Merge branch 'main' into pdl-182

Author: mandel

.github/workflows/build.yml

@@ -10,7 +10,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12']
+        python-version: ['3.11', '3.12', '3.13']
 
     steps:
     - uses: actions/checkout@v4

.github/workflows/publish-quay.yaml

@@ -0,0 +1,46 @@
+name: Quay Publish
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+env:
+  REGISTRY: quay.io
+  # github.repository as account/repo
+  IMAGE_NAME: project_pdl/pdl 
+
+jobs:
+  # Build and push a multi-platform Docker image to Docker Hub
+  publish-image:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - name: Docker Setup QEMU
+        uses: docker/setup-qemu-action@v2
+        
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.QUAYIO_USERNAME }}
+          password: ${{ secrets.QUAYIO_TOKEN }}          
+
+      - name: Build and push ${{ github.ref_name }} to ${{ env.REGISTRY }}
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }},${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

.github/workflows/run-examples.yml

@@ -13,7 +13,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ['3.11', '3.12']
+        python-version: ['3.11', '3.12', '3.13']
 
     steps:
     - uses: actions/checkout@v4
@@ -44,4 +44,5 @@ jobs:
         WATSONX_PROJECT_ID: ${{ secrets.WATSONX_PROJECT_ID }}
         WATSONX_APIKEY: ${{ secrets.WATSONX_APIKEY }}
         WATSONX_URL: ${{ secrets.WATSONX_URL }}
+        REPLICATE_API_TOKEN: ${{ secrets.REPLICATE_API_TOKEN }}
       run: py.test -v --capture=tee-sys tests/test_examples_run.py

.pre-commit-config.yaml

@@ -5,7 +5,7 @@ default_language_version:
 repos:
   # check some basic stuff
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.6.0
+    rev: v5.0.0
     hooks:
       # Check for files that would conflict in case-insensitive filesystems
       - id: check-case-conflict
@@ -45,6 +45,12 @@ repos:
             "-sn", # Don't display the score
             "--rcfile=pylintrc"
           ]
+  # run the bandit security linter
+  - repo: https://github.com/PyCQA/bandit
+    rev: 1.7.10
+    hooks:
+      - id: bandit
+        args: [-c, bandit.yaml]
   # Type check the Python code with MyPy
   - repo: https://github.com/pre-commit/mirrors-mypy
     rev: 'v1.11.2'

README.md

@@ -0,0 +1,9 @@
+---
+# This is the configuration file for the bandit python static analysis tool
+exclude_dirs:
+  - build
+# We are less worried about tests, as they are not a part of the library meant to be used by users
+# with untrusted inputs.
+  - test
+skips:
+  - B101 # allow the use of assert

bandit.yaml

@@ -1,12 +1,11 @@
-FROM --platform=linux/arm64/v8 python:3.11-slim
+FROM python:3.11-slim
 
 WORKDIR /pdl
 
 RUN apt-get update && apt-get install -y git
 
 COPY . /pdl
 
-RUN pip install prompt-declaration-language
 RUN pip install prompt-declaration-language[examples]
 
 ENTRYPOINT ["pdl"]