David Lord
0d2100ed17
Bump actions/checkout from 4.1.4 to 4.1.6 in the github-actions group ( #5493 )
2024-06-01 09:01:46 -07:00
dependabot[bot]
e3535f9971
Bump actions/checkout from 4.1.4 to 4.1.6 in the github-actions group
...
Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout ).
Updates `actions/checkout` from 4.1.4 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](0ad4b8fada...a5ac7e51b4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-01 15:55:45 +00:00
David Lord
422e05e28d
Bump the python-requirements group in /requirements with 3 updates ( #5492 )
2024-06-01 08:16:45 -07:00
dependabot[bot]
f567ab9068
Bump the python-requirements group in /requirements with 3 updates
...
Bumps the python-requirements group in /requirements with 3 updates: [pyright](https://github.com/RobertCraigie/pyright-python ), [pytest](https://github.com/pytest-dev/pytest ) and [pre-commit](https://github.com/pre-commit/pre-commit ).
Updates `pyright` from 1.1.361 to 1.1.365
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases )
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.361...v1.1.365 )
Updates `pytest` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/8.2.0...8.2.1 )
Updates `pre-commit` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases )
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md )
- [Commits](https://github.com/pre-commit/pre-commit/compare/v3.7.0...v3.7.1 )
---
updated-dependencies:
- dependency-name: pyright
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: pytest
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: pre-commit
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: python-requirements
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-06-01 15:12:17 +00:00
David Lord
255c8d66af
Merge branch '3.0.x'
2024-05-11 08:40:26 -07:00
David Lord
bea5876e46
test with python 3.13 ( #5481 )
2024-05-11 08:39:30 -07:00
David Lord
9101439d7b
test with python 3.13
2024-05-11 08:37:47 -07:00
David Lord
67ed36910d
[pre-commit.ci] pre-commit autoupdate ( #5477 )
2024-05-06 15:28:44 -07:00
pre-commit-ci[bot]
4e894892bc
[pre-commit.ci] pre-commit autoupdate
...
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.3.5 → v0.4.3](https://github.com/astral-sh/ruff-pre-commit/compare/v0.3.5...v0.4.3 )
2024-05-06 22:05:35 +00:00
David Lord
d64ecfb244
Bump the python-requirements group across 1 directory with 6 updates ( #5476 )
2024-05-06 10:24:44 -07:00
David Lord
860a25c390
fix mypy finding
2024-05-06 10:23:10 -07:00
dependabot[bot]
273123f6b8
Bump the python-requirements group across 1 directory with 6 updates
...
Bumps the python-requirements group with 6 updates in the /requirements directory:
| Package | From | To |
| --- | --- | --- |
| [cryptography](https://github.com/pyca/cryptography ) | `42.0.5` | `42.0.7` |
| [mypy](https://github.com/python/mypy ) | `1.9.0` | `1.10.0` |
| [pallets-sphinx-themes](https://github.com/pallets/pallets-sphinx-themes ) | `2.1.2` | `2.1.3` |
| [pyright](https://github.com/RobertCraigie/pyright-python ) | `1.1.359` | `1.1.361` |
| [pytest](https://github.com/pytest-dev/pytest ) | `8.1.1` | `8.2.0` |
| [tox](https://github.com/tox-dev/tox ) | `4.14.2` | `4.15.0` |
Updates `cryptography` from 42.0.5 to 42.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/42.0.5...42.0.7 )
Updates `mypy` from 1.9.0 to 1.10.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md )
- [Commits](https://github.com/python/mypy/compare/1.9.0...v1.10.0 )
Updates `pallets-sphinx-themes` from 2.1.2 to 2.1.3
- [Release notes](https://github.com/pallets/pallets-sphinx-themes/releases )
- [Changelog](https://github.com/pallets/pallets-sphinx-themes/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/pallets-sphinx-themes/compare/2.1.2...2.1.3 )
Updates `pyright` from 1.1.359 to 1.1.361
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases )
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.359...v1.1.361 )
Updates `pytest` from 8.1.1 to 8.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/8.1.1...8.2.0 )
Updates `tox` from 4.14.2 to 4.15.0
- [Release notes](https://github.com/tox-dev/tox/releases )
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst )
- [Commits](https://github.com/tox-dev/tox/compare/4.14.2...4.15.0 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: mypy
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-requirements
- dependency-name: pallets-sphinx-themes
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: pyright
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: pytest
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-requirements
- dependency-name: tox
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: python-requirements
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 17:19:27 +00:00
David Lord
fc605b575b
Bump the github-actions group with 2 updates ( #5473 )
2024-05-06 10:17:48 -07:00
dependabot[bot]
a936b0c610
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/checkout` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](1d96c772d1...0ad4b8fada )
Updates `actions/download-artifact` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9c19ed7fe5...65a9edc588 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-05-06 17:16:26 +00:00
David Lord
4f42c64203
Merge branch '3.0.x'
2024-05-06 10:13:35 -07:00
David Lord
eb1182a10e
fix mypy finding
2024-05-06 10:12:32 -07:00
David Lord
a363642a32
fix mypy finding with new werkzeug endpoint type
2024-05-06 10:09:58 -07:00
David Lord
57add386c9
examples/javascript: Update Documentation URL in pyproject.toml ( #5475 )
2024-05-02 05:10:51 -07:00
JamesMRamm
823e279e0d
Update pyproject.toml
...
