141 Commits

Author SHA1 Message Date
David Lord
4cae5d8e41 Merge branch 'stable' 2026-03-08 16:21:50 -07:00
David Lord
a197702e2c update dev dependencies 2026-03-08 16:20:07 -07:00
David Lord
560c119e3d add zizmor to scan workflows 2026-03-08 16:05:00 -07:00
David Lord
663198d7b4 update dev dependencies 2026-02-03 10:22:19 -08:00
David Lord
eb58d862cc Merge branch 'stable' 2026-01-24 17:15:54 -08:00
David Lord
64dd0809c2 update dev dependencies 2026-01-24 17:14:20 -08:00
David Lord
97bddc1f61 update dev dependencies 2026-01-05 08:50:52 -08:00
David Lord
ad68a12645 drop experimental 3.13t test env 2025-11-28 11:05:52 -08:00
David Lord
2579ce9f18 Merge branch 'stable' 2025-11-17 10:05:51 -08:00
David Lord
607d1948b8 split free threading envs 2025-11-17 10:05:39 -08:00
David Lord
218880c7fd Merge branch 'stable' 2025-11-17 10:03:42 -08:00
David Lord
917000097f test py3.14 2025-11-17 10:02:53 -08:00
David Lord
96a01e420b Merge branch 'stable' 2025-11-17 09:45:56 -08:00
David Lord
da6d075dfd update dev dependencies 2025-11-17 09:43:40 -08:00
David Lord
330123258e Merge branch 'stable' 2025-08-19 14:09:56 -07:00
Grant Birkinbine
4dd52ca9c7 Update GitHub Actions workflow for artifact handling 2025-08-19 13:50:03 -07:00
David Lord
55c6255657 update dev dependencies 2025-08-19 13:41:24 -07:00
David Lord
e974128863 Merge branch 'stable' 2025-06-08 09:54:32 -07:00
David Lord
f04c5e6964 update dev dependencies 2025-06-08 09:52:11 -07:00
David Lord
adeea00707 remove slsa provenance
PyPI trusted publishing has its own attestation support now.
2025-06-08 09:43:05 -07:00
David Lord
52df9eed45 drop end of life python versions 2025-05-13 08:31:54 -07:00
David Lord
0109e496f6 use uv 2025-05-11 17:58:53 -07:00
David Lord
165af0a090 update dev dependencies 2025-03-29 14:44:59 -07:00
David Lord
959052fb8d use global contributing guide
Remove the per-project files so we don't have to
keep them in sync. GitHub's UI links to everything
except the contributing guide, so add a section
about that to the readme.

(cherry picked from commit 60a11a730e)
2025-01-05 09:09:33 -08:00
David Lord
70602a196a remove test pypi 2024-11-13 09:23:24 -08:00
David Lord
6748a09341 update dev dependencies 2024-11-13 08:48:10 -08:00
David Lord
39e7208366 update dev dependencies 2024-10-31 13:08:52 -07:00
David Lord
1d610e44b3 drop support for Python 3.8 2024-10-31 12:30:53 -07:00
David Lord
5e8cb74018 update test workflow trigger 2024-10-24 13:29:34 -07:00
David Lord
2778b7c23f Merge branch 'stable' 2024-10-24 13:28:57 -07:00
David Lord
96800fb673 update test workflow trigger 2024-10-24 13:28:46 -07:00
David Lord
8f2bc008ad update dev dependencies 2024-10-24 13:27:52 -07:00
David Lord
9b5549313e Merge branch '3.0.x' 2024-10-23 13:45:17 -07:00
David Lord
52ccd66735 use python 3.9 to test dev versions 2024-10-18 13:19:51 -07:00
David Lord
bca18041b0 Merge branch '3.0.x' 2024-10-18 10:03:09 -07:00
David Lord
b337d21058 update dev dependencies 2024-10-18 10:02:35 -07:00
David Lord
2fec0b206c set up pre-commit lite workflow
Committed via https://github.com/asottile/all-repos
2024-09-01 09:04:14 -07:00
David Lord
111e5bd312 set up pre-commit lite workflow
Committed via https://github.com/asottile/all-repos
2024-09-01 08:48:02 -07:00
David Lord
2d31dce826 remove dependabot 2024-08-23 16:33:40 -07:00
David Lord
29a94bd102 update dev dependencies 2024-08-23 16:33:27 -07:00
David Lord
9101439d7b test with python 3.13 2024-05-11 08:37:47 -07:00
David Lord
87d5f5b9a9 update project files (#5457)
* update pre-commit hook
* upgrade pip with venv
* update description and version
* show url in publish environment
* update versions
* update versions, separate typing job
* use dependabot grouped updates
  ignore upload/download-artifact until slsa updates
* use sphinx.ext.extlinks instead of sphinx-issues
* update dev dependencies
* update editorconfig
* update gitignore
* update .readthedocs.yaml
* license is txt, readme is md
* update pyproject.toml
  add typed classifier
  add pyright config
  simplify urls
* tox builds docs in place
* update min test py version
* add tox env to update all dev dependencies
* update issue and pr templates
* rename security docs page to not conflict with org policy file
* simplify matrix
2024-04-07 10:24:40 -07:00
David Lord
5fcc999b7d fix create release action 2024-01-18 11:57:22 -08:00
David Lord
da3a0ddfe2 fix slsa generator version 2024-01-18 11:53:19 -08:00
David Lord
5e059be1b3 update actions versions 2024-01-18 11:41:38 -08:00
David Lord
59fd6aa104 use pip-compile instead of pip-compile-multi 2023-11-15 12:44:20 -08:00
David Lord
560383fe14 update python version matrix
(cherry picked from commit 6ee5dcc0ec)
2023-11-15 12:19:59 -08:00
David Lord
8037487165 Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10 (#5248) 2023-09-05 14:02:38 -07:00
David Lord
e8076d9114 Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.9.0 (#5247) 2023-09-05 14:02:28 -07:00
dependabot[bot]
24c6508d39 Bump pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10
Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.8.8 to 1.8.10.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](f8c70e705f...b7f401de30)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-01 16:30:35 +00:00