diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 4734471b2..8ff2f4d1a 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -5,9 +5,6 @@ on: workflow_dispatch: inputs: {} -env: - FOSSA_CLI_INSTALLER_VERSION: '3.3.10' - permissions: contents: read @@ -23,19 +20,3 @@ jobs: uses: actions/dependency-review-action@v3.1.1 with: fail-on-severity: high - - - name: FOSSA dependency license check - run: | - # `$FOSSA_CLI_INSTALLER_VERSION` only controls the version of the installer used - the latest version of `fossa-cli` will always be used. - curl --no-progress-meter -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/v${FOSSA_CLI_INSTALLER_VERSION}/install-latest.sh | bash - - echo '## FOSSA dependency license check' >> $GITHUB_STEP_SUMMARY - echo '' >> $GITHUB_STEP_SUMMARY - - fossa analyze --fossa-api-key ${{ secrets.MELTYBOT_FOSSA_API_KEY }} --revision ${{ github.sha }} |& tee fossa_analyze.log - fossa test --fossa-api-key ${{ secrets.MELTYBOT_FOSSA_API_KEY }} --revision ${{ github.sha }} - - TEST_FAILED=$? - FOSSA_REPORT_LINK="$(grep -A 1 '[ INFO] View FOSSA Report:' fossa_analyze.log | tail -n 1 | sed -e 's/^\[ INFO\]\s*//')" - echo "[FOSSA detected $([ $TEST_FAILED -ne 0 ] && echo -n '' || echo 'no ')issues](${FOSSA_REPORT_LINK})" >> $GITHUB_STEP_SUMMARY - exit $TEST_FAILED diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index a3339b08b..03fde6c9f 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -36,14 +36,14 @@ repos: )$ - repo: https://github.com/python-jsonschema/check-jsonschema - rev: 0.27.0 + rev: 0.27.1 hooks: - id: check-dependabot - id: check-github-workflows - id: check-readthedocs - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.1.3 + rev: v0.1.4 hooks: - id: ruff args: [--fix, --exit-non-zero-on-fix, --show-fixes] @@ -70,6 +70,6 @@ repos: )$ - repo: https://github.com/python-poetry/poetry - rev: 1.6.0 + rev: 1.7.0 hooks: - id: poetry-check