Correction to Documentation URL
2024-05-02 17:57:34 +10:00
David Lord
11c15ddfeb
Bump the python-requirements group in /requirements with 3 updates ( #5468 )
2024-04-23 16:54:09 -07:00
dependabot[bot]
224c639bf9
Bump the python-requirements group in /requirements with 3 updates
...
Bumps the python-requirements group in /requirements with 3 updates: [pallets-sphinx-themes](https://github.com/pallets/pallets-sphinx-themes ), [sphinx](https://github.com/sphinx-doc/sphinx ) and [pyright](https://github.com/RobertCraigie/pyright-python ).
Updates `pallets-sphinx-themes` from 2.1.1 to 2.1.2
- [Release notes](https://github.com/pallets/pallets-sphinx-themes/releases )
- [Changelog](https://github.com/pallets/pallets-sphinx-themes/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/pallets-sphinx-themes/compare/2.1.1...2.1.2 )
Updates `sphinx` from 7.2.6 to 7.3.7
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v7.2.6...v7.3.7 )
Updates `pyright` from 1.1.357 to 1.1.359
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases )
- [Commits](https://github.com/RobertCraigie/pyright-python/compare/v1.1.357...v1.1.359 )
---
updated-dependencies:
- dependency-name: pallets-sphinx-themes
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
- dependency-name: sphinx
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: python-requirements
- dependency-name: pyright
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: python-requirements
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 23:52:58 +00:00
David Lord
f48802acbb
Bump the github-actions group across 1 directory with 4 updates ( #5470 )
2024-04-23 16:52:13 -07:00
dependabot[bot]
b7278186c4
Bump the github-actions group across 1 directory with 4 updates
...
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout ), [actions/upload-artifact](https://github.com/actions/upload-artifact ), [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/checkout` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](9bb56186c3...1d96c772d1 )
Updates `actions/upload-artifact` from 3.1.3 to 4.3.3
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](a8a3f3ad30...65462800fd )
Updates `slsa-framework/slsa-github-generator` from 1.10.0 to 2.0.0
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.10.0...v2.0.0 )
Updates `actions/download-artifact` from 3.0.2 to 4.1.6
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](9bc31d5ccc...9c19ed7fe5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-23 23:50:43 +00:00
David Lord
ccf125bf30
fix mypy findings
2024-04-23 16:49:42 -07:00
David Lord
db0fe9436e
unignore upload/download-artifact
2024-04-23 16:31:03 -07:00
David Lord
2c7f57ad5b
Merge branch '3.0.x'
2024-04-08 15:29:31 -07:00
David Lord
f958b6500b
build docs from scratch each test
2024-04-08 15:28:57 -07:00
David Lord
346d1abaff
remove install and contribute sections
...
install leads people to install into the system instead of a virtualenv,
and readme isn't the place to teach that
contribute is now linked in the github interface above the readme
2024-04-08 15:28:28 -07:00
David Lord
19610a9e46
start version 3.1.0
2024-04-07 12:29:49 -07:00
David Lord
aee16df63b
Merge branch '3.0.x'
2024-04-07 12:28:51 -07:00
David Lord
61182249cb
release version 3.0.3 ( #5461 )
2024-04-07 12:27:04 -07:00
David Lord
c12a5d874c
release version 3.0.3
2024-04-07 12:17:41 -07:00
David Lord
5e22cc9eec
Don't set the cli attribute in the sansio scaffold ( #5270 )
2024-04-07 12:16:22 -07:00
pgjones
5fdce4c331
Don't set the cli attribute in the sansio scaffold
...
