Bump github/codeql-action from 3 to 4 #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

dependabot wants to merge 166 commits into main from dependabot/github_actions/github/codeql-action-4

.github/FUNDING.yml

-Original file line number
+Diff line change
@@ -0,0 +1,3 @@
+    github: rsnodgrass
+    patreon: rsnodgrass
+    custom: ['https://buymeacoffee.com/DYks67r','https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=WREP29UDAMB6G']

.github/dependabot.yml → .github/dependabot.yaml

-Original file line number
+Diff line change
@@ -1,8 +1,14 @@
     version: 2
     updates:
     - package-ecosystem: pip
       directory: "/"
       schedule:
         interval: weekly
         time: "13:00"
       open-pull-requests-limit: 10
+    - package-ecosystem: "github-actions"
+      directory: "/"
+      schedule:
+        interval: "weekly"

.github/workflows/bandit.yml

-Original file line number
+Diff line change
@@ -0,0 +1,33 @@
+    # see https://github.com/shundor/python-bandit-scan
+    # see https://github.com/mdegis/bandit-action
+    name: Bandit
+    on:
+      push:
+        branches: [ "main" ]
+      pull_request:
+        # branches below must be a subset of the branches above
+        branches: [ "main" ]
+      schedule:
+        - cron: '22 4 * * 6'
+    jobs:
+      bandit:
+        permissions:
+          contents: read          # for actions/checkout to fetch code
+          security-events: write  # for github/codeql-action/upload-sarif to upload SARIF results
+          actions: read           # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+        runs-on: ubuntu-latest
+        steps:
+          - uses: actions/checkout@v4
+          - name: Bandit Scan
+    #        uses: shundor/bandit-action@v1
+            uses: mdegis/bandit-action@v1.1
+            with:
+              # Github token of the repository (automatically created by Github)
+              GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # needed to get PR info
+              # exit with 0, even with results found
+              exit_zero: true # optional, default is DEFAULT

.github/workflows/black.yml.disabled

-Original file line number
+Diff line change
@@ -1,10 +1,36 @@
-    name: Lint
+    name: Lint Python
-    on: [push, pull_request]
+    on:
+      pull_request:
+      push:
+        branches:
+          - main
     jobs:
       lint:
         runs-on: ubuntu-latest
+        permissions:
+          # Give the default GITHUB_TOKEN write permission to commit and push the changed files back to the repository.
+          contents: write
         steps:
-          - uses: actions/checkout@v2
-          - uses: psf/black@stable
+          - uses: actions/checkout@v4
+            with:
+              ref: ${{ github.head_ref }}
+          - name: Set up Python
+            uses: actions/setup-python@v5
+            with:
+              python-version: 3.11
+          - name: Install Flake8
+            run: pip install flake8
+          - name: Lint code
+            run: flake8 .
+          # FIXME: see https://github.com/stefanzweifel/git-auto-commit-action
+          - uses: stefanzweifel/git-auto-commit-action@v5
+            with:
+              commit_message: Apply flake8 changes

.github/workflows/ci.yml.disabled

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -15,16 +15,15 @@ jobs:
  
              -"3.12"

        steps:

          - name: Checkout repo

            uses: actions/checkout@v3

            uses: actions/checkout@v4

          - name: Setup Python

            uses: actions/setup-python@v4

            uses: actions/setup-python@v5

            with:

              python-version: ${{ matrix.python-version }}

          - name: Install dependencies

            run: |

              pip install -r requirements.txt

    #      - name: Run unit tests

    #        run: python -m unittest

      mypy-test:

        name: mypy test

        runs-on: ubuntu-latest

    @@ -34,12 +33,12 @@ jobs:
  
