ramp up all GH actions plugins PiperOrigin-RevId: 821550846
diff --git a/.github/workflows/build_test.yml b/.github/workflows/build_test.yml index d1cb80f..efb3c57 100644 --- a/.github/workflows/build_test.yml +++ b/.github/workflows/build_test.yml
@@ -201,7 +201,7 @@ sudo apt install -y ${EXTRA_PACKAGES} - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -305,11 +305,13 @@ with: python-version: ${{ matrix.python_version }} + # TODO(eustas): use modern setuptools (split out testing) - name: Build / Test with Python if: ${{ matrix.build_system == 'python' }} run: | python -VV python -c "import sys; sys.exit('Invalid python version') if '.'.join(map(str,sys.version_info[0:2])) != '${{ matrix.python_version }}' else True" + pip install setuptools==51.3.3 python setup.py ${{ matrix.py_setuptools_cmd || 'test'}} build_test_py27: @@ -328,7 +330,7 @@ python2.7 -m pip install distutils-pytest==0.1 - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 03da18b..bc21d99 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml
@@ -31,11 +31,11 @@ steps: - name: Checkout repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 with: languages: ${{ matrix.language }} # CodeQL is currently crashing on files with large lists: @@ -47,7 +47,7 @@ - if: matrix.language == 'cpp' name: Build CPP - uses: github/codeql-action/autobuild@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 - if: matrix.language == 'cpp' || matrix.language == 'java' name: Build Java @@ -57,7 +57,7 @@ - if: matrix.language == 'javascript' name: Build JS - uses: github/codeql-action/autobuild@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 - if: matrix.language == 'cpp' || matrix.language == 'python' name: Build Python @@ -65,7 +65,7 @@ python setup.py build_ext - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@43750fe4fc4f068f04f2215206e6f6a29c78c763 # v2.14.4 + uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5 with: category: "/language:${{matrix.language}}" ref: "${{ github.ref != 'master' && github.ref || '/refs/heads/master' }}"
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index ac0ace5..bf820a6 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml
@@ -17,12 +17,12 @@ runs-on: ubuntu-latest steps: - name: Build Fuzzers - uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master + uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@3e6a7fd7bcd631647ab9beed1fe0897498e6af39 # 22.09.2025 with: oss-fuzz-project-name: 'brotli' dry-run: false - name: Run Fuzzers - uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master + uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@3e6a7fd7bcd631647ab9beed1fe0897498e6af39 # 22.09.2025 with: oss-fuzz-project-name: 'brotli' fuzz-seconds: 600
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 74d7b07..4b6b135 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ steps: - name: Checkout repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install tools run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 29190b9..d836b25 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml
@@ -60,7 +60,7 @@ steps: - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -76,7 +76,7 @@ shell: 'powershell' run: | Invoke-WebRequest -Uri "https://github.com/microsoft/vcpkg/archive/refs/tags/${{ env.VCPKG_VERSION }}.zip" -OutFile "vcpkg.zip" - + - name: Bootstrap vcpkg if: steps.cache-vcpkg.outputs.cache-hit != 'true' shell: 'bash' @@ -126,7 +126,7 @@ - name: Upload binaries to release if: github.event_name == 'release' - uses: softprops/action-gh-release@62c96d0c4e8a889135c1f3a25910db8dbe0e85f7 # v0.1.15 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: files: brotli-${{matrix.triplet}}.zip @@ -139,7 +139,7 @@ steps: - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1 @@ -150,7 +150,7 @@ - name: Upload archive to release if: github.event_name == 'release' - uses: softprops/action-gh-release@62c96d0c4e8a889135c1f3a25910db8dbe0e85f7 # v0.1.15 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: files: testdata.txz @@ -164,7 +164,7 @@ steps: - name: Checkout the source - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 004fa4d..63c6491 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml
@@ -36,7 +36,7 @@ steps: - name: "Checkout code" - uses: actions/checkout@v4 # v3.1.0 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false @@ -71,6 +71,6 @@ # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 + uses: github/codeql-action/upload-sarif@17783bfb99b07f70fae080b654aed0c514057477 # v2.23.3 with: sarif_file: results.sarif
diff --git a/setup.py b/setup.py index 88ca7c2..c2aef49 100644 --- a/setup.py +++ b/setup.py
@@ -160,7 +160,8 @@ "Development Status :: 4 - Beta", "Environment :: Console", "Intended Audience :: Developers", - "License :: OSI Approved :: MIT License", + # Deprecated, see https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details. + # "License :: OSI Approved :: MIT License", "Operating System :: MacOS :: MacOS X", "Operating System :: Microsoft :: Windows", "Operating System :: POSIX :: Linux",