diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 8f3d616..0aa1356 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@v5 with: python-version: ${{ matrix.python-version }} @@ -82,7 +82,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@v5 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/manual-publish.yml b/.github/workflows/manual-publish.yml index 4d68691..f307e8e 100644 --- a/.github/workflows/manual-publish.yml +++ b/.github/workflows/manual-publish.yml @@ -19,14 +19,14 @@ jobs: steps: - uses: actions/checkout@v4 - - uses: actions/setup-python@v4 + - uses: actions/setup-python@v5 with: python-version: 3.8 - name: Install poetry uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 - - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.0.0 + - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0 name: 'Get PyPI token' with: aws_assume_role: ${{ vars.AWS_ROLE_ARN }} @@ -46,7 +46,7 @@ jobs: actions: read id-token: write contents: write - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 with: base64-subjects: "${{ needs.build-publish.outputs.package-hashes }}" upload-assets: ${{ !inputs.dry_run }} diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 721fce9..335a144 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -16,29 +16,25 @@ jobs: upload-tag-name: ${{ steps.release.outputs.tag_name }} package-hashes: ${{ steps.build.outputs.package-hashes}} steps: - - uses: google-github-actions/release-please-action@v3 + - uses: googleapis/release-please-action@v4 id: release - with: - command: manifest - token: ${{secrets.GITHUB_TOKEN}} - default-branch: main - uses: actions/checkout@v4 - if: ${{ steps.release.outputs.releases_created }} + if: ${{ steps.release.outputs.releases_created == 'true' }} with: fetch-depth: 0 # If you only need the current version keep this. - - uses: actions/setup-python@v4 - if: ${{ steps.release.outputs.releases_created }} + - uses: actions/setup-python@v5 + if: ${{ steps.release.outputs.releases_created == 'true' }} with: python-version: 3.8 - name: Install poetry - if: ${{ steps.release.outputs.releases_created }} + if: ${{ steps.release.outputs.releases_created == 'true' }} uses: abatilo/actions-poetry@7b6d33e44b4f08d7021a1dee3c044e9c253d6439 - - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.0.0 - if: ${{ steps.release.outputs.releases_created }} + - uses: launchdarkly/gh-actions/actions/release-secrets@release-secrets-v1.2.0 + if: ${{ steps.release.outputs.releases_created == 'true' }} name: 'Get PyPI token' with: aws_assume_role: ${{ vars.AWS_ROLE_ARN }} @@ -46,25 +42,25 @@ jobs: - uses: ./.github/actions/build id: build - if: ${{ steps.release.outputs.releases_created }} + if: ${{ steps.release.outputs.releases_created == 'true' }} - uses: ./.github/actions/build-docs - if: ${{ steps.release.outputs.releases_created }} + if: ${{ steps.release.outputs.releases_created == 'true' }} - uses: ./.github/actions/publish - if: ${{ steps.release.outputs.releases_created }} + if: ${{ steps.release.outputs.releases_created == 'true' }} with: token: ${{env.PYPI_AUTH_TOKEN}} dry_run: false release-provenance: needs: [ 'release-package' ] - if: ${{ needs.release-package.outputs.release-created }} + if: ${{ needs.release-package.outputs.release-created == 'true' }} permissions: actions: read id-token: write contents: write - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 with: base64-subjects: "${{ needs.release-package.outputs.package-hashes }}" upload-assets: true