Skip to content

Commit e4fff98

Browse files
cjdsellerscjdsellers
authored
Release 1.214.0
See release notes.
2 parents e317039 + 5997cc5 commit e4fff98

File tree

355 files changed

+22551
-4386
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

355 files changed

+22551
-4386
lines changed

‎.github/actions/common-setup/action.yml

Lines changed: 18 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,8 @@ runs:
1717
# > OS
1818
- name: Free disk space (Ubuntu)
1919
if: inputs.free-disk-space == 'true' && runner.os == 'Linux'
20-
uses: jlumbroso/free-disk-space@main
20+
# https://github.com/jlumbroso/free-disk-space/releases/tag/v1.3.1
21+
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
2122
with:
2223
tool-cache: true
2324
android: true
@@ -34,16 +35,16 @@ runs:
3435
rm -rf "/c/Program Files/dotnet"
3536
rm -rf "/c/Program Files (x86)/Microsoft Visual Studio/2019"
3637
37-
# TODO: Temporarily fix-missing to sync outdated package index
3838
- name: Install runner dependencies
3939
if: runner.os == 'Linux'
4040
shell: bash
4141
run: |
42-
sudo apt-get update --fix-missing
42+
sudo apt-get update
4343
sudo apt-get install -y curl clang git libssl-dev make pkg-config
4444
4545
- name: Install mold
46-
uses: rui314/setup-mold@v1
46+
# https://github.com/rui314/setup-mold
47+
uses: rui314/setup-mold@565a5a945b82f5759c6148485163f6ecd90da653 # v1
4748

4849
# > --------------------------------------------------
4950
# > Rust
@@ -105,7 +106,8 @@ runs:
105106
106107
- name: Cached sccache
107108
id: cached-sccache
108-
uses: actions/cache@v4
109+
# https://github.com/actions/cache/releases/tag/v4.2.3
110+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
109111
with:
110112
path: ${{ env.SCCACHE_DIR }}
111113
key: sccache-${{ runner.os }}-${{ github.workflow }}-${{ github.job }}-${{ hashFiles('**/Cargo.toml', '**/Cargo.lock', '**/poetry.lock') }}
@@ -115,12 +117,14 @@ runs:
115117
sccache-${{ runner.os }}-
116118
117119
- name: Run sccache
118-
uses: mozilla-actions/[email protected]
120+
# https://github.com/Mozilla-Actions/sccache-action/releases/tag/v0.0.8
121+
uses: mozilla-actions/sccache-action@65101d47ea8028ed0c98a1cdea8dd9182e9b5133 # v0.0.8
119122

120123
# > --------------------------------------------------
121124
# > Python
122125
- name: Set up Python environment
123-
uses: actions/setup-python@v5
126+
# https://github.com/actions/setup-python/releases/tag/v5.4.0
127+
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
124128
with:
125129
python-version: ${{ inputs.python-version }}
126130

@@ -131,7 +135,8 @@ runs:
131135
132136
- name: Cache Python site-packages
133137
id: cached-site-packages
134-
uses: actions/cache@v4
138+
# https://github.com/actions/cache/releases/tag/v4.2.3
139+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
135140
with:
136141
path: ~/.local/lib/python${{ inputs.python-version }}/site-packages
137142
key: ${{ runner.os }}-${{ inputs.python-version }}-site-packages
@@ -140,7 +145,7 @@ runs:
140145
141146
- name: Install pre-commit
142147
shell: bash
143-
run: pip install pre-commit==4.1.0
148+
run: pip install pre-commit==4.2.0
144149

145150
# > --------------------------------------------------
146151
# > UV
@@ -161,7 +166,8 @@ runs:
161166
162167
- name: Cached uv
163168
id: cached-uv
164-
uses: actions/cache@v4
169+
# https://github.com/actions/cache/releases/tag/v4.2.3
170+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
165171
with:
166172
path: ${{ env.UV_CACHE_DIR }}
167173
key: ${{ runner.os }}-${{ env.PYTHON_VERSION }}-uv-${{ hashFiles('**/uv.lock') }}
@@ -170,7 +176,8 @@ runs:
170176
# > pre-commit
171177
- name: Cached pre-commit
172178
id: cached-pre-commit
173-
uses: actions/cache@v4
179+
# https://github.com/actions/cache/releases/tag/v4.2.3
180+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
174181
with:
175182
path: ~/.cache/pre-commit
176183
key: ${{ runner.os }}-${{ env.PYTHON_VERSION }}-pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}

