dependabot[bot]
|
dcc86ebfce
|
Bump pypa/gh-action-pypi-publish from 1.8.7 to 1.8.8
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.7 to 1.8.8.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](f5622bde02...f8c70e705f)
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-08-01 16:56:22 +00:00 |
|
David Lord
|
cb825687a5
|
Bump actions/checkout from 3.5.2 to 3.5.3 (#5186)
|
2023-07-01 09:24:20 -07:00 |
|
David Lord
|
51bf0fdd90
|
Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0 (#5185)
|
2023-07-01 09:24:11 -07:00 |
|
David Lord
|
0da5788efb
|
Bump dessant/lock-threads from 4.0.0 to 4.0.1 (#5184)
|
2023-07-01 09:23:57 -07:00 |
|
dependabot[bot]
|
1ce4d95de9
|
Bump actions/checkout from 3.5.2 to 3.5.3
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8e5e7e5ab8...c85c95e3d7)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-07-01 16:16:28 +00:00 |
|
dependabot[bot]
|
1fb188636e
|
Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.6.0...v1.7.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-07-01 16:16:25 +00:00 |
|
dependabot[bot]
|
f62580b947
|
Bump dessant/lock-threads from 4.0.0 to 4.0.1
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](c1b35aecc5...be8aa5be94)
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-07-01 16:16:22 +00:00 |
|
dependabot[bot]
|
47a89da558
|
Bump pypa/gh-action-pypi-publish from 1.8.6 to 1.8.7
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.6 to 1.8.7.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](a56da0b891...f5622bde02)
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-07-01 16:16:19 +00:00 |
|
David Lord
|
7bfbcfab87
|
Merge branch '2.3.x'
|
2023-06-27 07:42:06 -07:00 |
|
David Lord
|
8933d75443
|
update pypy test version
|
2023-06-27 07:41:15 -07:00 |
|
David Lord
|
a3e4013f89
|
Bump actions/setup-python from 4.6.0 to 4.6.1 (#5150)
|
2023-06-01 11:49:16 -07:00 |
|
David Lord
|
fb20cbbf1e
|
Bump pypa/gh-action-pypi-publish from 1.8.5 to 1.8.6 (#5149)
|
2023-06-01 11:47:53 -07:00 |
|
dependabot[bot]
|
18e703bc93
|
Bump actions/setup-python from 4.6.0 to 4.6.1
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](57ded4d7d5...bd6b4b6205)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-01 16:56:50 +00:00 |
|
dependabot[bot]
|
fc74a114b3
|
Bump pypa/gh-action-pypi-publish from 1.8.5 to 1.8.6
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.5 to 1.8.6.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](0bf742be3e...a56da0b891)
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-01 16:56:46 +00:00 |
|
dependabot[bot]
|
40f31c3078
|
Bump slsa-framework/slsa-github-generator from 1.5.0 to 1.6.0
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.5.0...v1.6.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-06-01 16:56:43 +00:00 |
|
David Lord
|
d0bf462866
|
Merge branch '2.3.x'
|
2023-05-09 12:38:00 -07:00 |
|
David Lord
|
4911012cf4
|
update workflows
update publish parameter names
remove pip update
|
2023-05-09 12:37:33 -07:00 |
|
David Lord
|
7b31099252
|
Merge pull request #5106 from pallets/dependabot/github_actions/pypa/gh-action-pypi-publish-1.8.5
Bump pypa/gh-action-pypi-publish from 1.8.4 to 1.8.5
|
2023-05-01 10:22:01 -07:00 |
|
dependabot[bot]
|
dcd25d8f07
|
Bump actions/checkout from 3.5.0 to 3.5.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.5.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](8f4b7f8486...8e5e7e5ab8)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-05-01 17:18:16 +00:00 |
|
dependabot[bot]
|
ec8ca69195
|
Bump pypa/gh-action-pypi-publish from 1.8.4 to 1.8.5
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.4 to 1.8.5.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](29930c9cf5...0bf742be3e)
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-05-01 16:57:14 +00:00 |
|
dependabot[bot]
|
b7b753b96c
|
Bump actions/setup-python from 4.5.0 to 4.6.0
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.5.0 to 4.6.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](d27e3f3d7c...57ded4d7d5)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-05-01 16:57:10 +00:00 |
|
David Lord
|
2e8fe7b2f2
|
drop support for python 3.7
|
2023-04-20 11:09:55 -07:00 |
|
David Lord
|
9659b11a45
|
remove pypy 3.8 and 3.7 from tests
|
2023-04-20 10:15:58 -07:00 |
|
David Lord
|
f7d9956c0f
|
use oidc instead of token
|
2023-04-13 08:18:14 -07:00 |
|
David Lord
|
a361ef6368
|
