Skip to content

Bump actions/setup-node from 6 to 7 #166

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump actions/setup-node from 6 to 7 #166

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,16 +26,16 @@

- name: Install aristaproto
working-directory: ./aristaproto
run: uv sync --locked

Check warning on line 29 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojbP1NBD9Gn59uX&open=AZ-9dojbP1NBD9Gn59uX&pullRequest=166

- name: Install aristaproto_compiler
working-directory: ./aristaproto_compiler
run: uv sync --locked

Check warning on line 33 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojbP1NBD9Gn59uY&open=AZ-9dojbP1NBD9Gn59uY&pullRequest=166

- name: Compile test files
working-directory: ./aristaproto_compiler
shell: bash
run: uv run poe generate

Check warning on line 38 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ua&open=AZ-9dojcP1NBD9Gn59ua&pullRequest=166

Check warning on line 38 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojbP1NBD9Gn59uZ&open=AZ-9dojbP1NBD9Gn59uZ&pullRequest=166

- name: Move compiled files to aristaproto
shell: bash
Expand All @@ -43,79 +43,79 @@

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 46 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uc&open=AZ-9dojcP1NBD9Gn59uc&pullRequest=166

Check warning on line 46 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ub&open=AZ-9dojcP1NBD9Gn59ub&pullRequest=166


- name: Add Pydantic
working-directory: ./aristaproto
run: uv sync --locked --extra=pydantic

Check warning on line 51 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ud&open=AZ-9dojcP1NBD9Gn59ud&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 55 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uf&open=AZ-9dojcP1NBD9Gn59uf&pullRequest=166

Check warning on line 55 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ue&open=AZ-9dojcP1NBD9Gn59ue&pullRequest=166


- name: Add all but Pydantic
working-directory: ./aristaproto
run: uv sync --locked --extra=grpclib --extra=grpcio --extra=protobuf

Check warning on line 60 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ug&open=AZ-9dojcP1NBD9Gn59ug&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 64 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uh&open=AZ-9dojcP1NBD9Gn59uh&pullRequest=166

Check warning on line 64 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ui&open=AZ-9dojcP1NBD9Gn59ui&pullRequest=166


- name: Add grpclib
working-directory: ./aristaproto
run: uv sync --locked --extra=grpclib

Check warning on line 69 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uj&open=AZ-9dojcP1NBD9Gn59uj&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 73 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ul&open=AZ-9dojcP1NBD9Gn59ul&pullRequest=166

Check warning on line 73 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uk&open=AZ-9dojcP1NBD9Gn59uk&pullRequest=166


- name: Add all but grpclib
working-directory: ./aristaproto
run: uv sync --locked --extra=pydantic --extra=grpcio --extra=protobuf

Check warning on line 78 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59um&open=AZ-9dojcP1NBD9Gn59um&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 82 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59un&open=AZ-9dojcP1NBD9Gn59un&pullRequest=166

Check warning on line 82 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uo&open=AZ-9dojcP1NBD9Gn59uo&pullRequest=166


- name: Add grpcio
working-directory: ./aristaproto
run: uv sync --locked --extra=grpcio

Check warning on line 87 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59up&open=AZ-9dojcP1NBD9Gn59up&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 91 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uq&open=AZ-9dojcP1NBD9Gn59uq&pullRequest=166

Check warning on line 91 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ur&open=AZ-9dojcP1NBD9Gn59ur&pullRequest=166


- name: Add all but grpcio
working-directory: ./aristaproto
run: uv sync --locked --extra=pydantic --extra=grpclib --extra=protobuf

Check warning on line 96 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59us&open=AZ-9dojcP1NBD9Gn59us&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 100 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ut&open=AZ-9dojcP1NBD9Gn59ut&pullRequest=166

Check warning on line 100 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uu&open=AZ-9dojcP1NBD9Gn59uu&pullRequest=166


- name: Add protobuf
working-directory: ./aristaproto
run: uv sync --locked --extra=protobuf

