Shahar Naveh
cfd4cf059a
Pin actions version to commit; force runner to use node 24 ( #7685 )
...
* Pin actions version to commit; force runner to use node 24
* Pin more
2026-04-26 12:32:37 +09:00
dependabot[bot]
c45434c68f
Bump actions/cache from 5.0.4 to 5.0.5 ( #7649 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.4 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-25 21:57:22 +09:00
19ee4424ca
Bump github/gh-aw from 0.62.5 to 0.68.3 ( #7650 )
...
* Bump github/gh-aw from 0.62.5 to 0.68.3
Bumps [github/gh-aw](https://github.com/github/gh-aw ) from 0.62.5 to 0.68.3.
- [Release notes](https://github.com/github/gh-aw/releases )
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/gh-aw/compare/48d8fdfddc8cad854ac0c70ceb573f09fb8f9c9b...ce1794953e0ec42adc41b6fca05e02ab49ee21c3 )
---
updated-dependencies:
- dependency-name: github/gh-aw
dependency-version: 0.68.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix actionlint SC2129: use single group redirect block in upgrade-pylib.lock.yml
Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/73a3a050-ff0b-45ad-b5fd-fcadec36239a
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
2026-04-25 05:17:05 +09:00
c200f6c9f6
Bump actions/github-script from 8.0.0 to 9.0.0 ( #7661 )
...
* Bump actions/github-script from 8.0.0 to 9.0.0
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix SC2129 shellcheck warning: group consecutive >> redirects into single block
Agent-Logs-Url: https://github.com/RustPython/RustPython/sessions/dab79065-db94-41af-abb3-332d35557b29
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
2026-04-25 05:15:31 +09:00
Changjoon
6bec0b4ba5
Fix ShellCheck findings in lib-deps-check and update-doc-db workflows ( #7669 )
...
Clear four of the five ShellCheck findings reported in #7653 . The
fifth finding is in upgrade-pylib.lock.yml — a gh-aw-generated file
marked "DO NOT EDIT" whose source .md does not contain the flagged
pattern — and is out of scope here; it will resolve via the in-flight
gh-aw version bump (#7650 ).
lib-deps-check.yaml:
* SC2076: replace `=~ " $module "` (quoted regex interpreted
literally) with `== *" $module "*` glob match. Same intent
(literal substring), same semantics across regex metachars.
* SC2086: quote `$GITHUB_OUTPUT` in the output redirect.
update-doc-db.yml:
* SC2129: collapse the eight sequential `echo ... >> $OUTPUT_FILE`
lines (plus one `cat ... >> $OUTPUT_FILE`) into a single grouped
redirect `{ ...; } > "$OUTPUT_FILE"`. Drops the now-redundant
`echo -n '' > $OUTPUT_FILE` truncate.
* SC2016: add `# shellcheck disable=SC2016` above the block; the
backticks in the auto-generated-header comment are literal
Markdown, not command substitution.
Verified locally with shellcheck 0.11.0: both modified blocks
produce no ShellCheck output. Semantic equivalence of the
lib-deps-check change confirmed across six test inputs including
regex metachars and glob-meaningful characters.
2026-04-25 00:06:23 +09:00
dependabot[bot]
78e30e1532
Bump cargo-bins/cargo-binstall from 1.17.9 to 1.18.1 ( #7651 )
...
Bumps [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall ) from 1.17.9 to 1.18.1.
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases )
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml )
- [Commits](https://github.com/cargo-bins/cargo-binstall/compare/0b24824336e2b3800b0f89d9e08b2c08bfa3dcdd...dc19f1e48450eefe5a29b8da6c6b00a87d730b37 )
---
updated-dependencies:
- dependency-name: cargo-bins/cargo-binstall
dependency-version: 1.18.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 08:09:16 +09:00
dependabot[bot]
b0230d30f2
Bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 ( #7638 )
...
