chore(deps): update all non-major dependencies #1554
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| push: | |
| branches: [main] | |
| tags: ["**"] | |
| pull_request: | |
| branches: [main] | |
| merge_group: | |
| branches: [main] | |
| workflow_call: | |
| workflow_dispatch: | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: ${{ github.ref_name != github.event.repository.default_branch }} | |
| jobs: | |
| python: | |
| permissions: | |
| contents: read | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest, macos-latest, windows-latest] | |
| python: [3.12] | |
| fail-fast: false | |
| runs-on: ${{ matrix.os }} | |
| env: | |
| ENVIRONMENT: ci | |
| UV_LOCKED: 1 | |
| UV_NO_SYNC: 1 | |
| steps: | |
| - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 | |
| - uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7 | |
| - id: setup-python | |
| uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6 | |
| with: | |
| python-version: ${{ matrix.python }} | |
| - name: Set up environment | |
| if: ${{ runner.os != 'Windows' }} | |
| run: | | |
| mkdir -p .venv | |
| echo "$(realpath .venv)/bin" >> "${GITHUB_PATH}" | |
| - name: Set up environment (Windows) | |
| if: ${{ runner.os == 'Windows' }} | |
| run: | | |
| New-Item -Type Directory -Force .venv | |
| "$(Resolve-Path .venv)/Scripts" | Out-File -FilePath "${env:GITHUB_PATH}" -Append | |
| - run: | | |
| uv lock --check | |
| uv sync | |
| uv pip list | |
| - run: make lint test | |
| docker: | |
| permissions: | |
| contents: read | |
| packages: write | |
| runs-on: ubuntu-latest | |
| env: | |
| GHCR_IMAGE_NAME: ghcr.io/${{ github.repository }} | |
| steps: | |
| - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3 | |
| - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3 | |
| - id: build-ci | |
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6 | |
| with: | |
| target: ${{ env.ENVIRONMENT }} | |
| cache-from: ${{ env.GHCR_IMAGE_NAME }}:cache | |
| load: true | |
| env: | |
| ENVIRONMENT: ci | |
| - run: docker run "${IMAGE_ID}" uv pip list | |
| env: | |
| IMAGE_ID: ${{ steps.build-ci.outputs.imageid }} | |
| - run: docker run "${IMAGE_ID}" | |
| env: | |
| IMAGE_ID: ${{ steps.build-ci.outputs.imageid }} | |
| - id: docker_metadata | |
| uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5 | |
| with: | |
| images: ${{ env.GHCR_IMAGE_NAME }} | |
| - if: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }} | |
| uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ github.token }} | |
| - if: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }} | |
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6 | |
| with: | |
| target: ${{ env.ENVIRONMENT }} | |
| cache-from: ${{ env.GHCR_IMAGE_NAME }}:cache | |
| cache-to: type=inline | |
| tags: ${{ env.GHCR_IMAGE_NAME }}:dev | |
| push: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }} | |
| env: | |
| ENVIRONMENT: dev | |
| - if: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }} | |
| uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6 | |
| with: | |
| cache-from: ${{ env.GHCR_IMAGE_NAME }}:cache | |
| cache-to: type=registry,ref=${{ env.GHCR_IMAGE_NAME }}:cache,mode=max | |
| tags: ${{ steps.docker_metadata.outputs.tags }} | |
| labels: ${{ steps.docker_metadata.outputs.labels }} | |
| annotations: ${{ steps.docker_metadata.outputs.annotations }} | |
| push: ${{ github.event_name == 'push' || github.ref_name == github.event.repository.default_branch }} | |
| env: | |
| ENVIRONMENT: prod |