109 Commits

Author SHA1 Message Date
dependabot[bot]
5e36a38569 build(deps): bump actions/download-artifact from 7 to 8
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-02 11:52:55 -05:00
dependabot[bot]
90eae7d14e build(deps): bump actions/upload-artifact from 6 to 7
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-02 11:52:34 -05:00
dependabot[bot]
3a1d929e1b build(deps): bump supercharge/mongodb-github-action
Bumps [supercharge/mongodb-github-action](https://github.com/supercharge/mongodb-github-action) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/supercharge/mongodb-github-action/releases)
- [Changelog](https://github.com/supercharge/mongodb-github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/supercharge/mongodb-github-action/compare/1.12.0...1.12.1)

---
updated-dependencies:
- dependency-name: supercharge/mongodb-github-action
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-29 11:25:22 -05:00
Feanil Patel
3829a84d1f fix: Update the repo name in github workflows.
Some workflows had links or conditionals based on the old repo name so
update them to use the new repository name.
2026-01-27 11:10:48 -05:00
Feanil Patel
88ee0b11a5 Merge pull request #37860 from openedx/dependabot/github_actions/actions/download-artifact-7
build(deps): bump actions/download-artifact from 6 to 7
2026-01-12 15:37:29 -05:00
dependabot[bot]
39e16bf8b2 build(deps): bump actions/upload-artifact from 5 to 6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-12 05:01:37 +00:00
dependabot[bot]
6307cb6dc4 build(deps): bump actions/download-artifact from 6 to 7
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-12 05:01:20 +00:00
Feanil Patel
fc85126869 Merge pull request #37672 from openedx/dependabot/github_actions/actions/checkout-6
build(deps): bump actions/checkout from 5 to 6
2026-01-09 12:41:55 -05:00
Feanil Patel
92adcdf785 Merge pull request #37548 from openedx/dependabot/github_actions/actions/download-artifact-6
chore(deps): bump actions/download-artifact from 5 to 6
2026-01-09 12:41:04 -05:00
Feanil Patel
31ce287d44 Merge pull request #37549 from openedx/dependabot/github_actions/actions/upload-artifact-5
chore(deps): bump actions/upload-artifact from 4 to 5
2026-01-09 12:24:02 -05:00
Usama Sadiq
e1747f3844 build: add support for Python 3.12 (#37160)
* build: add support for Python 3.12
2025-12-15 12:12:29 +05:00
dependabot[bot]
2f5a15bb9f build(deps): bump actions/checkout from 5 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 04:06:25 +00:00
dependabot[bot]
01c1ecf040 chore(deps): bump actions/upload-artifact from 4 to 5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 04:12:59 +00:00
dependabot[bot]
795cd50763 chore(deps): bump actions/download-artifact from 5 to 6
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 04:11:57 +00:00
dependabot[bot]
ba56c0aa2d chore(deps): bump actions/setup-python from 5 to 6
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-17 14:11:51 +00:00
Feanil Patel
073afac46a Merge pull request #37460 from openedx/alert-autofix-332
Potential fix for code scanning alert no. 332: Workflow does not contain permissions
2025-10-17 09:56:08 -04:00
Feanil Patel
87c8e55f71 Merge pull request #37455 from open-craft/braden/merge-queue
build: enable CI checks in merge queues / merge groups on GitHub
2025-10-16 10:48:22 -04:00
Raymond Zhou
da2daf255e feat: future proof artifact uploads (#37464) 2025-10-14 18:32:48 -04:00
Feanil Patel
6e7b6d866f fix: explicityl set workflows that don't need write access to read-only
This came from a github security advisory suggestion but makes sense given that this workflow dosen't need to push content back.

