Skip to content

Update eifinger/setup-uv action to v10 #63

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update eifinger/setup-uv action to v10 #63

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/workflows/build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,15 +18,15 @@
runs-on: ubuntu-latest
name: Build main TTFs
steps:
- uses: actions/checkout@v4

Check failure on line 21 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yaml:21: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Set up latest harfbuzz
uses: notofonts/install-harfbuzz-action@main

Check failure on line 23 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yaml:23: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Set up Python
uses: actions/setup-python@v5

Check failure on line 25 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yaml:25: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
python-version: "3.11"
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1

Check failure on line 29 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yaml:29: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
enable-cache: true
- name: Install Python deps
Expand All @@ -36,7 +36,7 @@
- name: Do first-run script if necessary
run: make .init.stamp
if: github.repository != 'notofonts/noto-project-template'
- uses: stefanzweifel/git-auto-commit-action@v5

Check failure on line 39 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

build.yaml:39: unpinned action reference: action is not pinned to a hash (required by blanket policy)
name: First-run setup
if: github.repository != 'notofonts/noto-project-template'
with:
Expand Down Expand Up @@ -69,7 +69,7 @@
run: mkdir -p out/fontspector out/badges
continue-on-error: true
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1
with:
enable-cache: true
- name: Install Python deps
Expand Down Expand Up @@ -108,7 +108,7 @@
with:
python-version: "3.11"
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1
with:
enable-cache: true
- name: Install Python deps
Expand Down Expand Up @@ -142,7 +142,7 @@
with:
python-version: "3.11"
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1
with:
enable-cache: true
- name: Install xml2/xslt/cairo dev
Expand Down Expand Up @@ -198,7 +198,7 @@
with:
python-version: "3.11"
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1
with:
enable-cache: true
- name: Install xml2/xslt/cairo dev
Expand Down Expand Up @@ -265,7 +265,7 @@
name: fontbuild
path: fonts
- name: Install the latest version of uv
uses: eifinger/setup-uv@v1
uses: eifinger/setup-uv@v10.0.1
with:
enable-cache: true
- name: Install Python deps
Expand All @@ -274,15 +274,15 @@
touch venv/touchfile
- name: Check for appropriate tag
id: check_tag
run: . venv/bin/activate; python3 scripts/check-tag.py ${{ github.ref_name }}

Check failure on line 277 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 277 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

build.yaml:277: code injection via template expansion: may expand into attacker-controllable code
- name: Set release body from tag
run: |
echo 'RELEASE_NOTES<<EOF' >> "$GITHUB_ENV"
git show -s --format=%B ${{ github.ref_name }} | tail -n +4 >> "$GITHUB_ENV"

Check failure on line 281 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 281 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

build.yaml:281: code injection via template expansion: may expand into attacker-controllable code
echo 'EOF' >> "$GITHUB_ENV"
- name: Create release
id: release
uses: actions/create-release@latest

Check warning on line 285 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

archived-uses 

build.yaml:285: action or reusable workflow from archived repository: repository is archived
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand All @@ -291,19 +291,19 @@
body: ${{ env.RELEASE_NOTES }}
- name: Tell user about release
run: |
echo '::warning file=sources/config.yaml,title=A new release ${{ github.ref_name }} has been created'

Check failure on line 294 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 294 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

build.yaml:294: code injection via template expansion: may expand into attacker-controllable code
git show -s --format=%B ${{ github.ref_name }} | tail -n +4

Check failure on line 295 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 295 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

build.yaml:295: code injection via template expansion: may expand into attacker-controllable code
echo "$RELEASE_NOTES"
- name: Find a DESCRIPTION.en_us.html
run: cp documentation/${{ steps.check_tag.outputs.family}}.html fonts/DESCRIPTION.en_us.html

Check failure on line 298 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code
continue-on-error: true
- name: Find an ARTICLE.en_us.html
run: cp documentation/${{ steps.check_tag.outputs.family}}.article.html fonts/ARTICLE.en_us.html

Check failure on line 301 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code
continue-on-error: true
- name: Create release bundle
run: cd fonts; cp ../*.txt . ; zip -x requirements.txt -r ../${{ github.ref_name }}.zip ${{ steps.check_tag.outputs.family}}/ *.txt DESCRIPTION.en_us.html ARTICLE.en_us.html

Check failure on line 304 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 304 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code

Check failure on line 304 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

template-injection 

build.yaml:304: code injection via template expansion: may expand into attacker-controllable code
- name: Upload binaries to release
uses: svenstaro/upload-release-action@v2

Check notice on line 306 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

superfluous-actions 

build.yaml:306: action functionality is already included by the runner: use `gh release create` and `gh release upload` in a script step
id: upload
with:
repo_token: ${{ secrets.GITHUB_TOKEN }}
Expand Down Expand Up @@ -356,7 +356,7 @@
- name: Test fetch
run: cd googlefonts; git fetch googlefonts main ; cd ..
- name: Run the packager
run: gftools-packager `echo ${{needs.create_release.outputs.family}} | tr 'A-Z' 'a-z'` googlefonts --latest-release -p --show-tracebacks

Check failure on line 359 in .github/workflows/build.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/template-injection 

code injection via template expansion: may expand into attacker-controllable code
env:
GH_TOKEN: ${{ secrets.USER_GITHUB_TOKEN }}
GITHUB_TOKEN: ${{ secrets.USER_GITHUB_TOKEN }}
Loading