diff --git a/.github/utils/requirements.txt b/.github/utils/requirements.txt index 8a9d291..a548fdf 100644 --- a/.github/utils/requirements.txt +++ b/.github/utils/requirements.txt @@ -1,2 +1,3 @@ cookiecutter~=2.6 flit~=3.12 +pip-tools~=7.5 diff --git a/.github/workflows/ci_tests.yml b/.github/workflows/ci_tests.yml index fc50ea4..80cae59 100644 --- a/.github/workflows/ci_tests.yml +++ b/.github/workflows/ci_tests.yml @@ -56,8 +56,13 @@ jobs: run: pre-commit run --all-files working-directory: ./oteapi-ci + - name: Prepare for pip-audit + run: pip-compile --output-file=${{ runner.temp }}/requirements.txt --all-extras --allow-unsafe ${{ github.workspace }}/oteapi-ci/pyproject.toml + - name: Run pip-audit uses: pypa/gh-action-pip-audit@v1.1.0 + with: + inputs: ${{ runner.temp }}/requirements.txt - name: Build docs run: mkdocs build --strict @@ -86,7 +91,8 @@ jobs: run: | python -m pip install --upgrade pip pip install -U setuptools wheel - pip install -r requirements.txt -r .github/utils/requirements.txt - name: Run pip-audit uses: pypa/gh-action-pip-audit@v1.1.0 + with: + inputs: ${{ github.workspace }}/requirements.txt ${{ github.workspace }}/.github/utils/requirements.txt diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 06ff557..3a51450 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -81,7 +81,7 @@ repos: # More information can be found in its documentation: # https://docs.astral.sh/ruff/ - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.13.1 + rev: v0.13.2 hooks: - id: ruff-check name: ruff diff --git a/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml b/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml index 9c0d161..c3aae41 100644 --- a/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml +++ b/{{ cookiecutter.project_slug }}/.pre-commit-config.yaml @@ -84,7 +84,7 @@ repos: # More information can be found in its documentation: # https://docs.astral.sh/ruff/ - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.13.1 + rev: v0.13.2 hooks: - id: ruff-check name: ruff