From e195858ce8dd8d460c931030682a1ab0830e7f6e Mon Sep 17 00:00:00 2001 From: Eric Joanis Date: Tue, 31 Mar 2026 13:53:17 -0400 Subject: [PATCH 1/5] ci: bump actions to their latest versions, mostly to get node 24 --- .github/workflows/build_wheels.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml index 154f1c1..4936266 100644 --- a/.github/workflows/build_wheels.yml +++ b/.github/workflows/build_wheels.yml @@ -11,14 +11,14 @@ jobs: name: Build source distribution runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 - name: Build sdist run: pipx run build --sdist - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: cibw-sdist path: dist/*.tar.gz @@ -31,14 +31,14 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 - name: Build wheels uses: pypa/cibuildwheel@v2.21.3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: cibw-wheels-${{ matrix.os }} path: ./wheelhouse/*.whl @@ -54,7 +54,7 @@ jobs: # Comment this line for testing if: github.event_name == 'release' && github.event.action == 'published' steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: # unpacks all CIBW artifacts into dist/ pattern: cibw-* From 1a8c7667765e66eb7743043b9eee99d7289cd6c1 Mon Sep 17 00:00:00 2001 From: Eric Joanis Date: Tue, 31 Mar 2026 13:54:30 -0400 Subject: [PATCH 2/5] ci: bump pypa/cibuildwheels to generate Python 3.14 wheels --- .github/workflows/build_wheels.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml index 4936266..5d54b11 100644 --- a/.github/workflows/build_wheels.yml +++ b/.github/workflows/build_wheels.yml @@ -36,7 +36,7 @@ jobs: fetch-depth: 0 - name: Build wheels - uses: pypa/cibuildwheel@v2.21.3 + uses: pypa/cibuildwheel@v3.4.0 - uses: actions/upload-artifact@v7 with: From 78ae4c752d95fa3e5813482efc5f198af0e322ed Mon Sep 17 00:00:00 2001 From: Eric Joanis Date: Tue, 31 Mar 2026 14:08:52 -0400 Subject: [PATCH 3/5] ci: fix warnings issued by zizmor --- .github/workflows/build_wheels.yml | 5 +++++ .github/workflows/tests.yml | 18 ++++++++++++++---- 2 files changed, 19 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml index 5d54b11..593570e 100644 --- a/.github/workflows/build_wheels.yml +++ b/.github/workflows/build_wheels.yml @@ -6,6 +6,9 @@ on: types: - published +permissions: + contents: read + jobs: build_sdist: name: Build source distribution @@ -13,6 +16,7 @@ jobs: steps: - uses: actions/checkout@v6 with: + persist-credentials: false fetch-depth: 0 - name: Build sdist @@ -33,6 +37,7 @@ jobs: steps: - uses: actions/checkout@v6 with: + persist-credentials: false fetch-depth: 0 - name: Build wheels diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 27d1d8f..f59183c 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -4,11 +4,17 @@ on: branches: - main pull_request: + +permissions: + contents: read + jobs: pre-commit: runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - uses: actions/setup-python@v6 with: python-version: 3.x @@ -16,8 +22,9 @@ jobs: test: runs-on: ubuntu-latest steps: - - name: Checkout - uses: actions/checkout@v6 + - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Install run: | sudo apt-get install sox ninja-build @@ -39,6 +46,8 @@ jobs: runs-on: ${{ matrix.os }} steps: - uses: actions/checkout@v6 + with: + persist-credentials: false - uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} @@ -50,8 +59,9 @@ jobs: steps: - name: Install Build Dependencies uses: mymindstorm/setup-emsdk@v14 - - name: Checkout - uses: actions/checkout@v6 + - uses: actions/checkout@v6 + with: + persist-credentials: false - name: Build run: | emcmake cmake -S . -B jsbuild From fc0adb6557efc6b7f48d29c08be0f577171866ec Mon Sep 17 00:00:00 2001 From: Eric Joanis Date: Tue, 31 Mar 2026 13:56:57 -0400 Subject: [PATCH 4/5] ci: add a job to list all artifacts generated in build wheels --- .github/workflows/build_wheels.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/workflows/build_wheels.yml b/.github/workflows/build_wheels.yml index 593570e..ca94a0a 100644 --- a/.github/workflows/build_wheels.yml +++ b/.github/workflows/build_wheels.yml @@ -48,6 +48,20 @@ jobs: name: cibw-wheels-${{ matrix.os }} path: ./wheelhouse/*.whl + list_all_artifacts: + needs: + - build_wheels + - build_sdist + runs-on: ubuntu-latest + steps: + - uses: actions/download-artifact@v8 + with: + # unpacks all CIBW artifacts into dist/ + pattern: cibw-* + path: dist + merge-multiple: true + - run: ls -lR dist + upload_pypi: needs: - build_wheels From eb60c4ca1e6bdd81b4a39fa09f8b0d1f845b062a Mon Sep 17 00:00:00 2001 From: Eric Joanis Date: Tue, 31 Mar 2026 15:56:41 -0400 Subject: [PATCH 5/5] docs: add a small Contributing section to the readme --- README.md | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 9045b3e..9603976 100644 --- a/README.md +++ b/README.md @@ -158,8 +158,21 @@ If you don't have Conda, then what you will need to do is: - now you can build wheels with pip, using the same method mentioned above. +Contributing +============ + +We use [Conventional Commits](https://www.conventionalcommits.org/) for our commit messages, and check them using `gitlint`. + +We use automated code formatting tools and apply them systematically using `pre-commit`. + +Please install and run our Git hooks before making commits and submitting pull requests: +``` +pre-commit install +gitlint install-hook +``` + Authors -------- +======= SoundSwallower is based on PocketSphinx, which is based on Sphinx-II, which is based on Sphinx, which is based on Harpy, and so on, and so