3131956eb0
Harden workflow checkout credential hygiene + permissions ( #6545 )
...
* Harden workflow checkout credential hygiene + permissions
Address zizmor static-analysis findings:
- artipacked: add `persist-credentials: false` to actions/checkout
steps in codeql.yml (2), test-binary-installation.yml (2),
clang-format-check.yml, freebsd.yml, h5py.yml, openbsd.yml,
signed-plugins.yml, and update-progress.yml. None of these jobs
push to git, so dropping the persisted checkout credential is safe.
- excessive-permissions: restrict call-workflows.yml top-level
permissions to `contents: read`, and grant `packages: write` /
`pull-requests: write` only on the two jobs that call the
maven-staging reusable workflow (which declares those needs).
No behavioral change.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
* Removed extra blank lines.
---------
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: Larry Knox <lrknox@hdfgroup.org >
2026-08-04 16:41:53 -04:00
dependabot[bot]
4fd1bd4545
build(deps): bump the github-actions group with 17 updates ( #6588 )
...
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `7.0.0` | `7.0.1` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake ) | `4.3.4` | `4.4.1` |
| [actions/setup-java](https://github.com/actions/setup-java ) | `5.4.0` | `5.6.0` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter ) | `4.0.1` | `4.0.2` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.36.2` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.36.2` | `4.37.3` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.36.2` | `4.37.3` |
| [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell ) | `3abb875e3aa9713e40eed5aea082672a42f7f95c` | `3c04c03694eb927ff908b8b5abfe9c58b239b0ae` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `6.2.1` | `6.2.3` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.5.0` | `1.5.2` |
| [julia-actions/julia-runtest](https://github.com/julia-actions/julia-runtest ) | `1.11.5` | `1.12.0` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action ) | `2.8.0` | `2.9.0` |
| [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) | `1.4.4` | `1.4.5` |
| [mpi4py/setup-mpi](https://github.com/mpi4py/setup-mpi ) | `1.4.3` | `1.4.4` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `3.0.1` | `3.0.2` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) | `2.4.3` | `2.4.4` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `6.3.0` | `7.0.0` |
2026-08-04 10:23:32 -05:00
Scot Breitenfeld
5bcbe6c6d8
Add release-progress badges: Next/Latest Release, Medium/Low priority ( #6537 )
...
* Add Next Release badge and Medium/Low priority progress badges
Adds a "Next Release" badge (in-development version from H5public.h)
and extends the existing Critical/High priority progress badges with
Medium (P2) and Low (P3) priority tracking, all fed from the same
GitHub Project #39 gist-based badge pipeline.
* Remove in-progress 2.0 entry from release schedule diagram
The Release Schedule chart is meant to show only past releases that
have reached end of life; the in-development series is now tracked
separately by the Release Progress badges. Regenerate the PNG from
the updated PlantUML source and clarify the README wording.
* Add Latest Release badge and milestone target date to Next Release
Fetches the most recent published release in the current major
version series from the GitHub Releases API (e.g. "2.1.1
(2026-03-23)") and exposes it as a new "Latest Release" badge.
Also looks up the target due date of the matching GitHub milestone
(e.g. "HDF5 2.2.0") and appends it to the existing Next Release
badge when one is set. Both lookups are independent of the
project-board query and degrade gracefully to "N/A" on failure.
2026-07-20 22:10:41 -06:00
9d5d995bec
build(deps): bump the github-actions group with 21 updates ( #6500 )
...
