Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/ci-cd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
UV_FROZEN: true

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false

Expand All @@ -51,7 +51,7 @@

- name: Install dependencies
run: |
uv sync

Check warning on line 54 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW2&open=AZ-Ci-OZLc-jv7qMxPW2&pullRequest=276

Check warning on line 54 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW3&open=AZ-Ci-OZLc-jv7qMxPW3&pullRequest=276

- name: Check file formatting
uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0
Expand Down Expand Up @@ -95,7 +95,7 @@
UV_FROZEN: true

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false

Expand All @@ -114,11 +114,11 @@
python-version: ${{ steps.python.outputs.python-path }}

- name: Install dependencies
run: uv sync

Check warning on line 117 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW5&open=AZ-Ci-OZLc-jv7qMxPW5&pullRequest=276

Check warning on line 117 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW4&open=AZ-Ci-OZLc-jv7qMxPW4&pullRequest=276

- name: Install additional backends
if: ${{ ! matrix.extras_best_effort && matrix.skip_extras == '' }}
run: uv sync --all-extras

Check warning on line 121 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW6&open=AZ-Ci-OZLc-jv7qMxPW6&pullRequest=276

Check warning on line 121 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW7&open=AZ-Ci-OZLc-jv7qMxPW7&pullRequest=276

- name: Install additional backends (best effort)
if: ${{ matrix.extras_best_effort || matrix.skip_extras != '' }}
Expand All @@ -132,7 +132,7 @@
# for each extra, output the extra name followed by the listed dependencies, space-separated
# This pins hatch to 1.15 or older to work around pypa/hatch#2118, and
# virtualenv 20.x or older, to work around pypa/hatch#2193.
uvx --from 'hatch<1.16' --with 'virtualenv<21' hatch project metadata \

Check warning on line 135 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Define exact package version to avoid installing unverified releases.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW9&open=AZ-Ci-OZLc-jv7qMxPW9&pullRequest=276

Check warning on line 135 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW8&open=AZ-Ci-OZLc-jv7qMxPW8&pullRequest=276
| jq --raw-output '."optional-dependencies" | to_entries[] | "\(.key) \(.value | join(" "))"'
)
while read -r -a extra_deps; do
Expand All @@ -145,7 +145,7 @@
fi
deps=("${extra_deps[@]:1}")
echo "::group::Installing $extra_name backend"
uv pip install "${deps[@]}" \

Check warning on line 148 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW-&open=AZ-Ci-OZLc-jv7qMxPW-&pullRequest=276
|| IFS=' ' echo "::warning title=Could not install $extra_name solver backend::Failed to install ${deps[*]}"
echo "::endgroup::"
done <<< "$EXTRAS"
Expand All @@ -153,7 +153,7 @@
- name: Test with pytest
run: |
# codecov requires that the test results are shared in xunit1 / legacy format.
uv run pytest -v --junitxml=junit.xml -o junit_family=legacy

Check warning on line 156 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPW_&open=AZ-Ci-OZLc-jv7qMxPW_&pullRequest=276

- name: Upload coverage reports to Codecov
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
Expand Down Expand Up @@ -198,7 +198,7 @@
prerelease: ${{ steps.note.outputs.prerelease }}

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false

Expand All @@ -220,10 +220,10 @@
run: |
uv build
rm -f dist/.gitignore # get-releasenotes can't handle non-dist files here
echo "version=$(uvx hatch version)" >> "$GITHUB_OUTPUT"

Check warning on line 223 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Define exact package version to avoid installing unverified releases.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPXB&open=AZ-Ci-OZLc-jv7qMxPXB&pullRequest=276

Check warning on line 223 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPXA&open=AZ-Ci-OZLc-jv7qMxPXA&pullRequest=276

- name: Check build
run: uvx twine check --strict dist/*

Check warning on line 226 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Define exact package version to avoid installing unverified releases.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPXD&open=AZ-Ci-OZLc-jv7qMxPXD&pullRequest=276

Check warning on line 226 in .github/workflows/ci-cd.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=mjpieters_rummikub-solver&issues=AZ-Ci-OZLc-jv7qMxPXC&open=AZ-Ci-OZLc-jv7qMxPXC&pullRequest=276

- name: Prepare Release Note
id: note
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false

Expand Down
Loading