#10189 chore: Update dev dependencies
Pull request opened by
edgarrmondragon
Description
SSIA
Checklist
• I have read the
contribution guide
Was generative AI tooling used to co-author this PR?
• Yes (please specify the tool below)
Related Issues
• Closes #XXXX
Summary by Sourcery
Update CI and development tooling while keeping tests and workflows compatible with newer dependencies.
New Features:
• Configure Zizmor via a dedicated .github/zizmor.yml file.
Bug Fixes:
• Adjust integration test dbt-postgres log assertion to account for REUSED counts in output.
• Stabilize S3 state store tests by explicitly setting AWS-related environment variables during test setup.
• Ensure CodeQL alert counting ignores previously dismissed alerts when evaluating scan results.
Enhancements:
• Align SQLAlchemy model imports by removing obsolete noqa comments on ORM types.
• Broaden integration test workflow triggers to cover the entire integration directory instead of a single subdirectory.
• Update pytest fixtures in several test classes to class-level factories for better compatibility with newer pytest versions.
• Fix a typo in a docs SCSS comment.
Build:
• Update multiple GitHub Actions (checkout, setup-python, setup-uv, docker, CodeQL, CodSpeed, PyPI publish, release, and login actions) to newer pinned versions in workflows and composite actions.
• Refresh pre-commit hook versions for JSON schema checks, ESLint, Ruff, uv, and typos linters.
• Configure Dependabot with a default 7-day cooldown between updates for GitHub Actions dependencies.
CI:
• Tune CodeQL and Zizmor workflows to use updated CodeQL actions and to upload SARIF results under consistent configuration.
meltano/meltano