Commit Graph

34 Commits

Author SHA1 Message Date
dependabot[bot]
2963fd8b09
Bump actions/setup-python from 3 to 4 (#3746)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-09 11:58:10 +01:00
Naveen
e0c04fa0d3
Set permissions for GitHub actions (#3698)
* chore: Set permissions for GitHub actions

 Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

* Leave comment close to code

Co-authored-by: Bruno Alla <browniebroke@users.noreply.github.com>
2022-05-07 13:49:24 +01:00
dependabot[bot]
4a55787920
Bump stefanzweifel/git-auto-commit-action from 4.14.0 to 4.14.1 (#3677)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.14.0 to 4.14.1.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.14.0...v4.14.1)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-13 10:03:22 +01:00
dependabot[bot]
39adcd5115
Bump stefanzweifel/git-auto-commit-action from 4.13.1 to 4.14.0 (#3641)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-27 14:32:36 +01:00
dependabot[bot]
3eaeb83760
Bump actions/checkout from 2 to 3 (#3619)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Alla <alla.brunoo@gmail.com>
2022-03-02 09:17:47 +00:00
dependabot[bot]
318c018276
Bump actions/setup-python from 2 to 3 (#3617)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-01 15:25:18 +00:00
dependabot[bot]
b2686f3fe2
Bump stefanzweifel/git-auto-commit-action from 4.13.0 to 4.13.1 (#3532)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.13.0 to 4.13.1.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.13.0...v4.13.1)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-14 07:53:05 +00:00
dependabot[bot]
b3fb4f9a0f
Bump stefanzweifel/git-auto-commit-action from 4.12.0 to 4.13.0 (#3527)
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.12.0 to 4.13.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.12.0...v4.13.0)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-01-11 07:59:50 +00:00
Bruno Alla
4a63cecebc Disable a few workflows on forks 2021-12-06 11:50:50 +00:00
Bruno Alla
6542067138 Auto-format YAML in the .github folder 2021-11-19 22:06:56 +00:00
Bruno Alla
b0dbee3c17 Quote Python versions 2021-11-19 21:52:04 +00:00
Bruno Alla
f77906d135 Reference official GH actions by major version only 2021-11-04 14:55:32 +00:00
dependabot[bot]
78bf26c503
Bump stefanzweifel/git-auto-commit-action from 4.11.0 to 4.12.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.11.0 to 4.12.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.11.0...v4.12.0)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-13 05:03:48 +00:00
Fábio C. Barrionuevo da Luz
f0ab9ad2bd
Merge pull request #3171 from pydanny/dependabot/github_actions/stefanzweifel/git-auto-commit-action-4.11.0
Bump stefanzweifel/git-auto-commit-action from 4.10.0 to 4.11.0
2021-05-15 15:50:07 -03:00
dependabot[bot]
05ac73b7b9
Bump actions/setup-python from 2 to 2.2.2
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 2.2.2.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v2.2.2)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 05:12:25 +00:00
dependabot[bot]
f75de19e26
Bump stefanzweifel/git-auto-commit-action from 4.10.0 to 4.11.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 4.10.0 to 4.11.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.10.0...v4.11.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 05:11:28 +00:00
dependabot[bot]
43e3eff627
Bump stefanzweifel/git-auto-commit-action from v4.9.2 to v4.10.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.9.2 to v4.10.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.9.2...48d37c1ffbe4639e16d47fef924857386bc4a44a)

Signed-off-by: dependabot[bot] <support@github.com>
2021-04-13 05:53:38 +00:00
Bruno Alla
9e7320ea1b Merge branch 'master' into fix_upgrade_py39
# Conflicts:
#	README.rst
#	{{cookiecutter.project_slug}}/.gitlab-ci.yml
#	{{cookiecutter.project_slug}}/compose/local/django/Dockerfile
#	{{cookiecutter.project_slug}}/compose/production/django/Dockerfile
2021-04-08 18:43:54 +01:00
dependabot[bot]
b593c98844
Bump stefanzweifel/git-auto-commit-action from v4.9.1 to v4.9.2
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.9.1 to v4.9.2.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.9.1...be7095c202abcf573b09f20541e0ee2f6a3a9d9b)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-05 05:53:28 +00:00
dependabot[bot]
d396264efa
Bump stefanzweifel/git-auto-commit-action from v4.9.0 to v4.9.1
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.9.0 to v4.9.1.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.9.0...296e083b4c312cf3438feb21957a85fa9677f61d)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-24 07:19:28 +00:00
dependabot[bot]
4434df4d7b
Bump stefanzweifel/git-auto-commit-action from v4.8.0 to v4.9.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.8.0 to v4.9.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.8.0...268ec0c24022281e267b095789643cf0db356bc6)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-22 06:43:11 +00:00
areski
a1d551d067 Update from Python3.8 to Python3.9 2021-01-26 16:13:27 +01:00
dependabot[bot]
20fb67cc0b
Bump stefanzweifel/git-auto-commit-action from v4.7.2 to v4.8.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.7.2 to v4.8.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.7.2...75802d269e7721b5146d08f6063ba3097c55ad2b)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-16 06:14:37 +00:00
dependabot[bot]
2b3cd51789
Bump stefanzweifel/git-auto-commit-action from v4.6.0 to v4.7.2
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.6.0 to v4.7.2.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.6.0...bbd291750d2526367d915d5197485331dc2d8dc7)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-26 07:10:28 +00:00
Bruno Alla
7223ab5065 Pin official GH actions to the major digit 2020-10-15 12:58:21 +01:00
dependabot[bot]
2b5b5a8fb6
Bump stefanzweifel/git-auto-commit-action from v4.5.1 to v4.6.0
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from v4.5.1 to v4.6.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/v4.5.1...5c9bfe7477fd67ca1ffc9fed4a69fb7a6a46dcfe)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-12 06:52:07 +00:00
dependabot[bot]
f98211ae4c
Bump actions/setup-python from v2.1.2 to v2.1.3
Bumps [actions/setup-python](https://github.com/actions/setup-python) from v2.1.2 to v2.1.3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2.1.2...c181ffa198a1248f902bc2f7965d2f9a36c2d7f6)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-01 06:24:35 +00:00
Bruno Alla
7ef9f919e2
Update update-contributors.yml 2020-09-11 10:56:03 +01:00
dependabot[bot]
684218a908
Update actions/setup-python requirement to v2.1.2
Updates the requirements on [actions/setup-python](https://github.com/actions/setup-python) to permit the latest version.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](24156c231c)

Signed-off-by: dependabot[bot] <support@github.com>
2020-09-09 12:25:44 +00:00
Bruno Alla
8a5eae8f87 Remove feature branch used for testing 2020-08-27 10:33:47 +02:00
Bruno Alla
673997a389 Some small cleanups 2020-08-10 18:13:42 +01:00
Bruno Alla
9344038479 Update workflow to commit updated file 2020-08-10 18:09:03 +01:00
Bruno Alla
bd381ea0bf Update the Github workflow 2020-08-10 18:06:50 +01:00
Bruno Alla
5ba525ad09 Automatically update list of contributors 2020-08-10 18:06:49 +01:00