Merge branch 'master' into pro-1468-contact-photos-volunteer-in-menu

Author: BreathingFlesh

.github/workflows/build-and-push.yml

@@ -15,15 +15,13 @@ jobs:
     permissions:
       contents: read
       packages: write
-      attestations: write
-      id-token: write
 
     outputs:
       version: ${{ steps.meta.outputs.version }}
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Log in to the container registry
         uses: docker/login-action@v3
@@ -46,13 +44,7 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-
-      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v1
-        with:
-          subject-name: ghcr.io/onegov/onegov-cloud
-          subject-digest: ${{ steps.push.outputs.digest }}
-          push-to-registry: true
+          provenance: false
 
   test-image:
     needs: build-and-push-image
@@ -116,7 +108,7 @@ jobs:
         install-chromedriver: true
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Get branch name (merge)
       if: github.event_name != 'pull_request'
@@ -184,34 +176,34 @@ jobs:
         # TEMPORARY: Remove after upgrade to SQLAlchemy 2.0
         SQLALCHEMY_WARN_20: '1'
 
-  cleanup-images:
-    runs-on: ubuntu-latest
-    needs: build-and-push-image
-
-    steps:
-
-      - name: Delete unttaged images
-        uses: seantis/delete-package-versions@main
-        with:
-          package-name: 'onegov-cloud'
-          package-type: 'container'
-          min-versions-to-keep: 0
-          delete-only-untagged-versions: 'true'
-
-      - name: Delete images tagged with commit hash
-        uses: seantis/delete-package-versions@main
-        with:
-          package-name: 'onegov-cloud'
-          package-type: 'container'
-          min-versions-to-keep: 0
-          ignore-versions: '^(?!sha).*$'
-          ignore-versions-include-tags: true
-
-      - name: Delete old images
-        uses: seantis/delete-package-versions@main
-        with:
-          package-name: 'onegov-cloud'
-          package-type: 'container'
-          min-versions-to-keep: 20
-          ignore-versions: '^release-.*$'
-          ignore-versions-include-tags: true
+#  cleanup-images:
+#    runs-on: ubuntu-latest
+#    needs: build-and-push-image
+#
+#    steps:
+#
+#      - name: Delete unttaged images
+#        uses: seantis/delete-package-versions@main
+#        with:
+#          package-name: 'onegov-cloud'
+#          package-type: 'container'
+#          min-versions-to-keep: 0
+#          delete-only-untagged-versions: 'true'
+#
+#      - name: Delete images tagged with commit hash
+#        uses: seantis/delete-package-versions@main
+#        with:
+#          package-name: 'onegov-cloud'
+#          package-type: 'container'
+#          min-versions-to-keep: 0
+#          ignore-versions: '^(?!sha).*$'
+#          ignore-versions-include-tags: true
+#
+#      - name: Delete old images
+#        uses: seantis/delete-package-versions@main
+#        with:
+#          package-name: 'onegov-cloud'
+#          package-type: 'container'
+#          min-versions-to-keep: 20
+#          ignore-versions: '^(release-.*|master)$'
+#          ignore-versions-include-tags: true

.github/workflows/measure-and-store-test-durations.yml

@@ -61,7 +61,7 @@ jobs:
         install-chromedriver: true
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install dependencies
       run: |

.github/workflows/stubtest.yml

@@ -52,7 +52,7 @@ jobs:
           xdg-utils
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install dependencies
       run: |

.github/workflows/tests.yml

@@ -63,7 +63,7 @@ jobs:
           xdg-utils
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Install dependencies
       run: |
@@ -159,7 +159,7 @@ jobs:
         install-chromedriver: true
 
     - name: Checkout repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Get branch name (merge)
       if: github.event_name != 'pull_request'

.pre-commit-config.yaml

@@ -15,7 +15,7 @@ repos:
         exclude: .pre-commit-config.yaml
       - id: pt_structure
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.0
+    rev: v0.15.1
     hooks:
       - id: ruff-check
         args: [ "--fix" ]
@@ -27,15 +27,15 @@ repos:
         additional_dependencies:
         - flake8-type-checking>=3.0.0
   - repo: https://github.com/thibaudcolas/pre-commit-stylelint
-    rev: v17.1.0
+    rev: v17.3.0
     hooks:
     - id: stylelint
       files: '^src/.*\.scss'
       additional_dependencies:
         - stylelint@16.19.1
         - stylelint-config-standard-scss@15.0.0
   - repo: https://github.com/pre-commit/mirrors-eslint
-    rev: v10.0.0-rc.2
+    rev: v10.0.0
     hooks:
     - id: eslint
       files: '^src/.*\.jsx?$'