Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 #133

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2024

Bumps sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0.

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.0.0

Added

  • inputs now allows recursive globbing with ** (#106)

Removed

  • The following settings have been removed: fulcio-url, rekor-url, ctfe, rekor-root-pubkey (#140)
  • The following output settings have been removed: signature, certificate, bundle (#146)

Changed

  • inputs is now parsed according to POSIX shell lexing rules, improving the action's consistency when used with filenames containing whitespace or other significant characters (#104)

  • inputs is now optional if release-signing-artifacts is true and the action's event is a release event. In this case, the action takes no explicit inputs, but signs the source archives already attached to the associated release (#110)

  • The default suffix has changed from .sigstore to .sigstore.json, per Sigstore's client specification (#140)

  • release-signing-artifacts now defaults to true (#142)

Fixed

  • The release-signing-artifacts setting no longer causes a hard error when used under the incorrect event (#103)

  • Various deprecations present in sigstore-python's 2.x series have been resolved (#140)

  • This workflow now supports CI runners that use PEP 668 to constrain global package prefixes (#145)

... (truncated)

Changelog

Sourced from sigstore/gh-action-sigstore-python's changelog.

[3.0.0]

Added

  • inputs now allows recursive globbing with ** (#106)

Removed

  • The following settings have been removed: fulcio-url, rekor-url, ctfe, rekor-root-pubkey (#140)
  • The following output settings have been removed: signature, certificate, bundle (#146)

Changed

  • inputs is now parsed according to POSIX shell lexing rules, improving the action's consistency when used with filenames containing whitespace or other significant characters (#104)

  • inputs is now optional if release-signing-artifacts is true and the action's event is a release event. In this case, the action takes no explicit inputs, but signs the source archives already attached to the associated release (#110)

  • The default suffix has changed from .sigstore to .sigstore.json, per Sigstore's client specification (#140)

  • release-signing-artifacts now defaults to true (#142)

Fixed

  • The release-signing-artifacts setting no longer causes a hard error when used under the incorrect event (#103)

  • Various deprecations present in sigstore-python's 2.x series have been resolved (#140)

  • This workflow now supports CI runners that use PEP 668 to constrain global package prefixes (#145)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 2.1.1 to 3.0.0.
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@v2.1.1...v3.0.0)

---
updated-dependencies:
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from nfx as a code owner July 15, 2024 19:27
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 15, 2024
@nfx nfx merged commit 3d32bb3 into main Jul 15, 2024
8 of 9 checks passed
@nfx nfx deleted the dependabot/github_actions/sigstore/gh-action-sigstore-python-3.0.0 branch July 15, 2024 19:51
nfx added a commit that referenced this pull request Jul 16, 2024
* Added `DBFSPath` as `os.PathLike` implementation ([#131](#131)). The open-source library has been updated with a new class `DBFSPath`, an implementation of `os.PathLike` for Databricks File System (DBFS) paths. This new class extends the existing `WorkspacePath` support and provides pathlib-like functionality for DBFS paths, including methods for creating directories, renaming and deleting files and directories, and reading and writing files. The addition of `DBFSPath` includes type-hinting for improved code linting and is integrated in the test suite with new and updated tests for path-like objects. The behavior of the `exists` and `unlink` methods have been updated for `WorkspacePath` to improve performance and raise appropriate errors.
* Fixed `.as_uri()` and `.absolute()` implementations for `WorkspacePath` ([#127](#127)). In this release, the `WorkspacePath` class in the `paths.py` module has been updated with several improvements to the `.as_uri()` and `.absolute()` methods. These methods now utilize PathLib internals, providing better cross-version compatibility. The `.as_uri()` method now uses an f-string for concatenation and returns the UTF-8 encoded string representation of the `WorkspacePath` object via a new `__bytes__()` dunder method. Additionally, the `.absolute()` method has been implemented for the trivial (no-op) case and now supports returning the absolute path of files or directories in Databricks Workspace. Furthermore, the `glob()` and `rglob()` methods have been enhanced to support case-sensitive pattern matching based on a new `case_sensitive` parameter. To ensure the integrity of these changes, two new test cases, `test_as_uri()` and `test_absolute()`, have been added, thoroughly testing the functionality of these methods.
* Fixed `WorkspacePath` support for python 3.11 ([#121](#121)). The `WorkspacePath` class in our open-source library has been updated to improve compatibility with Python 3.11. The `.expanduser()` and `.glob()` methods have been modified to address internal changes in Python 3.11. The `is_dir()` and `is_file()` methods now include a `follow_symlinks` parameter, although it is not currently used. A new method, `_scandir()`, has been added for compatibility with Python 3.11. The `expanduser()` method has also been updated to expand `~` (but not `~user`) constructs. Additionally, a new method `is_notebook()` has been introduced to check if the path points to a notebook in Databricks Workspace. These changes aim to ensure that the library functions smoothly with the latest version of Python and provides additional functionality for users working with Databricks Workspace.
* Properly verify versions of python ([#118](#118)). In this release, we have made significant updates to the pyproject.toml file to enhance project dependency and development environment management. We have added several new packages to the `dependencies` section to expand the library's functionality and compatibility. Additionally, we have removed the `python` field, as it is no longer necessary. We have also updated the `path` field to specify the location of the virtual environment, which can improve integration with popular development tools such as Visual Studio Code and PyCharm. These changes are intended to streamline the development process and make it easier to manage dependencies and set up the development environment.
* Type annotations on path-related unit tests ([#128](#128)). In this open-source library update, type annotations have been added to path-related unit tests to enhance code clarity and maintainability. The tests encompass various scenarios, including verifying if a path exists, creating, removing, and checking directories, and testing file attributes such as distinguishing directories, notebooks, and regular files. The additions also cover functionality for opening and manipulating files in different modes like read binary, write binary, read text, and write text. Furthermore, tests for checking file permissions, handling errors, and globbing (pattern-based file path matching) have been incorporated. The tests interact with a WorkspaceClient mock object, simulating file system interactions. This enhancement bolsters the library's reliability and assists developers in creating robust, well-documented code when working with file system paths.
* Updated `WorkspacePath` to support Python 3.12 ([#122](#122)). In this release, the `WorkspacePath` implementation has been updated to ensure compatibility with Python 3.12, in addition to Python 3.10 and 3.11. The class was modified to replace most of the internal implementation and add extensive tests for public interfaces, ensuring that the superclass implementations are not used unless they are known to be safe. This change is in response to the significant changes in the superclass implementations between Python 3.11 and 3.12, which were found to be incompatible with each other. The `WorkspacePath` class now includes several new methods and tests to ensure that it functions seamlessly with different versions of Python. These changes include testing for initialization, equality, hash, comparison, path components, and various path manipulations. This update enhances the library's adaptability and ensures it functions correctly with different versions of Python. Classifiers have also been updated to include support for Python 3.12.
* `WorkspacePath` fixes for the `.resolve()` implementation ([#129](#129)). The `.resolve()` method for `WorkspacePath` has been updated to improve its handling of relative paths and the `strict` argument. Previously, relative paths were not properly validated and would be returned as-is. Now, relative paths will cause the method to fail. The `strict` argument is now checked, and if set to `True` and the path does not exist, a `FileNotFoundError` will be raised. The method `.absolute()` is used to obtain the absolute path of the file or directory in Databricks Workspace and is used in the implementation of `.resolve()`. A new test, `test_resolve()`, has been added to verify these changes, covering scenarios where the path is absolute, the path exists, the path does not exist, and the path is relative. In the case of relative paths, a `NotImplementedError` is raised, as `.resolve()` is not supported for them.
* `WorkspacePath`: Fix the .rename() and .replace() implementations to return the target path ([#130](#130)). The `.rename()` and `.replace()` methods of the `WorkspacePath` class have been updated to return the target path as part of the public API, with `.rename()` no longer accepting the `overwrite` keyword argument and always failing if the target path already exists. A new private method, `._rename()`, has been added to include the `overwrite` argument and is used by both `.rename()` and `.replace()`. This update is a preparatory step for factoring out common code to support DBFS paths. The tests have been updated accordingly, combining and adding functions to test the new and updated methods. The `.unlink()` method's behavior remains unchanged. Please note that the exact error raised when `.rename()` fails due to an existing target path is yet to be defined.

Dependency updates:

 * Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 ([#133](#133)).
@nfx nfx mentioned this pull request Jul 16, 2024
nfx added a commit that referenced this pull request Jul 16, 2024
* Added `DBFSPath` as `os.PathLike` implementation
([#131](#131)). The
open-source library has been updated with a new class `DBFSPath`, an
implementation of `os.PathLike` for Databricks File System (DBFS) paths.
This new class extends the existing `WorkspacePath` support and provides
pathlib-like functionality for DBFS paths, including methods for
creating directories, renaming and deleting files and directories, and
reading and writing files. The addition of `DBFSPath` includes
type-hinting for improved code linting and is integrated in the test
suite with new and updated tests for path-like objects. The behavior of
the `exists` and `unlink` methods have been updated for `WorkspacePath`
to improve performance and raise appropriate errors.
* Fixed `.as_uri()` and `.absolute()` implementations for
`WorkspacePath`
([#127](#127)). In
this release, the `WorkspacePath` class in the `paths.py` module has
been updated with several improvements to the `.as_uri()` and
`.absolute()` methods. These methods now utilize PathLib internals,
providing better cross-version compatibility. The `.as_uri()` method now
uses an f-string for concatenation and returns the UTF-8 encoded string
representation of the `WorkspacePath` object via a new `__bytes__()`
dunder method. Additionally, the `.absolute()` method has been
implemented for the trivial (no-op) case and now supports returning the
absolute path of files or directories in Databricks Workspace.
Furthermore, the `glob()` and `rglob()` methods have been enhanced to
support case-sensitive pattern matching based on a new `case_sensitive`
parameter. To ensure the integrity of these changes, two new test cases,
`test_as_uri()` and `test_absolute()`, have been added, thoroughly
testing the functionality of these methods.
* Fixed `WorkspacePath` support for python 3.11
([#121](#121)). The
`WorkspacePath` class in our open-source library has been updated to
improve compatibility with Python 3.11. The `.expanduser()` and
`.glob()` methods have been modified to address internal changes in
Python 3.11. The `is_dir()` and `is_file()` methods now include a
`follow_symlinks` parameter, although it is not currently used. A new
method, `_scandir()`, has been added for compatibility with Python 3.11.
The `expanduser()` method has also been updated to expand `~` (but not
`~user`) constructs. Additionally, a new method `is_notebook()` has been
introduced to check if the path points to a notebook in Databricks
Workspace. These changes aim to ensure that the library functions
smoothly with the latest version of Python and provides additional
functionality for users working with Databricks Workspace.
* Properly verify versions of python
([#118](#118)). In
this release, we have made significant updates to the pyproject.toml
file to enhance project dependency and development environment
management. We have added several new packages to the `dependencies`
section to expand the library's functionality and compatibility.
Additionally, we have removed the `python` field, as it is no longer
necessary. We have also updated the `path` field to specify the location
of the virtual environment, which can improve integration with popular
development tools such as Visual Studio Code and PyCharm. These changes
are intended to streamline the development process and make it easier to
manage dependencies and set up the development environment.
* Type annotations on path-related unit tests
([#128](#128)). In
this open-source library update, type annotations have been added to
path-related unit tests to enhance code clarity and maintainability. The
tests encompass various scenarios, including verifying if a path exists,
creating, removing, and checking directories, and testing file
attributes such as distinguishing directories, notebooks, and regular
files. The additions also cover functionality for opening and
manipulating files in different modes like read binary, write binary,
read text, and write text. Furthermore, tests for checking file
permissions, handling errors, and globbing (pattern-based file path
matching) have been incorporated. The tests interact with a
WorkspaceClient mock object, simulating file system interactions. This
enhancement bolsters the library's reliability and assists developers in
creating robust, well-documented code when working with file system
paths.
* Updated `WorkspacePath` to support Python 3.12
([#122](#122)). In
this release, the `WorkspacePath` implementation has been updated to
ensure compatibility with Python 3.12, in addition to Python 3.10 and
3.11. The class was modified to replace most of the internal
implementation and add extensive tests for public interfaces, ensuring
that the superclass implementations are not used unless they are known
to be safe. This change is in response to the significant changes in the
superclass implementations between Python 3.11 and 3.12, which were
found to be incompatible with each other. The `WorkspacePath` class now
includes several new methods and tests to ensure that it functions
seamlessly with different versions of Python. These changes include
testing for initialization, equality, hash, comparison, path components,
and various path manipulations. This update enhances the library's
adaptability and ensures it functions correctly with different versions
of Python. Classifiers have also been updated to include support for
Python 3.12.
* `WorkspacePath` fixes for the `.resolve()` implementation
([#129](#129)). The
`.resolve()` method for `WorkspacePath` has been updated to improve its
handling of relative paths and the `strict` argument. Previously,
relative paths were not properly validated and would be returned as-is.
Now, relative paths will cause the method to fail. The `strict` argument
is now checked, and if set to `True` and the path does not exist, a
`FileNotFoundError` will be raised. The method `.absolute()` is used to
obtain the absolute path of the file or directory in Databricks
Workspace and is used in the implementation of `.resolve()`. A new test,
`test_resolve()`, has been added to verify these changes, covering
scenarios where the path is absolute, the path exists, the path does not
exist, and the path is relative. In the case of relative paths, a
`NotImplementedError` is raised, as `.resolve()` is not supported for
them.
* `WorkspacePath`: Fix the .rename() and .replace() implementations to
return the target path
([#130](#130)). The
`.rename()` and `.replace()` methods of the `WorkspacePath` class have
been updated to return the target path as part of the public API, with
`.rename()` no longer accepting the `overwrite` keyword argument and
always failing if the target path already exists. A new private method,
`._rename()`, has been added to include the `overwrite` argument and is
used by both `.rename()` and `.replace()`. This update is a preparatory
step for factoring out common code to support DBFS paths. The tests have
been updated accordingly, combining and adding functions to test the new
and updated methods. The `.unlink()` method's behavior remains
unchanged. Please note that the exact error raised when `.rename()`
fails due to an existing target path is yet to be defined.

Dependency updates:

* Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0
([#133](#133)).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant