Commit Graph

50 Commits

Author SHA1 Message Date
Klaas van Schelven
5cf4591166 Merge branch 'main' into django-5-2 2025-08-28 21:38:24 +02:00
Klaas van Schelven
05fcfbe359 Document thought on bandit on .template files
See #175
2025-07-30 22:38:48 +02:00
Klaas van Schelven
89db6d2899 Configure bandit for 'spoils' usage
i.e. B380: No os.path.join misuse.

See https://github.com/bugsink/spoils

rather than think-carefully-and-explain-with-nosec, just switch to
safe_join: this saves future readers the pain of validating whether
all assumptions are (still) correct at a (small) performance cost.

See #175
2025-07-30 14:07:24 +02:00
Klaas van Schelven
6266f15aa1 Configure Bandit in the CI
See #175
2025-07-30 12:14:24 +02:00
Klaas van Schelven
0d59f96b41 GitHub CI: document hardcoded list of branches 2025-07-30 11:42:40 +02:00
Klaas van Schelven
2488d81595 Enable manual invocation via "Run workflow" button in the Actions UI 2025-07-29 16:11:41 +02:00
Klaas van Schelven
87f5a5887e CI workflow: run for 1.*.x branches too
working in the assumptions that:

* 1.*.x is not valid, explicitly listing is needed
* In GitHub Actions, workflow evaluation happens from the main (or default) branch of the repo, not from the branch being pushed to or pulled from.
2025-07-29 16:09:21 +02:00
Klaas van Schelven
5d8d73097c copilot instructions: fixes on createsuperuser
For some reason the env-vars were missed; pulling them closer hopefully fixes
this (and makes more sense generally)

the `|| true` pattern was removed: it just hides problems.

also: different username (email) to stick closer to what we do elsewhere.
2025-07-29 14:15:17 +02:00
Klaas van Schelven
735f5ceaa0 Copilot instructions; another attempt
after having seen copilot in action on #171
2025-07-29 14:05:18 +02:00
Klaas van Schelven
d4b4c2fb52 Copilot env: check out event-samples outside the workspace
* avoids annoying accidental checkins
* actually matches the SAMPLES_DIR env var
2025-07-29 14:02:53 +02:00
Klaas van Schelven
00a686d103 Tell contributors (and copilot) about the pre-commit hooks 2025-07-29 12:52:59 +02:00
Klaas van Schelven
0fdfa3354d GitHub copilot instructions: WIP 2025-07-28 23:19:43 +02:00
Klaas van Schelven
530fc7f166 Copilot instructions and workflow; a first attempt 2025-07-28 20:10:49 +02:00
Klaas van Schelven
06c12ef50a CI: when running a Django-shell to print the installed apps, surpress the 'auto imported' warning
30 objects imported automatically (use -v 2 for details).
2025-04-26 11:27:18 +02:00
Klaas van Schelven
9157631efa Drop Python 3.9 support
This probably means we'll move to Django 5.2 no sooner than October 2025.

See https://docs.djangoproject.com/en/5.2/faq/install/
2025-04-26 11:12:04 +02:00
Klaas van Schelven
4b396446b0 Fix github workflows to include sentry_sdk_extensions in tests
it's the other non-Django-app with tests that we have now
2025-04-26 10:43:35 +02:00
Klaas van Schelven
57aea4af47 github workflow: link to dead end in flake8 discussion 2025-03-31 16:29:36 +02:00
Klaas van Schelven
77c485e92a More thoroughly remove 'PRs are disabled' notice
see #27