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-10-10 10:43:37 -04:00
Braden MacDonald
272b1669c2 build: enable CI checks in merge queues / merge groups on GitHub 2025-10-09 14:31:31 -07:00
Awais Qureshi
daf5320981 Merge branch 'master' into final-dj52 2025-10-03 15:30:49 +05:00
Feanil Patel
ad5830a6c6 Merge pull request #37158 from openedx/dependabot/github_actions/actions/download-artifact-5
build(deps): bump actions/download-artifact from 4 to 5
2025-09-26 16:42:24 -04:00
Feanil Patel
09f73571f4 Merge pull request #37219 from openedx/dependabot/github_actions/actions/checkout-5
build(deps): bump actions/checkout from 4 to 5
2025-09-26 16:42:04 -04:00
Feanil Patel
643d5e5856 Merge pull request #35867 from openedx/dependabot/github_actions/codecov/codecov-action-5
build(deps): bump codecov/codecov-action from 4 to 5
2025-09-26 16:41:08 -04:00
Awais Qureshi
990f29f906 chore: Run unit tests only pinned which is 5.2
Removed Django version '5.2' from the workflow.
2025-09-24 16:29:56 +05:00
Awais Qureshi
62bf9e6acf test: running tests with django52. (#37357) 2025-09-15 20:40:55 +05:00
dependabot[bot]
276df19d48 build(deps): bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-18 06:55:23 +00:00
dependabot[bot]
b74380b14a build(deps): bump actions/download-artifact from 4 to 5
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-11 06:09:01 +00:00
dependabot[bot]
9d524a91f1 build(deps): bump supercharge/mongodb-github-action
Bumps [supercharge/mongodb-github-action](https://github.com/supercharge/mongodb-github-action) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/supercharge/mongodb-github-action/releases)
- [Changelog](https://github.com/supercharge/mongodb-github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/supercharge/mongodb-github-action/compare/1.11.0...1.12.0)

---
updated-dependencies:
- dependency-name: supercharge/mongodb-github-action
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-04 19:56:00 +00:00
Usama Sadiq
9b6074f967 Merge branch 'master' into dependabot/github_actions/codecov/codecov-action-5 2025-07-25 12:03:06 +05:00
Brian Mesick
749b3ebc82 build: Cache images in unit tests (#36110)
Another attempt to stop Dockerhub from rate limiting us in CI. If this
works here, we'll try to add this caching to other relevant workflows.

https://github.com/openedx/axim-engineering/issues/1350#issuecomment-2591237325
2025-01-15 10:05:07 -05:00
Kyle McCormick
290209b1b1 build: Don't fail the build if DockerHub login fails (#36100)
This iterates on https://github.com/openedx/edx-platform/pull/36089, which
logged us into DockerHub during unit tests in order to reduce how often
DockerHub rate-limits us.

Forks will fail to log into DockerHub unless the fork owner configures their
own DockerHub creds. This PR is an attempt to make it so that unit tests don't
fail when DockerHub login fails.
2025-01-10 17:04:41 +00:00
Brian Mesick
042c0441b0 fix: Use correct secret name for dockerhub password 2025-01-09 15:41:21 -05:00
Brian Mesick
18cf33864d build: Log in to dockerhub for unit test CI
We're being rate limited by dockerhub for pulling too many images in CI.
There isn't a greate solution for caching images for GH actions, but in
theory we should have less strict limits as an authenticated user.
2025-01-09 15:36:03 -05:00
Kyle D. McCormick
2d5543a9ae feat!: Remove Paver
BREAKING CHANGE: Removes all remaining Paver commands including
`pavelib/prereqs.py:*` and `pavelib/assets.py:*`.

BREAKING CHANGE: Removes `./manage.py [lms|cms] compile_sass`, which
was just a wrapper around Paver commands.

BREAKING CHANGE: Removes paver.txt. Operators should install testing.txt
instead.