* build(deps): bump the github-actions group with 21 updates
Bumps the github-actions group with 21 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.2.2` | `7.0.0` |
| [DamianReeves/write-file-action](https://github.com/damianreeves/write-file-action ) | `1d019960841941be46b139298996df6f139cc7a4` | `d4ee8a06aec5db0c57a036b86f2f428e1f8b00e7` |
| [actions/cache](https://github.com/actions/cache ) | `5.0.5` | `6.1.0` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake ) | `4.3.3` | `4.3.4` |
| [actions/setup-java](https://github.com/actions/setup-java ) | `5.2.0` | `5.4.0` |
| [fortran-lang/setup-fortran](https://github.com/fortran-lang/setup-fortran ) | `1.9.0` | `1.9.2` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.36.1` | `4.36.2` |
| [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell ) | `3b7da264292a727fcdc4acdc9eaf9a5abb92ba10` | `3abb875e3aa9713e40eed5aea082672a42f7f95c` |
| [cygwin/cygwin-install-action](https://github.com/cygwin/cygwin-install-action ) | `4ef15ca7fd18a18f1000989fcfd968e06d146ce8` | `a3d72946b163026bbd0fa9a88379ccbda4bd86bb` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `6.2.0` | `6.2.1` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.4.6` | `1.5.0` |
| [julia-actions/julia-runtest](https://github.com/julia-actions/julia-runtest ) | `1.11.4` | `1.11.5` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ) | `2.31.1` | `2.32.0` |
| [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) | `1.4.3` | `1.4.4` |
| [mpi4py/setup-mpi](https://github.com/mpi4py/setup-mpi ) | `1.4.2` | `1.4.3` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `3.0.0` | `3.0.1` |
| [actions/github-script](https://github.com/actions/github-script ) | `8.0.0` | `9.0.0` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `6.2.0` | `6.3.0` |
| [actions/cache/save](https://github.com/actions/cache ) | `5.0.5` | `6.1.0` |
Updates `actions/checkout` from 4.2.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7 )
Updates `DamianReeves/write-file-action` from 1d019960841941be46b139298996df6f139cc7a4 to d4ee8a06aec5db0c57a036b86f2f428e1f8b00e7
- [Release notes](https://github.com/damianreeves/write-file-action/releases )
- [Commits](https://github.com/damianreeves/write-file-action/compare/1d019960841941be46b139298996df6f139cc7a4...d4ee8a06aec5db0c57a036b86f2f428e1f8b00e7 )
Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9 )
Updates `lukka/get-cmake` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/lukka/get-cmake/releases )
- [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md )
- [Commits](https://github.com/lukka/get-cmake/compare/591817e96fcad43505fb4eae36172462abb3a42e...f5b8fbb4d77cec1acc5a5f9f0df4beffaf5d98d9 )
Updates `actions/setup-java` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-java/releases )
- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...1bcf9fb12cf4aa7d266a90ae39939e61372fe520 )
Updates `fortran-lang/setup-fortran` from 1.9.0 to 1.9.2
- [Release notes](https://github.com/fortran-lang/setup-fortran/releases )
- [Commits](https://github.com/fortran-lang/setup-fortran/compare/2a1b9c55897d827a9dfeb114408f3615e53b2b72...195bac823dc6e05bb7c706311ad4540ffc34d5b9 )
Updates `github/codeql-action/init` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
Updates `github/codeql-action/analyze` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e )
Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4.36.1...v4.36.2 )
Updates `codespell-project/actions-codespell` from 3b7da264292a727fcdc4acdc9eaf9a5abb92ba10 to 3abb875e3aa9713e40eed5aea082672a42f7f95c
- [Release notes](https://github.com/codespell-project/actions-codespell/releases )
- [Commits](https://github.com/codespell-project/actions-codespell/compare/3b7da264292a727fcdc4acdc9eaf9a5abb92ba10...3abb875e3aa9713e40eed5aea082672a42f7f95c )
Updates `cygwin/cygwin-install-action` from 4ef15ca7fd18a18f1000989fcfd968e06d146ce8 to a3d72946b163026bbd0fa9a88379ccbda4bd86bb
- [Release notes](https://github.com/cygwin/cygwin-install-action/releases )
- [Commits](https://github.com/cygwin/cygwin-install-action/compare/4ef15ca7fd18a18f1000989fcfd968e06d146ce8...a3d72946b163026bbd0fa9a88379ccbda4bd86bb )
Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e7f100cf4c008499ea8adda475de1042d6975c7b...254c19bd240aabef8777f48595e9d2d7b972184b )
Updates `vmactions/freebsd-vm` from 1.4.6 to 1.5.0
- [Release notes](https://github.com/vmactions/freebsd-vm/releases )
- [Commits](https://github.com/vmactions/freebsd-vm/compare/a6de9343ef5747433d9c25784c90e84998b9d69a...5a72679103d223925653750faa878a143340fbd0 )
Updates `julia-actions/julia-runtest` from 1.11.4 to 1.11.5
- [Release notes](https://github.com/julia-actions/julia-runtest/releases )