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/71321a20a9ded102f6e9ce5718a2fcec2c4f70d8...b1d7e1fb5de872772f31590499237e7cce841e8e )
---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-21 23:59:54 +09:00
dependabot[bot]
54723069be
Bump j178/prek-action from 2.0.1 to 2.0.2 ( #7637 )
...
Bumps [j178/prek-action](https://github.com/j178/prek-action ) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/53276d8b0d10f8b6672aa85b4588c6921d0370cc...cbc2f23eb5539cf20d82d1aabd0d0ecbcc56f4e3 )
---
updated-dependencies:
- dependency-name: j178/prek-action
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-21 22:32:27 +09:00
Shahar Naveh
65e61cb9c0
Auto-retry flaky MP tests ( #7603 )
2026-04-19 10:37:22 -04:00
Shahar Naveh
a61d2e81c0
Fix reviewdog permissions ( #7619 )
2026-04-17 20:07:19 +09:00
Shahar Naveh
84d74e4bca
Unify CI caches (reduce total cache size by 75% ±) ( #7610 )
...
* Singular job for creating caches
* Use shared cache
2026-04-15 14:19:17 +09:00
dependabot[bot]
6bc7250b8c
Bump reviewdog/action-actionlint from 1.71.0 to 1.72.0
...
Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint ) from 1.71.0 to 1.72.0.
- [Release notes](https://github.com/reviewdog/action-actionlint/releases )
- [Commits](https://github.com/reviewdog/action-actionlint/compare/0d952c597ef8459f634d7145b0b044a9699e5e43...6fb7acc99f4a1008869fa8a0f09cfca740837d9d )
---
updated-dependencies:
- dependency-name: reviewdog/action-actionlint
dependency-version: 1.72.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-15 14:14:09 +09:00
Shahar Naveh
cb976b411f
Fail if prek fails ( #7574 )
2026-04-10 18:50:03 +09:00
Shahar Naveh
c98b6d85de
Remove overly broad permissions from release.yml ( #7577 )
2026-04-10 18:49:37 +09:00
Shahar Naveh
98de82c5f0
Revert "Only run cargo check when rust code is changed ( #7572 )" ( #7579 )
2026-04-10 18:07:11 +09:00
Shahar Naveh
f937cde7af
Only run cargo check when rust code is changed ( #7572 )
2026-04-10 02:40:15 +09:00
Shahar Naveh
c4c28a4449
Unify python version used by CI. Update to 3.14.4 ( #7571 )
...
* Add `.python-version` file
* Modify CI to use `.python-version` file
* Use correct path for `.python-version` file
2026-04-10 02:38:14 +09:00
dependabot[bot]
1012626bbb
Bump cargo-bins/cargo-binstall from 1.17.8 to 1.17.9 ( #7566 )
...
Bumps [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall ) from 1.17.8 to 1.17.9.
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases )
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml )
- [Commits](https://github.com/cargo-bins/cargo-binstall/compare/113a77a4ce971c41332f2129c3d995df993cf746...0b24824336e2b3800b0f89d9e08b2c08bfa3dcdd )
---
updated-dependencies:
- dependency-name: cargo-bins/cargo-binstall
dependency-version: 1.17.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-06 23:30:13 +09:00
Shahar Naveh
fb1b4734a7
[zizmor] ignore superfluous-actions ( #7548 )
2026-04-03 00:44:58 +09:00
Shahar Naveh and coderabbitai[bot]
b2b3070d12
Resolve excessive-permissions warning in ci.yaml ( #7547 )
...
* Resolve `excessive-permissions` warning in `ci.yaml`
* Update .github/workflows/ci.yaml
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---------
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2026-03-31 14:53:08 +09:00
dependabot[bot]
eb38c204b3
Bump j178/prek-action from 2.0.0 to 2.0.1 ( #7544 )
...
