sankalp/DevGen
1
0 Fork 0
Code Issues Pull Requests 8 Actions Packages Projects Releases 12 Wiki Activity
181 Commits 9 Branches 12 Tags
df1d1765d191f04cd7bf11f8f1d3149894150ce5
Commit Graph
16 Commits
Author SHA1 Message Date
sankalp df1d1765d1 ci: drop pyright typecheck job in favour of ruff 
The project uses ruff for lint+format, and pyright was redundant and
slow. The previous pyright run surfaced ~30 false positives from running
outside the venv plus 5 real-but-minor typing issues that don't justify
the extra CI minutes on a 0.2.x CLI.

CI now runs only ruff check, ruff format --check, and the import/CLI
smoke matrix on 3.10/3.11/3.12/3.13.
 2026-06-06 17:38:01 +05:45
sankalp 09ba5e9644 ci: add CodeQL, lint/typecheck/smoke CI, and dependency review 
- ci.yml: ruff check + format check, pyright typecheck, and import/CLI
  smoke test on Python 3.10/3.11/3.12/3.13 matrix. Uses uv like the
  existing pre-commit workflow for consistency.
- codeql.yml: weekly + push/PR Python security-and-quality analysis.
- dependency-review.yml: fail PRs adding high+ severity CVEs or copyleft
  licenses that would taint GPL-3.0 (AGPL, SSPL, BUSL).
 2026-06-06 17:31:31 +05:45
sankalp 850e88972e ci(dependabot): merge directly via squash instead of use-github-auto-merge 
The previous config required branch protection with required status checks,
but main has no protection rules configured, so auto-merge never fired and
PRs had to be merged manually.

Switch to direct squash merge in the action itself, which works regardless
of branch protection settings.
 2026-06-06 17:24:10 +05:45
sankalp cf637f34e8 Merge pull request #3 from S4NKALP/dependabot/github_actions/main/actions/checkout-6 
build(deps): bump actions/checkout from 4 to 6
 2026-03-06 20:32:30 +05:45
dependabot[bot] 81da7f1846 build(deps): bump actions/checkout from 4 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 14:00:04 +00:00
dependabot[bot] a01bdac09f build(deps): bump astral-sh/setup-uv from 4 to 7 
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 4 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v4...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-06 13:59:59 +00:00
sankalp b74fb8071a chore(.github/workflows): add dependabot auto-merge workflow 
New Features:
- Add dependabot auto-merge workflow (dependabot-auto-merge.yml)
 2026-03-06 19:44:27 +05:45
sankalp d135381ad5 chore(.github): add dependabot.yml for weekly dependency updates 
Add dependabot configuration to automate weekly updates of GitHub Actions and pip packages.

New Features
- Add Dependabot configuration for GitHub Actions and pip ecosystems with weekly schedule.

Enhancements
-

Bug Fixes
-
 2026-03-06 19:44:23 +05:45
sankalp f3c68aaf29 ci(.github/workflows): Update GitHub Actions and Python version 
This update refines the `publish.yml` workflow by bumping the versions of several GitHub Actions and adjusting the Python version used for publishing.

*   **Enhancements & Refinements**
    *   Updated `actions/checkout` from v4 to v6.
    *   Updated `actions/setup-python` from v4 to v6.
    *   Changed the target Python version for the workflow from 3.12 to 3.10.
 2025-12-12 18:56:25 +05:45
sankalp dec9c15b7a updates 2025-12-12 11:10:30 +05:45
sankalp b5362ade00 chore: add workflow to publish package to PyPI on release 2025-11-28 02:01:09 +05:45
sankalp 2e563fd8bb chore(release): update node version to v20 for release workflow 2025-08-25 16:34:38 +05:45
sankalp c483de6eea feat(release): add workflow to automatically publish package on release creation 2025-08-25 16:31:21 +05:45
sankalp 753bd00472 chore(release): update release workflow to trigger on tag creation 2025-08-25 16:26:27 +05:45
sankalp 35fe36b189 chore(publish): improve release workflow by upgrading pip and clarifying trigger event 2025-08-25 16:23:33 +05:45
sankalp 6c51d04df4 feat(ci): add workflow to publish package on release creation 2025-08-25 16:21:02 +05:45