mirror of
https://github.com/instaloader/instaloader.git
synced 2026-10-24 01:19:38 -07:00
Andreas FehlnerandAlexander Graf
1e58dddb1f
## What this changes This PR adds Dependabot configuration and hardens GitHub Actions checkout behavior. ## Dependabot - adds .github/dependabot.yml - enables grouped dependency updates - schedules updates monthly - configures a 7-day cooldown to avoid rapid follow-up bumps - includes GitHub Actions updates Configured update scopes: - pip in / - github-actions in / ## GitHub Actions hardening Sets persist-credentials: false for ctions/checkout@v4 in: - .github/workflows/windows_exe.yml - .github/workflows/packages.yml - .github/workflows/lint.yml - .github/workflows/documentation.yml ## Why - grouped updates reduce PR noise - monthly cadence is lower maintenance - cooldown helps avoid update churn - disabling persisted checkout credentials follows least-privilege CI practices --------- Co-authored-by: Alexander Graf <17130992+aandergr@users.noreply.github.com>
42 lines
1.5 KiB
YAML
42 lines
1.5 KiB
YAML
name: Windows EXE build
|
|
|
|
on: [push, pull_request]
|
|
|
|
jobs:
|
|
build:
|
|
name: Windows EXE build
|
|
runs-on: windows-latest
|
|
steps:
|
|
- name: Checkout Instaloader repository
|
|
uses: actions/checkout@v7
|
|
with:
|
|
persist-credentials: false
|
|
- name: Setup Python
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: "3.14"
|
|
cache: 'pipenv'
|
|
architecture: x64
|
|
- name: Get the tagged version
|
|
id: get_version
|
|
env:
|
|
GITHUB_REF: ${{ github.ref }}
|
|
run: echo "VERSION=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_OUTPUT
|
|
shell: bash
|
|
- name: Run custom python script for EXE creation
|
|
env:
|
|
VERSION_TAG: v${{ steps.get_version.outputs.VERSION }}
|
|
run: python deploy/windows/create_exe.py
|
|
- name: Create draft release and upload EXE as release asset
|
|
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
|
|
id: create_release
|
|
uses: softprops/action-gh-release@v3
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
with:
|
|
tag_name: v${{ steps.get_version.outputs.VERSION }}
|
|
name: Version ${{ steps.get_version.outputs.VERSION }}
|
|
draft: true
|
|
prerelease: contains(steps.get_version.outputs.VERSION, 'a') || contains(steps.get_version.outputs.VERSION, 'b') || contains(steps.get_version.outputs.VERSION, 'c')
|
|
files: ./instaloader-v${{ steps.get_version.outputs.VERSION }}-windows-standalone.zip
|