pybase64 1.4.2__tar.gz → 1.5.0__tar.gz

{pybase64-1.4.2 → pybase64-1.5.0}/LICENSE

@@ -1,6 +1,6 @@
 BSD 2-Clause License
 
-Copyright (c) 2017-2022, Matthieu Darbois
+Copyright (c) 2017-2026, Matthieu Darbois
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

{pybase64-1.4.2/src/pybase64.egg-info → pybase64-1.5.0}/PKG-INFO

@@ -1,42 +1,32 @@
 Metadata-Version: 2.4
 Name: pybase64
-Version: 1.4.2
+Version: 1.5.0
 Summary: Fast Base64 encoding/decoding
-Home-page: https://github.com/mayeut/pybase64
 Author: Matthieu Darbois
-License: BSD-2-Clause
-Project-URL: Source, https://github.com/mayeut/pybase64
-Project-URL: Tracker, https://github.com/mayeut/pybase64/issues
+License-Expression: BSD-2-Clause
+Project-URL: Homepage, https://github.com/mayeut/pybase64
 Project-URL: Documentation, https://pybase64.readthedocs.io/en/stable
+Project-URL: Source, https://github.com/mayeut/pybase64
+Project-URL: Issues, https://github.com/mayeut/pybase64/issues
 Keywords: base64
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Topic :: Utilities
-Classifier: License :: OSI Approved :: BSD License
 Classifier: Programming Language :: C
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
-Requires-Python: >=3.8
+Classifier: Programming Language :: Python :: 3.15
+Requires-Python: >=3.9
 Description-Content-Type: text/x-rst
 License-File: LICENSE
-Dynamic: author
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
+License-File: base64/LICENSE
 Dynamic: license-file
-Dynamic: project-url
-Dynamic: requires-python
-Dynamic: summary
 
 .. SETUP VARIABLES
 .. |license-status| image:: https://img.shields.io/badge/license-BSD%202--Clause-blue.svg
@@ -74,7 +64,7 @@ Usage
 
 ``pybase64`` uses the same API as Python base64 "modern interface" (introduced in Python 2.4) for an easy integration.
 
-To get the fastest decoding, it is recommended to use the ``pybase64.b64decode`` and ``validate=True`` when possible.
+To get the fastest decoding, it is recommended to use the ``pybase64.b64decode`` with ``validate=True`` (or ``ignorechars=b""``) and ``padded=True`` when possible.
 
 .. code:: python
 
@@ -127,33 +117,66 @@ Benchmark
 
 .. begin benchmark
 
-Running Python 3.7.2, Apple LLVM version 10.0.0 (clang-1000.11.45.5), Mac OS X 10.14.2 on an Intel Core i7-4870HQ @ 2.50GHz
+Running Python 3.15.0rc1, Apple clang version 21.0.0 (clang-2100.1.1.101), macOS 26.5.2, Apple M1 Max
 
 .. code::
 
-    pybase64 0.5.0 (C extension active - AVX2)
-    bench: altchars=None, validate=False
-    pybase64._pybase64.encodebytes:   1734.776 MB/s (13,271,472 bytes -> 17,928,129 bytes)
-    pybase64._pybase64.b64encode:     4039.539 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     1854.423 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.encodebytes:                 78.352 MB/s (13,271,472 bytes -> 17,928,129 bytes)
-    base64.b64encode:                  539.840 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  287.826 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=None, validate=True
-    pybase64._pybase64.b64encode:     4156.607 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     4107.997 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  559.342 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  143.674 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=b'-_', validate=False
-    pybase64._pybase64.b64encode:     2786.776 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     1124.136 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  322.427 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  205.195 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=b'-_', validate=True
-    pybase64._pybase64.b64encode:     2806.271 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     2740.456 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  314.709 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  121.803 MB/s (17,695,296 bytes -> 13,271,472 bytes)
+    pybase64 1.5.0 (C extension active - NEON)
+    bench: altchars=None, validate=True, padded=True
+    pybase64.encodebytes:     6595 MB/s (135,696 bytes -> 183,309 bytes)
+    pybase64.b64encode:      17492 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       9037 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.encodebytes:       2386 MB/s (135,696 bytes -> 183,309 bytes)
+    base64.b64encode:         2653 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         2656 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=True, padded=False
+    pybase64.b64encode:      17547 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       2521 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2656 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         2655 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'', padded=False
+    pybase64.b64decode:       2510 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2655 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'\n', padded=True
+    pybase64.b64decode:       2370 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2087 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'\n', padded=False
+    pybase64.b64decode:       2365 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1964 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=False, padded=True
+    pybase64.b64decode:       2369 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2030 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=False, padded=False
+    pybase64.b64decode:       2361 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1982 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=True, padded=True
+    pybase64.b64encode:      10900 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       5974 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2675 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         1186 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=True, padded=False
+    pybase64.b64encode:      10798 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       2135 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2571 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         1154 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'', padded=True
+    pybase64.b64decode:       5770 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2629 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'', padded=False
+    pybase64.b64decode:       2201 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2606 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'\n', padded=True
+    pybase64.b64decode:       2058 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2069 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'\n', padded=False
+    pybase64.b64decode:       2058 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1882 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=False, padded=True
+    pybase64.b64decode:       2030 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1005 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=False, padded=False
+    pybase64.b64decode:       2081 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1031 MB/s (183,308 bytes -> 135,696 bytes)
 
 .. end benchmark
 
@@ -161,6 +184,30 @@ Running Python 3.7.2, Apple LLVM version 10.0.0 (clang-1000.11.45.5), Mac OS X 1
 
 Changelog
 =========
+1.5.0
+------
+- Speed-up translation on aarch64
+- Fix invalid data successfully decoded when using altchars (slice ends with padding)
+- Fix thread safety selecting codec
+- Add ``padded`` and ``wrapcol`` parameters to ``b64encode``
+- Add ``padded`` parameter to ``urlsafe_b64encode``
+- Add ``padded`` parameter to ``b64decode`` & ``urlsafe_b64decode``
+- ``urlsafe_b64decode`` now defaults to ``padded=False`` to align with Python 3.15 behavior
+- Add ``ignorechars`` and ``canonical`` parameters to ``b64decode``
+- Handle excess padding with the same behavior as CPython 3.15
+- Reject non-ASCII strings in ``b64decode`` when ``validate=False``
+- Deprecate accepting the ``+`` and ``/`` characters with an alternative alphabet when decoding
+- Use ``ValueError`` instead of ``AssertionError`` on altchars length validation
+- Add SBOM to PyPI wheels
+- Publish python 3.15 wheels
+- Drop python 3.8 support
+- Stop publishing python 3.13t wheels
+
+1.4.3
+-----
+- Publish Android Python 3.14 wheels
+- Publish GraalPy v25 wheels
+
 1.4.2
 -----
 - Update base64 library (Windows ARM64 Neon support)

{pybase64-1.4.2 → pybase64-1.5.0}/README.rst

@@ -34,7 +34,7 @@ Usage
 
 ``pybase64`` uses the same API as Python base64 "modern interface" (introduced in Python 2.4) for an easy integration.
 
-To get the fastest decoding, it is recommended to use the ``pybase64.b64decode`` and ``validate=True`` when possible.
+To get the fastest decoding, it is recommended to use the ``pybase64.b64decode`` with ``validate=True`` (or ``ignorechars=b""``) and ``padded=True`` when possible.
 
 .. code:: python
 
@@ -87,33 +87,66 @@ Benchmark
 
 .. begin benchmark
 
-Running Python 3.7.2, Apple LLVM version 10.0.0 (clang-1000.11.45.5), Mac OS X 10.14.2 on an Intel Core i7-4870HQ @ 2.50GHz
+Running Python 3.15.0rc1, Apple clang version 21.0.0 (clang-2100.1.1.101), macOS 26.5.2, Apple M1 Max
 
 .. code::
 