Part of: https://github.com/openedx/edx-platform/issues/34467
2025-01-02 14:05:15 -05:00
Muhammad Anas
0de7569b68 refactor!: remove md4 and related ENABLE_BLAKE2B_HASHING feature flag 2024-12-24 13:12:18 +05:00
dependabot[bot]
431fa0c1f4 build(deps): bump codecov/codecov-action from 4 to 5
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-18 04:18:47 +00:00
Feanil Patel
737b8e99dd build: Test on both the old and new ubuntu version. 2024-11-05 10:44:02 -05:00
Feanil Patel
7c397bf1fc build: Use a re-usable action to setup mongo.
Rather than doing the install ourselves and needing to keep the debion
source URL up-to-date, use a community action to handle installing
mongo.
2024-11-05 10:44:02 -05:00
Feanil Patel
799dcf35ec build: Test on ubuntu 24.04 2024-11-05 10:44:02 -05:00
Diana Huang
8ee942e411 fix: Pin select jobs to ubuntu 22.04.
Using Ubuntu 24.04 breaks Mongo installation
and some thing involving lxml/xmlsec. We are
going to pin this until we're ready to upgrade both.
2024-10-11 10:58:42 -04:00
Diana Huang
96c682a25b Revert "feat: Use jammy repositories for mongo installation."
This reverts commit a245dec4f4.
2024-10-11 10:58:42 -04:00
Diana Huang
a245dec4f4 feat: Use jammy repositories for mongo installation.
Unclear if there was a change in the focal repositories
or if there was an issue with something else. The noble
repositories don't support 7.0, so we're stuck here
until we upgrade to 8.0.
2024-10-10 15:38:15 -04:00
Feanil Patel
1804fbb131 build!: enable md4 for testing.
Operators Note: In newer versions of ubuntu the MD4 hashing algorithm
is disabled by default.  To enable it the openssl config needs to be
updated in a manner similar to what's being done here.  Alternatively,
you can set the `FEATURES['ENABLE_BLAKE2B_HASHING']` setting to `True`
which will switch to a newer hashing algorithm where MD4 was previously
used.

Because this hashing is being used as a part of the edx-platform caching
mechanism, this will effectively clear the cache for the items that use
this hash. The will impact any items where the cache key might have been
too big to store in memcache so it's hard to predict exactly which items
will be impacted.

BREAKING CHANGE: See the operator note above for more details as this
may break for users transitioning from Ubuntu 20.04 to newer versions.
2024-09-23 10:47:49 -04:00
Feanil Patel
872174e28d build: Switch to ubuntu-latest for builds
This code does not have any dependencies that are specific to any specific
version of ubuntu.  So instead of testing on a specific version and then needing
to do work to keep the versions up-to-date, we switch to the ubuntu-latest
target which should be sufficient for testing purposes.

This work is being done as a part of https://github.com/openedx/platform-roadmap/issues/377

closes https://github.com/openedx/edx-platform/issues/35314
2024-09-23 10:00:14 -04:00
Irtaza Akram
4fa1a4b6b3 fix: github action artifact upload issue 2024-06-25 16:46:10 +05:00
Kyle McCormick
88a6855255 test: cancel old unit tests when a new PR commit is pushed (#34909)
Based on: 
* https://docs.github.com/en/actions/using-jobs/using-concurrency#example-using-concurrency-and-the-default-behavior
* https://stackoverflow.com/questions/68418857/how-to-cancel-existing-runs-when-a-new-push-happens-on-github-actions-but-only
2024-06-05 08:26:04 -04:00
Kyle McCormick
b063dfc1ea test: always run aggregate unit test check (#34903)
When a shard of unit-tests.yml fails, we want the `success` job to be
maked "Failed" (not "Skipped"). That's because "Failed" blocks the PR
from merging, whereas "Skipped" does not. This change ensures that
`success` always runs to completion rather than being cancelled as soon
as a unit test shard fails or is cancelled.

From https://github.com/marketplace/actions/alls-green#options:

> Important: For this to work properly, it is a must to have the job always run,
> otherwise GitHub will make it skipped when any of the dependencies fail. In
> some contexts, skipped is interpreted as success which may lead to undersired,
> unobvious and even dangerous (as in security breach "dangerous") side-effects.

Closes https://github.com/openedx/edx-platform/issues/34789
2024-06-04 10:15:51 -04:00
Emad Rad
6c5b98087e chore: cleanup
- rst heading definitions
- indirect hyperlinks and code-blocks added for better readability
- MarkDown warnings resolved
- Yaml style issues fixed
2024-06-03 22:18:27 +03:30
Irtaza Akram
11e8b8ba90 fix: verify-and-collect issues 2024-05-30 15:00:49 -04:00