Improve CI workflows (#155)

- update versions of runners and actions
- harden jobs
- add Python 3.12 to testing
- temporarily disable testing for main

Author: kytta

.github/workflows/release.yml

@@ -5,18 +5,21 @@ on:
     tags:
     - '*'
 
+permissions: {}
+
 jobs:
   build:
     if: github.repository == 'jazzband/django-simple-menu'
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: 3.11
 
@@ -33,7 +36,7 @@ jobs:
 
       - name: Upload packages to Jazzband
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@master
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
           user: jazzband
           password: ${{ secrets.JAZZBAND_RELEASE_KEY }}

.github/workflows/test.yml

@@ -10,10 +10,12 @@ on:
 env:
   FORCE_COLOR: "1"
 
+permissions: {}
+
 jobs:
   build:
     name: build (Python ${{ matrix.python-version }}, Django ${{ matrix.django-version }})
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
@@ -43,19 +45,23 @@ jobs:
             python-version: '3.10'
           - django-version: '4.2'
             python-version: '3.11'
-
-          - django-version: 'main'
-            python-version: '3.10'
-          - django-version: 'main'
-            python-version: '3.11'
-          - django-version: 'main'
+          - django-version: '4.2'
             python-version: '3.12'
 
+          # - django-version: 'main'
+          #   python-version: '3.10'
+          # - django-version: 'main'
+          #   python-version: '3.11'
+          # - django-version: 'main'
+          #   python-version: '3.12'
+
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
@@ -72,7 +78,8 @@ jobs:
       env:
         DJANGO: ${{ matrix.django-version }}
 
-    - name: Upload coverage
-      uses: codecov/codecov-action@v3
-      with:
-        name: Python ${{ matrix.python-version }}
+    # FIXME: Codecov requires a token, which we do not have
+    # - name: Upload coverage
+    #   uses: codecov/codecov-action@v5
+    #   with:
+    #     name: Python ${{ matrix.python-version }}

CHANGES

@@ -1,6 +1,9 @@
 django-simple-menu changelog
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
+Unreleased
+- Test on Python 3.12
+
 Version 2.1.3 - Released October 4th, 2023
 - Stop testing under Python 3.6, 3.7, and Django 4.0 (#138, #140)
 - Migrate from setup.cfg to pyproject.toml (#138)

tox.ini

@@ -2,10 +2,9 @@
 requires =
     tox>=4.2
 env_list =
-    py3{11, 10, 9, 8}-dj42
+    py3{12, 11, 10, 9, 8}-dj42
     py3{11, 10, 9, 8}-dj41
     py3{10, 9, 8}-dj32
-    py3{12, 11, 10}-djmain
 
 [testenv]
 package = wheel