python 3.14

.github/workflows/auto-assign-issues.yml

@@ -6,11 +6,11 @@ on:
 
 jobs:
     auto-assign:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-24.04  # using python 3.12
         permissions:
             issues: write
         steps:
             - name: 'Auto assign issue'
-              uses: pozil/auto-assign-issue@d11e715efc663fe323c3d8d4d3cbbfdddd539baf # v1
+              uses: pozil/auto-assign-issue@39c06395cbac76e79afc4ad4e5c5c6db6ecfdd2e # v2.2.0
               with:
                   assignees: richardbluestone

.github/workflows/build.yml

@@ -8,27 +8,27 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04  # using python 3.12
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         fetch-depth: 0
     - name: Read .nvmrc
       run: echo ::set-output name=NVMRC::$(cat .nvmrc)  # see: https://help.github.com/en/actions/automating-your-workflow-with-github-actions/development-tools-for-github-actions#set-an-output-parameter-set-output
       id: nvm
     - name: Set up node
-      uses: actions/setup-node@v1
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version: "${{ steps.nvm.outputs.NVMRC }}"
     - name: Cache npm
-      uses: actions/cache@v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: ~/.npm
         key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
         restore-keys: |
           ${{ runner.os }}-node-
     - name: Cache pip
-      uses: actions/cache@v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: ~/.cache/pip
         key: ${{ runner.os }}-pip-${{ hashFiles('**/Pipfile.lock') }}

.github/workflows/codeql.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04  # using python 3.12
     permissions:
       actions: read
       contents: read
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4 # https://github.com/marketplace/actions/checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2

.github/workflows/handle_new_contribution.yml

@@ -15,7 +15,7 @@ env:
 
 jobs:
   assign_and_label:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04  # using python 3.12
     if: github.event.pull_request.head.repo.fork == true
     steps:
       - name: Assign contribution TL and add the Contribution label

.github/workflows/links-verify.yml

@@ -7,18 +7,18 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04  # using python 3.12
     steps:
     - name: content checkout
-      uses: actions/checkout@v4  # https://github.com/marketplace/actions/checkout
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         repository: demisto/content
         path: content
         token: ${{ secrets.GITHUB_TOKEN }}
         fetch-depth: 0
         ref: 'master'
     - name: content-docs checkout
-      uses: actions/checkout@v4  # https://github.com/marketplace/actions/checkout
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         repository: demisto/content-docs
         path: content-docs
@@ -35,7 +35,7 @@ jobs:
         cat content-docs/urls_ignore.txt >> all_urls_ignore.txt
         cat all_urls_ignore.txt
     - name: Set up Go 1.13
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
       with:
         go-version: 1.13.11
       id: go
@@ -56,7 +56,7 @@ jobs:
         echo "All good! muffet passed!!!"
     - name: Save artifcats
       if: ${{ always() }}
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: log-artifacts
         path: muffet.txt

.gitlab/ci/.gitlab-ci.yml

@@ -1,7 +1,7 @@
 variables:
-  CURRENT_BRANCH_NAME: $INFRA_BRANCH
+  CURRENT_BRANCH_NAME: sk_infra_new_python
 
 include:
   - file: "/.gitlab/ci/content-docs/.gitlab-ci.yml"
-    ref: $INFRA_BRANCH
+    ref: sk_infra_new_python
     project: "${CI_PROJECT_NAMESPACE}/infra"

Pipfile

@@ -23,7 +23,7 @@ google-api-python-client = "*"
 google-cloud-storage = "*"
 
 [requires]
-python_version = "3.10"
+python_version = ">=3.11,<3.15"
 
 [[source]]
 name = "pypi"

content-repo/extra-docs/packs/content-management.md

@@ -318,7 +318,7 @@ Although you do not have the flexibility of version control and rollback, it is
     ```
     steps:
       - name: XSOAR CI/CD master checkout
-        uses: actions/checkout@v4 # https://github.com/marketplace/actions/checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           repository: your/repository
           path: repository

pyproject.toml

@@ -56,7 +56,7 @@ pyasn1 = "==0.5.0"
 pyasn1-modules = "==0.3.0"
 pydoc-markdown = ">=4.8.2,<5.0.0"
 pyparsing = "==3.0.9"
-python = "^3.10"
+python = ">=3.11,<3.15"
 python-dateutil = "*" # "==2.8.2"
 pyyaml = "==5.3" # "==5.4.1"
 requests = "*" # "==2.31.0"
@@ -72,7 +72,7 @@ types-urllib3 = "==1.26.25.13"
 uritemplate = "==4.1.1"
 urllib3 = "==1.26.16"
 watchdog = "==1.0.2"
-python-gitlab = "^3.0.0" # import gitlab
+python-gitlab = "^8.0.0" # import gitlab
 junitparser = "^3.1.2"
 jira = "^3.8.0"
 gitpython = "^3.1.43" # import git