Merge pull request #732 from gaphor/dependabot/github_actions/actions…

…/upload-artifact-4.0.0

Bump actions/upload-artifact from 3.1.3 to 4.0.0

.github/constraints.txt

@@ -1 +1 @@
-poetry==1.7.0
+poetry==1.7.1

.github/workflows/build.yml

@@ -41,8 +41,7 @@ jobs:
     strategy:
       matrix:
         python-version: ['3.9', '3.10', '3.11', '3.12']
-        gtk-version: ['4.0']
-    name: build (python ${{ matrix.python-version }}, gtk ${{ matrix.gtk-version }})
+    name: build python ${{ matrix.python-version }}
     outputs:
       targz: gaphas-${{ steps.meta.outputs.version }}.tar.gz
       wheel: gaphas-${{ steps.meta.outputs.version }}-py3-none-any.whl
@@ -66,7 +65,7 @@ jobs:
       - name: Install Ubuntu Dependencies
         run: |
           sudo apt update -qq
-          sudo apt install -qq --no-install-recommends gir1.2-gtk-${{ matrix.gtk-version }} libgirepository1.0-dev
+          sudo apt install -qq --no-install-recommends gir1.2-gtk-4.0 libgirepository1.0-dev
       - name: Install Poetry
         run: |
           pipx install --python python${{ matrix.python-version }} --pip-args=--constraint=.github/constraints.txt poetry
@@ -77,25 +76,25 @@ jobs:
       - name: Install dependencies
         run: poetry install --no-interaction
       - name: Test
-        run: TEST_GTK_VERSION=${{ matrix.gtk-version }} xvfb-run poetry run pytest --cov=gaphas
+        run: xvfb-run poetry run pytest --cov=gaphas
       - name: Code Climate Coverage Action
         uses: paambaati/codeclimate-action@a1831d7162ea1fbc612ffe5fb3b90278b7999d59 # v5.0.0
         env:
           CC_TEST_REPORTER_ID: 195e9f83022747c8eefa3ec9510dd730081ef111acd99c98ea0efed7f632ff8a
         with:
           coverageCommand: poetry run coverage xml
       - name: Create Source Dist and Wheel
-        if: ${{ matrix.python_version == env.python_version }}
+        if: ${{ matrix.python-version == env.python-version }}
         run: poetry build
-      - name: Upload gaphas-${{ steps.meta.output.version }}.tar.gz
-        if: ${{ matrix.python_version == env.python_version }}
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - name: Upload gaphas-${{ steps.meta.outputs.version }}.tar.gz
+        if: ${{ matrix.python-version == env.python-version }}
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
         with:
           name: gaphas-${{ steps.meta.outputs.version }}.tar.gz
           path: dist/gaphas-${{ steps.meta.outputs.version }}.tar.gz
       - name: Upload gaphas-${{ steps.meta.outputs.version }}-py3-none-any.whl
-        if: ${{ matrix.python_version == env.python_version }}
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        if: ${{ matrix.python-version == env.python-version }}
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
         with:
           name: gaphas-${{ steps.meta.outputs.version }}-py3-none-any.whl
           path: dist/gaphas-${{ steps.meta.outputs.version }}-py3-none-any.whl

.github/workflows/scorecards.yml

@@ -63,7 +63,7 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
         with:
           name: SARIF file
           path: results.sarif