-    pybase64 0.5.0 (C extension active - AVX2)
-    bench: altchars=None, validate=False
-    pybase64._pybase64.encodebytes:   1734.776 MB/s (13,271,472 bytes -> 17,928,129 bytes)
-    pybase64._pybase64.b64encode:     4039.539 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     1854.423 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.encodebytes:                 78.352 MB/s (13,271,472 bytes -> 17,928,129 bytes)
-    base64.b64encode:                  539.840 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  287.826 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=None, validate=True
-    pybase64._pybase64.b64encode:     4156.607 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     4107.997 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  559.342 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  143.674 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=b'-_', validate=False
-    pybase64._pybase64.b64encode:     2786.776 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     1124.136 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  322.427 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  205.195 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    bench: altchars=b'-_', validate=True
-    pybase64._pybase64.b64encode:     2806.271 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    pybase64._pybase64.b64decode:     2740.456 MB/s (17,695,296 bytes -> 13,271,472 bytes)
-    base64.b64encode:                  314.709 MB/s (13,271,472 bytes -> 17,695,296 bytes)
-    base64.b64decode:                  121.803 MB/s (17,695,296 bytes -> 13,271,472 bytes)
+    pybase64 1.5.0 (C extension active - NEON)
+    bench: altchars=None, validate=True, padded=True
+    pybase64.encodebytes:     6595 MB/s (135,696 bytes -> 183,309 bytes)
+    pybase64.b64encode:      17492 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       9037 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.encodebytes:       2386 MB/s (135,696 bytes -> 183,309 bytes)
+    base64.b64encode:         2653 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         2656 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=True, padded=False
+    pybase64.b64encode:      17547 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       2521 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2656 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         2655 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'', padded=False
+    pybase64.b64decode:       2510 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2655 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'\n', padded=True
+    pybase64.b64decode:       2370 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2087 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, ignorechars=b'\n', padded=False
+    pybase64.b64decode:       2365 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1964 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=False, padded=True
+    pybase64.b64decode:       2369 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2030 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=None, validate=False, padded=False
+    pybase64.b64decode:       2361 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1982 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=True, padded=True
+    pybase64.b64encode:      10900 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       5974 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2675 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         1186 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=True, padded=False
+    pybase64.b64encode:      10798 MB/s (135,696 bytes -> 180,928 bytes)
+    pybase64.b64decode:       2135 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64encode:         2571 MB/s (135,696 bytes -> 180,928 bytes)
+    base64.b64decode:         1154 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'', padded=True
+    pybase64.b64decode:       5770 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2629 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'', padded=False
+    pybase64.b64decode:       2201 MB/s (180,928 bytes -> 135,696 bytes)
+    base64.b64decode:         2606 MB/s (180,928 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'\n', padded=True
+    pybase64.b64decode:       2058 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         2069 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', ignorechars=b'\n', padded=False
+    pybase64.b64decode:       2058 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1882 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=False, padded=True
+    pybase64.b64decode:       2030 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1005 MB/s (183,308 bytes -> 135,696 bytes)
+    bench: altchars=b'-_', validate=False, padded=False
+    pybase64.b64decode:       2081 MB/s (183,308 bytes -> 135,696 bytes)
+    base64.b64decode:         1031 MB/s (183,308 bytes -> 135,696 bytes)
 
 .. end benchmark
 
@@ -121,6 +154,30 @@ Running Python 3.7.2, Apple LLVM version 10.0.0 (clang-1000.11.45.5), Mac OS X 1
 
 Changelog
 =========
+1.5.0
+------
+- Speed-up translation on aarch64
+- Fix invalid data successfully decoded when using altchars (slice ends with padding)
+- Fix thread safety selecting codec
+- Add ``padded`` and ``wrapcol`` parameters to ``b64encode``
+- Add ``padded`` parameter to ``urlsafe_b64encode``
+- Add ``padded`` parameter to ``b64decode`` & ``urlsafe_b64decode``
+- ``urlsafe_b64decode`` now defaults to ``padded=False`` to align with Python 3.15 behavior
+- Add ``ignorechars`` and ``canonical`` parameters to ``b64decode``
+- Handle excess padding with the same behavior as CPython 3.15
+- Reject non-ASCII strings in ``b64decode`` when ``validate=False``
+- Deprecate accepting the ``+`` and ``/`` characters with an alternative alphabet when decoding
+- Use ``ValueError`` instead of ``AssertionError`` on altchars length validation
+- Add SBOM to PyPI wheels
+- Publish python 3.15 wheels
+- Drop python 3.8 support
+- Stop publishing python 3.13t wheels
+
+1.4.3
+-----
+- Publish Android Python 3.14 wheels
+- Publish GraalPy v25 wheels
+
 1.4.2
 -----
 - Update base64 library (Windows ARM64 Neon support)

