diff --git a/.github/actions/security-issues/action.yml b/.github/actions/security-issues/action.yml index fe899dddd..64e67b470 100644 --- a/.github/actions/security-issues/action.yml +++ b/.github/actions/security-issues/action.yml @@ -39,7 +39,7 @@ runs: - name: Install Python Toolbox / Security tool shell: bash run: | - pip install exasol-toolbox==8.1.0 + pip install exasol-toolbox==8.1.1 - name: Create Security Issue Report shell: bash diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml index 341dc7d57..f60b739d9 100644 --- a/.github/workflows/build-and-publish.yml +++ b/.github/workflows/build-and-publish.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Build & Publish on: diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index d171b63f2..72a414a4f 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: CD on: diff --git a/.github/workflows/check-release-tag.yml b/.github/workflows/check-release-tag.yml index 2f3fa647f..78e4161e8 100644 --- a/.github/workflows/check-release-tag.yml +++ b/.github/workflows/check-release-tag.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Check Release Tag on: diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index d9815f183..3ce5eddb5 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Checks on: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6635826db..a9541cdaf 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: CI on: diff --git a/.github/workflows/dependency-update.yml b/.github/workflows/dependency-update.yml index 40cf00442..e36ce8b60 100644 --- a/.github/workflows/dependency-update.yml +++ b/.github/workflows/dependency-update.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Dependency Update on: @@ -43,7 +43,12 @@ jobs: run: | set -o pipefail poetry self add poetry-plugin-export - poetry run -- nox -s dependency:audit 2>&1 | tee vulnerabilities.json + # Pipeline purpose: + # - `2>&1`: merge stdout and stderr into one stream. + # - `tee /dev/stderr`: mirror the combined output back to stderr so it stays visible in the logs. + # - `sed -n '/^\[/,$p'`: keep only the JSON payload and write it to vulnerabilities.json. + # With `set -o pipefail`, any failure in the pipeline still fails this step and turns the workflow red. + poetry run -- nox -s dependency:audit 2>&1 | tee /dev/stderr | sed -n '/^\[/,$p' > vulnerabilities.json LENGTH=$(jq 'length' vulnerabilities.json) echo "count=$LENGTH" >> "$GITHUB_OUTPUT" diff --git a/.github/workflows/fast-tests.yml b/.github/workflows/fast-tests.yml index b144773ce..24f775b29 100644 --- a/.github/workflows/fast-tests.yml +++ b/.github/workflows/fast-tests.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Fast-Tests on: diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml index 93f50c5f0..c8ab77894 100644 --- a/.github/workflows/gh-pages.yml +++ b/.github/workflows/gh-pages.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Publish Documentation on: diff --git a/.github/workflows/matrix-all.yml b/.github/workflows/matrix-all.yml index dd0b8cc1a..dfd410fb6 100644 --- a/.github/workflows/matrix-all.yml +++ b/.github/workflows/matrix-all.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Build Matrix (All Versions) on: diff --git a/.github/workflows/matrix-exasol.yml b/.github/workflows/matrix-exasol.yml index f2a63e30f..c57464a79 100644 --- a/.github/workflows/matrix-exasol.yml +++ b/.github/workflows/matrix-exasol.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Build Matrix (Exasol) on: diff --git a/.github/workflows/matrix-python.yml b/.github/workflows/matrix-python.yml index c56f26c0f..c991d5a68 100644 --- a/.github/workflows/matrix-python.yml +++ b/.github/workflows/matrix-python.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Build Matrix (Python) on: diff --git a/.github/workflows/merge-gate.yml b/.github/workflows/merge-gate.yml index 060e25d7e..7b53ab8b2 100644 --- a/.github/workflows/merge-gate.yml +++ b/.github/workflows/merge-gate.