‎.github/actions/common-test-data/action.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,8 @@ runs:
66
steps:
77
- name: Cached test data
88
id: cached-testdata-large
9-
uses: actions/cache@v4
9+
# https://github.com/actions/cache/releases/tag/v4.2.3
10+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
1011
with:
1112
path: tests/test_data/large
1213
key: ${{ runner.os }}-large-files-${{ hashFiles('tests/test_data/large/checksums.json') }}

‎.github/actions/common-wheel-build/action.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,11 +10,13 @@ runs:
1010
using: "composite"
1111
steps:
1212
- name: Update version in pyproject.toml
13+
if: github.ref != 'refs/heads/master'
1314
shell: bash
1415
run: |
1516
bash ./scripts/ci/update-pyproject-version.sh
1617
1718
- name: Generate updated lock file
19+
if: github.ref != 'refs/heads/master'
1820
shell: bash
1921
run: uv lock --no-upgrade
2022

‎.github/actions/publish-wheels/action.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,12 @@ runs:
55
using: "composite"
66
steps:
77
- name: Checkout repository
8-
uses: actions/checkout@v4
8+
# https://github.com/actions/checkout/releases/tag/v4.2.2
9+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
910

1011
- name: Download built wheels
11-
uses: actions/download-artifact@v4
12+
# https://github.com/actions/download-artifact/releases/tag/v4.2.1
13+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
1214
with:
1315
path: dist/
1416
pattern: "*.whl"

‎.github/actions/upload-artifact-wheel/action.yml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@ runs:
2626
2727
- name: Upload wheel artifact
2828
if: github.event_name == 'push'
29-
uses: actions/upload-artifact@v4
29+
# https://github.com/actions/upload-artifact/releases/tag/v4.6.2
30+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
3031
with:
3132
name: ${{ env.ASSET_NAME }}
3233
path: ${{ env.ASSET_PATH }}

‎.github/workflows/build-docs.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,11 @@ jobs:
88
build-docs:
99
runs-on: ubuntu-latest
1010
steps:
11+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
12+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
13+
with:
14+
egress-policy: audit
15+
1116
- name: Fire event to nautilus_docs
1217
run: |
1318
curl -L \

‎.github/workflows/build.yml

Lines changed: 49 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,14 @@ jobs:
1111
name: pre-commit
1212
runs-on: ubuntu-latest
1313
steps:
14+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
15+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
16+
with:
17+
egress-policy: audit
18+
1419
- name: Checkout repository
15-
uses: actions/checkout@v4
20+
# https://github.com/actions/checkout/releases/tag/v4.2.2
21+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1622

1723
- name: Common setup
1824
uses: ./.github/actions/common-setup
@@ -61,10 +67,15 @@ jobs:
6167
ports:
6268
- 5432:5432
6369
options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
64-
6570
steps:
71+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
72+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
73+
with:
74+
egress-policy: audit
75+
6676
- name: Checkout repository
67-
uses: actions/checkout@v4
77+
# https://github.com/actions/checkout/releases/tag/v4.2.2
78+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6879

6980
- name: Common setup
7081
uses: ./.github/actions/common-setup
@@ -136,10 +147,15 @@ jobs:
136147
ports:
137148
- 5432:5432
138149
options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
139-
140150
steps:
151+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
152+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
153+
with:
154+
egress-policy: audit
155+
141156
- name: Checkout repository
142-
uses: actions/checkout@v4
157+
# https://github.com/actions/checkout/releases/tag/v4.2.2
158+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
143159