          - name: Checkout repo

            uses: actions/checkout@v3

          - name: Setup Python

            uses: actions/setup-python@v4

            uses: actions/setup-python@v5

            with:

              python-version: ${{ env.python-version }}

          - name: Install dependencies

            run: |

              pip install -r requirements.txt

              pip install mypy

    #      - name: Run mypy test

    #        run: mypy -p pymcintosh

    #        run: mypy -p pyavcontrol

.github/workflows/codeql.yml

-Original file line number
+Diff line change
@@ -0,0 +1,84 @@
+    # For most projects, this workflow file will not need changing; you simply need
+    # to commit it to your repository.
+    #
+    # You may wish to alter this file to override the set of languages analyzed,
+    # or to provide custom queries or build logic.
+    #
+    # ******** NOTE ********
+    # We have attempted to detect the languages in your repository. Please check
+    # the `language` matrix defined below to confirm you have the correct set of
+    # supported CodeQL languages.
+    #
+    name: "CodeQL"
+    on:
+      push:
+        branches: [ "main" ]
+      pull_request:
+        branches: [ "main" ]
+      schedule:
+        - cron: '23 7 * * 3'
+    jobs:
+      analyze:
+        name: Analyze
+        # Runner size impacts CodeQL analysis time. To learn more, please see:
+        #   - https://gh.io/recommended-hardware-resources-for-running-codeql
+        #   - https://gh.io/supported-runners-and-hardware-resources
+        #   - https://gh.io/using-larger-runners
+        # Consider using larger runners for possible analysis time improvements.
+        runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+        timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
+        permissions:
+          # required for all workflows
+          security-events: write
+          # only required for workflows in private repositories
+          actions: read
+          contents: read
+        strategy:
+          fail-fast: false
+          matrix:
+            language: [ 'python' ]
+            # CodeQL supports [ 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift' ]
+            # Use only 'java-kotlin' to analyze code written in Java, Kotlin or both
+            # Use only 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
+            # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
+        steps:
+        - name: Checkout repository
+          uses: actions/checkout@v4
+        # Initializes the CodeQL tools for scanning.
+        - name: Initialize CodeQL
+          uses: github/codeql-action/init@v4
+          with:
+            languages: ${{ matrix.language }}
+            # If you wish to specify custom queries, you can do so here or in a config file.
+            # By default, queries listed here will override any specified in a config file.
+            # Prefix the list here with "+" to use these queries and those in the config file.
+            # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
+            # queries: security-extended,security-and-quality
+        # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
+        # If this step fails, then you should remove it and run the build manually (see below)
+        - name: Autobuild
+          uses: github/codeql-action/autobuild@v4
+        # ℹ️ Command-line programs to run using the OS shell.
+        # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
+        #   If the Autobuild fails above, remove it and uncomment the following three lines.
+        #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
+        # - run: |
+        #     echo "Run, Build Application using script"
+        #     ./location_of_script_within_repo/buildscript.sh
+        - name: Perform CodeQL Analysis
+          uses: github/codeql-action/analyze@v4
+          with:
+            category: "/language:${{matrix.language}}"

.github/workflows/docs.yml

-Original file line number
+Diff line change
@@ -0,0 +1,28 @@
+    name: documentation
+    on: [push, pull_request, workflow_dispatch]
+    permissions:
+      contents: write
+    jobs:
+      docs:
+        runs-on: ubuntu-latest
+        steps:
+          - uses: actions/checkout@v4
+          - uses: actions/setup-python@v5
+          - name: Install dependencies
+            run: |
+              pip install sphinx sphinx_rtd_theme myst_parser
+          - name: Sphinx build
+            working-directory: ./docs
+            run: |
+              make html
+          - name: Deploy to GitHub Pages
+            uses: peaceiris/actions-gh-pages@v4
+            if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+            with:
+              publish_branch: gh-pages
+              github_token: ${{ secrets.GITHUB_TOKEN }}
+              publish_dir: docs/build/
+              force_orphan: true

