[Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.6 #42
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow may or may not run depending on the state of the next | |
| # unreleased Python version. DO NOT DELETE IT. | |
| # | |
| # In general, this file will remain frozen(present, but not running) until: | |
| # - The next unreleased Python version has released beta 1 | |
| # - This version should be available on Github Actions. | |
| # - Our required build/runtime dependencies(numpy, pytz, Cython, python-dateutil) | |
| # support that unreleased Python version. | |
| # To unfreeze, comment out the ``if: false`` condition, and make sure you update | |
| # the name of the workflow and Python version in actions/setup-python to: '3.12-dev' | |
| # | |
| # After it has been unfrozen, this file should remain unfrozen(present, and running) until: | |
| # - The next Python version has been officially released. | |
| # OR | |
| # - Most/All of our optional dependencies support Python 3.11 AND | |
| # - The next Python version has released a rc(we are guaranteed a stable ABI). | |
| # To freeze this file, uncomment out the ``if: false`` condition, and migrate the jobs | |
| # to the corresponding posix/windows-macos/sdist etc. workflows. | |
| # Feel free to modify this comment as necessary. | |
| name: Python Dev | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - 1.4.x | |
| pull_request: | |
| branches: | |
| - main | |
| - 1.4.x | |
| paths-ignore: | |
| - "doc/**" | |
| env: | |
| PYTEST_WORKERS: "auto" | |
| PANDAS_CI: 1 | |
| PATTERN: "not slow and not network and not clipboard and not single_cpu" | |
| COVERAGE: true | |
| PYTEST_TARGET: pandas | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| # if: false # Uncomment this to freeze the workflow, comment it to unfreeze | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, macOS-latest, windows-latest] | |
| name: actions-311-dev | |
| timeout-minutes: 80 | |
| concurrency: | |
| #https://github.community/t/concurrecy-not-work-for-push/183068/7 | |
| group: ${{ github.event_name == 'push' && github.run_number || github.ref }}-${{ matrix.os }}-${{ matrix.pytest_target }}-dev | |
| cancel-in-progress: true | |
| steps: | |
| - uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Python Dev Version | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.11-dev' | |
| - name: Install dependencies | |
| run: | | |
| python --version | |
| python -m pip install --upgrade pip setuptools wheel | |
| python -m pip install git+https://github.com/numpy/numpy.git | |
| python -m pip install git+https://github.com/nedbat/coveragepy.git | |
| python -m pip install python-dateutil pytz cython hypothesis==6.52.1 pytest>=6.2.5 pytest-xdist pytest-cov pytest-asyncio>=0.17 | |
| python -m pip list | |
| - name: Build Pandas | |
| run: | | |
| python setup.py build_ext -q -j2 | |
| python -m pip install -e . --no-build-isolation --no-use-pep517 | |
| - name: Build Version | |
| run: | | |
| python -c "import pandas; pandas.show_versions();" | |
| - name: Test | |
| uses: ./.github/actions/run-tests |