fix(security): resolve all 40 dependabot alerts across cargo and npm #171
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Installation | |
| on: | |
| push: | |
| branches: | |
| - master | |
| tags: | |
| - '*' | |
| pull_request: | |
| workflow_dispatch: | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| jobs: | |
| install-from-source: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| python-version: ['3.10', '3.11', '3.12'] | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Set up Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20' | |
| - name: Install Rust toolchain | |
| run: | | |
| curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -q -y | |
| echo "$HOME/.cargo/bin" >> "$GITHUB_PATH" | |
| - name: Add wasm target | |
| run: rustup target add wasm32-unknown-unknown | |
| - name: Cache cargo home | |
| uses: actions/cache@v4 | |
| with: | |
| path: ~/.cargo | |
| key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }} | |
| restore-keys: | | |
| cargo-${{ runner.os }}- | |
| - name: Install wasm-pack | |
| run: | | |
| cargo install --locked wasm-pack wasm-bindgen-cli wasm-opt | |
| wasm-pack --version | |
| - name: Create Python virtual environment | |
| run: python -m venv AISdb | |
| - name: Install maturin | |
| run: | | |
| source ./AISdb/bin/activate | |
| python -m pip install --upgrade maturin[patchelf] | |
| - name: Build and install aisdb | |
| run: | | |
| source ./AISdb/bin/activate | |
| maturin develop --release --extras=test | |
| - name: Verify installation | |
| run: | | |
| source ./AISdb/bin/activate | |
| python -m pip install packaging | |
| python -c "from packaging.version import Version; import aisdb; v = Version(aisdb.__version__); assert v >= Version('1.8.0a0'), f'Unexpected aisdb version: {aisdb.__version__}'; print(f'aisdb {v} installed successfully')" |