Bumps [j178/prek-action](https://github.com/j178/prek-action ) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/79f765515bd648eb4d6bb1b17277b7cb22cb6468...53276d8b0d10f8b6672aa85b4588c6921d0370cc )
---
updated-dependencies:
- dependency-name: j178/prek-action
dependency-version: 2.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-30 18:38:01 +02:00
Shahar Naveh
ce331a3e11
Resolve template injection ( #7546 )
2026-03-31 01:30:41 +09:00
dependabot[bot]
9b43343c78
Bump dtolnay/rust-toolchain ( #7545 )
...
Bumps [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain ) from efa25f7f19611383d5b0ccf2d1c8914531636bf9 to 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9.
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases )
- [Commits](https://github.com/dtolnay/rust-toolchain/compare/efa25f7f19611383d5b0ccf2d1c8914531636bf9...3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 )
---
updated-dependencies:
- dependency-name: dtolnay/rust-toolchain
dependency-version: 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 01:30:08 +09:00
Shahar Naveh
3c88e681a8
Split cargo check matrix to individual targets. Avoid cache poisoning ( #7540 )
...
* Split check matrix. Prevent cache poisoning
* Use `rustup`
* Change name
* Align cargo args
2026-03-30 23:59:48 +09:00
Shahar Naveh
d998b62bca
Fix lint warnings in release.yml ( #7538 )
2026-03-30 18:53:38 +09:00
Jeong, YunWon
99311d4617
fix cron-ci ( #7483 )
...
* fix cron-ci
* fix custom_text_test_runner
2026-03-27 23:55:30 +09:00
Shahar Naveh
b1eda639f0
Unify lint CI job ( #7505 )
...
* use `prek` for unified linting
* Fix actionlint error
* Generate metadata when specific files change
* `check_redundant_patches.py` to accept glob path
* Test
* revert defective changes
* use `rustfmt` over `cargo fmt` for individual files
* debug reviewdog
* rustfmt
* Move comment to correct location
* defevtive fmt test
* Fail with reviewdog
* fix reviewdog perms
* Try to use present token
* without checks oerms
* put normal perms
* fmt
2026-03-26 21:43:34 +09:00
Shahar Naveh
dcf1e0629c
Align concurrency CI groups names ( #7508 )
2026-03-26 14:33:14 +09:00
Shahar Naveh
c0d829e75c
Pin setup-node action to a commit hash ( #7495 )
...
* Pin `setup-node` action to a commit hash
* Don't use cache for release
* Revert changes of `release.yml`
2026-03-25 12:05:19 +09:00
Shahar Naveh
571b504300
Cleanup release.yml a bit ( #7499 )
...
* Cleanup matrix usage. enables jit on macos
* Pin some actions to commit hash
* Disable node cache
* Inline `CARGO_ARGS`
* Add `stdio` and `host_env` features
* Only upload to pages if not running on fork
2026-03-25 12:04:56 +09:00
Shahar Naveh
5d03f11e5e
Pin rust-toolchain action to a commit hash ( #7500 )
2026-03-25 12:04:34 +09:00
Shahar Naveh
093cb12768
Add test_concurrent_futures to FLAKY_MP_TESTS ( #7502 )
2026-03-25 12:04:14 +09:00
Shahar Naveh
a4cd2a3cb0
Resolve shellcheck warning on ci.yaml ( #7501 )
2026-03-25 12:03:25 +09:00
Shahar Naveh
54dc765227
Pin setup-python action to a commit hash ( #7494 )
2026-03-25 11:58:39 +09:00
Shahar Naveh
0aa692e99a
Pin setup-python action to a commit hash ( #7492 )
2026-03-24 12:53:21 +09:00
dependabot[bot]
211753284f
Bump cargo-bins/cargo-binstall from 1.17.7 to 1.17.8 ( #7488 )
...
Bumps [cargo-bins/cargo-binstall](https://github.com/cargo-bins/cargo-binstall ) from 1.17.7 to 1.17.8.