- [Commits](https://github.com/julia-actions/julia-runtest/compare/d60b785c6f2bdf4ebfb18b2b6f7d93b7dfb0efe3...fc07e51ec99db23b29943e95406b5762501e2897 )
Updates `msys2/setup-msys2` from 2.31.1 to 2.32.0
- [Release notes](https://github.com/msys2/setup-msys2/releases )
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md )
- [Commits](https://github.com/msys2/setup-msys2/compare/e9898307ac31d1a803454791be09ab9973336e1c...66cd2cce69caa17b53920067426061ca1de3a884 )
Updates `vmactions/openbsd-vm` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/vmactions/openbsd-vm/releases )
- [Commits](https://github.com/vmactions/openbsd-vm/compare/fcf799d7ce9c305ad89eabef1fb2fa5c1c42d0ee...18edb32f4e48dae5865d7b8b3a9587bc01218a20 )
Updates `mpi4py/setup-mpi` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/mpi4py/setup-mpi/releases )
- [Commits](https://github.com/mpi4py/setup-mpi/compare/dbbb80b116bea57fc1788daf7dbbf7ab3df3a0f1...f200dce75b64188be849b46657dcf86c721937b2 )
Updates `softprops/action-gh-release` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...718ea10b132b3b2eba29c1007bb80653f286566b )
Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
Updates `actions/setup-python` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1 )
Updates `actions/cache/save` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: DamianReeves/write-file-action
dependency-version: d4ee8a06aec5db0c57a036b86f2f428e1f8b00e7
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: actions/cache
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: lukka/get-cmake
dependency-version: 4.3.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/setup-java
dependency-version: 5.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: fortran-lang/setup-fortran
dependency-version: 1.9.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.36.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: codespell-project/actions-codespell
dependency-version: 3abb875e3aa9713e40eed5aea082672a42f7f95c
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: cygwin/cygwin-install-action
dependency-version: a3d72946b163026bbd0fa9a88379ccbda4bd86bb
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: vmactions/freebsd-vm
dependency-version: 1.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: julia-actions/julia-runtest
dependency-version: 1.11.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: msys2/setup-msys2
dependency-version: 2.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: vmactions/openbsd-vm
dependency-version: 1.4.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: mpi4py/setup-mpi
dependency-version: 1.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/setup-python
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: actions/cache/save
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
* ci(zizmor): hash-pin actions/checkout in signed-plugins.yml
Dependabot bumped this reference from the bare tag @v6 to @v7.0.0,
leaving it unpinned. zizmor's blanket policy requires a hash pin,
which failed the code-scanning check with an error. Pin to the same
v7.0.0 commit used across the other workflows.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: H. Joe Lee <hyoklee@hdfgroup.org >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-02 13:51:49 -05:00
dependabot[bot]
71b4aba68d
Bump the github-actions group with 12 updates ( #6429 )
...
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4` | `6` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake ) | `4.3.2` | `4.3.3` |
| [softwareforgood/check-artifact-v4-existence](https://github.com/softwareforgood/check-artifact-v4-existence ) | `0.4.1` | `0.4.3` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `4.35.3` | `4.36.1` |
| [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell ) | `cf810cf4cbd6cdefe6ef86e55b64d524a16654a7` | `3b7da264292a727fcdc4acdc9eaf9a5abb92ba10` |
| [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ) | `1.2.0` | `2.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `6.1.0` | `6.2.0` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.4.5` | `1.4.6` |
| [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia ) | `3.0.1` | `3.0.2` |
| [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) | `23b3fb94fbb4729a51b1c937f609483e759c8f28` | `fcf799d7ce9c305ad89eabef1fb2fa5c1c42d0ee` |
| [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages ) | `4.0.0` | `4.1.0` |
| [adriangl/check-new-commits-action](https://github.com/adriangl/check-new-commits-action ) | `1.0.7` | `2.0.1` |
2026-06-03 12:41:20 -05:00
dependabot[bot]
6e6273e573
Bump the github-actions group with 13 updates ( #6393 )
...
