ramp up all GH actions plugins PiperOrigin-RevId: 821598646
diff --git a/.github/workflows/build_test.yml b/.github/workflows/build_test.yml index dc5f845..8dfda22 100644 --- a/.github/workflows/build_test.yml +++ b/.github/workflows/build_test.yml
@@ -211,7 +211,7 @@ sudo apt install -y ${EXTRA_PACKAGES} - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -315,11 +315,13 @@ with: python-version: ${{ matrix.python_version }} + # TODO(eustas): use modern setuptools (split out testing) - name: Build / Test with Python if: ${{ matrix.build_system == 'python' }} run: | python -VV python -c "import sys; sys.exit('Invalid python version') if '.'.join(map(str,sys.version_info[0:2])) != '${{ matrix.python_version }}' else True" + pip install setuptools==51.3.3 python setup.py ${{ matrix.py_setuptools_cmd || 'test'}} build_test_py27: @@ -343,7 +345,7 @@ python2.7 -m pip install distutils-pytest==0.1 - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 0661268..4535e34 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml
@@ -40,11 +40,11 @@ egress-policy: audit - name: Checkout repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 with: languages: ${{ matrix.language }} # CodeQL is currently crashing on files with large lists: @@ -56,7 +56,7 @@ - if: matrix.language == 'cpp' name: Build CPP - uses: github/codeql-action/autobuild@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 - if: matrix.language == 'cpp' || matrix.language == 'java' name: Build Java @@ -66,7 +66,7 @@ - if: matrix.language == 'javascript' name: Build JS - uses: github/codeql-action/autobuild@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 - if: matrix.language == 'cpp' || matrix.language == 'python' name: Build Python @@ -74,7 +74,7 @@ python setup.py build_ext - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 with: category: "/language:${{matrix.language}}" ref: "${{ github.ref != 'master' && github.ref || '/refs/heads/master' }}"
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index ea834ec..3bb9462 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml
@@ -27,13 +27,13 @@ egress-policy: audit - name: Build Fuzzers - uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master + uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@3e6a7fd7bcd631647ab9beed1fe0897498e6af39 # 22.09.2025 with: oss-fuzz-project-name: 'brotli' dry-run: false - name: Run Fuzzers - uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master + uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@3e6a7fd7bcd631647ab9beed1fe0897498e6af39 # 22.09.2025 with: oss-fuzz-project-name: 'brotli' fuzz-seconds: 600
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 3e0cc80..ecbcb5f 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml
@@ -35,7 +35,7 @@ egress-policy: audit - name: Checkout repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install tools run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 40b9d94..06426c4 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml
@@ -69,7 +69,7 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -85,7 +85,7 @@ shell: 'powershell' run: | Invoke-WebRequest -Uri "https://github.com/microsoft/vcpkg/archive/refs/tags/${{ env.VCPKG_VERSION }}.zip" -OutFile "vcpkg.zip" - + - name: Bootstrap vcpkg if: steps.cache-vcpkg.outputs.cache-hit != 'true' shell: 'bash' @@ -138,7 +138,7 @@ - name: Upload binaries to release if: github.event_name == 'release' - uses: softprops/action-gh-release@62c96d0c4e8a889135c1f3a25910db8dbe0e85f7 # v0.1.15 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: files: brotli-${{matrix.triplet}}.zip @@ -156,7 +156,7 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -167,7 +167,7 @@ - name: Upload archive to release if: github.event_name == 'release' - uses: softprops/action-gh-release@62c96d0c4e8a889135c1f3a25910db8dbe0e85f7 # v0.1.15 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: files: testdata.txz @@ -186,7 +186,7 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 8aeddef..deea696 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml
@@ -42,7 +42,7 @@ egress-policy: audit - name: "Checkout code" - uses: actions/checkout@v4 # v3.1.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false @@ -77,6 +77,6 @@ # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 + uses: github/codeql-action/upload-sarif@17783bfb99b07f70fae080b654aed0c514057477 # v2.23.3 with: sarif_file: results.sarif
diff --git a/setup.py b/setup.py index ea7c675..d98a721 100644 --- a/setup.py +++ b/setup.py
@@ -158,7 +158,8 @@ "Development Status :: 4 - Beta", "Environment :: Console", "Intended Audience :: Developers", - "License :: OSI Approved :: MIT License", + # Deprecated, see https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details. + # "License :: OSI Approved :: MIT License", "Operating System :: MacOS :: MacOS X", "Operating System :: Microsoft :: Windows", "Operating System :: POSIX :: Linux",