 15:41:57 +00:00
dependabot[bot]
a4bada52d0
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [dessant/lock-threads](https://github.com/dessant/lock-threads ) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ).
Updates `dessant/lock-threads` from 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 to 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md )
- [Commits](7de207be1d...1bf7ec2505 )
Updates `pypa/gh-action-pypi-publish` from f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef to 2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](f946db0f76...2f6f737ca5 )
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-01 15:31:35 +00:00
David Lord
4df377cfbf
Merge branch '3.0.x'
2024-01-18 12:20:56 -08:00
David Lord
233be7a0fa
release version 3.0.1 ( #5386 )
2024-01-18 12:03:25 -08:00
David Lord
f622b1cade
release version 3.0.1
2024-01-18 11:57:33 -08:00
David Lord
5fcc999b7d
fix create release action
2024-01-18 11:57:22 -08:00
David Lord
da3a0ddfe2
fix slsa generator version
2024-01-18 11:53:19 -08:00
David Lord
5e059be1b3
update actions versions
2024-01-18 11:41:38 -08:00
David Lord
bae6ee888f
address mypy strict findings ( #5383 )
2024-01-18 09:16:53 -08:00
David Lord
81b3c85f51
update requirements
2024-01-18 09:15:01 -08:00
David Lord
08d3185e87
update pre-commit hooks
2024-01-16 10:12:10 -08:00
David Lord
6000e80acf
address mypy strict findings
2024-01-16 10:11:13 -08:00
David Lord
7b5e176d1a
[pre-commit.ci] pre-commit autoupdate ( #5377 )
2024-01-15 07:52:57 -08:00