It is (currently) Flask specific and hence cannot be shared in the
sansio shared code.
2024-04-07 12:13:02 -07:00
David Lord
adb7dd99c2
don't access app.logger when configuring app.logger
2024-04-07 12:03:19 -07:00
David Lord
b739390955
support FIPS builds without SHA-1 ( #5460 )
2024-04-07 11:42:24 -07:00
David Lord
db461112c7
access sha1 lazily
2024-04-07 11:41:13 -07:00
David Lord
7320e311a0
start version 3.0.3
2024-04-07 11:22:02 -07:00
David Lord
a855756017
Bump the github-actions group with 3 updates ( #5459 )
2024-04-07 11:11:26 -07:00
dependabot[bot]
be508c6184
Bump the github-actions group with 3 updates
...
Bumps the github-actions group with 3 updates: [dessant/lock-threads](https://github.com/dessant/lock-threads ), [actions/checkout](https://github.com/actions/checkout ) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ).
Updates `dessant/lock-threads` from 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 to 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
- [Release notes](https://github.com/dessant/lock-threads/releases )
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md )
- [Commits](7de207be1d...1bf7ec2505 )
Updates `actions/checkout` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](b4ffde65f4...9bb56186c3 )
Updates `pypa/gh-action-pypi-publish` from 68e62d4871ad9d14a9d55f114e6ac71f0b408ec0 to 81e9d935c883d0b210363ab89cf05f3894778450
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](68e62d4871...81e9d935c8 )
---
updated-dependencies:
- dependency-name: dessant/lock-threads
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
dependency-type: direct:production
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-07 18:04:59 +00:00
David Lord
6ab71ed7cf
Merge branch '3.0.x'
2024-04-07 11:03:46 -07:00
David Lord
87d5f5b9a9
update project files ( #5457 )
...
* update pre-commit hook
* upgrade pip with venv
* update description and version
* show url in publish environment
* update versions
* update versions, separate typing job
* use dependabot grouped updates
ignore upload/download-artifact until slsa updates
* use sphinx.ext.extlinks instead of sphinx-issues
* update dev dependencies
* update editorconfig
* update gitignore
* update .readthedocs.yaml
* license is txt, readme is md
* update pyproject.toml
add typed classifier
add pyright config
simplify urls
* tox builds docs in place
* update min test py version
* add tox env to update all dev dependencies
* update issue and pr templates
* rename security docs page to not conflict with org policy file
* simplify matrix
2024-04-07 10:24:40 -07:00
David Lord
98a7f9fcf0
Use per-release URLs in GH env UI when publishing to the PyPI ( #5423 )
2024-04-06 16:17:13 -07:00
Sviatoslav Sydorenko (Святослав Сидоренко)
0e59442f6c
Use per-release URLs in GH env UI when publishing to the PyPI
...
This essentially, makes the UI nicer in a few places with a clickable link to the released version being presented in the web interface of GitHub.
2024-02-27 01:24:27 +01:00
David Lord
b90a4f1f4a
[pre-commit.ci] pre-commit autoupdate ( #5404 )
2024-02-12 12:50:45 -08:00
pre-commit-ci[bot]
ad36383951
[pre-commit.ci] pre-commit autoupdate
...
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.1.13 → v0.2.0](https://github.com/astral-sh/ruff-pre-commit/compare/v0.1.13...v0.2.0 )
2024-02-05 20:28:43 +00:00
David Lord
6b422a05f3
Merge branch '3.0.x'
2024-02-03 13:13:41 -08:00
David Lord
d5e321b792
release version 3.0.2 ( #5403 )
2024-02-03 13:12:15 -08:00
David Lord
d2030595dc
release version 3.0.2
2024-02-03 12:54:41 -08:00
David Lord
d7209a9570
fix super call in list comprehension ( #5393 )
2024-02-03 12:39:33 -08:00