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `6.0.1` | `6.0.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.0` | `7.0.1` |
| [actions/cache](https://github.com/actions/cache ) | `5.0.4` | `5.0.5` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake ) | `4.3.1` | `4.3.2` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter ) | `3.0.2` | `4.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `4.32.4` | `4.35.3` |
| [cygwin/cygwin-install-action](https://github.com/cygwin/cygwin-install-action ) | `b09c8ce7e6add6720f12f30042d7c972cf4a75ec` | `4ef15ca7fd18a18f1000989fcfd968e06d146ce8` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `6.0.0` | `6.1.0` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.4.4` | `1.4.5` |
| [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia ) | `2.7.0` | `3.0.1` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ) | `2.31.0` | `2.31.1` |
| [robinraju/release-downloader](https://github.com/robinraju/release-downloader ) | `1.12` | `1.13` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `2.6.1` | `3.0.0` |
2026-05-02 07:45:28 -05:00
dependabot[bot]
c1fa9a9b8f
Bump the github-actions group with 15 updates ( #6342 )
...
Updates the requirements on [actions/checkout](https://github.com/actions/checkout ), [actions/download-artifact](https://github.com/actions/download-artifact ), [actions/cache](https://github.com/actions/cache ), [lukka/get-cmake](https://github.com/lukka/get-cmake ), [actions/setup-java](https://github.com/actions/setup-java ), [EndBug/add-and-commit](https://github.com/endbug/add-and-commit ), [github/codeql-action](https://github.com/github/codeql-action ), [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif ), [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell ), [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ), [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ), [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia ), [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ), [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) to permit the latest version.
* Keep vmactions/openbsd-vm@271a1ba623 # v1.3.4 until ssh doesn't fail with newer version.
2026-04-07 21:55:50 -05:00
Scot Breitenfeld
6e7fec1cc2
Update release progress badges to use Priority-based categorization ( #6270 )
...
* Update release progress badges to use Priority-based categorization
- Replace "Release Blockers"/"Release Must Do" with "Critical Priority"/"High Priority"
- Switch issue filtering from Release gating field to Priority field (P0 - Critical/P1 - High)
- Remove "Nice to Have" badge from workflow and README
- Add failure step: on workflow error, update both badge gist files to bright
purple (BF00FF) with "FAILURE" message
- Version auto-detected from src/H5public.h for milestone filtering
* Fix stale class docstring: release blocker -> priority issue
2026-03-04 16:11:52 -06:00
dependabot[bot]
3c617d23a5
Bump the github-actions group across 1 directory with 11 updates ( #6215 )
...
* Bump the github-actions group across 1 directory with 11 updates
Bumps the github-actions group with 11 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/cache](https://github.com/actions/cache ) | `5.0.1` | `5.0.3` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake ) | `4.2.1` | `4.2.3` |
| [softwareforgood/check-artifact-v4-existence](https://github.com/softwareforgood/check-artifact-v4-existence ) | `0.3.0` | `0.4.1` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.31.9` | `4.32.2` |
| [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ) | `0.5.11` | `1.1.0` |
| [cygwin/cygwin-install-action](https://github.com/cygwin/cygwin-install-action ) | `7d2dc1e241644c3318bed9ec74115d1929baa681` | `2566376092c4e280f21131be027af3f5bb2420a4` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `5.1.1` | `6.0.0` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.3.4` | `1.4.2` |
| [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) | `1.3.1` | `1.3.5` |
| [mpi4py/setup-mpi](https://github.com/mpi4py/setup-mpi ) | `1.4.1` | `1.4.2` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `6.1.0` | `6.2.0` |
vmactions/openbsd-vm@d6c29ce1b4 (`1.3.5`) failed to run ssh on the github runner. 271a1ba62300483cfc58345ff9f425f1349a2cab for v1.3.4 was used instead.
