Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release v0.15.0 #227

Merged
merged 12 commits into from
Jan 17, 2025
Merged

Release v0.15.0 #227

merged 12 commits into from
Jan 17, 2025

Conversation

jtherrmann
Copy link
Contributor

@jtherrmann jtherrmann commented Jan 17, 2025

TODO:

  • Test action and options before merging

dependabot bot and others added 12 commits December 23, 2024 12:58
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.86.1 to 3.88.0.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml)
- [Commits](trufflesecurity/trufflehog@v3.86.1...v3.88.0)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Update Actions example versions to v0.14.0
…esecurity/trufflehog-3.88.0

Bump trufflesecurity/trufflehog from 3.86.1 to 3.88.0
Bumps [ASFHyP3/actions](https://github.com/asfhyp3/actions) from 0.13.2 to 0.14.0.
- [Release notes](https://github.com/asfhyp3/actions/releases)
- [Changelog](https://github.com/ASFHyP3/actions/blob/develop/CHANGELOG.md)
- [Commits](v0.13.2...v0.14.0)

---
updated-dependencies:
- dependency-name: ASFHyP3/actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.88.0 to 3.88.2.
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml)
- [Commits](trufflesecurity/trufflehog@v3.88.0...v3.88.2)

---
updated-dependencies:
- dependency-name: trufflesecurity/trufflehog
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…3/actions-0.14.0

Bump ASFHyP3/actions from 0.13.2 to 0.14.0
…esecurity/trufflehog-3.88.2

Bump trufflesecurity/trufflehog from 3.88.0 to 3.88.2
@jtherrmann jtherrmann added the minor Bump the minor version number of this project label Jan 17, 2025
@jtherrmann jtherrmann requested a review from a team January 17, 2025 17:22
@@ -11,4 +11,4 @@
- develop
jobs:
call-changelog-check-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.13.2
uses: ASFHyP3/actions/.github/workflows/reusable-changelog-check.yml@v0.14.0

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@@ -12,4 +12,4 @@

jobs:
call-labeled-pr-check-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.13.2
uses: ASFHyP3/actions/.github/workflows/reusable-labeled-pr-check.yml@v0.14.0

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
@@ -10,7 +10,7 @@
fetch-depth: 0

- name: Secret Scanning
uses: trufflesecurity/trufflehog@v3.86.1
uses: trufflesecurity/trufflehog@v3.88.2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'reusable-secrets-analysis.yml' step
Uses Step
uses 'trufflesecurity/trufflehog' with ref 'v3.88.2', not a pinned commit hash
@@ -4,4 +4,4 @@

jobs:
call-secrets-analysis-workflow:
uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.13.2
uses: ASFHyP3/actions/.github/workflows/reusable-secrets-analysis.yml@v0.14.0

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions Job or Workflow does not set permissions
Comment on lines +9 to +28
## [0.15.0]

### Removed
- The [`reusable-mypy`](.github/workflows/reusable-mypy.yml) workflow no longer passes any optional arguments to the `mypy` command. This makes it easier to run `mypy` locally, because the command is just:

```
mypy .
```

If you want to preserve the removed options for your project, you must now add them to `[tool.mypy]` in `pyproject.toml`:

```toml
install_types = true
non_interactive = true
pretty = true
ignore_missing_imports = true
```

Note that we discourage enabling `ignore_missing_imports` as a global option (see <https://github.com/ASFHyP3/actions/issues/225>). You can always find our currently recommended configuration options in the [README](https://github.com/ASFHyP3/actions#reusable-mypyyml).

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice entry!

@jtherrmann jtherrmann merged commit 2f842a6 into main Jan 17, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
minor Bump the minor version number of this project
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants