Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -12,8 +12,8 @@
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.13"
python-version: "3.13.15"
- run: pip install poetry

Check warning on line 16 in .github/workflows/publish.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9nvVN36k6wWVj6a&open=AZ_Vc9nvVN36k6wWVj6a&pullRequest=222

Check warning on line 16 in .github/workflows/publish.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9nvVN36k6wWVj6Z&open=AZ_Vc9nvVN36k6wWVj6Z&pullRequest=222
- run: poetry build
- uses: actions/upload-artifact@v7
with:
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,9 @@
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.13"
python-version: "3.13.15"
- run: python -m pip install -U pip

Check warning on line 13 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6K&open=AZ_Vc9kTVN36k6wWVj6K&pullRequest=222
- run: pip install .

Check warning on line 14 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6L&open=AZ_Vc9kTVN36k6wWVj6L&pullRequest=222

Check warning on line 14 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6M&open=AZ_Vc9kTVN36k6wWVj6M&pullRequest=222
twine-check:
name: twine check
runs-on: ubuntu-latest
Expand All @@ -20,9 +20,9 @@
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.13"
python-version: "3.13.15"
- run: pip install poetry twine

Check warning on line 24 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6O&open=AZ_Vc9kTVN36k6wWVj6O&pullRequest=222

Check warning on line 24 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6N&open=AZ_Vc9kTVN36k6wWVj6N&pullRequest=222
- run: poetry install

Check warning on line 25 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Poetry allows execution of setup scripts on source builds by default. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6P&open=AZ_Vc9kTVN36k6wWVj6P&pullRequest=222
- run: poetry build
- run: twine check dist/pixelmatch*
black:
Expand All @@ -33,9 +33,9 @@
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.13"
python-version: "3.13.15"
- run: pip install poetry

Check warning on line 37 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6Q&open=AZ_Vc9kTVN36k6wWVj6Q&pullRequest=222

Check warning on line 37 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6R&open=AZ_Vc9kTVN36k6wWVj6R&pullRequest=222
- run: poetry install

Check warning on line 38 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Poetry allows execution of setup scripts on source builds by default. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6S&open=AZ_Vc9kTVN36k6wWVj6S&pullRequest=222
- run: poetry run black --check .
pytest:
name: Test on Python ${{ matrix.python-version }}
Expand All @@ -51,8 +51,8 @@
uses: actions/setup-python@v6
with:
python-version: ${{ matrix.python-version }}
- run: pip install poetry

Check warning on line 54 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6T&open=AZ_Vc9kTVN36k6wWVj6T&pullRequest=222

Check warning on line 54 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6U&open=AZ_Vc9kTVN36k6wWVj6U&pullRequest=222
- run: poetry install

Check warning on line 55 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Poetry allows execution of setup scripts on source builds by default. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6V&open=AZ_Vc9kTVN36k6wWVj6V&pullRequest=222
- run: poetry run pytest --mypy --cov=pixelmatch --cov-report xml --cov-report term-missing --benchmark-disable
- uses: codecov/codecov-action@v6
bench:
Expand All @@ -65,9 +65,9 @@
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: "3.13"
python-version: "3.13.15"
- run: pip install poetry

Check warning on line 69 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Using dependencies without locking resolved versions is security-sensitive.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6X&open=AZ_Vc9kTVN36k6wWVj6X&pullRequest=222

Check warning on line 69 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Omitting "--only-binary :all:" can lead to the execution of setup scripts. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6W&open=AZ_Vc9kTVN36k6wWVj6W&pullRequest=222
- run: poetry install

Check warning on line 70 in .github/workflows/test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Poetry allows execution of setup scripts on source builds by default. Make sure it is safe here.

See more on https://sonarcloud.io/project/issues?id=whtsky_pixelmatch-py&issues=AZ_Vc9kTVN36k6wWVj6Y&open=AZ_Vc9kTVN36k6wWVj6Y&pullRequest=222
- run: poetry run pytest --benchmark-json output.json
- name: Download previous benchmark data
uses: actions/cache@v5
Expand Down
Loading