.github/workflows/ha-config-check.yml

-Original file line number
+Diff line change
@@ -0,0 +1,19 @@
+    name: Home Assistant CI
+    jobs:
+      home-assistant:
+        name: "Home Assistant Core ${{ matrix.version }} Configuration Check"
+        needs: [yamllint]
+        runs-on: ubuntu-latest
+        strategy:
+          matrix:
+            version: ["beta"]
+        steps:
+          - name: ⤵️ Check out configuration from GitHub
+            uses: actions/checkout@v4
+          - name: 🚀 Run Home Assistant Configuration Check
+            uses: frenck/action-home-assistant@v1.4
+            with:
+              path: "."
+              secrets: ./secrets.fake.yaml
+              version: "${{ matrix.version }}"

.github/workflows/pypi-publish.yml

-Original file line number
+Diff line change
@@ -0,0 +1,23 @@
+    # see https://github.com/marketplace/actions/publish-python-poetry-package
+    name: Upload Release to PyPi
+    on:
+      release:
+        types: [published]
+    permissions:
+      contents: read
+    jobs:
+      deploy:
+        runs-on: ubuntu-latest
+        steps:
+        - uses: actions/checkout@v4
+        - name: Build and publish to pypi
+          uses: JRubics/poetry-publish@v2.0
+          with:
+            pypi_token: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/pytest.yml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -15,22 +15,26 @@ jobs:
  
        runs-on: ubuntu-latest

        steps:

        - uses: actions/checkout@v3

        - uses: actions/checkout@v4

        - name: Set up Python 3.12

          uses: actions/setup-python@v3

          uses: actions/setup-python@v5

          with:

            python-version: "3.12"

        - uses: actions/cache@v3

        - uses: actions/cache@v4

          id: cache

          with:

            path: ~/.cache/pip

            key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.*') }}

            restore-keys: | 

            restore-keys: |

              ${{ runner.os }}-pip-

        - name: Install dependencies

          run: |

            python -m pip install --upgrade pip

            pip install -r requirements.txt        

            pip install -r requirements.txt

        - name: Run pytest

          run: | 

          run: |

            pytest

.github/workflows/python-package.yml

-Original file line number
+Diff line change
@@ -0,0 +1,41 @@
+    # This workflow will install Python dependencies, run tests and lint with a variety of Python versions
+    # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python
+    name: Test Multiple Python Versions
+    on:
+      push:
+        branches: [ "main" ]
+      pull_request:
+        branches: [ "main" ]
+    jobs:
+      build:
+        runs-on: ubuntu-latest
+        strategy:
+          fail-fast: false
+          matrix:
+            python-version: ["3.10", "3.11", "3.12", "3.13"]
+        steps:
+        - uses: actions/checkout@v4
+        - name: Set up Python ${{ matrix.python-version }}
+          uses: actions/setup-python@v5
+          with:
+            python-version: ${{ matrix.python-version }}
+        - name: Install dependencies
+          run: |
+            python -m pip install --upgrade pip
+            python -m pip install flake8 pytest
+            if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+            if [ -f test-requirements.txt ]; then pip install -r test-requirements.txt; fi
+        - name: Lint with flake8
+          run: |
+            # stop the build if there are Python syntax errors or undefined names
+            flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
+            # exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
+            flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
+        - name: Test with pytest
+          run: |
+            pytest

.github/workflows/release.yml

This file was deleted.

.github/workflows/ruff.yml

-Original file line number
+Diff line change
@@ -0,0 +1,8 @@
+    name: Ruff
+    on: [push, pull_request]
+    jobs:
+      ruff:
+        runs-on: ubuntu-latest
+        steps:
+          - uses: actions/checkout@v4
+          - uses: chartboost/ruff-action@v1

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump github/codeql-action from 3 to 4 #13

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Bump github/codeql-action from 3 to 4 #13

Are you sure you want to change the base?

Uh oh!

Bump github/codeql-action from 3 to 4 #13

Uh oh!

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!

Uh oh!