Repository navigation

fix: remove shell injection vulnerabilities in hdfs_utils.py #661

	name: "Pull Request Workflow"
	on:
	pull_request:
	# The specific activity types are listed here to include "labeled" and "unlabeled"
	# (which are not included by default for the "pull_request" trigger).
	# This is needed to allow skipping enforcement of the changelog in PRs with specific labels,
	# as defined in the (optional) "skipLabels" property.
	types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]

	jobs:
	# Enforces the update of a changelog file on every pull request.
	changelog:
	runs-on: ubuntu-latest
	steps:
	# checks for updates to CHANGELOG.md
	# https://github.com/marketplace/actions/changelog-enforcer
	- uses: dangoslen/changelog-enforcer@v3

	pre-commit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- uses: actions/setup-python@v4
	- uses: pre-commit/action@v3.0.0

	test:
	needs: changelog
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
	steps:
	- name: Check out repository
	uses: actions/checkout@v3

	- name: Install uv
	uses: astral-sh/setup-uv@v5

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v4
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install dependencies
	run: \|
	uv lock --default-index https://pypi.org/simple
	uv sync --group dev

	- name: Run tests
	run: uv run pytest