LucaZanni
f0896d775d
- crea gemelli X-github.yml per ogni reusable con action da github.com (fallback mirror gitea.com) - python-dependency-check/outdated: audit in venv isolata (fix falsi positivi da runner ML) - python-dependency-check/outdated: deduplica issue (commento invece di nuova issue) - examples: aggiungi ci-github.yml e release-github.yml in tutte le cartelle Fixes #3 @3h
109 lines
4.0 KiB
YAML
109 lines
4.0 KiB
YAML
name: Python Dependency Outdated
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
python-version:
|
|
type: string
|
|
default: '3.11'
|
|
install-extras:
|
|
type: string
|
|
default: 'dev'
|
|
working-directory:
|
|
type: string
|
|
default: '.'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
python-dependency-outdated:
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: ${{ inputs.working-directory }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: https://github.com/actions/checkout@v6
|
|
|
|
- name: Setup Python
|
|
uses: https://github.com/actions/setup-python@v5.2.0
|
|
with:
|
|
python-version: ${{ inputs.python-version || '3.11' }}
|
|
|
|
- name: Cache pip
|
|
uses: https://github.com/actions/cache@v4
|
|
with:
|
|
path: ~/.cache/pip
|
|
key: ${{ runner.os }}-pip-${{ inputs.python-version }}-${{ hashFiles('**/pyproject.toml', '**/requirements*.txt') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-pip-${{ inputs.python-version }}-
|
|
${{ runner.os }}-pip-
|
|
|
|
- name: Install dependencies (isolated venv)
|
|
run: |
|
|
# venv pulita: elenca come obsolete SOLO le dipendenze dichiarate dal repo,
|
|
# non i pacchetti globali del runner (torch/cuda/nvidia su runner ML/GPU)
|
|
python -m venv .audit-venv
|
|
.audit-venv/bin/pip install --upgrade pip
|
|
if [ -n "${{ inputs.install-extras }}" ]; then
|
|
.audit-venv/bin/pip install -e ".[${{ inputs.install-extras }}]"
|
|
elif [ -f requirements.txt ]; then
|
|
.audit-venv/bin/pip install -r requirements.txt
|
|
else
|
|
.audit-venv/bin/pip install -e "."
|
|
fi
|
|
|
|
- name: Check outdated packages
|
|
id: outdated
|
|
run: |
|
|
.audit-venv/bin/pip list --outdated --format=json > outdated.json 2>/dev/null || echo '[]' > outdated.json
|
|
COUNT=$(python3 -c "import json; print(len(json.load(open('outdated.json'))))")
|
|
echo "count=$COUNT" >> $GITHUB_OUTPUT
|
|
|
|
- name: Open or update issue if packages outdated
|
|
if: steps.outdated.outputs.count != '0'
|
|
env:
|
|
GITEA_TOKEN: ${{ gitea.token }}
|
|
SERVER_URL: ${{ gitea.server_url }}
|
|
REPOSITORY: ${{ gitea.repository }}
|
|
run: |
|
|
COUNT="${{ steps.outdated.outputs.count }}"
|
|
DATE=$(date '+%Y-%m-%d')
|
|
TITLE_PREFIX="Dipendenze Python:"
|
|
|
|
OUTDATED_LIST=$(python3 -c "
|
|
import json
|
|
try:
|
|
data = json.load(open('outdated.json'))
|
|
lines = [f\"- {p['name']}: {p['version']} → {p['latest_version']}\" for p in data[:20]]
|
|
print('\n'.join(lines))
|
|
except Exception:
|
|
print('N/A')
|
|
")
|
|
|
|
printf '## Dipendenze Python Obsolete — %s\n\n### Pacchetti da aggiornare: %s\n\n```\n%s\n```\n' \
|
|
"$DATE" "$COUNT" "$OUTDATED_LIST" > /tmp/body.md
|
|
|
|
# Deduplica: se esiste già una issue aperta con lo stesso prefisso,
|
|
# aggiungi un commento invece di aprirne una nuova
|
|
EXISTING=$(curl -s \
|
|
-H "Authorization: token $GITEA_TOKEN" \
|
|
"$SERVER_URL/api/v1/repos/$REPOSITORY/issues?state=open&type=issues&limit=50" \
|
|
| jq -r --arg p "$TITLE_PREFIX" '[.[] | select(.title | contains($p))] | (first // {}) | .number // empty')
|
|
|
|
if [ -n "$EXISTING" ]; then
|
|
curl -s -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: token $GITEA_TOKEN" \
|
|
"$SERVER_URL/api/v1/repos/$REPOSITORY/issues/$EXISTING/comments" \
|
|
-d "{ \"body\": $(jq -Rs . /tmp/body.md) }"
|
|
else
|
|
curl -s -X POST \
|
|
-H "Content-Type: application/json" \
|
|
-H "Authorization: token $GITEA_TOKEN" \
|
|
"$SERVER_URL/api/v1/repos/$REPOSITORY/issues" \
|
|
-d "{
|
|
\"title\": \"[$DATE] Dipendenze Python: $COUNT pacchetti obsoleti\",
|
|
\"body\": $(jq -Rs . /tmp/body.md)
|
|
}"
|
|
fi
|