mirror of
https://github.com/Akkudoktor-EOS/EOS.git
synced 2026-08-30 04:06:37 +00:00
9eb3c7e483
Consolidates the currently applicable dependency updates into one PR, including the closed Dependabot backlog such as #1241, plus dependency surfaces that were not covered by the repository's previous pip-only Dependabot configuration. Cleanup of test warnings. Most importent: * GitPython + pypdf security hardening. * Uvicorn WebSocket close/backpressure/header fixes for server/dashboard reliability. * FastAPI dependency-memory/OpenAPI improvements for the API process. * Bokeh WebSocket/resource-leak/prefix fixes for EOSdash and proxied deployments. * cachebox cancellation/lock cleanup fixes for long-running/concurrent work. * pandas 3.0.5 avoiding the yanked 3.0.4 datetime/segfault build. * Ruff security-lint and pydocstyle correctness fixes, plus faster release builds via PGO. * platformdirs malformed-XDG and duplicate-directory fixes for deployment portability. * CI action modernization, regenerated uv.lock, and expanded Dependabot coverage. Runtime dependencies cachebox: 6.1.2 → 6.2.2 fastapi: 0.139.2 → 0.141.1 python-fasthtml: 0.14.9 → 0.14.11 MonsterUI: 1.0.46 → 1.0.47 bokeh: 3.9.1 → 3.9.2 uvicorn: 0.51.0 → 0.52.4 (build(deps): bump uvicorn from 0.51.0 to 0.52.3 #1241, refreshed to latest patch) pandas: 3.0.3 → 3.0.5 platformdirs: 4.11.0 → 4.11.3 Development/test dependencies pandas-stubs: 3.0.3.260530 → 3.0.5.260730 types-PyYAML: 6.0.12.20260518 → 6.0.12.20260724 GitPython: 3.1.53 → 3.1.58 (security/fix releases) coverage: 7.15.2 → 7.15.4 pypdf: 6.14.2 → 6.16.1 (includes security fixes) Pre-commit/tooling ruff-pre-commit: v0.15.21 → v0.16.3 synchronize pandas-stubs, types-docutils, and types-PyYAML pins with pyproject.toml CI / repository dependencies Python 3.13.9 → 3.13.15 in CI, Docker, .env, and local Docker Make targets actions/checkout → v7 in pytest, pre-commit, CodeQL, and release workflows actions/setup-python → v7 in pytest, pre-commit, and release workflows actions/upload-artifact → v7 in pytest workflow actions/stale: v9.1.0 → v11.0.0 (SHA-pinned) regenerate uv.lock from the final dependency pins so locked/frozen installs match pyproject.toml Future update coverage Expand Dependabot from pip-only to also monitor: GitHub Actions Docker The existing open docutils 0.23 update (#1085) is intentionally excluded because it has separate compatibility/ignore handling and should remain isolated. docker-build.yml was audited and is already using the newer action generations, so no changes were needed there. --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
36 lines
1.5 KiB
YAML
36 lines
1.5 KiB
YAML
name: "Close stale pull requests/issues"
|
|
on:
|
|
schedule:
|
|
- cron: "16 00 * * *"
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
stale:
|
|
name: Find Stale issues and PRs
|
|
runs-on: ubuntu-22.04
|
|
if: github.repository == 'Akkudoktor-EOS/EOS'
|
|
permissions:
|
|
pull-requests: write # to comment on stale pull requests
|
|
issues: write # to comment on stale issues
|
|
|
|
steps:
|
|
- uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0
|
|
with:
|
|
stale-pr-message: 'This pull request has been marked as stale because it has been open (more
|
|
than) 90 days with no activity. Remove the stale label or add a comment saying that you
|
|
would like to have the label removed otherwise this pull request will automatically be
|
|
closed in 30 days. Note, that you can always re-open a closed pull request at any time.'
|
|
stale-issue-message: 'This issue has been marked as stale because it has been open (more
|
|
than) 90 days with no activity. Remove the stale label or add a comment saying that you
|
|
would like to have the label removed otherwise this issue will automatically be closed in
|
|
30 days. Note, that you can always re-open a closed issue at any time.'
|
|
days-before-stale: 90
|
|
days-before-close: 30
|
|
stale-issue-label: 'stale'
|
|
stale-pr-label: 'stale'
|
|
exempt-pr-labels: 'in progress'
|
|
exempt-issue-labels: 'feature request, enhancement'
|
|
operations-per-run: 400
|