diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 64b50a6..fa37231 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -13,14 +13,14 @@ jobs: autofix: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 # If we need to update the lockfile (--check returns an error), # make sure to upgrade everything. - run: uv lock --check || uv lock --upgrade - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - run: ruff check --fix-only . - run: ruff format . @@ -40,4 +40,4 @@ jobs: - uses: mhils/add-pr-ref-in-changelog@main - - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 + - uses: autofix-ci/action@7a166d7532b277f34e16238930461bf77f9d7ed8 diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index ab23513..9ea43fe 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -26,9 +26,9 @@ jobs: name: ${{ matrix.env }} runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 with: args: --only-group tox @@ -51,9 +51,9 @@ jobs: py: "3.12" runs-on: ${{ matrix.os }} steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 with: args: --only-group tox @@ -88,9 +88,9 @@ jobs: run: | apt-get update apt-get install --no-install-recommends -y git ca-certificates binutils build-essential - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - run: uv pip install . # pyinstaller 5.9 does not like pyproject.toml + editable installs. - if: runner.os == 'macOS' && github.repository == 'mitmproxy/mitmproxy' @@ -118,13 +118,13 @@ jobs: - if: runner.os == 'Windows' run: python -u release/build.py standalone-binaries - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: binaries.${{ matrix.platform }} path: release/dist build-wheel: - uses: mhils/workflows/.github/workflows/python-build.yml@af886cbabab992a8e7db75c6af3516af2b1f5a1c + uses: mhils/workflows/.github/workflows/python-build.yml@8fe88b311a66c441e01edfebe4cd90d8a47fa335 with: artifact: binaries.wheel @@ -136,15 +136,15 @@ jobs: startsWith(github.ref, 'refs/tags/') ) steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - run: uv pip install . # pyinstaller 5.9 does not like pyproject.toml + editable installs. - run: python -u release/build.py installbuilder-installer msix-installer env: CI_BUILD_KEY: ${{ secrets.CI_BUILD_KEY }} - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: binaries.windows-installer path: release/dist @@ -152,7 +152,7 @@ jobs: test-web-ui: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - uses: actions/setup-node@v6 with: node-version-file: .github/node-version.txt @@ -178,8 +178,8 @@ jobs: runs-on: ubuntu-latest needs: build-wheel steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: actions/download-artifact@v7 + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: actions/download-artifact@v8 with: name: binaries.wheel path: release/docker @@ -191,16 +191,16 @@ jobs: docs: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - run: | wget -q https://github.com/gohugoio/hugo/releases/download/v0.139.3/hugo_extended_0.139.3_linux-amd64.deb echo "3e58800d1fee57269208d07d104ae1a6ab886615344099f2dca0c6ad5279bc11 hugo_extended_0.139.3_linux-amd64.deb" | sha256sum -c sudo dpkg -i hugo*.deb - run: ./docs/build.py - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: docs path: docs/public @@ -209,7 +209,7 @@ jobs: env: DOCS_ARCHIVE: ${{ github.ref_name }} - if: startsWith(github.ref, 'refs/tags/') - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: docs-archive path: docs/public @@ -225,7 +225,7 @@ jobs: - build-wheel - build-windows-installer - docs - uses: mhils/workflows/.github/workflows/alls-green.yml@af886cbabab992a8e7db75c6af3516af2b1f5a1c + uses: mhils/workflows/.github/workflows/alls-green.yml@8fe88b311a66c441e01edfebe4cd90d8a47fa335 with: jobs: ${{ toJSON(needs) }} allowed-skips: build-windows-installer @@ -245,21 +245,21 @@ jobs: needs: check runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: actions/download-artifact@v7 + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: actions/download-artifact@v8 with: name: binaries.wheel path: release/docker - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 - - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v1.6.0 + - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v1.6.0 - name: Login to Docker Hub - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: username: mitmbot password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GitHub Container Registry - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -283,7 +283,7 @@ jobs: - name: Build and push id: push - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 + uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: release/docker platforms: linux/amd64,linux/arm64 @@ -292,7 +292,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} annotations: ${{ steps.meta.outputs.annotations }} - - uses: actions/attest-build-provenance@v3 + - uses: actions/attest-build-provenance@v4 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push.outputs.digest }} @@ -323,28 +323,28 @@ jobs: R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }} R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }} steps: - - uses: mhils/workflows/checkout@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/setup-uv@af886cbabab992a8e7db75c6af3516af2b1f5a1c - - uses: mhils/workflows/uv-sync@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 with: args: --only-group deploy - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: docs path: docs/public - if: startsWith(github.ref, 'refs/tags/') - uses: actions/download-artifact@v7 + uses: actions/download-artifact@v8 with: name: docs-archive path: docs/archive - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: pattern: binaries.* merge-multiple: true path: release/dist - id: provenance - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'release/dist/*' - run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0a24b40..475b67a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/setup-node@v6 with: node-version-file: .github/node-version.txt - - uses: mhils/workflows/setup-python@af886cbabab992a8e7db75c6af3516af2b1f5a1c + - uses: mhils/workflows/setup-python@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - run: ./release/release.py ${{ inputs.version }} ${{ inputs.skip-branch-status-check }} env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # this token works with the GraphQL API