Skip to content

Update GitHub Actions workflow to replace retiring macos-14 runner #1118

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mhucka wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update GitHub Actions workflow to replace retiring macos-14 runner #1118

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.

name: ci

Check warning on line 15 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:15: overly broad permissions: default permissions used due to no permissions: block
on:
push:
branches:
Expand All @@ -23,7 +23,7 @@
branches:
- main
jobs:
build_dist:

Check warning on line 26 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:26: overly broad permissions: default permissions used due to no permissions: block
runs-on: ${{ matrix.os_dist.os }}
strategy:
fail-fast: false
Expand Down Expand Up @@ -67,17 +67,17 @@
# {os: ubuntu-latest, dist: cp310-musllinux_x86_64},
# {os: ubuntu-latest, dist: cp310-musllinux_i686},

{os: macos-14, dist: cp310-macosx_x86_64, macosarch: x86_64},
{os: macos-14, dist: cp311-macosx_x86_64, macosarch: x86_64},
{os: macos-14, dist: cp312-macosx_x86_64, macosarch: x86_64},
{os: macos-14, dist: cp313-macosx_x86_64, macosarch: x86_64},
{os: macos-14, dist: cp314-macosx_x86_64, macosarch: x86_64},
{os: macos-15, dist: cp310-macosx_x86_64, macosarch: x86_64},
{os: macos-15, dist: cp311-macosx_x86_64, macosarch: x86_64},
{os: macos-15, dist: cp312-macosx_x86_64, macosarch: x86_64},
{os: macos-15, dist: cp313-macosx_x86_64, macosarch: x86_64},
{os: macos-15, dist: cp314-macosx_x86_64, macosarch: x86_64},

{os: macos-14, dist: cp310-macosx_arm64, macosarch: arm64},
{os: macos-14, dist: cp311-macosx_arm64, macosarch: arm64},
{os: macos-14, dist: cp312-macosx_arm64, macosarch: arm64},
{os: macos-14, dist: cp313-macosx_arm64, macosarch: arm64},
{os: macos-14, dist: cp314-macosx_arm64, macosarch: arm64},
{os: macos-15, dist: cp310-macosx_arm64, macosarch: arm64},
{os: macos-15, dist: cp311-macosx_arm64, macosarch: arm64},
{os: macos-15, dist: cp312-macosx_arm64, macosarch: arm64},
{os: macos-15, dist: cp313-macosx_arm64, macosarch: arm64},
{os: macos-15, dist: cp314-macosx_arm64, macosarch: arm64},

# pypy OSX builds disabled because numpy isn't prebuilt and fails to build.
#
Expand Down Expand Up @@ -122,7 +122,7 @@
with:
name: "dist-stim-${{ matrix.os_dist.os }}-${{ matrix.os_dist.dist }}-${{ matrix.os_dist.macosarch }}"
path: dist/*
build_sdist:

Check warning on line 125 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:125: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
Expand Down Expand Up @@ -165,7 +165,7 @@
with:
name: "dist-stim-sdist"
path: dist/*.tar.gz
check_sdist_installs_stim:

Check warning on line 168 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:168: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
Expand All @@ -173,7 +173,7 @@
- run: python -m pip install pybind11~=2.11.1 cibuildwheel~=3.3.1 setuptools wheel
- run: python setup.py sdist
- run: pip install dist/*.tar.gz
check_sdist_installs_sinter:

Check warning on line 176 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:176: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
Expand All @@ -182,7 +182,7 @@
- run: cd glue/sample && python setup.py sdist
- run: pip install glue/sample/dist/*
- run: python -c "import sinter"
check_sdist_installs_stimflow:

Check warning on line 185 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:185: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
Expand All @@ -191,7 +191,7 @@
- run: cd glue/stimflow && python setup.py sdist
- run: pip install glue/stimflow/dist/*
- run: python -c "import stimflow"
merge_upload_artifacts:

Check warning on line 194 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:194: overly broad permissions: default permissions used due to no permissions: block
needs: ["build_dist", "build_sdist"]
runs-on: ubuntu-24.04
steps:
Expand All @@ -200,7 +200,7 @@
with:
name: dist-stim
pattern: dist-stim-*
upload_dev_release_to_pypi:

Check warning on line 203 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:203: overly broad permissions: default permissions used due to no permissions: block
needs: ["merge_upload_artifacts"]
if: github.ref == 'refs/heads/main'
runs-on: ubuntu-24.04
Expand All @@ -221,34 +221,34 @@
with:
name: dist-stimflow
path: dist-stimflow
- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1

Check failure on line 224 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check failure on line 224 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

ci.yml:224: action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check notice on line 224 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

ci.yml:224: prefer trusted publishing for authentication: this step
with:
user: __token__
packages_dir: dist-stim
password: ${{ secrets.pypi_token_stim }}
- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1

Check failure on line 229 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check failure on line 229 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

ci.yml:229: action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check notice on line 229 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

ci.yml:229: prefer trusted publishing for authentication: this step
with:
user: __token__
packages_dir: dist-stimcirq
password: ${{ secrets.pypi_token_stimcirq }}
- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1

Check failure on line 234 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check failure on line 234 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

ci.yml:234: action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check notice on line 234 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

ci.yml:234: prefer trusted publishing for authentication: this step
with:
user: __token__
packages_dir: dist-sinter
password: ${{ secrets.pypi_token_sinter }}
- uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # release/v1

Check failure on line 239 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/known-vulnerable-actions 

action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check failure on line 239 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

known-vulnerable-actions 

ci.yml:239: action has a known vulnerability: GHSA-vxmw-7h4f-hqxh

Check notice on line 239 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

ci.yml:239: prefer trusted publishing for authentication: this step
with:
user: __token__
packages_dir: dist-stimflow
password: ${{ secrets.pypi_token_stimflow }}
run_main:

Check warning on line 244 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:244: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1
- run: cmake .
- run: make stim -j 2
- run: echo -e "H 0 \n CNOT 0 1 \n M 0 1" | out/stim --sample
build_bazel:

Check warning on line 251 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ci.yml:251: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1
Expand Down
Loading