src-auth-perms-sync 0.8.0__tar.gz → 0.8.2__tar.gz

src_auth_perms_sync-0.8.2/.github/workflows/diff-tour.yml

@@ -0,0 +1,27 @@
+# This GitHub Action imported from the shared action
+# https://github.com/sourcegraph/actions/blob/main/diff-tour/
+# Please make fixes / enhancements in the shared action,
+# so all of our repos get the benefits
+
+name: Diff Tour link
+
+on:
+  pull_request:
+    # `edited` fires when the base branch changes; `synchronize` does not
+    # `closed` fires on merge and on plain close; either way the comment is
+    # updated to a link that survives deleting the head branch
+    types: [closed, edited, opened, reopened, synchronize]
+
+# The only permission needed. The action does not check out your repo, so
+# `contents: read` is not required, even for private repos
+permissions:
+  pull-requests: write
+
+jobs:
+  diff-tour:
+    name: Comment
+    runs-on: ubuntu-latest
+    # Diff Tour resolves branch names against the base repo, so skip fork PRs
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    steps:
+      - uses: sourcegraph/actions/diff-tour@4430dc1e4dde002387a4b655b41f6431ca75b1c1 # main

{src_auth_perms_sync-0.8.0 → src_auth_perms_sync-0.8.2}/.github/workflows/release.yml

@@ -83,19 +83,19 @@ jobs:
 
     steps:
       - name: Check out release ref
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
           ref: ${{ needs.release_ref.outputs.tag }}
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Cache uv
-        uses: actions/cache@v6
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/uv
           key: uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-${{ hashFiles('uv.lock') }}
@@ -363,7 +363,7 @@ jobs:
           echo "path=${notes_path}" >> "${GITHUB_OUTPUT}"
 
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: ${{ env.ASSET_BASENAME }}
           path: |
@@ -372,7 +372,7 @@ jobs:
 
       - name: Upload project distribution release artifact
         if: matrix.platform == 'linux-x86_64'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: src-auth-perms-sync-project-distributions
           path: |
@@ -383,14 +383,14 @@ jobs:
 
       - name: Upload release notes artifact
         if: matrix.platform == 'linux-x86_64'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-notes
           path: ${{ steps.notes.outputs.path }}
 
       - name: Upload PyPI artifact
         if: matrix.platform == 'linux-x86_64'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: pypi-distributions
           path: |
@@ -406,14 +406,14 @@ jobs:
 
     steps:
       - name: Download wheelhouse artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           pattern: src-auth-perms-sync-*
           path: release-assets
           merge-multiple: true
 
       - name: Download release notes
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: release-notes
           path: release-notes
@@ -461,13 +461,13 @@ jobs:
 
     steps:
       - name: Download built distribution
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: pypi-distributions
           path: dist
 
       - name: Publish PyPI package
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
         with:
           packages-dir: dist
           skip-existing: true

{src_auth_perms_sync-0.8.0 → src_auth_perms_sync-0.8.2}/.github/workflows/validate.yml

@@ -98,7 +98,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           ref: ${{ inputs.ref || github.ref }}
@@ -131,13 +131,13 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Cache npm
-        uses: actions/cache@v6
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.npm
           key: npm-${{ runner.os }}-markdownlint-cli2-${{ env.MARKDOWNLINT_CLI2_VERSION }}-relative-links-${{ env.MARKDOWNLINT_RELATIVE_LINKS_VERSION }}
@@ -160,19 +160,19 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Cache uv
-        uses: actions/cache@v6
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/uv
           key: uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-${{ hashFiles('uv.lock') }}
@@ -215,19 +215,19 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v7
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           persist-credentials: false
           ref: ${{ inputs.ref || github.ref }}
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Cache uv
-        uses: actions/cache@v6
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.cache/uv
           key: uv-${{ runner.os }}-py${{ env.PYTHON_VERSION }}-${{ hashFiles('uv.lock') }}

{src_auth_perms_sync-0.8.0 → src_auth_perms_sync-0.8.2}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: src-auth-perms-sync
-Version: 0.8.0
+Version: 0.8.2
 Summary: Set Sourcegraph permissions from authentication provider data
 Project-URL: Homepage, https://github.com/sourcegraph/src-auth-perms-sync
 Project-URL: Issues, https://github.com/sourcegraph/src-auth-perms-sync/issues
@@ -16,9 +16,9 @@ Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
-Requires-Dist: json5>=0.15.0
+Requires-Dist: json5>=0.17.3
 Requires-Dist: pyyaml>=6.0.3
-Requires-Dist: src-py-lib[otel]==0.3.1
+Requires-Dist: src-py-lib[otel]==0.3.3
 Description-Content-Type: text/markdown
 
 # src-auth-perms-sync