this was somehow missed on d30c3ad704
2025-03-28 09:17:15 +01:00
Klaas van Schelven
4d26252357 GitHub workflow: don't 'fail fast', i.e. run the rest of the matrix when part fails 2025-03-13 09:16:54 +01:00
Klaas van Schelven
651ed1d8c5 .github flake8: harmonize with tox.ini
tox.ini change in 348c2dc80f
2025-03-13 09:07:22 +01:00
Klaas van Schelven
3e5d6370ea Postgres on GitHub: attempt w/ explict username/pw combo (WIP, attempt 2) 2025-03-05 12:20:55 +01:00
Klaas van Schelven
1911ab4eb8 Postgres on GitHub: attempt w/ explict username/pw combo
attempting to work around 'failed: fe_sendauth: no password supplied'
2025-03-05 12:20:55 +01:00
Klaas van Schelven
f25d693804 Add postgres to GitHub CI
A first step towards (experimental) postgres support, see #21
2025-03-05 12:20:51 +01:00
Klaas van Schelven
b211d961ce Document github workflow choice 2025-03-05 11:16:54 +01:00
Klaas van Schelven
d5a6f03a2e Add mysql to GitHub CI 2025-03-05 10:36:54 +01:00
Klaas van Schelven
b5d9fbb8eb Dependabot: no npm pull requests 2025-01-30 15:04:56 +01:00
Klaas van Schelven
630f0c029b Dependabot: pin django-tailwind to 3.6
https://github.com/timonweb/django-tailwind/issues/210
2025-01-30 14:50:59 +01:00
Klaas van Schelven
8ad4a2b522 Dependabot 'ignore django' rule: final try, using explicit version-range to ignore 2025-01-30 14:42:41 +01:00
Klaas van Schelven
4d0310c65b Dependabot 'ignore django' rule: give up, try via requirements.txt itself 2025-01-30 14:36:01 +01:00
Klaas van Schelven
7012dc07f1 Dependabot 'ignore django' rule: try lowercase
Uppercase 'Django' did not work
2025-01-30 14:21:03 +01:00
Klaas van Schelven
c9e33f93a4 Dependabot; initial setup 2025-01-30 14:12:59 +01:00
Klaas van Schelven
d30c3ad704 Drop 'no contributions' rule; add CLA instead
CLA generated with https://contributoragreements.org/u2s/2r8vzl3ap4

Fixes #27
2025-01-24 16:12:07 +01:00
Klaas van Schelven
34d6c92cf5 PR 'no': clarify what _is_ possible 2024-10-23 08:31:50 +02:00
Klaas van Schelven
2506e9e65f Add pull_requests_template.md to discourage contributions via PRs 2024-10-14 20:03:47 +02:00
Klaas van Schelven
a929c9d574 Python support: drop 3.8, introduce 3.13
why: simply motivated by Python's own EOL-cycle; i.e. I'm not
actively going to use any 3.13 or 3.9 features now.

how: updating test-matrixes; but no actual local testing done yet
2024-10-09 09:16:17 +02:00
Klaas van Schelven
50b21d2844 Run with -Wall 2024-09-19 17:00:29 +02:00
Klaas van Schelven
0400f09d55 .github workflow tests: run those using the packaged wheel 2024-09-19 16:57:09 +02:00
Klaas van Schelven
80a3ae0077 Get rid of 'max-parallel in github workflows
I can't imagine this really helps much in terms of costs
(only 1 was postponed), but running only 4 in parallel doubles the
tests' execution time
2024-09-13 14:31:57 +02:00
Klaas van Schelven
e3be6146a2 Restore a comment in github workflows 2024-09-13 14:29:49 +02:00
Klaas van Schelven
8ae2510a2a makemigrations --check as part of tests
I briefly considered making this a separate job, but I can't really justify that;
the 'separate' job would have to do all kinds of similar setup (pip install), and
to what end really? Broken is broken, I just want a notification. I'll see quickly
enought that it's about makemigrations
2024-09-13 14:28:30 +02:00
Klaas van Schelven
985854230d Reorganize github actions into single workflow
Easier to click on the right thing and see everything on one page
2024-09-13 11:55:38 +02:00
Klaas van Schelven
55aa917436 Integration test using the extracted event-samples 2024-09-13 11:46:25 +02:00
Klaas van Schelven
3cd3ef6b12 Add development requirements to github workflow 2024-08-29 10:07:31 +02:00
Klaas van Schelven
ebd0a612d9 Flake8 and f-strings whitespace (E201, E202) 2024-08-21 10:01:38 +02:00
Klaas van Schelven
6caa57e0b0 Github workflow typo 2024-08-21 09:39:56 +02:00
Klaas van Schelven
6021af9ff3 Fix github workflow names 2024-08-21 09:39:27 +02:00
Klaas van Schelven
dd968d7d43 Flake8 Github Workflow 2024-08-21 09:37:01 +02:00
Klaas van Schelven
5968e88c67 Bump github setup-python to v5
might solve the following:

> The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-python@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
2024-08-21 08:53:20 +02:00
Klaas van Schelven
ee8ccdaeb4 Github Actions: try with strings to avoid '3.1' error 2024-08-21 08:41:29 +02:00
Klaas van Schelven
98a4973de0 Create Action tests.yml
Using Github's template for Django; adopting Python versions with currently supported ones
2024-08-21 08:39:23 +02:00