Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Quick round of CI improvements #459

Merged
merged 6 commits into from
Nov 21, 2022

Conversation

joshuagl
Copy link
Collaborator

Fixes: #455

Description of the changes being introduced by the pull request:

Please verify and check that the pull request fulfils the following requirements:

  • The code follows the Code Style Guidelines
  • Tests have been added for the bug fix or new feature
  • Docs have been added for the bug fix or new feature

Add the new Python 3.11 release and use it for the specialised environments
(no-gpg, pure Python, etc).

Signed-off-by: Joshua Lock <jlock@vmware.com>
Run specialised builds (python-only and lint) on the latest version of
the interpreter.

Signed-off-by: Joshua Lock <jlock@vmware.com>
Update the actions we use to the most recent release and specify the
version we want by digest, not by major version tag. This will allow
greater determinism in CI runs and allow dependabot to update the actions
for us.

Signed-off-by: Joshua Lock <jlock@vmware.com>
GitHub have changed the way state is saved, environment files are the new
preferred mechanism and set-output will soon be disabled.
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

Signed-off-by: Joshua Lock <jlock@vmware.com>
Drop all permissions, which will require any actions that need elevated
permissions in future explicity add them.

Signed-off-by: Joshua Lock <jlock@vmware.com>
Copy link
Collaborator

@jku jku left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice

Comment on lines 43 to 45
- name: Find pip cache dir
id: pip-cache
run: echo "::set-output name=dir::$(pip cache dir)"
run: echo "dir=$(pip cache dir)" >> $GITHUB_OUTPUT
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: this step and the next one could be removed: setup-python now supports pip cache using with-arguments:

          cache: 'pip'
          cache-dependency-path: 'requirements*.txt'

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, nice. Thanks for pointing this out! I just pushed an extra patch to make this change.

Simplify the workflow by specifying caching though setup-python's
with-arguments.

Signed-off-by: Joshua Lock <jlock@vmware.com>
Comment on lines -24 to +27
toxenv: purepy38
- python-version: 3.8
toxenv: purepy311
- python-version: "3.11"
os: ubuntu-latest
toxenv: py38-no-gpg
- python-version: 3.8
toxenv: py311-no-gpg
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These changes result in the name of the 'check' changing and therefore breaking our branch protection policy.

Copy link
Member

@lukpueh lukpueh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@lukpueh
Copy link
Member

lukpueh commented Nov 21, 2022

These changes result in the name of the 'check' changing and therefore breaking our branch protection policy.

Confirm that the jobs pass under their new names. Will update settings.

@lukpueh lukpueh merged commit d0d8984 into secure-systems-lab:master Nov 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

GitHub workflow updates (action pinning)
3 participants