| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-05-19 | ci: pin actions by full commit SHArelease/v0.4.0-cleanup | Roberto Bertó | |
| Per OpenSSF Scorecard 'Pinned-Dependencies' guidance, third-party GitHub Actions should be referenced by full commit SHA, not by tag. Tags are mutable; a SHA is not. Each pin keeps a '# vX.Y.Z' trailing comment so Dependabot can read the current version and propose updates while still pinning by SHA. - actions/checkout de0fac2 # v6.0.2 - actions/setup-python a309ff8 # v6.2.0 - astral-sh/setup-uv 0880764 # v8.1.0 - pypa/gh-action-pypi-publish cef2210 # v1.14.0 This commit does not change pyvyos HTTP payloads, request handling, or response parsing. | |||
| 2026-05-19 | ci: bump actions off Node.js 20 | Roberto Bertó | |
| GitHub deprecation notice: Node.js 20 will be removed from runners in September 2026 and forced to Node 24 in June 2026. Pin to current majors that already run on Node 24. - actions/checkout@v4 -> v6 - actions/setup-python@v5 -> v6 - astral-sh/setup-uv@v3 -> v8 - pypa/gh-action-pypi-publish@v1.13.0 -> v1.14.0 - pre-commit/pre-commit-hooks@v5.0.0 -> v6.0.0 This commit does not change pyvyos HTTP payloads, request handling, or response parsing. | |||
| 2025-09-18 | Fix - Code fix | eduardormorais | |
| 2025-09-18 | Feature - Changing the dependency management tool to uv. Updating the Python ↵ | eduardormorais | |
| version and dependencies | |||
| 2024-03-10 | updated actions to use latest versions | Roberto Bertó | |
| 2023-12-13 | Create python-publish.yml | Roberto Bertó | |