2026-02-13 07:42:14 -06:00
Scot Breitenfeld and Claude Sonnet 4.5
16364fe2fa
Badges ( #6170 )
...
* Fix Release Progress badges and workflow
- Fix update-progress.py to output blocker/mustdo counts in correct format
The workflow expects blocker_done=, blocker_total=, mustdo_done=, mustdo_total=
output lines but the script was only outputting human-readable format
- Update README badge links to point to project view 24 instead of base project
This fixes the workflow failures where BLOCKER_DONE and the related environment
variables were not being set, causing badge updates to fail.
The badges were pointing to old unmaintained gists under user X.
Updated to use the gist automatically maintained by the Release Progress
workflow (gist ID: 0ad2eabb63b28eb90d69f5e5b2c1496f).
The workflow now successfully updates these badges every 4 hours with
current release blocker and must-do progress.
The script now auto-detects the HDF5 version from src/H5public.h and
filters release blockers/must-do items by milestone matching that version.
Changes:
- Added get_hdf5_version_from_header() to read version from H5public.h
- Updated GraphQL query to fetch milestone information from issues
- Added milestone filtering logic to only count items for the target release
- Made validation more lenient when using milestone filter (allows 0/0)
- Added MILESTONE_FILTER environment variable for manual override
For develop branch with version 2.1.0 in H5public.h, this will now only
count items with milestone containing "2.1" (e.g., "2.1.0", "HDF5 2.1").
* Add version number to badge labels
The badges now display the version (e.g., "2.1 Release Blockers" instead
of just "Release Blockers") when filtering by milestone.
Changes:
- Python script outputs version to GitHub Actions
- Workflow passes version to badge generation script
- Badge script includes version in label if available
- Labels show "X.Y Release Blockers" / "X.Y Release Must Do"
The three badges now track:
1. Release Blockers - Critical issues that must be resolved
2. Release Must Do - Important items for the release
3. Release Nice to Have - Optional improvements for the release
All three badges show version prefix (e.g., "2.1") and support 0/0
display when no items exist for a milestone.
---------
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-01-22 14:37:45 -06:00
Scot Breitenfeld
5711c7466f
Update the version to 2.1 ( #6147 )
...
Update version to 2.1 and derive version information from H5public.h, removing h5vers script and updating CMake and Java configurations.
Versioning:
Update version to 2.1 in H5public.h.
Derive version strings in H5public.h using macros.
CMake:
Extract version from H5public.h in HDF5config.cmake and HDF5AsSubdirMacros.cmake.
Configure README.md and CHANGELOG.md using CMakeLists.txt.
Java:
Generate H5Version.java from H5public.h for version consistency.
Update H5.java to use H5Version for version constants.
Removals:
Delete bin/h5vers script, previously used for version management.
2026-01-21 23:02:49 -06:00
dependabot[bot]
13ee56c5d3
Bump the github-actions group with 11 updates ( #6138 )
...
Bumps the github-actions group with 11 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `3` | `6` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `6.0.0` | `7.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `5.0.0` | `6.0.0` |
| [actions/cache](https://github.com/actions/cache ) | `4.3.0` | `5.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3` | `4` |
| [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ) | `0.5.10` | `0.5.11` |
| [cygwin/cygwin-install-action](https://github.com/cygwin/cygwin-install-action ) | `b9bf9147075ee9811ac11beee9351eeb93e2f2fb` | `7d2dc1e241644c3318bed9ec74115d1929baa681` |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm ) | `1.3.0` | `1.3.4` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2 ) | `2.29.0` | `2.30.0` |
| [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm ) | `1.2.5` | `1.3.1` |
| [mpi4py/setup-mpi](https://github.com/mpi4py/setup-mpi ) | `1.4.0` | `1.4.1` |
2026-01-02 11:13:52 -06:00
William Allen
03d00fb70e
Pin GHA dependencies by hash ( #6105 )
...
