Update packages for current CVE issues

This commit is contained in:
2025-08-09 13:36:20 +01:00
parent d82817cad3
commit dd11c3c7b4
10 changed files with 439 additions and 11 deletions

33
.github/workflows/build-container.yaml vendored Normal file
View File

@@ -0,0 +1,33 @@
name: Build Container
"on":
push:
branches:
- main
tags:
- "[0-9]+.[0-9]+.[0-9]+"
jobs:
docker:
runs-on: ubuntu-latest
steps:
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to GHCR
uses: docker/login-action@v3
if: github.event_name != 'pull_request'
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
id: docker_build
uses: docker/build-push-action@v6
with:
push: true
platforms: linux/amd64,linux/arm64
tags: |
ghcr.io/${{ github.repository_owner }}/{{ github.repository }}:${{ github.ref_name }}
ghcr.io/${{ github.repository_owner }}/{{ github.repository }}:latest

30
.github/workflows/lint.yaml vendored Normal file
View File

@@ -0,0 +1,30 @@
name: Lint
'on':
push:
branches:
- main
pull_request:
branches:
- main
jobs:
lint:
runs-on: ubuntu-latest
strategy:
matrix:
python-version: ["3.12", "3.13"]
steps:
- uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}
- name: Install uv
uses: astral-sh/setup-uv@v3
with:
enable-cache: true
- name: Install dependencies
run: uv sync
- name: Lint with ruff
run: uv run ruff check

33
.github/workflows/release.yaml vendored Normal file
View File

@@ -0,0 +1,33 @@
---
name: Release
on:
push:
tags:
- "[0-9]+.[0-9]+.[0-9]+"
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
- name: Setup Python
uses: actions/setup-python@v5
with:
python-version: "3.12"
- name: Install uv
uses: astral-sh/setup-uv@v3
with:
enable-cache: true
- name: Build Release
run: uv build
- name: Release
uses: softprops/action-gh-release@v2
with:
name: "Version ${{ github.ref_name }}"
files: |
dist/*