dependabot[bot]
5e36a38569
build(deps): bump actions/download-artifact from 7 to 8
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-02 11:52:55 -05:00
dependabot[bot]
90eae7d14e
build(deps): bump actions/upload-artifact from 6 to 7
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-02 11:52:34 -05:00
dependabot[bot]
3a1d929e1b
build(deps): bump supercharge/mongodb-github-action
...
Bumps [supercharge/mongodb-github-action](https://github.com/supercharge/mongodb-github-action ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/supercharge/mongodb-github-action/releases )
- [Changelog](https://github.com/supercharge/mongodb-github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/supercharge/mongodb-github-action/compare/1.12.0...1.12.1 )
---
updated-dependencies:
- dependency-name: supercharge/mongodb-github-action
dependency-version: 1.12.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-29 11:25:22 -05:00
Feanil Patel
3829a84d1f
fix: Update the repo name in github workflows.
...
Some workflows had links or conditionals based on the old repo name so
update them to use the new repository name.
2026-01-27 11:10:48 -05:00
Feanil Patel
88ee0b11a5
Merge pull request #37860 from openedx/dependabot/github_actions/actions/download-artifact-7
...
build(deps): bump actions/download-artifact from 6 to 7
2026-01-12 15:37:29 -05:00
dependabot[bot]
39e16bf8b2
build(deps): bump actions/upload-artifact from 5 to 6
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-12 05:01:37 +00:00
dependabot[bot]
6307cb6dc4
build(deps): bump actions/download-artifact from 6 to 7
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-12 05:01:20 +00:00
Feanil Patel
fc85126869
Merge pull request #37672 from openedx/dependabot/github_actions/actions/checkout-6
...
build(deps): bump actions/checkout from 5 to 6
2026-01-09 12:41:55 -05:00
Feanil Patel
92adcdf785
Merge pull request #37548 from openedx/dependabot/github_actions/actions/download-artifact-6
...
chore(deps): bump actions/download-artifact from 5 to 6
2026-01-09 12:41:04 -05:00
Feanil Patel
31ce287d44
Merge pull request #37549 from openedx/dependabot/github_actions/actions/upload-artifact-5
...
chore(deps): bump actions/upload-artifact from 4 to 5
2026-01-09 12:24:02 -05:00
Usama Sadiq
e1747f3844
build: add support for Python 3.12 ( #37160 )
...
* build: add support for Python 3.12
2025-12-15 12:12:29 +05:00
dependabot[bot]
2f5a15bb9f
build(deps): bump actions/checkout from 5 to 6
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 04:06:25 +00:00
dependabot[bot]
01c1ecf040
chore(deps): bump actions/upload-artifact from 4 to 5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 04:12:59 +00:00
dependabot[bot]
795cd50763
chore(deps): bump actions/download-artifact from 5 to 6
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 04:11:57 +00:00
dependabot[bot]
ba56c0aa2d
chore(deps): bump actions/setup-python from 5 to 6
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-17 14:11:51 +00:00
Feanil Patel
073afac46a
Merge pull request #37460 from openedx/alert-autofix-332
...
Potential fix for code scanning alert no. 332: Workflow does not contain permissions
2025-10-17 09:56:08 -04:00
Feanil Patel
87c8e55f71
Merge pull request #37455 from open-craft/braden/merge-queue
...
build: enable CI checks in merge queues / merge groups on GitHub
2025-10-16 10:48:22 -04:00
Raymond Zhou
da2daf255e
feat: future proof artifact uploads ( #37464 )
2025-10-14 18:32:48 -04:00
Feanil Patel
6e7b6d866f
fix: explicityl set workflows that don't need write access to read-only
...
This came from a github security advisory suggestion but makes sense given that this workflow dosen't need to push content back.
