kdebug 0.2.0__tar.gz → 0.2.1__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {kdebug-0.2.0 → kdebug-0.2.1}/.github/workflows/pypi-publish.yml +2 -2
- {kdebug-0.2.0 → kdebug-0.2.1}/.github/workflows/release.yml +1 -1
- {kdebug-0.2.0 → kdebug-0.2.1}/AGENTS.md +22 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/PKG-INFO +1 -1
- {kdebug-0.2.0 → kdebug-0.2.1}/pyproject.toml +1 -1
- {kdebug-0.2.0 → kdebug-0.2.1}/.github/dependabot.yml +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/.github/workflows/update-homebrew.yml +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/.gitignore +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/README.md +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/completions/_kdebug +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/completions/kdebug.bash +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/src/kdebug/__init__.py +0 -0
- {kdebug-0.2.0 → kdebug-0.2.1}/src/kdebug/cli.py +0 -0
|
@@ -24,12 +24,12 @@ jobs:
|
|
|
24
24
|
environment: pypi
|
|
25
25
|
steps:
|
|
26
26
|
- name: Check out
|
|
27
|
-
uses: actions/checkout@
|
|
27
|
+
uses: actions/checkout@v6
|
|
28
28
|
with:
|
|
29
29
|
ref: ${{ inputs.ref || github.ref }}
|
|
30
30
|
|
|
31
31
|
- name: Install uv
|
|
32
|
-
uses: astral-sh/setup-uv@
|
|
32
|
+
uses: astral-sh/setup-uv@v7
|
|
33
33
|
with:
|
|
34
34
|
version: "latest"
|
|
35
35
|
|
|
@@ -112,6 +112,28 @@ source <(kdebug --completions zsh)
|
|
|
112
112
|
kdebug --<TAB>
|
|
113
113
|
```
|
|
114
114
|
|
|
115
|
+
## GitHub Actions & Dependencies
|
|
116
|
+
|
|
117
|
+
**IMPORTANT: Always use the latest stable versions of GitHub Actions and dependencies to avoid security vulnerabilities (CVEs).**
|
|
118
|
+
|
|
119
|
+
### Current Action Versions (keep updated)
|
|
120
|
+
|
|
121
|
+
- `actions/checkout@v6`
|
|
122
|
+
- `astral-sh/setup-uv@v7`
|
|
123
|
+
|
|
124
|
+
### Guidelines
|
|
125
|
+
|
|
126
|
+
1. **Never hardcode old versions** - Check the action's repository for the latest major version
|
|
127
|
+
2. **Use major version tags** (e.g., `@v6`) not specific commits or minor versions
|
|
128
|
+
3. **Dependabot is configured** - Review and merge dependabot PRs promptly
|
|
129
|
+
4. **When adding new actions** - Always check for the latest version first via the action's GitHub repo or marketplace page
|
|
130
|
+
|
|
131
|
+
### Workflow Files
|
|
132
|
+
|
|
133
|
+
- `.github/workflows/release.yml` - Main release automation
|
|
134
|
+
- `.github/workflows/pypi-publish.yml` - PyPI publishing with OIDC trusted publisher
|
|
135
|
+
- `.github/workflows/update-homebrew.yml` - Homebrew tap updates
|
|
136
|
+
|
|
115
137
|
## Code Conventions
|
|
116
138
|
|
|
117
139
|
- Use `colorize()` for colored output
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|