Bump dill from 0.2.9 to 0.4.1 #267
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Caracara Code Quality | |
| on: | |
| push: | |
| paths: | |
| - '**.py' | |
| - '**.yml' | |
| branches: | |
| - main | |
| - 'ver_*' | |
| tags: | |
| - 'v*' | |
| pull_request: | |
| permissions: | |
| contents: read | |
| jobs: | |
| codequality: | |
| environment: code-quality | |
| timeout-minutes: 30 | |
| strategy: | |
| matrix: | |
| python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 | |
| with: | |
| egress-policy: audit | |
| disable-sudo-and-containers: true | |
| - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 | |
| - name: Install Poetry via pipx | |
| run: pipx install poetry==2.2.1 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| cache: 'poetry' | |
| - name: Install dependencies | |
| run: poetry install | |
| - name: Run unit tests | |
| run: poetry run py.test tests/unit_tests | |
| - name: Lint package source with flake8 | |
| if: success() || failure() | |
| run: | | |
| poetry run flake8 caracara/ --show-source --statistics | |
| poetry run flake8 examples/ --show-source --statistics | |
| poetry run flake8 tests/ --show-source --statistics | |
| - name: Lint package source with pylint | |
| if: success() || failure() | |
| run: | | |
| poetry run pylint caracara/ | |
| poetry run pylint examples/ | |
| poetry run pylint tests/ | |
| - name: Lint package docstrings and comments with pydocstyle | |
| if: success() || failure() | |
| run: | | |
| poetry run pydocstyle caracara/ | |
| poetry run pydocstyle examples/ | |
| - name: Lint imports with isort | |
| if: success() || failure() | |
| run: | | |
| poetry run isort -c caracara/ | |
| poetry run isort -c examples/ | |
| poetry run isort -c tests/ | |
| - name: Lint package with black | |
| if: success() || failure() | |
| run: | | |
| poetry run black -l 100 --check caracara/ | |
| poetry run black -l 100 --check examples/ | |
| poetry run black -l 100 --check tests/ | |
| - name: Analyse code for security issues with bandit | |
| if: success() || failure() | |
| run: | | |
| poetry run bandit -r caracara --configfile .bandit | |
| poetry run bandit -r examples --configfile examples/.bandit | |
| poetry run bandit -r tests --configfile tests/.bandit | |
| - name: Check for security vulnerabiltiies in the virtual environment | |
| if: success() || failure() | |
| run: | | |
| poetry run pip-audit |