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-10-10 10:43:37 -04:00
Braden MacDonald
272b1669c2
build: enable CI checks in merge queues / merge groups on GitHub
2025-10-09 14:31:31 -07:00
Awais Qureshi
daf5320981
Merge branch 'master' into final-dj52
2025-10-03 15:30:49 +05:00
Feanil Patel
ad5830a6c6
Merge pull request #37158 from openedx/dependabot/github_actions/actions/download-artifact-5
...
build(deps): bump actions/download-artifact from 4 to 5
2025-09-26 16:42:24 -04:00
Feanil Patel
09f73571f4
Merge pull request #37219 from openedx/dependabot/github_actions/actions/checkout-5
...
build(deps): bump actions/checkout from 4 to 5
2025-09-26 16:42:04 -04:00
Feanil Patel
643d5e5856
Merge pull request #35867 from openedx/dependabot/github_actions/codecov/codecov-action-5
...
build(deps): bump codecov/codecov-action from 4 to 5
2025-09-26 16:41:08 -04:00
Awais Qureshi
990f29f906
chore: Run unit tests only pinned which is 5.2
...
Removed Django version '5.2' from the workflow.
2025-09-24 16:29:56 +05:00
Awais Qureshi
62bf9e6acf
test: running tests with django52. ( #37357 )
2025-09-15 20:40:55 +05:00
dependabot[bot]
276df19d48
build(deps): bump actions/checkout from 4 to 5
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-18 06:55:23 +00:00
dependabot[bot]
b74380b14a
build(deps): bump actions/download-artifact from 4 to 5
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-11 06:09:01 +00:00
dependabot[bot]
9d524a91f1
build(deps): bump supercharge/mongodb-github-action
...
Bumps [supercharge/mongodb-github-action](https://github.com/supercharge/mongodb-github-action ) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/supercharge/mongodb-github-action/releases )
- [Changelog](https://github.com/supercharge/mongodb-github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/supercharge/mongodb-github-action/compare/1.11.0...1.12.0 )
---
updated-dependencies:
- dependency-name: supercharge/mongodb-github-action
dependency-version: 1.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-04 19:56:00 +00:00
Usama Sadiq
9b6074f967
Merge branch 'master' into dependabot/github_actions/codecov/codecov-action-5
2025-07-25 12:03:06 +05:00
Brian Mesick
749b3ebc82
build: Cache images in unit tests ( #36110 )
...
Another attempt to stop Dockerhub from rate limiting us in CI. If this
works here, we'll try to add this caching to other relevant workflows.
https://github.com/openedx/axim-engineering/issues/1350#issuecomment-2591237325
2025-01-15 10:05:07 -05:00
Kyle McCormick
290209b1b1
build: Don't fail the build if DockerHub login fails ( #36100 )
...
This iterates on https://github.com/openedx/edx-platform/pull/36089 , which
logged us into DockerHub during unit tests in order to reduce how often
DockerHub rate-limits us.
Forks will fail to log into DockerHub unless the fork owner configures their
own DockerHub creds. This PR is an attempt to make it so that unit tests don't
fail when DockerHub login fails.
2025-01-10 17:04:41 +00:00
Brian Mesick
042c0441b0
fix: Use correct secret name for dockerhub password
2025-01-09 15:41:21 -05:00
Brian Mesick
18cf33864d
build: Log in to dockerhub for unit test CI
...
We're being rate limited by dockerhub for pulling too many images in CI.
There isn't a greate solution for caching images for GH actions, but in
theory we should have less strict limits as an authenticated user.
2025-01-09 15:36:03 -05:00
Kyle D. McCormick
2d5543a9ae
feat!: Remove Paver
...
BREAKING CHANGE: Removes all remaining Paver commands including
`pavelib/prereqs.py:*` and `pavelib/assets.py:*`.
BREAKING CHANGE: Removes `./manage.py [lms|cms] compile_sass`, which
was just a wrapper around Paver commands.
BREAKING CHANGE: Removes paver.txt. Operators should install testing.txt
instead.
Part of: https://github.com/openedx/edx-platform/issues/34467
2025-01-02 14:05:15 -05:00
Muhammad Anas
0de7569b68
refactor!: remove md4 and related ENABLE_BLAKE2B_HASHING feature flag
2024-12-24 13:12:18 +05:00
dependabot[bot]
431fa0c1f4
build(deps): bump codecov/codecov-action from 4 to 5
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-11-18 04:18:47 +00:00
Feanil Patel
737b8e99dd
build: Test on both the old and new ubuntu version.
2024-11-05 10:44:02 -05:00
Feanil Patel
7c397bf1fc
build: Use a re-usable action to setup mongo.
...
Rather than doing the install ourselves and needing to keep the debion
source URL up-to-date, use a community action to handle installing
mongo.
2024-11-05 10:44:02 -05:00
Feanil Patel
799dcf35ec
build: Test on ubuntu 24.04
2024-11-05 10:44:02 -05:00
Diana Huang
8ee942e411
fix: Pin select jobs to ubuntu 22.04.
...
Using Ubuntu 24.04 breaks Mongo installation
and some thing involving lxml/xmlsec. We are
going to pin this until we're ready to upgrade both.
2024-10-11 10:58:42 -04:00
Diana Huang
96c682a25b
Revert "feat: Use jammy repositories for mongo installation."
...
This reverts commit a245dec4f4 .
2024-10-11 10:58:42 -04:00
Diana Huang
a245dec4f4
feat: Use jammy repositories for mongo installation.
...
Unclear if there was a change in the focal repositories
or if there was an issue with something else. The noble
repositories don't support 7.0, so we're stuck here
until we upgrade to 8.0.
2024-10-10 15:38:15 -04:00
Feanil Patel
1804fbb131
build!: enable md4 for testing.
...
Operators Note: In newer versions of ubuntu the MD4 hashing algorithm
is disabled by default. To enable it the openssl config needs to be
updated in a manner similar to what's being done here. Alternatively,
you can set the `FEATURES['ENABLE_BLAKE2B_HASHING']` setting to `True`
which will switch to a newer hashing algorithm where MD4 was previously
used.
Because this hashing is being used as a part of the edx-platform caching
mechanism, this will effectively clear the cache for the items that use
this hash. The will impact any items where the cache key might have been
too big to store in memcache so it's hard to predict exactly which items
will be impacted.
BREAKING CHANGE: See the operator note above for more details as this
may break for users transitioning from Ubuntu 20.04 to newer versions.
2024-09-23 10:47:49 -04:00
Feanil Patel
872174e28d
build: Switch to ubuntu-latest for builds
...
This code does not have any dependencies that are specific to any specific
version of ubuntu. So instead of testing on a specific version and then needing
to do work to keep the versions up-to-date, we switch to the ubuntu-latest
target which should be sufficient for testing purposes.
This work is being done as a part of https://github.com/openedx/platform-roadmap/issues/377
closes https://github.com/openedx/edx-platform/issues/35314
2024-09-23 10:00:14 -04:00
Irtaza Akram
4fa1a4b6b3
fix: github action artifact upload issue
2024-06-25 16:46:10 +05:00
Kyle McCormick
88a6855255
test: cancel old unit tests when a new PR commit is pushed ( #34909 )
...
Based on:
* https://docs.github.com/en/actions/using-jobs/using-concurrency#example-using-concurrency-and-the-default-behavior
* https://stackoverflow.com/questions/68418857/how-to-cancel-existing-runs-when-a-new-push-happens-on-github-actions-but-only
2024-06-05 08:26:04 -04:00
Kyle McCormick
b063dfc1ea
test: always run aggregate unit test check ( #34903 )
...
When a shard of unit-tests.yml fails, we want the `success` job to be
maked "Failed" (not "Skipped"). That's because "Failed" blocks the PR
from merging, whereas "Skipped" does not. This change ensures that
`success` always runs to completion rather than being cancelled as soon
as a unit test shard fails or is cancelled.
From https://github.com/marketplace/actions/alls-green#options :
> Important: For this to work properly, it is a must to have the job always run,
> otherwise GitHub will make it skipped when any of the dependencies fail. In
> some contexts, skipped is interpreted as success which may lead to undersired,
> unobvious and even dangerous (as in security breach "dangerous") side-effects.
Closes https://github.com/openedx/edx-platform/issues/34789
2024-06-04 10:15:51 -04:00
Emad Rad
6c5b98087e
chore: cleanup
...
- rst heading definitions
- indirect hyperlinks and code-blocks added for better readability
- MarkDown warnings resolved
- Yaml style issues fixed
2024-06-03 22:18:27 +03:30
Irtaza Akram
11e8b8ba90
fix: verify-and-collect issues
2024-05-30 15:00:49 -04:00