Hash-pinned dependencies are an important requirement enforced by the OpenSSF scorecard tool: https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
This commit pins all GitHub Actions workflows to a commit hash.
2025-12-12 11:23:53 -06:00
dependabot[bot]
b986a34474
Bump the github-actions group with 6 updates ( #6075 )
...
Bumps the github-actions group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `5.0.0` | `6.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `5` | `6` |
| [actions/setup-java](https://github.com/actions/setup-java ) | `4` | `5` |
| [actions/github-script](https://github.com/actions/github-script ) | `7` | `8` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `2.4.1` | `2.5.0` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `4.31.2` | `4.31.6` |
2025-12-01 21:04:31 -06:00
dependabot[bot]
c46d8b22f6
Bump the github-actions group with 8 updates ( #5964 )
...
Bumps the github-actions group with 8 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.1.7` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `5.0.0` | `6.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `4` | `5` |
| [KyleMayes/install-llvm-action](https://github.com/kylemayes/install-llvm-action ) | `2.0.7` | `2.0.8` |
| [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action ) | `0.5.9` | `0.5.10` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action ) | `2.6.1` | `2.7.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `2.3.3` | `2.4.1` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.30.5` | `4.31.2` |
2025-11-03 07:39:54 -06:00
dependabot[bot]
2448f9b9bd
Bump the github-actions group with 12 updates ( #5891 )
...
Bumps the github-actions group with 12 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4` | `5` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.3.0` | `5.0.0` |
| [actions/cache](https://github.com/actions/cache ) | `3` | `4` |
| [actions/setup-java](https://github.com/actions/setup-java ) | `4` | `5` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `4` | `5` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action ) | `2.0.2` | `2.6.1` |
| [jlumbroso/free-disk-space](https://github.com/jlumbroso/free-disk-space ) | `1.3.0` | `1.3.1` |
| [robinraju/release-downloader](https://github.com/robinraju/release-downloader ) | `1.11` | `1.12` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) | `2.3.2` | `2.3.3` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) | `2.4.2` | `2.4.3` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.29.7` | `3.30.5` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `4` | `6` |
2025-10-02 06:42:14 -05:00
Scot Breitenfeld
0d3045f7cb
Switched link checker ( #5807 )
...
Switch link checker to Lychee in GitHub workflow to reduce false positives and update workflow schedules and documentation links.
2025-09-12 22:08:22 -05:00
Scot Breitenfeld
0ab9576cb9
fixed color and only run the action from main repo ( #5750 )
2025-08-29 11:08:34 -05:00
Scot Breitenfeld
b58574e706
Fix the Gist path ( #5749 )
...
* updated gist id, fix path
2025-08-27 23:01:59 -05:00
Scot Breitenfeld
5e85a9387e
updated gist id ( #5748 )
2025-08-27 21:33:37 -05:00
Scot Breitenfeld
de6b981fcc
Updates to PR #5743 ( #5747 )
...
* fix paths
2025-08-27 20:26:46 -05:00
Scot Breitenfeld
40bde85ea9
Added release blocker monitor badge ( #5743 )
...
This PR implements an automated release progress monitoring system for the HDF5 project. The changes add a dynamic badge to the README that tracks completion of release-blocking issues from GitHub Project #39 , addressing issue #5742 . The implementation consists of three components:
- Python script (update-progress.py) that uses GitHub's GraphQL API to query project items, filter for 'Release_Blocker' items, and calculate completion percentage
- GitHub Actions workflow (update-progress.yml) that runs the script every 24 hours, generates badge data, and publishes it via GitHub Gist
- README updates that remove tentative release language and add the new progress badge with color-coded status indicators
The system replaces static release information with real-time progress tracking, providing better transparency into HDF5's feature-driven release process. The badge displays progress percentages with green (90%+), yellow (60-79%), orange (40-59%), and red (<40%) color coding.
2025-08-27 16:41:32 -05:00