weave-python 0.50.0__tar.gz → 0.51.0__tar.gz

{weave_python-0.50.0 → weave_python-0.51.0}/.github/workflows/generate.yaml

@@ -15,7 +15,7 @@ jobs:
     runs-on: runs-on=${{ github.run_id }}/runner=linux-default
     steps:
       - name: Configure RunsOn features
-        uses: runs-on/action@v2
+        uses: runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60 # v2.1.2
 
       - id: stitch_auth
         uses: weave-labs/ci/.github/actions/stitch-auth@main
@@ -23,7 +23,7 @@ jobs:
           client-id: ${{ vars.STITCH_CLIENT_ID }}
           private-key: ${{ secrets.STITCH_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           persist-credentials: 'false'
 
@@ -31,12 +31,16 @@ jobs:
         id: mode
         run: |
           if [[ "${{ github.event.action }}" == "schema-branch-update" ]]; then
-            echo "is_branch=true" >> "$GITHUB_OUTPUT"
-            echo "branch=${{ github.event.client_payload.branch }}" >> "$GITHUB_OUTPUT"
-            echo "ref=${{ github.event.client_payload.ref }}" >> "$GITHUB_OUTPUT"
+            {
+              echo "is_branch=true"
+              echo "branch=${{ github.event.client_payload.branch }}"
+              echo "ref=${{ github.event.client_payload.ref }}"
+            } >> "$GITHUB_OUTPUT"
           else
-            echo "is_branch=false" >> "$GITHUB_OUTPUT"
-            echo "ref=${{ github.event.client_payload.ref }}" >> "$GITHUB_OUTPUT"
+            {
+              echo "is_branch=false"
+              echo "ref=${{ github.event.client_payload.ref }}"
+            } >> "$GITHUB_OUTPUT"
           fi
 
       - name: Setup feature branch
@@ -46,7 +50,7 @@ jobs:
           git checkout -B "${{ steps.mode.outputs.branch }}"
 
       - name: Checkout schema
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: schema
           persist-credentials: 'false'
@@ -55,20 +59,20 @@ jobs:
           token: ${{ steps.stitch_auth.outputs.token }}
 
       - name: Setup sqlc
-        uses: sqlc-dev/setup-sqlc@v5
+        uses: sqlc-dev/setup-sqlc@bac53b7fb28c039a6c7f5736fd1e89744021bdd6 # v5
         with:
           sqlc-version: '1.30.0'
 
       - name: Checkout sqlc-gen-python fork branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: sqlc-gen-python
           persist-credentials: 'false'
           repository: kellen-miller/sqlc-gen-python
-          ref: fix/copyfrom-and-empty-generated-classes
+          ref: 48bee471ed5ed804772808885fff46ebd86eaeee
 
       - name: Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version: "stable"
           cache: true
@@ -76,7 +80,7 @@ jobs:
 
       - name: Cache sqlc-gen-python wasm
         id: cache_sqlc_py_wasm
-        uses: actions/cache@v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: sqlc-gen-python/bin/sqlc-gen-python.wasm
           key: sqlc-gen-python-kellen-${{ hashFiles('sqlc-gen-python/go.sum', 'sqlc-gen-python/**/*.go') }}
@@ -87,17 +91,17 @@ jobs:
         working-directory: sqlc-gen-python
 
       - name: Setup buf
-        uses: bufbuild/buf-action@v1
+        uses: bufbuild/buf-action@fd21066df7214747548607aaa45548ba2b9bc1ff # v1
         with:
           setup_only: 'true'
 
       - name: Setup protoc
-        uses: arduino/setup-protoc@v3
+        uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           cache-dependency-glob: "uv.lock"
           enable-cache: true
@@ -105,10 +109,13 @@ jobs:
       - name: Create uv venv
         run: uv venv
 
-      - name: Install mypy-protobuf plugins (main)
+      - name: Install mypy-protobuf plugins
+        env:
+          # renovate: datasource=github-tags depName=nipunn1313/mypy-protobuf versioning=semver
+          MYPY_PROTOBUF_VERSION: v5.1.0
         run: |
-          uv pip install git+https://github.com/nipunn1313/mypy-protobuf.git@main
-          echo "${{ github.workspace }}/.venv/bin" >> $GITHUB_PATH
+          uv pip install "git+https://github.com/nipunn1313/mypy-protobuf.git@${MYPY_PROTOBUF_VERSION}"
+          echo "${{ github.workspace }}/.venv/bin" >> "$GITHUB_PATH"
 
       - name: Clear out gen previous api gen files
         uses: weave-labs/ci/.github/actions/clean-generated-output-dir@main
@@ -134,7 +141,7 @@ jobs:
       - name: Run uv sync
         run: uv sync
 
-      - uses: astral-sh/ruff-action@v4.0.0
+      - uses: astral-sh/ruff-action@0ce1b0bf8b818ef400413f810f8a11cdbda0034b # v4.0.0
         with:
           args: "--version"
       - run: ruff check --fix
@@ -143,18 +150,18 @@ jobs:
       - name: Check for changes
         id: check_changes
         run: |
-          if [[ -z $(git status --porcelain) ]]; then
+          if [[ -z "$(git status --porcelain)" ]]; then
             echo "No changes detected"
-            echo "has_changes=false" >> $GITHUB_OUTPUT
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
           else
             echo "Changes detected"
             git status
-            echo "has_changes=true" >> $GITHUB_OUTPUT
+            echo "has_changes=true" >> "$GITHUB_OUTPUT"
           fi
 
       - name: Create Pull Request
         if: steps.mode.outputs.is_branch == 'false' && steps.check_changes.outputs.has_changes == 'true'
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8
         with:
           base: 'main'
           delete-branch: 'true'

weave_python-0.51.0/.github/workflows/gh-actions-lint.yaml

@@ -0,0 +1,16 @@
+name: GitHub Actions lint
+
+on:
+  pull_request:
+    paths:
+      - ".github/**"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  checks: write
+  pull-requests: read
+
+jobs:
+  gh-actions-lint:
+    uses: weave-labs/ci/.github/workflows/gh-actions-lint.yaml@main

{weave_python-0.50.0 → weave_python-0.51.0}/.github/workflows/release.yaml

@@ -10,8 +10,7 @@ on:
       - .python-version
 
 permissions:
-  contents: write
-  id-token: write
+  contents: read
   actions: read
 
 jobs:
@@ -34,16 +33,19 @@ jobs:
     environment:
       name: pypi
       url: https://pypi.org/p/weave-python
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Configure RunsOn features
-        uses: runs-on/action@v2
+        uses: runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60 # v2.1.2
 
-      - uses: actions/download-artifact@v8
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
         with:
           name: dist
           path: dist/
 
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
         with:
           attestations: 'true'

{weave_python-0.50.0 → weave_python-0.51.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: weave-python
-Version: 0.50.0
+Version: 0.51.0
 Author: Weave Labs
 License: FCL-1.0-ALv2
 License-File: LICENSE