diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e14d046..0f6332a 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -14,11 +14,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - name: Set up pixi - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1 + uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4 with: environments: build - name: Build project @@ -26,7 +26,7 @@ jobs: - name: Check package run: pixi run -e build check-wheel - name: Upload package - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: artifact path: dist/* @@ -36,15 +36,15 @@ jobs: if: startsWith(github.ref, 'refs/tags/') runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up pixi - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1 + uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4 - name: Install npm dependencies run: pixi run npm-install - name: Build JS/CSS run: pixi run build-js - name: Upload JS/CSS artifacts - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: cdn-assets path: dist/* @@ -67,12 +67,12 @@ jobs: id-token: write environment: pypi steps: - - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: artifact path: dist - name: Publish package on PyPI - uses: pypa/gh-action-pypi-publish@15c56dba361d8335944d31a2ecd17d700fc7bcbc # v1.12.2 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 cdn_publish: name: Publish to CDN @@ -80,13 +80,13 @@ jobs: needs: [waiting_room] runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: cdn-assets path: dist - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: "3.12" - name: Upload to CDN @@ -101,12 +101,12 @@ jobs: needs: [waiting_room] runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: cdn-assets path: dist - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: '20' registry-url: 'https://registry.npmjs.org' @@ -132,11 +132,11 @@ jobs: permissions: contents: write steps: - - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: cdn-assets path: cdn-assets - - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 + - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: artifact path: dist diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7669057..36f17e4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -23,7 +23,7 @@ jobs: img_change: ${{ steps.filter.outputs.img }} matrix: ${{ env.MATRIX }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 if: github.event_name != 'pull_request' - name: Check for code changes uses: dorny/paths-filter@v3 @@ -103,7 +103,7 @@ jobs: if: needs.setup.outputs.img_change == 'true' with: extra_args: -a --hook-stage manual oxipng || true -- - - uses: stefanzweifel/git-auto-commit-action@v4 + - uses: stefanzweifel/git-auto-commit-action@v7 if: needs.setup.outputs.img_change == 'true' with: commit_message: "Optimize PNG images (lossless)" @@ -123,11 +123,11 @@ jobs: - windows-latest steps: - name: Checkout branch - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - name: Set up pixi - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1 + uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4 with: environments: ${{ matrix.environment }} - name: Install repository @@ -143,9 +143,9 @@ jobs: timeout-minutes: 10 steps: - name: Checkout branch - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6 - name: Set up pixi - uses: prefix-dev/setup-pixi@v0.8.1 + uses: prefix-dev/setup-pixi@v0.9.4 - name: Run Vitest run: pixi run test-js @@ -157,11 +157,11 @@ jobs: timeout-minutes: 15 steps: - name: Checkout branch - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up pixi - uses: prefix-dev/setup-pixi@v0.8.1 + uses: prefix-dev/setup-pixi@v0.9.4 with: environments: sphinx - name: Build Sphinx docs @@ -175,13 +175,13 @@ jobs: timeout-minutes: 15 steps: - name: Checkout branch - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Quarto uses: quarto-dev/quarto-actions/setup@v2 - name: Set up pixi - uses: prefix-dev/setup-pixi@v0.8.1 + uses: prefix-dev/setup-pixi@v0.9.4 with: environments: quarto - name: Build Quarto docs @@ -202,12 +202,12 @@ jobs: PANEL_LOG_LEVEL: info steps: - name: Checkout branch - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Pixi - uses: prefix-dev/setup-pixi@v0.8.1 + uses: prefix-dev/setup-pixi@v0.9.4 with: environments: ${{ matrix.environment }} @@ -232,7 +232,7 @@ jobs: --output ui_screenshots --tracing retain-on-failure - name: Upload UI Screenshots - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: ui_screenshots_${{ runner.os }} diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 5f05a44..832b411 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -26,12 +26,12 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Pixi - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1 + uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4 with: environments: docs @@ -39,7 +39,7 @@ jobs: run: pixi run -e docs build - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v4 with: path: ./site diff --git a/.github/workflows/update-lockfiles.yml b/.github/workflows/update-lockfiles.yml index 2dd8cea..ca327ba 100644 --- a/.github/workflows/update-lockfiles.yml +++ b/.github/workflows/update-lockfiles.yml @@ -12,16 +12,16 @@ jobs: pixi-update: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up pixi - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1 + uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4 with: run-install: false - name: Update lockfiles run: | pixi update --json --no-install | pixi exec pixi-diff-to-markdown >> diff.md - name: Create pull request - uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 + uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0 with: token: ${{ secrets.GITHUB_TOKEN }} commit-message: Update pixi lockfile