d798b9b8fb
[ci] Fix broken Windows PyPy tests ( #17347 )
...
Workaround for https://github.com/actions/setup-python/issues/1348
Authored by: bashonly
2026-08-04 05:01:09 +00:00
84db5246fa
[ci] Update 5 actions in 8 workflows ( #17024 )
...
* Bump actions/cache v5.0.5 => v6.1.0
* Bump actions/setup-python v6.2.0 => v6.3.0
* Bump docker/setup-qemu-action v4.1.0 => v4.2.0
* Bump github/codeql-action v4.36.2 => v4.36.3
* Bump zizmorcore/zizmor-action v0.5.6 => v0.5.7
Authored by: dlp-bot
2026-07-02 18:18:59 +00:00
da99b21b2d
[ci] Bump actions/checkout v6.0.3 => v7.0.0 ( #17015 )
...
Authored by: dlp-bot
2026-06-20 23:11:44 +00:00
59bba1be7b
[ci] Update 3 actions in 9 workflows ( #16782 )
...
* Bump actions/checkout v6.0.2 => v6.0.3
* Bump docker/setup-qemu-action v4.0.0 => v4.1.0
* Bump github/codeql-action v4.35.5 => v4.36.2
Authored by: dlp-bot
2026-06-09 00:52:34 +00:00
7aac95eae6
[ci] Test with Python 3.15 ( #16896 )
...
Authored by: bashonly
2026-06-06 21:08:51 +00:00
98e42eb044
[ie/youtube] Drop support for bun<1.2.11 and bun>1.3.14 ( #16786 )
...
Closes #16766
Authored by: bashonly
2026-05-24 23:07:42 +00:00
b536d72c86
[ie/youtube] Drop support for node<22 ( #16787 )
...
Closes #16765
Authored by: bashonly
2026-05-24 22:56:27 +00:00
e534a32619
[ie/youtube] Drop support for deno<2.3.0 ( #16788 )
...
Closes #16767
Authored by: bashonly
2026-05-24 22:49:00 +00:00
32f1671a90
[build] Rename requirements files to clean up dependency graph ( #16740 )
...
Authored by: bashonly
2026-05-16 20:30:45 +00:00
a85b386212
[ci] Update 8 actions in 7 workflows ( #16384 )
...
* Bump actions/cache v5.0.3 => v5.0.5
* Bump actions/setup-node v6.3.0 => v6.4.0
* Bump actions/upload-artifact v7.0.0 => v7.0.1
* Bump denoland/setup-deno v2.0.3 => v2.0.4
* Bump github/codeql-action v4.33.0 => v4.35.2
* Bump pypa/gh-action-pypi-publish v1.13.0 => v1.14.0
* Bump rhysd/actionlint 1.7.11 => 1.7.12
* Bump zizmorcore/zizmor-action v0.5.2 => v0.5.3
Authored by: bashonly
2026-05-16 00:24:12 +00:00
3a12be701c
[cleanup] Misc ( #16630 )
...
* Fix PyPy dependency issue with cffi
* Export requirements files from dependency groups
* Simplify bundle targets & rework build flow
* Code cleanup & type annotation fixes
* Update FFmpeg-Builds status in README
Authored by: bashonly
2026-05-05 22:00:57 +00:00
35684c1171
[cleanup] Misc ( #16452 )
...
* Include `pin*` extras in lockfile
* Fix and clean up `devscripts/update_requirements.py`
* Improve release channel documentation
* Remove false statement from `--prefer-insecure` documentation
* Assorted code cleanup
* Set `GH_TELEMETRY=false` in CI/CD whenever `gh` is used
* Add comments about required checks in CI workflows
* Run `test-workflows.yml` for every PR so its checks can be required
* Verify actionlint attestation in CI
* Remove zizmor version to reduce workflow maintenance burden
(zizmor-action handles pinning on its end)
Authored by: bashonly
2026-05-03 22:19:08 +00:00
87eaf886f5
[build] Harden build/release workflows ( #16358 )
...
Authored by: bashonly, Grub4K
Co-authored-by: Simon Sawicki <contact@grub4k.dev >
2026-03-28 00:10:58 +00:00
4fc768b7f7
[ci] Bump actions pins ( #16252 )
...
* Bump actions/cache v5.0.2 → v5.0.3
* Bump actions/download-artifact v7.0.0 → v8.0.1
* Bump actions/setup-node v6.2.0 → v6.3.0
* Bump actions/upload-artifact v6.0.0 → v7.0.0
* Bump docker/setup-qemu-action v3.7.0 → v4.0.0
* Bump github/codeql-action v4.31.9 → v4.33.0
* Bump oven-sh/setup-bun v2.1.2 → v2.2.0
* Bump zizmorcore/zizmor-action v0.4.1 → v0.5.2
* Bump actionlint v1.7.9 → v1.7.11
* Bump zizmor v1.22.0 → v1.23.1
* Adapt zizmor configuration to new version
Authored by: bashonly
2026-03-17 18:04:32 +00:00
9a9a6b6fe4
[cleanup] Misc ( #15788 )
...
Authored by: bashonly
2026-01-31 23:50:20 +00:00
a65349443b
[cleanup] Misc ( #15430 )
...
Authored by: bashonly, Grub4K, seproDev
Co-authored-by: sepro <sepro@sepr0.com >
Co-authored-by: Simon Sawicki <contact@grub4k.dev >
2026-01-29 16:22:35 +00:00
ab3ff2d5dd
[build] Harden CI/CD pipeline ( #15387 )
...