Merge pull request #5038 from pallets/dependabot/github_actions/pypa/gh-action-pypi-publish-1.8.4
Bump pypa/gh-action-pypi-publish from 1.6.4 to 1.8.4
|
2023-04-03 06:19:09 -07:00 |
|
David Lord
|
c2688e4f06
|
Merge pull request #5040 from pallets/dependabot/github_actions/actions/cache-3.3.1
Bump actions/cache from 3.2.6 to 3.3.1
|
2023-04-03 06:18:57 -07:00 |
|
dependabot[bot]
|
4909e8ff86
|
Bump actions/cache from 3.2.6 to 3.3.1
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.6 to 3.3.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](69d9d449ac...88522ab9f3)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-04-01 16:57:11 +00:00 |
|
dependabot[bot]
|
6a6c83789f
|
Bump actions/checkout from 3.3.0 to 3.5.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 3.3.0 to 3.5.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](ac59398561...8f4b7f8486)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-04-01 16:57:06 +00:00 |
|
dependabot[bot]
|
29676a273a
|
Bump pypa/gh-action-pypi-publish from 1.6.4 to 1.8.4
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.6.4 to 1.8.4.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](c7f29f7ade...29930c9cf5)
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-04-01 16:57:01 +00:00 |
|
David Lord
|
2f67e0fe4a
|
Merge pull request #5005 from pallets/dependabot/github_actions/slsa-framework/slsa-github-generator-1.5.0
Bump slsa-framework/slsa-github-generator from 1.4.0 to 1.5.0
|
2023-03-01 09:04:40 -08:00 |
|
dependabot[bot]
|
b8eb83940c
|
Bump actions/cache from 3.2.4 to 3.2.6
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.4 to 3.2.6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](627f0f41f6...69d9d449ac)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-03-01 16:57:34 +00:00 |
|
dependabot[bot]
|
3cdcc729a7
|
Bump slsa-framework/slsa-github-generator from 1.4.0 to 1.5.0
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v1.5.0)
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-03-01 16:57:31 +00:00 |
|
David Lord
|
88069bd417
|
Merge pull request #4959 from pallets/dependabot/github_actions/actions/cache-3.2.4
Bump actions/cache from 3.2.3 to 3.2.4
|
2023-02-01 08:55:09 -08:00 |
|
dependabot[bot]
|
74c256872b
|
Bump actions/cache from 3.2.3 to 3.2.4
Bumps [actions/cache](https://github.com/actions/cache) from 3.2.3 to 3.2.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](58c146cc91...627f0f41f6)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-02-01 16:01:30 +00:00 |
|
dependabot[bot]
|
94a23a3e24
|
Bump actions/setup-python from 4.4.0 to 4.5.0
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](5ccb29d877...d27e3f3d7c)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-02-01 16:01:23 +00:00 |
|
David Lord
|
ef85270d9a
|
Merge branch '2.2.x'
|
2023-01-20 13:50:23 -08:00 |
|
David Lord
|
0b4b61146f
|
build, provenance, publish workflow
|
2023-01-20 13:45:15 -08:00 |
|
David Lord
|
6d6d986fc5
|
switch to pyproject.toml
|
2023-01-18 10:32:51 -08:00 |
|
David Lord
|
9da947a279
|
set workflow permissions
|
2023-01-09 12:45:16 -08:00 |
|
David Lord
|
3812a52e96
|
Merge branch '2.2.x'
|
2023-01-09 12:39:48 -08:00 |
|
David Lord
|
2a9d16d011
|
update tested python versions
test 3.11 final
test 3.12 dev
update for tox 4
|
2023-01-09 10:37:59 -08:00 |
|
dependabot[bot]
|
bb1f83c265
|
Bump dessant/lock-threads from 3 to 4
Bumps [dessant/lock-threads](https://github.com/dessant/lock-threads) from 3 to 4.
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dessant/lock-threads/compare/v3...v4)
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-01-01 16:01:00 +00:00 |
|
David Lord
|
50df54e4c7
|
explain workflow
|
2022-07-04 08:35:36 -07:00 |
|
dependabot[bot]
|
2589328485
|
Bump actions/setup-python from 3 to 4
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-07-01 16:05:52 +00:00 |
|
dependabot[bot]
|
9f4f559f59
|
Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-04-01 16:04:08 +00:00 |
|
dependabot[bot]
|
7dc26a1f41
|
Bump actions/setup-python from 2 to 3
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2022-03-01 16:04:16 +00:00 |
|
David Lord
|
e37e87140e
|
Merge branch '2.0.x'
|
2022-02-09 07:37:43 -08:00 |
|
David Lord
|
925674761e
|
cache pip with setup-python action
|
2022-02-08 12:26:25 -08:00 |
|
David Lord
|
66f2ac6696
|
update tool config
|
2022-01-13 14:42:36 -08:00 |
|
David Lord
|
9e00becf3a
|
update option names for v3
|
2021-12-22 15:53:23 -08:00 |
|