48e821ecd0
Add packages write permission to docker workflow
2 years ago
7b6250c7ef
Remove Python 3.5 from CI. ( #1712 )
2 years ago
02d5cf297b
GitHub Workflows security hardening ( #1711 )
...
* build: harden docker.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
* build: harden workflow.yml permissions
Signed-off-by: Alex <aleksandrosansan@gmail.com>
Signed-off-by: Alex <aleksandrosansan@gmail.com>
2 years ago
9db728921d
Improve the lint situation ( #1688 )
...
* Move common flake8 options into config file
Currently --max-line-length being specified in two places. Just use the
existing value in the config file as the source of truth.
Move --count and --statistics to config file as well.
* Fix some lints
2 years ago
01635dc809
Bump actions/setup-python from 4.1.0 to 4.2.0 ( #1687 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4.1.0...v4.2.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
d08cc72842
Added Redis 7 to test matrix ( #1683 )
...
* Updated changelog.
* Added Redis 7 and redis-py 4.3 to test matrix
* Addd Redis 7 to test matrix
* Addd Redis 7 to test matrix
2 years ago
468eb00c13
Bump actions/setup-python from 3 to 4.1.0 ( #1675 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 3 to 4.1.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v3...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years ago
aff877cfcf
chore: Enable codeql action ( #1666 )
...
This action runs GitHub's industry-leading semantic code analysis engine,
CodeQL, against a repository's source code to find security vulnerabilities.
https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql
https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
a69498e185
Bump actions/setup-python from 2 to 3 ( #1658 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
48df759879
Bump codecov/codecov-action from 1 to 3 ( #1660 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 1 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v1...v3 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
a2ada2d1ec
Bump supercharge/redis-github-action from 1.1.0 to 1.4.0 ( #1661 )
...
Bumps [supercharge/redis-github-action](https://github.com/supercharge/redis-github-action ) from 1.1.0 to 1.4.0.
- [Release notes](https://github.com/supercharge/redis-github-action/releases )
- [Changelog](https://github.com/supercharge/redis-github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/supercharge/redis-github-action/compare/1.1.0...1.4.0 )
---
updated-dependencies:
- dependency-name: supercharge/redis-github-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
ae0611b967
Bump actions/upload-artifact from 2 to 3 ( #1663 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
c503823ff8
Bump actions/download-artifact from 2 to 3 ( #1662 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
395fd1c51a
Bump actions/checkout from 2 to 3 ( #1659 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 years ago
4875db7a9c
chore: Included githubactions in the dependabot config ( #1656 )
...
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
adfb355abe
chore: Set permissions for GitHub actions ( #1648 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
3 years ago
d813ea5e18
put versions in quotes ( #1572 )
3 years ago
6692587f74
Python 3.10 compatibility ( #1563 )
...
* use shutil.get_terminal_size instead of click.get_terminal_size()
resolves warning:
rq/cli/helpers.py:107: DeprecationWarning: 'click.get_terminal_size()' is deprecated and will be removed in Click 8.1. Use 'shutil.get_terminal_size()' instead.
termwidth, _ = click.get_terminal_size()
* remove StrictVersion from rq
* asyncio.get_event_loop -> asyncio.new_event_loop()
resolves warning:
tests/test_job.py::TestJob::test_create_job_with_async
rq/rq/job.py:839: DeprecationWarning: There is no current event loop
loop = asyncio.get_event_loop()
* Add python 3.10 to matrix
Co-authored-by: rpkak <rpkak@users.noreply.github.com>
3 years ago
643a26b991
fix query request of issue listing ( #1519 )
...
Co-authored-by: rpkak <rpkak@users.noreply.github.com>
3 years ago
bc0b55fd92
Daily workflow for dependency testing ( #1470 )
...
* Make new workflow
Descriped in https://github.com/rq/rq/pull/1465#issuecomment-842464560
* For testing
* failing tests
For testing
* log file
For testing
* log
For testing
* no newlines
For testing
* no "
For testing
* no only one issue
For testing
* as job
For testing
* use artifacts
For testing
* use artifacts2
For testing
* use artifacts3
For testing
* use artifacts4
For testing
* finish
* name
* only if "normal" workflow doesn't fail
https://github.com/rq/rq/pull/1470#discussion_r641343532
3 years ago
819d0498c7
Quickfix: Change Dockerhub Username ( #1491 )
...
I forgot to change this in #1471 by mistake.
4 years ago
d0cea42fbb
Docker ( #1471 )
...
* rqtest -> tests folder
* worker Dockerfile to repo folder
* Dockerfile: install rq from file next to it
* add docker workflow
4 years ago
ef4f0611a7
Added Python 3.9 to test matrix
4 years ago
b84b39f75f
Upgrade to GitHub-native Dependabot ( #1454 )
...
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
4 years ago
676ec9b0ea
tests: updated github worklow for tests to use requirements.txt and d… ( #1364 )
...
* tests: updated github worklow for tests to use requirements.txt and dev-requirements.txt
* build: updated dev-requirements.txt
Co-authored-by: Ruslan Mullakhmetov <ruslan@twentythree.net>
4 years ago
9adcd7e50c
feat: avoided "zombie" processes after killing work horse ( #1348 )
...
* feat: avoided "zombie" processes after killing work horse by setting work horse process group and killing this group
* fixed tests
* tests: added test to check that all workhorse subprocesses are killed
* tests: updated guthub run tests dependencies since they are not using (dev-)requirements.txt
Co-authored-by: Ruslan Mullakhmetov <ruslan@twentythree.net>
4 years ago
08379fc571
Codecov ( #1326 )
...
* Try codecov
* Modify codecov steps
* Strip out unused actions variables
* Remove coverage.yml
* Renamed test.yml to workflow.yml
* Minor styling fix
4 years ago
f0afcd3cb3
Create coverage.yml
4 years ago
5d199df85d
Fix scheduler on Python 3.8 ( #1302 )
...
* Fix scheduler on Python 3.8
* Use Python 3.8.3 for test
5 years ago
2775185374
CI: Only test redis-py 3.5.0 ( #1294 )
...
Only test on major versions to reduce number of tests.
Signed-off-by: Paul Spooren <mail@aparcar.org>
5 years ago
8904757d7e
Replace travis with GitHub action ( #1290 )
...
* CI: replace travis with GitHub action matrix
The GitHub action runs the same tests as travis however using a more
complex matrix:
Python versions: 3.5, 3.6, 3.7, 3.8
Python 3.4 is dropped by redis-py, therefore not required in the tests.
Redis versions: 3, 4, 5, 6
The different Redis versions offer different features and this allows
checks for compatibility.
redis-py versions: 3.5.0, 3.5.3
3.5.0 is the oldest supported version, 3.5.3 is the latest upstream
verison
Signed-off-by: Paul Spooren <mail@aparcar.org>
* CI: Add flake8 lint action
This actions runs `flake8` and shows style problems of the code. It uses
th GitHub default options which handle most problems as warnings. These
rules could become slowly more strict.
Signed-off-by: Paul Spooren <mail@aparcar.org>
5 years ago
68c01bc537
Create FUNDING.yml
6 years ago
Selwin Ong
Alex
Yang Yang
dependabot[bot]
Naveen
rpkak
dependabot-preview[bot]
Ruslan Mullakhmetov
Paul Spooren