{pybase64-1.4.2 → pybase64-1.5.0}/base64/.github/workflows/test.yml

@@ -1,6 +1,13 @@
 name: Test
 
-on: [push, pull_request]
+on: [push, pull_request, workflow_dispatch]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
 
 jobs:
   makefile-analysis:
@@ -8,7 +15,9 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: "Install analysis tools"
         run: |
           sudo apt-get update
@@ -23,11 +32,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        runner: ["ubuntu-22.04"]
+        runner: ["ubuntu-24.04"]
         compiler: ["gcc", "clang"]
         openmp: ["0", "1"]
         include:
-          - runner: "macos-13"
+          - runner: "macos-15-intel"
             compiler: "clang"
             openmp: "0"
     env:
@@ -37,7 +46,9 @@ jobs:
       OBJCOPY: ${{ (startsWith(matrix.runner, 'macos') && 'echo') || 'objcopy' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Install Ubuntu libomp support
         if: runner.os == 'Linux' && matrix.compiler == 'clang' && matrix.openmp == 1
         run: |
@@ -53,20 +64,22 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        runner: ["ubuntu-22.04", "windows-2019"]
+        runner: ["ubuntu-24.04", "windows-2022"]
         platform: ["x86_64", "i686"]
         include:
-          - runner: "macos-13"
+          - runner: "macos-15-intel"
             platform: "x86_64"
-          - runner: "macos-14"
+          - runner: "macos-15"
             platform: "arm64"
-          - runner: "ubuntu-22.04-arm"
+          - runner: "ubuntu-24.04-arm"
             platform: "aarch64"
           - runner: "windows-11-arm"
             platform: "ARM64"
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Install Ubuntu i686 support
         if: runner.os == 'Linux' && matrix.platform == 'i686'
         run: |
@@ -94,14 +107,16 @@ jobs:
     needs: makefile-analysis
     runs-on: ubuntu-latest
     container:
-      image: alpine:3.12
+      image: alpine:3.21
       env:
         CC: gcc
     steps:
       - name: Install deps
         run: apk add --update bash build-base git
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Run tests
         run: ./test/ci/test.sh
 
@@ -110,12 +125,14 @@ jobs:
     needs: makefile-analysis
     runs-on: ubuntu-latest
     container:
-      image: alpine:3.12
+      image: alpine:3.21
     steps:
       - name: Install deps
         run: apk add --update bash build-base cmake git
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: CMake Configure
         run: >
           cmake
@@ -138,12 +155,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        arch: [armv7, aarch64, s390x, ppc64le]
+        arch: [armv7, aarch64, s390x, ppc64le, riscv64]
         cc: [gcc, clang]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
-      - uses: uraimo/run-on-arch-action@v3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: uraimo/run-on-arch-action@f9b26e3a1a408d5fd530d20c17b9f3f4428ff8d9 # v3.1.0
         with:
           arch: ${{matrix.arch}}
           distro: alpine_latest
@@ -159,12 +178,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        arch: [armv7, aarch64, s390x, ppc64le]
+        arch: [armv7, aarch64, s390x, ppc64le, riscv64]
         cc: [gcc, clang]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
-      - uses: uraimo/run-on-arch-action@v3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: uraimo/run-on-arch-action@f9b26e3a1a408d5fd530d20c17b9f3f4428ff8d9 # v3.1.0
         with:
           arch: ${{matrix.arch}}
           distro: alpine_latest
@@ -198,9 +219,11 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Setup MSYS2 ${{matrix.msystem}}
-        uses: msys2/setup-msys2@v2
+        uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2.32.0
         with:
           msystem: ${{matrix.msystem}}
           update: true
@@ -250,9 +273,11 @@ jobs:
       CC: cc.exe
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
       - name: Setup MSYS2 ${{matrix.msystem}}
-        uses: msys2/setup-msys2@v2
+        uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2.32.0
         with:
           msystem: ${{matrix.msystem}}
           update: true