From e7e41aa66af48ce2b89a42aae57bf62906fa3e3b Mon Sep 17 00:00:00 2001 From: Cadair <1391051+Cadair@users.noreply.github.com> Date: Wed, 21 Oct 2026 08:18:31 +0000 Subject: [PATCH 1/4] Run cruft update from package template --- .cruft.json | 4 ++-- .github/workflows/ci.yml | 2 +- .github/workflows/zizmor.yml | 4 ++++ .pre-commit-config.yaml | 2 +- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.cruft.json b/.cruft.json index e740733..d610d4a 100644 --- a/.cruft.json +++ b/.cruft.json @@ -1,6 +1,6 @@ { "template": "https://github.com/sunpy/package-template", - "commit": "10dab07c799a60c9fa7a948e743450a6883b3dd4", + "commit": "a9fbb6eca5e0a91e7b063690e207905919b94724", "checkout": null, "context": { "cookiecutter": { @@ -36,7 +36,7 @@ ".github/workflows/zizmor.yml" ], "_template": "https://github.com/sunpy/package-template", - "_commit": "10dab07c799a60c9fa7a948e743450a6883b3dd4" + "_commit": "a9fbb6eca5e0a91e7b063690e207905919b94724" } }, "directory": null diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4516d3d..9ba85f1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -135,7 +135,7 @@ jobs: name: pypi steps: - name: Download artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: merge-multiple: true pattern: dist-* diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 89d4dd8..efdf8c8 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -5,6 +5,10 @@ on: branches: ["main"] pull_request: branches: ["**"] + # Rescan weekly: an action can be disclosed as vulnerable while the repository is quiet. + # Not on the hour: GitHub delays or drops scheduled runs at the start of each hour. + schedule: + - cron: "17 7 * * 1" permissions: {} diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 8918219..2c084df 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,7 +1,7 @@ repos: # This should be before any formatting hooks like isort - repo: https://github.com/astral-sh/ruff-pre-commit - rev: "v0.17.0" + rev: "v0.17.1" hooks: - id: ruff-check args: ["--fix", "--show-fixes"] From 269f5204992b273693790cb0cb7cc4de89a68987 Mon Sep 17 00:00:00 2001 From: SunPyBot Date: Wed, 21 Oct 2026 10:32:53 +0000 Subject: [PATCH 2/4] Run cruft update from package template --- .cruft.json | 4 ++-- .github/workflows/ci.yml | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.cruft.json b/.cruft.json index d610d4a..7267b29 100644 --- a/.cruft.json +++ b/.cruft.json @@ -1,6 +1,6 @@ { "template": "https://github.com/sunpy/package-template", - "commit": "a9fbb6eca5e0a91e7b063690e207905919b94724", + "commit": "574c307ddd67c3b391f1525f50b87d7f42fd2e9d", "checkout": null, "context": { "cookiecutter": { @@ -36,7 +36,7 @@ ".github/workflows/zizmor.yml" ], "_template": "https://github.com/sunpy/package-template", - "_commit": "a9fbb6eca5e0a91e7b063690e207905919b94724" + "_commit": "574c307ddd67c3b391f1525f50b87d7f42fd2e9d" } }, "directory": null diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9ba85f1..434c39e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -60,10 +60,10 @@ jobs: - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.13' - - run: python -m pip install -U --user build + - run: python -m pip install -U --user build twine "validate-pyproject[all]" + - run: validate-pyproject pyproject.toml - run: python -m build . --sdist - - run: python -m pip install -U --user twine - - run: python -m twine check dist/* + - run: python -m twine check --strict dist/* test: needs: [core, sdist_verify] From b821bb7e0fb90f5423a241627ac910e7b6f5308e Mon Sep 17 00:00:00 2001 From: SunPyBot Date: Wed, 21 Oct 2026 10:43:20 +0000 Subject: [PATCH 3/4] Run cruft update from package template --- .cruft.json | 4 ++-- .github/workflows/ci.yml | 12 ++++++++---- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/.cruft.json b/.cruft.json index 7267b29..d43a14c 100644 --- a/.cruft.json +++ b/.cruft.json @@ -1,6 +1,6 @@ { "template": "https://github.com/sunpy/package-template", - "commit": "574c307ddd67c3b391f1525f50b87d7f42fd2e9d", + "commit": "1d66e77dcb4eb585d51e969e9fadc3c1660f33f5", "checkout": null, "context": { "cookiecutter": { @@ -36,7 +36,7 @@ ".github/workflows/zizmor.yml" ], "_template": "https://github.com/sunpy/package-template", - "_commit": "574c307ddd67c3b391f1525f50b87d7f42fd2e9d" + "_commit": "1d66e77dcb4eb585d51e969e9fadc3c1660f33f5" } }, "directory": null diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 434c39e..5a0fef1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -41,7 +41,7 @@ jobs: core: if: ${{ !github.event.repository.fork || github.event_name != 'schedule' }} - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14 # v3.1.0 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 permissions: id-token: write with: @@ -67,7 +67,7 @@ jobs: test: needs: [core, sdist_verify] - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14 # v3.1.0 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 permissions: id-token: write with: @@ -85,7 +85,7 @@ jobs: docs: needs: [core] - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14 # v3.1.0 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 with: default_python: '3.13' submodules: false @@ -107,7 +107,11 @@ jobs: contains(github.event.pull_request.labels.*.name, 'Run publish') ) needs: [test, docs] +<<<<<<< uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14 # v3.1.0 +======= + uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 +>>>>>>> with: sdist: true test_extras: 'tests' @@ -144,7 +148,7 @@ jobs: - run: ls -lha dist/ - name: Run upload - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 notify: if: ${{ !cancelled() && (github.event_name == 'workflow_dispatch' || github.event_name == 'schedule') }} From b43deea304ade8e50321b2cc53f2c7eb8f168b91 Mon Sep 17 00:00:00 2001 From: Stuart Mumford Date: Wed, 21 Oct 2026 12:29:12 +0100 Subject: [PATCH 4/4] Update ci.yml --- .github/workflows/ci.yml | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5a0fef1..f38d2f5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -107,11 +107,7 @@ jobs: contains(github.event.pull_request.labels.*.name, 'Run publish') ) needs: [test, docs] -<<<<<<< - uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14 # v3.1.0 -======= - uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 ->>>>>>> + uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish.yml@8c9f6c4af6750aa4b26765e8c312164efc226dfd # v3.2.0 with: sdist: true test_extras: 'tests'