Skip to content

Commit 88b3e95

Browse files
authored
Merge pull request #135 from casework/schedule_pre_commit_refreshing
Review pre-commit pinned versions as prerelease step
2 parents 96ccf86 + e142f71 commit 88b3e95

File tree

2 files changed

+57
-0
lines changed

2 files changed

+57
-0
lines changed

.github/workflows/prerelease.yml

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
# Portions of this file contributed by NIST are governed by the
2+
# following statement:
3+
#
4+
# This software was developed at the National Institute of Standards
5+
# and Technology by employees of the Federal Government in the course
6+
# of their official duties. Pursuant to Title 17 Section 105 of the
7+
# United States Code, this software is not subject to copyright
8+
# protection within the United States. NIST assumes no responsibility
9+
# whatsoever for its use by other parties, and makes no guarantees,
10+
# expressed or implied, about its quality, reliability, or any other
11+
# characteristic.
12+
#
13+
# We would appreciate acknowledgement if the software is used.
14+
15+
# This workflow uses Make to review direct dependencies of this
16+
# repository.
17+
18+
name: Prerelease
19+
20+
on:
21+
pull_request:
22+
branches:
23+
- main
24+
25+
jobs:
26+
build:
27+
28+
runs-on: ubuntu-latest
29+
strategy:
30+
matrix:
31+
python-version:
32+
- '3.9'
33+
- '3.12'
34+
35+
steps:
36+
- uses: actions/checkout@v3
37+
- name: Set up Python ${{ matrix.python-version }}
38+
uses: actions/setup-python@v4
39+
with:
40+
python-version: ${{ matrix.python-version }}
41+
- name: Review dependencies
42+
run: make check-supply-chain-pre-commit

Makefile

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,8 @@ all: \
2828
.venv-pre-commit/var/.pre-commit-built.log
2929

3030
.PHONY: \
31+
check-supply-chain \
32+
check-supply-chain-pre-commit \
3133
download
3234

3335
.git_submodule_init.done.log: \
@@ -89,6 +91,19 @@ check: \
8991
--directory tests \
9092
check
9193

94+
# This target's dependencies potentially modify the working directory's Git state, so it is intentionally not a dependency of check.
95+
check-supply-chain: \
96+
check-supply-chain-pre-commit
97+
98+
# This target is scheduled to run as part of prerelease review.
99+
check-supply-chain-pre-commit: \
100+
.venv-pre-commit/var/.pre-commit-built.log
101+
source .venv-pre-commit/bin/activate \
102+
&& pre-commit autoupdate
103+
git diff \
104+
--exit-code \
105+
.pre-commit-config.yaml
106+
92107
clean:
93108
@$(MAKE) \
94109
PYTHON3=$(PYTHON3) \

0 commit comments

Comments
 (0)