## Summary
- roll up remaining open Dependabot npm updates for @octokit/core and
@octokit/plugin-rest-endpoint-methods
- roll up remaining GitHub Actions pin updates for CodeQL, zizmor,
release-drafter, setup-node, and create-pull-request
- regenerate bundled dist files
## Validation
- npm run all
Refs: pi-session 019f31b8-93d9-7f9b-b3e9-5aaac6bab959
## Summary
- add the dependabot-pr-rollup skill copied from setup-uv
- adapt the workflow notes for ruff-action's npm and GitHub Actions
Dependabot updates
## Testing
- npm run all
Refs: pi-session 019f317d-08f2-7aac-a6d5-56a44288d94c
The test was using ruff>=0.14 which is under active development,
causing failures as new versions like 0.14.13 are released. This
changes the fixture to use ruff>=0.13 (where 0.13.3 is the final
release) and updates the expected version in the test accordingly.
Closes: #9
Changes the default behavior to:
- Search for a pyproject.toml in the repo root
- Search in project.dependencies and dependency-groups.dev for ruff
- If none is found use latest
Support for requirements.txt files can be added later
# Summary
Converts the action from a [composite to
javascript](https://docs.github.com/en/actions/sharing-automations/creating-actions/about-custom-actions#types-of-actions).
Most importantly to make use of prebuilt libraries and helpers like
[actions/toolkit](https://github.com/actions/toolkit).
The structure and features are modeled after
[astral-sh/setup-uv](https://github.com/astral-sh/setup-uv)
## Changes
1. Download the ruff executable for the current platform from the GitHub
releases
2. Add ruff to the PATH
3. Validate the downloaded ruff executable against its checksum
4. Cache ruff in the [Tool
Cache](https://github.com/actions/toolkit/tree/main/packages/tool-cache)
to speed up runs on self-hosted runners
5. Support semver ranges to define the ruff version to install
## 🚨 Breaking changes
Removes the `changed-files` input.
This input could previously be used to run ruff only on files changed in
a PR. The functionality was implemented by calling another action. This
repo should focus on providing a quick and easy way to use ruff in
GitHub Actions, not add more functionality on top of ruff.
The previous functionality can be replicated with:
```yaml
- uses: actions/checkout@v4
- name: Get changed files
id: changed-files
uses: tj-actions/changed-files@v45
with:
files: |
**.py
- name: Run ruff on changed files only
uses: astral-sh/ruff-action@v2
with:
src: ${{ steps.changed-files.outputs.all_changed_files }}
```
This was tested here:
https://github.com/astral-sh/ruff-action/actions/runs/12017035736/job/33498508269
