build

Bump actions/dependency-review-action from 3.1.5 to 4.0.0 (#85) #142

	name: build

	on:
	push:
	release:
	types: [created, published]

	env:
	python_version: '3.12'

	permissions:
	contents: read

	jobs:

	test:
	runs-on: ubuntu-22.04
	container: fedora:39
	timeout-minutes: 30
	permissions:
	contents: write
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
	with:
	egress-policy: audit

	- name: Install Linux Dependencies
	run: >
	dnf install -y gcc git graphviz pkg-config python-launcher upx
	xorg-x11-server-Xvfb gtk4 gobject-introspection-devel
	cairo-gobject-devel gtksourceview5-devel libadwaita-devel cairo-devel
	python${{ env.python_version }}-devel
	- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	- name: Set ownership of checkout directory
	run: chown -R $(id -u):$(id -g) $PWD
	- name: Set up Python ${{ env.python_version }}
	uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
	with:
	python-version: ${{ env.python_version }}
	- name: Install pipx
	run: \|
	python${{ env.python_version }} -m ensurepip
	python${{ env.python_version }} -m pip install pipx
	echo "/github/home/.local/bin" >> $GITHUB_PATH
	- name: Install Poetry
	run: pipx install --python ${{ env.python_version }} --pip-args=--constraint=.github/constraints.txt poetry
	- name: Install dependencies
	run: poetry install --no-interaction
	- name: Test
	run: xvfb-run poetry run pytest

Provide feedback