sankalp/DevGen
1
0 Fork 0
Code Issues Pull Requests 8 Actions Packages Projects Releases 12 Wiki Activity
221 Commits 9 Branches 12 Tags
277f197a71da6e99cdb98f11fc5a3587fd044ae4
Commit Graph
22 Commits
Author SHA1 Message Date
sankalp 277f197a71 fix(.github/workflows): change fail-on-scopes to runtime 
Update CI to enforce runtime dependency reviews, improving coverage of actual runtime packages.
 2026-07-03 18:26:35 +05:45
sankalp a43e09e924 feat(.github/workflows): enable auto-merge for dependabot 
Allow automatic merging of Dependabot PRs to keep the repository up‑to‑date without manual intervention.
 2026-06-16 15:43:46 +05:45
sankalp 186d952fda Merge pull request #58 from S4NKALP/dependabot/github_actions/main/github/codeql-action-4 
build(deps): bump github/codeql-action from 3 to 4
 2026-06-13 15:13:59 +05:45
dependabot[bot] 9e6c846790 build(deps): bump actions/dependency-review-action from 4 to 5 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:28:12 +00:00
sankalp f007c7c579 chore(.github/workflows):switch fail-on-scopes from changes to direct 2026-06-13 15:11:43 +05:45
dependabot[bot] 8c63406126 build(deps): bump github/codeql-action from 3 to 4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-13 09:24:51 +00:00
sankalp 91500f634a chore(.github/workflows): remove vuln-check-non-vulnerable-refs flag 
Removed the flag that disabled vulnerability checks for non‑vulnerable refs; allow default security behavior.
 2026-06-13 15:07:07 +05:45
sankalp df1d1765d1 ci: drop pyright typecheck job in favour of ruff 
The project uses ruff for lint+format, and pyright was redundant and
slow. The previous pyright run surfaced ~30 false positives from running
outside the venv plus 5 real-but-minor typing issues that don't justify
the extra CI minutes on a 0.2.x CLI.

CI now runs only ruff check, ruff format --check, and the import/CLI
smoke matrix on 3.10/3.11/3.12/3.13.
 2026-06-06 17:38:01 +05:45
sankalp 09ba5e9644 ci: add CodeQL, lint/typecheck/smoke CI, and dependency review 
- ci.yml: ruff check + format check, pyright typecheck, and import/CLI
  smoke test on Python 3.10/3.11/3.12/3.13 matrix. Uses uv like the
  existing pre-commit workflow for consistency.
- codeql.yml: weekly + push/PR Python security-and-quality analysis.
- dependency-review.yml: fail PRs adding high+ severity CVEs or copyleft
  licenses that would taint GPL-3.0 (AGPL, SSPL, BUSL).
 2026-06-06 17:31:31 +05:45
sankalp 850e88972e ci(dependabot): merge directly via squash instead of use-github-auto-merge 
The previous config required branch protection with required status checks,
but main has no protection rules configured, so auto-merge never fired and
PRs had to be merged manually.

Switch to direct squash merge in the action itself, which works regardless
of branch protection settings.
 2026-06-06 17:24:10 +05:45
sankalp cf637f34e8 Merge pull request #3 from S4NKALP/dependabot/github_actions/main/actions/checkout-6 
build(deps): bump actions/checkout from 4 to 6
 2026-03-06 20:32:30 +05:45
dependabot[bot] 81da7f1846 build(deps): bump actions/checkout from 4 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 14:00:04 +00:00
dependabot[bot] a01bdac09f build(deps): bump astral-sh/setup-uv from 4 to 7 
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 4 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v4...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 13:59:59 +00:00
sankalp b74fb8071a chore(.github/workflows): add dependabot auto-merge workflow 
New Features:
- Add dependabot auto-merge workflow (dependabot-auto-merge.yml)
 2026-03-06 19:44:27 +05:45
sankalp f3c68aaf29 ci(.github/workflows): Update GitHub Actions and Python version 
This update refines the `publish.yml` workflow by bumping the versions of several GitHub Actions and adjusting the Python version used for publishing.

*   **Enhancements & Refinements**
    *   Updated `actions/checkout` from v4 to v6.
    *   Updated `actions/setup-python` from v4 to v6.
    *   Changed the target Python version for the workflow from 3.12 to 3.10.
 2025-12-12 18:56:25 +05:45
sankalp dec9c15b7a updates 2025-12-12 11:10:30 +05:45
sankalp b5362ade00 chore: add workflow to publish package to PyPI on release 2025-11-28 02:01:09 +05:45
sankalp 2e563fd8bb chore(release): update node version to v20 for release workflow 2025-08-25 16:34:38 +05:45
sankalp c483de6eea feat(release): add workflow to automatically publish package on release creation 2025-08-25 16:31:21 +05:45
sankalp 753bd00472 chore(release): update release workflow to trigger on tag creation 2025-08-25 16:26:27 +05:45
sankalp 35fe36b189 chore(publish): improve release workflow by upgrading pip and clarifying trigger event 2025-08-25 16:23:33 +05:45
sankalp 6c51d04df4 feat(ci): add workflow to publish package on release creation 2025-08-25 16:21:02 +05:45