- [Release notes](https://github.com/cargo-bins/cargo-binstall/releases )
- [Changelog](https://github.com/cargo-bins/cargo-binstall/blob/main/release-plz.toml )
- [Commits](https://github.com/cargo-bins/cargo-binstall/compare/1800853f2578f8c34492ec76154caef8e163fbca...113a77a4ce971c41332f2129c3d995df993cf746 )
---
updated-dependencies:
- dependency-name: cargo-bins/cargo-binstall
dependency-version: 1.17.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-24 12:52:39 +09:00
dependabot[bot]
4aa5f10c4a
Bump actions/cache from 5.0.3 to 5.0.4 ( #7487 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.3 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/cdf6c1fa76f9f475f3d7449005a359c84ca0f306...668228422ae6a00e4ad889ee87cd7109ec5666a7 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-24 12:52:25 +09:00
dependabot[bot]
8db54f029d
Bump github/gh-aw from 0.58.3 to 0.62.5 ( #7486 )
...
Bumps [github/gh-aw](https://github.com/github/gh-aw ) from 0.58.3 to 0.62.5.
- [Release notes](https://github.com/github/gh-aw/releases )
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/gh-aw/compare/08a903b1fb2e493a84a57577778fe5dd711f9468...48d8fdfddc8cad854ac0c70ceb573f09fb8f9c9b )
---
updated-dependencies:
- dependency-name: github/gh-aw
dependency-version: 0.62.5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-24 12:52:10 +09:00
Shahar Naveh
5b081e2029
Adjust permissions of update-doc-db job ( #7496 )
2026-03-24 12:45:06 +09:00
Shahar Naveh
c0f7c3c6ef
Pin setup-python action to a commit hash ( #7491 )
2026-03-24 12:44:42 +09:00
Shahar Naveh
5bb6a3a607
Add zizmor CI ( #7463 )
2026-03-20 21:37:12 +09:00
Shahar Naveh
0a19d7203f
Run CI tests with max processes ( #7254 )
...
* Run CI witb max cores
* Step for flaky MP tests
* Add `test_class` to flkay mp tests
2026-03-20 20:35:18 +09:00
Shahar Naveh
2e777a6fb3
Add cargo shear CI step ( #7461 )
...
* Add `cargo shear` CI step
* Remove some deps
* Move `ruff_python_parser` to dev deps
* Remove `thread_local` crate
* Cleanup `num-integer` usage
* Remove parser fro. wasm
* Remove windows-sys from venv launcher
* Update lock
* Resolve more
* Fix wasm
* Update lock
2026-03-20 12:42:51 +09:00
Shahar Naveh
25b55d01e3
Add actionlint step ( #7464 )
2026-03-19 20:41:59 +09:00
Shahar Naveh
3069d06851
Align _opcode_metadata.py to 3.14.3 ( #7456 )
...
* Align `_opcode_metadata.py` to 3.14.3
* Unmark passing test
* Ensure python 3.14 runs on CI
* Update banner
* Fix `test__opcode.py`
* Adjust generate script
* Fix docs
2026-03-18 22:09:00 +09:00
Shahar Naveh
80185944e3
Only save cache if running on main ( #7460 )
2026-03-18 21:57:19 +09:00
Shahar Naveh
fca69f5b78
Remove some tests from PLATFORM_INDEPENDENT_TESTS ( #7459 )
...
* Remove some platform dependent tests
* Mark failing tests
2026-03-18 21:55:56 +09:00
Shahar Naveh
0e49b70256
Cleanup ci.yaml matrix usage ( #7260 )
...
* cleanup
* Don't enable all resources on windows
2026-03-17 20:46:33 +09:00
dependabot[bot]
58eff33a23
Bump actions/download-artifact from 8.0.0 to 8.0.1 ( #7448 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v8...v8.0.1 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:56:58 +09:00
dependabot[bot]
57923b6870
Bump marocchino/sticky-pull-request-comment from 2 to 3 ( #7447 )
...
Bumps [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment ) from 2 to 3.
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases )
- [Commits](https://github.com/marocchino/sticky-pull-request-comment/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: marocchino/sticky-pull-request-comment
dependency-version: '3'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-16 23:45:52 +09:00