Skip to content

Commit 4d4d4a9

Browse files
hoxbrohoxbro
committed
Merge branch 'main' into chore_remove_packaging_dependencies
2 parents 62af868 + e878fc5 commit 4d4d4a9

13 files changed

Lines changed: 136 additions & 73 deletions

File tree

‎.github/workflows/build.yaml‎

Lines changed: 19 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,11 @@ on:
1010
schedule:
1111
- cron: "0 14 * * SUN"
1212

13-
defaults:
14-
run:
15-
shell: bash -e {0}
13+
permissions: {}
14+
15+
concurrency:
16+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
17+
cancel-in-progress: true
1618

1719
env:
1820
PACKAGE: "holoviews"
@@ -33,21 +35,21 @@ jobs:
3335
name: Pixi lock
3436
runs-on: ubuntu-latest
3537
steps:
36-
- uses: holoviz-dev/holoviz_tasks/pixi_lock@v0
38+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
3739

3840
conda_build:
3941
name: Build Conda
4042
needs: [pixi_lock]
4143
runs-on: "ubuntu-latest"
4244
steps:
43-
- uses: holoviz-dev/holoviz_tasks/pixi_install@v0
45+
- uses: holoviz-dev/holoviz_tasks/pixi-install@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
4446
with:
4547
environments: "build"
4648
download-data: false
4749
install: false
4850
- name: conda build
4951
run: pixi run -e build build-conda
50-
- uses: actions/upload-artifact@v7
52+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
5153
if: always()
5254
with:
5355
name: artifacts-conda
@@ -60,7 +62,7 @@ jobs:
6062
needs: [conda_build, waiting_room]
6163
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
6264
steps:
63-
- uses: actions/download-artifact@v8
65+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
6466
with:
6567
name: artifacts-conda
6668
path: dist/
@@ -82,14 +84,14 @@ jobs:
8284
needs: [pixi_lock]
8385
runs-on: "ubuntu-latest"
8486
steps:
85-
- uses: holoviz-dev/holoviz_tasks/pixi_install@v0
87+
- uses: holoviz-dev/holoviz_tasks/pixi-install@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
8688
with:
8789
environments: "build"
8890
download-data: false
8991
install: false
9092
- name: Build package
9193
run: pixi run -e build build-pip
92-
- uses: actions/upload-artifact@v7
94+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
9395
if: always()
9496
with:
9597
name: artifacts-pip
@@ -104,10 +106,10 @@ jobs:
104106
runs-on: "ubuntu-latest"
105107
needs: [pip_build]
106108
steps:
107-
- uses: actions/setup-python@v6
109+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
108110
with:
109111
python-version: ${{ env.PYTHON_VERSION }}
110-
- uses: actions/download-artifact@v8
112+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
111113
with:
112114
name: artifacts-pip
113115
path: dist/
@@ -124,12 +126,12 @@ jobs:
124126
permissions:
125127
id-token: write
126128
steps:
127-
- uses: actions/download-artifact@v8
129+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
128130
with:
129131
name: artifacts-pip
130132
path: dist/
131133
- name: Publish to PyPI
132-
uses: pypa/gh-action-pypi-publish@release/v1
134+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
133135

134136
announce:
135137
name: Announce GitHub
@@ -141,8 +143,10 @@ jobs:
141143
env:
142144
TAG: ${{ github.ref_name }}
143145
steps:
144-
- uses: actions/checkout@v6
145-
- uses: actions/download-artifact@v8
146+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
147+
with:
148+
persist-credentials: false
149+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
146150
with:
147151
pattern: artifacts-*
148152
path: artifacts/

‎.github/workflows/conventional_commits.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: "Validate PR title"
22

33
on:
4-
pull_request_target:
4+
pull_request_target: # zizmor: ignore[dangerous-triggers]
55
types:
66
- opened
77
- edited
@@ -16,7 +16,7 @@ jobs:
1616
name: Validate PR title
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: amannn/action-semantic-pull-request@v6
19+
- uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6
2020
env:
2121
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2222
with:

‎.github/workflows/docs.yaml‎

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,18 @@ on:
2020
schedule:
2121
- cron: "0 14 * * SUN"
2222

23+
permissions: {}
24+
25+
concurrency:
26+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
27+
cancel-in-progress: true
28+
2329
jobs:
2430
pixi_lock:
2531
name: Pixi lock
2632
runs-on: ubuntu-latest
2733
steps:
28-
- uses: holoviz-dev/holoviz_tasks/pixi_lock@v0
34+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
2935

3036
docs_build:
3137
name: Build Documentation
@@ -35,12 +41,12 @@ jobs:
3541
env:
3642
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3743
steps:
38-
- uses: holoviz-dev/holoviz_tasks/pixi_install@v0
44+
- uses: holoviz-dev/holoviz_tasks/pixi-install@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
3945
with:
4046
environments: docs
4147
- name: Build documentation
4248
run: pixi run -e docs docs-build
43-
- uses: actions/upload-artifact@v7
49+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
4450
if: always()
4551
with:
4652
name: docs
@@ -57,7 +63,7 @@ jobs:
5763
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
5864
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
5965
steps:
60-
- uses: actions/download-artifact@v8
66+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
6167
with:
6268
name: docs
6369
path: builtdocs/

‎.github/workflows/downstream_tests.yaml‎

Lines changed: 19 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,28 @@
11
name: downstream_tests
22

33
on:
4-
# Run this workflow after the build workflow has completed.
5-
workflow_run:
4+
workflow_run: # zizmor: ignore[dangerous-triggers]
65
workflows: [packages]
76
types: [completed]
8-
# Or by triggering it manually via Github's UI
97
workflow_dispatch:
10-
inputs:
11-
manual:
12-
description: don't change me!
13-
type: boolean
14-
required: true
15-
default: true
8+
9+
permissions: {}
10+
11+
concurrency:
12+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
13+
cancel-in-progress: true
1614

1715
jobs:
1816
downstream_tests:
19-
uses: holoviz-dev/holoviz_tasks/.github/workflows/run_downstream_tests.yaml@main
20-
with:
21-
downstream_repos_as_json: '{"downstream_repo":["hvplot", "geoviews"]}'
22-
secrets:
23-
ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN }}
17+
name: Run downstream tests
18+
runs-on: ubuntu-latest
19+
if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
20+
strategy:
21+
matrix:
22+
downstream_repo: [hvplot, geoviews]
23+
fail-fast: false
24+
steps:
25+
- uses: holoviz-dev/holoviz_tasks/downstream-tests@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
26+
with:
27+
downstream_repo: ${{ matrix.downstream_repo }}
28+
github_token: ${{ secrets.ACCESS_TOKEN }}

‎.github/workflows/lock.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
action:
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: dessant/lock-threads@v6
19+
- uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v6
2020
with:
2121
issue-inactive-days: "100"
2222
pr-inactive-days: "100"

‎.github/workflows/nightly_lock.yaml‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,12 @@ on:
44
schedule:
55
- cron: "0 0 * * *"
66

7+
permissions: {}
8+
9+
concurrency:
10+
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
11+
cancel-in-progress: true
12+
713
env:
814
PACKAGE: "holoviews"
915

@@ -14,7 +20,7 @@ jobs:
1420
runs-on: ubuntu-latest
1521
timeout-minutes: 5
1622
steps:
17-
- uses: holoviz-dev/holoviz_tasks/pixi_lock@v0
23+
- uses: holoviz-dev/holoviz_tasks/pixi-lock@a15d3e2297339666d8c39739ebff7891ce8c3458 # v1
1824
- name: Upload lock-file to S3
1925
env:
2026
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}

0 commit comments

Comments
 (0)