5 Commits

Author SHA1 Message Date
pre-commit-ci[bot]
20dc211564 [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
2025-12-01 19:58:29 +00:00
pre-commit-ci[bot]
0fb03ef8b5 [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.6.3 → v0.14.7](https://github.com/astral-sh/ruff-pre-commit/compare/v0.6.3...v0.14.7)
- [github.com/pre-commit/pre-commit-hooks: v4.6.0 → v6.0.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.6.0...v6.0.0)
2025-12-01 19:58:20 +00:00
David Lord
1e22ee143c remove slsa provenance (#300) 2025-06-14 13:13:45 -07:00
David Lord
38a7511f87 remove slsa provenance
PyPI and trusted publishing has built-in attestation support now.
2025-06-14 13:09:14 -07:00
Kartikey Porwal
40f8645ec9 Fix class attribute dump_filename in ProfilerDebugPanel (#294)
We need `dump_filename` in `ProfilerDebugPanel` always initialised to avoid `AttributeError`

Fix #286
2025-01-06 11:15:32 -08:00
4 changed files with 9 additions and 27 deletions

View File

@@ -6,8 +6,6 @@ on:
jobs:
build:
runs-on: ubuntu-latest
outputs:
hash: ${{ steps.hash.outputs.hash }}
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
@@ -19,27 +17,11 @@ jobs:
# Use the commit date instead of the current date during the build.
- run: echo "SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
- run: python -m build
# Generate hashes used for provenance.
- name: generate hash
id: hash
run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
with:
path: ./dist
provenance:
needs: [build]
permissions:
actions: read
id-token: write
contents: write
# Can't pin with hash due to how this workflow works.
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
with:
base64-subjects: ${{ needs.build.outputs.hash }}
create-release:
# Upload the sdist, wheels, and provenance to a GitHub release. They remain
# available as build artifacts for a while as well.
needs: [provenance]
needs: [build]
runs-on: ubuntu-latest
permissions:
contents: write
@@ -48,12 +30,11 @@ jobs:
- name: create release
run: >
gh release create --draft --repo ${{ github.repository }}
${{ github.ref_name }}
*.intoto.jsonl/* artifact/*
${{ github.ref_name }} artifact/*
env:
GH_TOKEN: ${{ github.token }}
publish-pypi:
needs: [provenance]
needs: [build]
# Wait for approval before attempting to upload to PyPI. This allows reviewing the
# files in the draft release.
environment:

View File

@@ -2,12 +2,12 @@ ci:
autoupdate_schedule: monthly
repos:
- repo: https://github.com/astral-sh/ruff-pre-commit
rev: v0.6.3
rev: v0.14.7
hooks:
- id: ruff
- id: ruff-format
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v4.6.0
rev: v6.0.0
hooks:
- id: check-merge-conflict
exclude: "(codemirror|jquery)"

View File

@@ -95,8 +95,7 @@ class DebugToolbarExtension:
if not app.config.get("SECRET_KEY"):
raise RuntimeError(
"The Flask-DebugToolbar requires the 'SECRET_KEY' config "
"var to be set"
"The Flask-DebugToolbar requires the 'SECRET_KEY' config var to be set"
)
self._validate_and_configure_toolbar_routes_host(app)
@@ -326,7 +325,7 @@ class DebugToolbarExtension:
after = ""
else:
warnings.warn(
"Could not insert debug toolbar." " </body> tag not found in response.",
"Could not insert debug toolbar. </body> tag not found in response.",
stacklevel=1,
)
return response

View File

@@ -36,6 +36,8 @@ class ProfilerDebugPanel(DebugPanel):
) -> None:
super().__init__(jinja_env, context=context)
self.dump_filename = None
if current_app.config.get("DEBUG_TB_PROFILER_ENABLED"):
self.is_active = True
self.dump_filename = current_app.config.get(