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Merge-Gate on: diff --git a/.github/workflows/periodic-validation.yml b/.github/workflows/periodic-validation.yml index 384d552ad..dc1276af8 100644 --- a/.github/workflows/periodic-validation.yml +++ b/.github/workflows/periodic-validation.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Periodic-Validation on: diff --git a/.github/workflows/pr-merge.yml b/.github/workflows/pr-merge.yml index c422a65ca..8dd06a584 100644 --- a/.github/workflows/pr-merge.yml +++ b/.github/workflows/pr-merge.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: PR-Merge on: diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml index 42cd7bf32..7ff2917b3 100644 --- a/.github/workflows/report.yml +++ b/.github/workflows/report.yml @@ -1,5 +1,5 @@ # Generated and maintained by the exasol-toolbox. -# Last generated with exasol-toolbox version 8.0.0. +# Last generated with exasol-toolbox version 8.1.0. name: Status Report on: diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md index 4771ac7bb..304fbaef5 100644 --- a/doc/changes/changelog.md +++ b/doc/changes/changelog.md @@ -1,6 +1,7 @@ # Changelog * [unreleased](unreleased.md) +* [8.1.1](changes_8.1.1.md) * [8.1.0](changes_8.1.0.md) * [8.0.0](changes_8.0.0.md) * [7.0.0](changes_7.0.0.md) @@ -66,6 +67,7 @@ hidden: --- unreleased +changes_8.1.1 changes_8.1.0 changes_8.0.0 changes_7.0.0 diff --git a/doc/changes/changes_8.1.1.md b/doc/changes/changes_8.1.1.md new file mode 100644 index 000000000..8f978f8b5 --- /dev/null +++ b/doc/changes/changes_8.1.1.md @@ -0,0 +1,10 @@ +# 8.1.1 - 2026-05-27 + +## Summary + +This patch release resolves a bug found in `dependency-update.yml`. This was introduced +in 8.1.0. + +## Bugfix + +* #850: Fixed jq and piping in `dependency-update.yml` diff --git a/exasol/toolbox/templates/github/workflows/dependency-update.yml b/exasol/toolbox/templates/github/workflows/dependency-update.yml index 3800e1532..fc35e61ea 100644 --- a/exasol/toolbox/templates/github/workflows/dependency-update.yml +++ b/exasol/toolbox/templates/github/workflows/dependency-update.yml @@ -42,7 +42,12 @@ jobs: run: | set -o pipefail poetry self add poetry-plugin-export - poetry run -- nox -s dependency:audit 2>&1 | tee vulnerabilities.json + # Pipeline purpose: + # - `2>&1`: merge stdout and stderr into one stream. + # - `tee /dev/stderr`: mirror the combined output back to stderr so it stays visible in the logs. + # - `sed -n '/^\[/,$p'`: keep only the JSON payload and write it to vulnerabilities.json. + # With `set -o pipefail`, any failure in the pipeline still fails this step and turns the workflow red. + poetry run -- nox -s dependency:audit 2>&1 | tee /dev/stderr | sed -n '/^\[/,$p' > vulnerabilities.json LENGTH=$(jq 'length' vulnerabilities.json) echo "count=$LENGTH" >> "$GITHUB_OUTPUT" diff --git a/project-template/cookiecutter.json b/project-template/cookiecutter.json index 37a1cc6f7..b20bf5969 100644 --- a/project-template/cookiecutter.json +++ b/project-template/cookiecutter.json @@ -9,7 +9,7 @@ "author_email": "opensource@exasol.com", "project_short_tag": "", "python_version_min": "3.10", - "exasol_toolbox_version_range": ">=8.1.0,<9", + "exasol_toolbox_version_range": ">=8.1.1,<9", "license_year": "{% now 'utc', '%Y' %}", "__repo_name_slug": "{{cookiecutter.package_name}}", "__package_name_slug": "{{cookiecutter.package_name}}", diff --git a/pyproject.toml b/pyproject.toml index a90f1a931..c824c1faf 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "exasol-toolbox" -version = "8.1.0" +version = "8.1.1" description = "Your one-stop solution for managing all standard tasks and core workflows of your Python project." authors = [ { name = "Nicola Coretti", email = "nicola.coretti@exasol.com" },