-
Notifications
You must be signed in to change notification settings - Fork 2.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Move coverage configurations to pyproject.toml
#3858
Conversation
.github/workflows/test.yml
Outdated
@@ -62,7 +62,7 @@ jobs: | |||
if: | |||
github.repository == 'psf/black' && matrix.os == 'ubuntu-latest' && | |||
!startsWith(matrix.python-version, 'pypy') | |||
uses: AndreMiras/coveralls-python-action@v20201129 | |||
uses: AndreMiras/coveralls-python-action@develop |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should pin to a specific version for security.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, I'd also prefer to depend on dependabot to update this ... Is there a feature you needed in develop tag / branch?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tags are mutable, if we care about security don't we need a hash rather than v20201129
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Make sense, updated to commit id.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sweet - Will have to update all my other projects ...
Do we want a change log here? I don't feel we need one ... |
Thanks for the PR @jnhyperion, congrats on your first PR here! 🎉 |
File
.coveragerc
is no longer needed since librarycoverage
already support configurations inpyproject.toml
.