fix(deps): update dependency certifi to v2025.4.26

.gitea/workflows/ci.yml

@@ -56,7 +56,7 @@ jobs:
         run: uv cache prune --ci
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5.2.0
+        uses: SonarSource/sonarqube-scan-action@v5.1.0
         env:
           SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
           SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}

.gitea/workflows/release.yml

@@ -5,66 +5,57 @@ on:
     - cron: "0 9 * * 0"
 
 jobs:
-  # test:
+  test:
-  #   name: Test
+    name: Test
-  #   uses: https://git.tainton.uk/repos/pypilot/.gitea/workflows/ci.yml@main
+    uses: https://git.tainton.uk/repos/pypilot/.gitea/workflows/ci.yml@main
-
-  tag:
-    name: Tag release
-    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/release-with-tag.yaml@main
 
   create_release:
     name: Create Release
-    needs: tag
+    needs: test
-    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/create-release-preexisting-tag.yaml@main
+    uses: https://git.tainton.uk/actions/gha-workflows/.gitea/workflows/create-release.yml@main
-    with:
-      tag: ${{ needs.tag.outputs.tag_name }}
-      body: ${{ needs.tag.outputs.changelog }}
     secrets:
       ACTIONS_TOKEN: ${{ secrets.ACTIONS_TOKEN }}
 
-  get_release_id:
+  print_release:
-    name: Get Release ID
+    name: Print Release
     runs-on: ubuntu-latest
-    needs: [tag, create_release]
+    needs: create_release
     outputs:
       releaseid: ${{ steps.getid.outputs.releaseid }}
     steps:
+      - run: echo "Created release ${{ needs.create_release.outputs.release_name }}."
       - name: Get Release ID
         id: getid
         run: |
           rid=$(curl -s -X 'GET' \
-          -H 'accept: application/json' \
+          -H 'accept: application/json'
-          '${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases/latest' | jq -r '.id')
+          '${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases/latest' | jq -r '.[].id')
           echo "releaseid=$rid" >> "$GITEA_OUTPUT"
-          echo "$rid"
 
   build_whl:
     name: Build Wheel File
-    needs: [tag, get_release_id]
+    needs: [create_release, print_release]
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
         uses: actions/checkout@v4.2.2
-        with:
-          ref: ${{ needs.tag.outputs.tag_name }}
-      # - name: Setup Python
-      #   uses: actions/setup-python@v5
-      #   with:
-      #     python-version: "3.13"
-      - name: Install uv
-        uses: astral-sh/setup-uv@v5
-        with:
-          enable-cache: true
-          cache-dependency-glob: "uv.lock"
       - name: Setup Python
-        run: uv python install
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+      - name: Setup Poetry
+        uses: abatilo/actions-poetry@v4
       - name: Update pyproject.toml
-        run: ./tools/update_pyproject.sh ${{ needs.tag.outputs.tag_name }}
+        run: ./tools/update_pyproject.sh ${{ needs.create_release.outputs.release_name }}
       - name: Install dependencies
-        run: uv sync
+        run: poetry install
       - name: Build wheel file
-        run: uv build
+        run: poetry build
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: whl
+          path: dist/
       - name: Upload Release Asset
         run: |
           for file in dist/*.whl; do
@@ -72,41 +63,31 @@ jobs:
             -H "Authorization: token ${{ secrets.ACTIONS_TOKEN }}" \
             -H "Content-Type: multipart/form-data" \
             -F "attachment=@${{ gitea.workspace }}/$file" \
-            "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases/${{ needs.get_release_id.outputs.releaseid }}/assets"
+            "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/releases/${{ needs.print_release.outputs.releaseid }}"
           done
-      - name: Publish to PyPI
-        run: uv publish
-        env:
-          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-      # - name: Publish to PyPI
-      #   uses: pypa/gh-action-pypi-publish@release/v1
-      #   with:
-      #     # user: ${{ vars.PYPI_USERNAME }}
-      #     user: __token__
-      #     password: ${{ secrets.PYPI_API_TOKEN }}
 
-  # publish_pypi:
+  publish_pypi:
-  #   name: Publish to PyPI
+    name: Publish to PyPI
-  #   needs: build_whl
+    needs: build_whl
-  #   runs-on: ubuntu-latest
+    runs-on: ubuntu-latest
-  #   steps:
+    steps:
-  #     - name: Create dist folder
+      - name: Create dist folder
-  #       run: mkdir -p dist
+        run: mkdir -p dist
-  #     - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v4
-  #       with:
+        with:
-  #         name: whl
+          name: whl
-  #         path: dist
+          path: dist
-  #     - name: Publish to PyPI
+      - name: Publish to PyPI
-  #       uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
-  #       with:
+        with:
-  #         # user: ${{ vars.PYPI_USERNAME }}
+          # user: ${{ vars.PYPI_USERNAME }}
-  #         user: __token__
+          user: __token__
-  #         password: ${{ secrets.PYPI_API_TOKEN }}
+          password: ${{ secrets.PYPI_API_TOKEN }}
 
   create_docker:
     name: Publish Docker Images
     runs-on: ubuntu-latest
-    needs: tag
+    needs: create_release
     steps:
       - name: Update Docker configuration
         continue-on-error: true
@@ -128,7 +109,7 @@ jobs:
         uses: actions/checkout@v4.2.2
         with:
           fetch-depth: 0
-          ref: ${{ needs.tag.outputs.tag_name }}
+          ref: ${{ needs.create_release.outputs.release_name }}
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -151,7 +132,7 @@ jobs:
         id: meta
         uses: docker/metadata-action@v5
         with:
-          tags: type=semver,pattern=v{{version}},value=${{ needs.tag.outputs.tag_name }}
+          tags: type=semver,pattern=v{{version}},value=${{ needs.create_release.outputs.release_name }}
           images: |
             ghcr.io/${{ vars.GHCR_USERNAME }}/${{ steps.split.outputs.repo }}
             ${{ vars.PACKAGES_REGISTRY_URL }}/${{ gitea.repository }}

.gitea/workflows/security.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5.2.0
+        uses: SonarSource/sonarqube-scan-action@v5.1.0
         env:
           SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
           SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}