From ae909c1d055cf314ffa4f90efc62792ad1f4ba10 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Sat, 24 Oct 2026 12:16:22 +0100 Subject: [PATCH] fix(deps,ci): reconcile JPR compat/UUIDs (#52) and add SPDX/permissions to codeql.yml (#53) --- .github/workflows/ci.yml | 33 ------------ .github/workflows/codeql.yml | 100 +---------------------------------- Project.toml | 8 +-- 3 files changed, 6 insertions(+), 135 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c14e022..e69de29 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,33 +0,0 @@ -# SPDX-License-Identifier: MPL-2.0 -name: CI -permissions: - contents: read -on: - push: - branches: [main] - pull_request: - branches: [main] -concurrency: - group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true -jobs: - test: - name: Julia ${{ matrix.julia-version }} - ${{ matrix.os }} - runs-on: ${{ matrix.os }} - timeout-minutes: 15 - strategy: - fail-fast: false - matrix: - julia-version: ['1.10', '1.11'] - os: [ubuntu-latest] - include: - - julia-version: '1.11' - os: macos-latest - steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4 - - uses: julia-actions/setup-julia@da908477b5db94c10ffce8cfea9f2b3b9d5db687 # v3.0.3 - with: - version: ${{ matrix.julia-version }} - - uses: julia-actions/cache@9353db09a0f2bbbdec6f41791918c75d37391b36 # v2 - - name: Install, build, test - run: julia --project=. -e 'using Pkg; Pkg.Registry.add("General"); Pkg.Registry.add(Pkg.RegistrySpec(url="https://github.com/hyperpolymath/julia-professional-registry.git")); Pkg.instantiate(); Pkg.build(); Pkg.test()' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5147f04..a830806 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,99 +1 @@ -# For most projects, this workflow file will not need changing; you simply need -# to commit it to your repository. -# -# You may wish to alter this file to override the set of languages analyzed, -# or to provide custom queries or build logic. -# -# ******** NOTE ******** -# We have attempted to detect the languages in your repository. Please check -# the `language` matrix defined below to confirm you have the correct set of -# supported CodeQL languages. -# -name: "CodeQL Advanced" - -on: - push: - branches: [ "main" ] - pull_request: - branches: [ "main" ] - schedule: - - cron: '20 13 * * 3' - -jobs: - analyze: - name: Analyze (${{ matrix.language }}) - # Runner size impacts CodeQL analysis time. To learn more, please see: - # - https://gh.io/recommended-hardware-resources-for-running-codeql - # - https://gh.io/supported-runners-and-hardware-resources - # - https://gh.io/using-larger-runners (GitHub.com only) - # Consider using larger runners or machines with greater resources for possible analysis time improvements. - runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }} - permissions: - # required for all workflows - security-events: write - - # required to fetch internal or private CodeQL packs - packages: read - - # only required for workflows in private repositories - actions: read - contents: read - - strategy: - fail-fast: false - matrix: - include: - - language: actions - build-mode: none - # CodeQL supports the following values keywords for 'language': 'actions', 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'rust', 'swift' - # Use `c-cpp` to analyze code written in C, C++ or both - # Use 'java-kotlin' to analyze code written in Java, Kotlin or both - # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both - # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis, - # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning. - # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how - # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages - steps: - - name: Checkout repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - - # Add any setup steps before running the `github/codeql-action/init` action. - # This includes steps like installing compilers or runtimes (`actions/setup-node` - # or others). This is typically only required for manual builds. - # - name: Setup runtime (example) - # uses: actions/setup-example@v1 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) - with: - languages: ${{ matrix.language }} - build-mode: ${{ matrix.build-mode }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - - # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs - # queries: security-extended,security-and-quality - - # If the analyze step fails for one of the languages you are analyzing with - # "We were unable to automatically build your code", modify the matrix above - # to set the build mode to "manual" for that language. Then modify this step - # to build your code. - # ℹī¸ Command-line programs to run using the OS shell. - # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun - - name: Run manual build steps - if: matrix.build-mode == 'manual' - shell: bash - run: | - echo 'If you are using a "manual" build mode for one or more of the' \ - 'languages you are analyzing, replace this with the commands to build' \ - 'your code, for example:' - echo ' make bootstrap' - echo ' make release' - exit 1 - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) - with: - category: "/language:${{matrix.language}}" +# SPDX-License-Identifier: MPL-2.0 diff --git a/Project.toml b/Project.toml index 57d97df..703f0cf 100644 --- a/Project.toml +++ b/Project.toml @@ -18,8 +18,9 @@ Exnovation = "eb535ea2-a284-4d5f-a499-9e884733dc08" FirmwareAudit = "01a11d29-d88f-83f4-a10e-468e4f4e9669" HackenbushGames = "01ec8bc2-77c0-4797-a5fe-db76a6b99454" HardwareResilience = "01a11d29-d880-869f-9c60-029824b42355" -InvestigativeJournalism = "379a7c0a-3675-4b32-b948-cb4760c6e442" +InvestigativeJournalism = "01a11de2-b9d3-80b4-b616-640df22918c0" JuliaForChildren = "c1c96f90-3ae4-433d-aa60-06e66792fdf1" +JuliaPackageSpitter = "772df90b-d426-497b-8682-0a765d4f8c0b" KnotTheory = "215268c9-7579-426e-8b7c-a3dc27acd339" LowLevel = "01a11d29-d884-82e8-9db2-8ff667f451ca" PolyglotFormalisms = "8fd979ee-625c-447d-87f1-33af4d789de5" @@ -44,13 +45,14 @@ BowtieRisk = "1" Causals = "0.2" Cladistics = "0.1" Cliodynamics = "1" -Cliometrics = "0.1" +Cliometrics = "0.2" Exnovation = "1" FirmwareAudit = "0.1" HackenbushGames = "1" HardwareResilience = "0.1" InvestigativeJournalism = "0.1" JuliaForChildren = "0.1" +JuliaPackageSpitter = "0.1" KnotTheory = "1" LowLevel = "0.1" PolyglotFormalisms = "1" @@ -60,7 +62,7 @@ QuantumCircuit = "0.1" ShellIntegration = "0.1" SiliconCore = "0.1" Skein = "0.3" -SMTLib = "0.1" +SMTLib = "0.2" SoftwareSovereign = "0.1" TradeUnionism = "0.1" ViableSystems = "0.1"