* NOTE: the release workflows' new handling of secrets
may be a breaking change for forks that are using any secrets
other than GPG_SIGNING_KEY or ARCHIVE_REPO_TOKEN.
Previously, the release workflow would try to resolve a token
secret name based on the `target` or `source` input,
e.g. NIGHTLY_ARCHIVE_REPO_TOKEN or CUSTOM_ARCHIVE_REPO_TOKEN,
and then fall back to using the ARCHIVE_REPO_TOKEN secret if the
resolved token secret name was not found in the repository.
This behavior has been replaced by the release workflow
always using the ARCHIVE_REPO_TOKEN secret as the token
for publishing releases to any external archive repository.
* Add zizmor CI job for auditing workflows
* Pin all actions to commit hashes instead of symbolic references
* Explicitly set GITHUB_TOKEN permissions at the job level
* Use actions/checkout with `persist-credentials: false` whenever possible
* Remove/replace template expansions in workflow scripts
* Remove all usage of actions/cache from build/release workflows
* Remove the cache-warmer.yml workflow
* Remove the unused download.yml workflow
* Set concurrency limits for any workflows that are triggered by PRs
* Avoid loading the entire secrets context
* Replace usage of `secrets: inherit` with explicit `secrets:` blocks
* Pin all external docker images to hash that are used by the build workflow
* Explicitly set `shell: bash` for some steps to avoid pwsh or set pipefail
* Ensure any pwsh steps will fail on non-zero exit codes
Authored by: bashonly
2025-12-30 21:05:10 +00:00
a6a8f6b6d6
[ci] Explicitly declare permissions and limit credentials ( #15324 )
...
Authored by: bashonly
2025-12-19 19:22:23 +00:00
7a52ff29d8
[cleanup] Misc ( #15016 )
...
Closes #15160 , Closes #15184
Authored by: bashonly, seproDev, RezSat, oxyzenQ
Co-authored-by: sepro <sepro@sepr0.com >
Co-authored-by: Yehan Wasura <yehantest@gmail.com >
Co-authored-by: rezky_nightky <with.rezky@gmail.com >
2025-12-07 23:58:34 +00:00
29fe515d8d
[devscripts] install_deps: Align options/terms with PEP 735 ( #15200 )
...
Authored by: bashonly
2025-12-07 23:39:05 +00:00
6224a38988
[ie/youtube] Implement external n/sig solver ( #14157 )
...
Challenge Tests / Challenge Tests (ubuntu-latest, 3.10) (push) Has been cancelled
Challenge Tests / Challenge Tests (ubuntu-latest, 3.11) (push) Has been cancelled
Challenge Tests / Challenge Tests (ubuntu-latest, 3.12) (push) Has been cancelled
Challenge Tests / Challenge Tests (ubuntu-latest, 3.13) (push) Has been cancelled
Challenge Tests / Challenge Tests (ubuntu-latest, 3.14) (push) Has been cancelled
Challenge Tests / Challenge Tests (ubuntu-latest, pypy-3.11) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, 3.10) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, 3.11) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, 3.12) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, 3.13) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, 3.14) (push) Has been cancelled
Challenge Tests / Challenge Tests (windows-latest, pypy-3.11) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
Core Tests / Core Tests (ubuntu-latest, 3.11) (push) Has been cancelled
Core Tests / Core Tests (ubuntu-latest, 3.12) (push) Has been cancelled
Core Tests / Core Tests (ubuntu-latest, 3.13) (push) Has been cancelled
Core Tests / Core Tests (ubuntu-latest, 3.14) (push) Has been cancelled
Core Tests / Core Tests (ubuntu-latest, pypy-3.11) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, 3.10) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, 3.11) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, 3.12) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, 3.13) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, 3.14) (push) Has been cancelled
Core Tests / Core Tests (windows-latest, pypy-3.11) (push) Has been cancelled
Download Tests / Quick Download Tests (push) Has been cancelled
Download Tests / Full Download Tests (ubuntu-latest, 3.11) (push) Has been cancelled
Download Tests / Full Download Tests (ubuntu-latest, 3.12) (push) Has been cancelled
Download Tests / Full Download Tests (ubuntu-latest, 3.13) (push) Has been cancelled
Download Tests / Full Download Tests (ubuntu-latest, 3.14) (push) Has been cancelled
Download Tests / Full Download Tests (ubuntu-latest, pypy-3.11) (push) Has been cancelled
Download Tests / Full Download Tests (windows-latest, 3.10) (push) Has been cancelled
Download Tests / Full Download Tests (windows-latest, pypy-3.11) (push) Has been cancelled
Quick Test / Core Test (push) Has been cancelled
Quick Test / Code check (push) Has been cancelled
Release (master) / release (push) Has been cancelled
Release (master) / publish_pypi (push) Has been cancelled
Test and lint workflows / Check workflows (push) Has been cancelled
Closes #14404 , Closes #14431 , Closes #14680 , Closes #14707
Authored by: bashonly, coletdjnz, seproDev, Grub4K
Co-authored-by: coletdjnz <coletdjnz@protonmail.com >
Co-authored-by: bashonly <bashonly@protonmail.com >
Co-authored-by: sepro <sepro@sepr0.com >
2025-10-31 23:13:04 +01:00
bashonly
dlp-bot
Simon Sawicki