fix(deps): update dependency cryptography to v47 #472
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync uv.lock on pyproject.toml and exporting requirements.txt. | |
| permissions: | |
| contents: read | |
| packages: read | |
| actions: read | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| - v.* | |
| paths: | |
| - 'uv.lock' | |
| - 'pyproject.toml' | |
| - .github/workflows/sync_lockfile.yaml | |
| # allow manual dispatch of this workflow | |
| workflow_dispatch: | |
| jobs: | |
| sync-lockfile: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| timeout-minutes: 1 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| with: | |
| ref: ${{ github.event.pull_request.head.ref }} | |
| # use repo scope deploy key for the later git operations, so that the pushed commit can trigger the | |
| # workflow as expected. The default action token GITHUB_TOKEN cannot trigger new workflows. | |
| # For more details about this restriction, please refer to: | |
| # https://github.com/peter-evans/create-pull-request/issues/48 and | |
| # https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs | |
| ssh-key: ${{ secrets.DEPLOY_KEY }} | |
| persist-credentials: true | |
| - name: Install uv | |
| uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 | |
| with: | |
| version: "0.11.8" | |
| - name: Setup python | |
| uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 | |
| with: | |
| python-version-file: ".python-version" | |
| - name: Sync uv.lock with pyproject.toml | |
| run: uv lock | |
| - name: Export requirements.txt from uv.lock | |
| run: uv export --frozen --no-dev --no-editable --no-hashes --no-emit-project > requirements.txt | |
| - name: Commit change if needed | |
| run: | | |
| git config --global user.name "github-actions[bot]+sync-lockfile" | |
| git config --global user.email "github-actions[bot]+sync-lockfile@users.noreply.github.com" | |
| if git diff --exit-code uv.lock requirements.txt; then | |
| echo "Skip commit as no changes are made" | |
| else | |
| echo "Commit changes on update ..." | |
| git add uv.lock requirements.txt | |
| git commit -m "[GHA] Update uv.lock and/or requirements.txt" | |
| git push | |
| fi |