Check warning on line 105 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uv&open=AZ-9dojcP1NBD9Gn59uv&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 109 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uw&open=AZ-9dojcP1NBD9Gn59uw&pullRequest=166

Check warning on line 109 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59ux&open=AZ-9dojcP1NBD9Gn59ux&pullRequest=166


- name: Add all but protobuf
working-directory: ./aristaproto
run: uv sync --locked --extra=pydantic --extra=grpclib --extra=grpcio

Check warning on line 114 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uy&open=AZ-9dojcP1NBD9Gn59uy&pullRequest=166

- name: Execute test suite
working-directory: ./aristaproto
run: uv run poe test

Check warning on line 118 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u0&open=AZ-9dojcP1NBD9Gn59u0&pullRequest=166

Check warning on line 118 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59uz&open=AZ-9dojcP1NBD9Gn59uz&pullRequest=166

tests:
name: ${{ matrix.os }} / ${{ matrix.python-version }}
Expand All @@ -136,21 +136,21 @@

- name: Install aristaproto
working-directory: ./aristaproto
run: uv sync --locked --all-extras --all-groups

Check warning on line 139 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u1&open=AZ-9dojcP1NBD9Gn59u1&pullRequest=166

- name: Install aristaproto_compiler
working-directory: ./aristaproto_compiler
run: uv sync --locked --all-extras --all-groups

Check warning on line 143 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u2&open=AZ-9dojcP1NBD9Gn59u2&pullRequest=166

- name: Test aristaproto_compiler
working-directory: ./aristaproto_compiler
shell: bash
run: uv run poe test

Check warning on line 148 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u3&open=AZ-9dojcP1NBD9Gn59u3&pullRequest=166

Check warning on line 148 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u4&open=AZ-9dojcP1NBD9Gn59u4&pullRequest=166

- name: Compile test files
working-directory: ./aristaproto_compiler
shell: bash
run: uv run poe generate

Check warning on line 153 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u6&open=AZ-9dojcP1NBD9Gn59u6&pullRequest=166

Check warning on line 153 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u5&open=AZ-9dojcP1NBD9Gn59u5&pullRequest=166

- name: Move compiled files to aristaproto
shell: bash
Expand All @@ -159,18 +159,18 @@
- name: Execute test suite
working-directory: ./aristaproto
shell: bash
run: uv run poe test

Check warning on line 162 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u8&open=AZ-9dojcP1NBD9Gn59u8&pullRequest=166

Check warning on line 162 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u7&open=AZ-9dojcP1NBD9Gn59u7&pullRequest=166

# Run conformance test on all Ubuntu and MacOS versions
- name: Install Node.js
if: matrix.os == 'Ubuntu' || matrix.os == 'MacOS'
uses: actions/setup-node@v6
uses: actions/setup-node@v7
with:
node-version: 24

- name: Install conformance runner
if: matrix.os == 'Ubuntu' || matrix.os == 'MacOS'
run: npm install -g protobuf-conformance@33.1.0

Check warning on line 173 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u9&open=AZ-9dojcP1NBD9Gn59u9&pullRequest=166

- name: Create test script
if: matrix.os == 'Ubuntu' || matrix.os == 'MacOS'
Expand All @@ -185,4 +185,4 @@
if: matrix.os == 'Ubuntu' || matrix.os == 'MacOS'
working-directory: ./aristaproto
run: |
uv run conformance_test_runner --failure_list tests/conformance/failing_tests.txt ./script.sh

Check warning on line 188 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--no-build" can lead to the execution of setup scripts. Make sure it is safe here. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u-&open=AZ-9dojcP1NBD9Gn59u-&pullRequest=166

Check warning on line 188 in .github/workflows/ci.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive. 


See more on https://sonarcloud.io/project/issues?id=aristanetworks_python-aristaproto&issues=AZ-9dojcP1NBD9Gn59u_&open=AZ-9dojcP1NBD9Gn59u_&pullRequest=166
Loading