144160
- name: Common setup
145161
uses: ./.github/actions/common-setup
@@ -200,8 +216,14 @@ jobs:
200216
BUILD_MODE: release
201217
RUST_BACKTRACE: 1
202218
steps:
219+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
220+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
221+
with:
222+
egress-policy: audit
223+
203224
- name: Checkout repository
204-
uses: actions/checkout@v4
225+
# https://github.com/actions/checkout/releases/tag/v4.2.2
226+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
205227

206228
- name: Common setup
207229
uses: ./.github/actions/common-setup
@@ -252,8 +274,14 @@ jobs:
252274
PARALLEL_BUILD: false
253275
RUST_BACKTRACE: 1
254276
steps:
277+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
278+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
279+
with:
280+
egress-policy: audit
281+
255282
- name: Checkout repository
256-
uses: actions/checkout@v4
283+
# https://github.com/actions/checkout/releases/tag/v4.2.2
284+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
257285

258286
- name: Common setup
259287
uses: ./.github/actions/common-setup
@@ -294,10 +322,15 @@ jobs:
294322
CLOUDFLARE_R2_BUCKET_NAME: "packages"
295323
CLOUDFLARE_R2_REGION: "auto"
296324
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
297-
298325
steps:
326+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
327+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
328+
with:
329+
egress-policy: audit
330+
299331
- name: Checkout repository
300-
uses: actions/checkout@v4
332+
# https://github.com/actions/checkout/releases/tag/v4.2.2
333+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
301334

302335
- name: Publish wheels
303336
uses: ./.github/actions/publish-wheels
@@ -320,10 +353,15 @@ jobs:
320353
CLOUDFLARE_R2_BUCKET_NAME: "packages"
321354
CLOUDFLARE_R2_REGION: "auto"
322355
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
323-
324356
steps:
357+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
358+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
359+
with:
360+
egress-policy: audit
361+
325362
- name: Checkout repository
326-
uses: actions/checkout@v4
363+
# https://github.com/actions/checkout/releases/tag/v4.2.2
364+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
327365

328366
- name: Publish wheels
329367
uses: ./.github/actions/publish-wheels

‎.github/workflows/codeql-analysis.yml

Lines changed: 11 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -10,20 +10,25 @@ jobs:
1010
analyze:
1111
name: Analyze
1212
runs-on: ubuntu-latest
13-
1413
strategy:
1514
fail-fast: false
1615
matrix:
1716
language: ['python']
18-
1917
steps:
18+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
19+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
20+
with:
21+
egress-policy: audit
22+
2023
- name: Checkout repository
21-
uses: actions/checkout@v4
24+
# https://github.com/actions/checkout/releases/tag/v4.2.2
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2226
with:
2327
fetch-depth: 1
2428

2529
- name: Initialize CodeQL
26-
uses: github/codeql-action/init@v2
30+
# https://github.com/github/codeql-action
31+
uses: github/codeql-action/init@70df9def86d22bf0ea4e7f8b956e7b92e7c1ea22 # v2.20.7
2732
with:
2833
languages: ${{ matrix.language }}
2934
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -32,4 +37,5 @@ jobs:
3237
# queries: ./path/to/local/query, your-org/your-repo/queries@main
3338

3439
- name: Perform CodeQL Analysis
35-
uses: github/codeql-action/analyze@v2
40+
# https://github.com/github/codeql-action
41+
uses: github/codeql-action/analyze@70df9def86d22bf0ea4e7f8b956e7b92e7c1ea22 # v2.20.7

‎.github/workflows/coverage.yml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,15 @@ jobs:
2626
ports:
2727
- 5432:5432
2828
options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
29-
3029
steps:
30+
# https://github.com/step-security/harden-runner/releases/tag/v2.11.0
31+
- uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
32+
with:
33+
egress-policy: audit
34+
3135
- name: Checkout repository
32-
uses: actions/checkout@v4
36+
# https://github.com/actions/checkout/releases/tag/v4.2.2
37+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3338

3439
- name: Common setup
3540
uses: ./.github/actions/common-setup

0 commit comments

Comments
 (0)