Merge pull request #3362 from motioneye-project/beta

Release 0.44.0

Author: MichaIng

.gitattributes

@@ -0,0 +1,5 @@
+* text=auto
+*.sh text eol=lf
+linux_init text eol=lf
+po2json text eol=lf
+*.py text eol=lf

.github/dependabot.yaml

@@ -1,16 +1,19 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://help.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-
 version: 2
 
 updates:
   - package-ecosystem: "github-actions"
-    # Workflow files stored in the default location of `.github/workflows`
     directory: "/"
     schedule:
       interval: "daily"
     target-branch: "dev"
     labels:
     - "CI/CD"
+
+  # For Python dependencies, a PEP 751 pyproject.lock is needed, which we do not maintain, intentionally.
+  #- package-ecosystem: "pip"
+  #  directory: "/"
+  #  schedule:
+  #    interval: "daily"
+  #  target-branch: "dev"
+  #  labels:
+  #  - "dependencies"

.github/workflows/docker.yml

@@ -18,40 +18,44 @@ jobs:
       packages: write
 
     steps:
-      - uses: docker/metadata-action@v5
+      - uses: docker/metadata-action@v6
         id: meta
         with:
           images: |
             motioneyeproject/motioneye
             ghcr.io/${{ github.repository_owner }}/motioneye
+          flavor: latest=false
           tags: |
             type=edge,branch=dev
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
+            type=match,pattern=\d+\.\d+\.\d+b\d+
+            type=raw,value=beta,enable=${{ github.ref_type == 'tag' && contains(github.ref_name, 'b') && contains(github.ref_name, '.') && !startsWith(github.ref_name, 'v') && !contains(github.ref_name, '-') }}
+            type=raw,value=latest,enable=${{ github.ref_type == 'tag' && !contains(github.ref_name, 'b') && contains(github.ref_name, '.') && !startsWith(github.ref_name, 'v')  && !contains(github.ref_name, '-') }}
 
-      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-qemu-action@v4
         with:
           cache-image: false
 
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: github.event_name == 'push' && github.repository == 'motioneye-project/motioneye' && steps.meta.outputs.tags != null
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_TOKEN }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: github.event_name == 'push' && github.repository == 'motioneye-project/motioneye' && steps.meta.outputs.tags != null
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
 
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           file: ./docker/Dockerfile
           platforms: linux/amd64,linux/arm64/v8,linux/arm/v7,linux/riscv64

.github/workflows/pip_audit.yml

@@ -0,0 +1,23 @@
+name: pip_audit
+
+on: [pull_request, push]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  pip_audit:
+    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.owner.login != github.event.pull_request.base.repo.owner.login
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
+        with:
+          python-version: 3.x
+          check-latest: true
+          pip-install: pip-audit
+      - run: pip-audit -Sv .

.github/workflows/pre-commit-autoupdate.yml

@@ -15,7 +15,7 @@ jobs:
   pre-commit-autoupdate:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         ref: dev
         # https://github.com/peter-evans/create-pull-request/issues/48

.github/workflows/pre-commit.yml

@@ -16,7 +16,7 @@ jobs:
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.owner.login != github.event.pull_request.base.repo.owner.login
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-python@v6
       with:
         python-version: '3.x'

.github/workflows/pypi_release.yml

@@ -1,6 +1,10 @@
 name: PyPI release
 
-on: workflow_dispatch
+on:
+  workflow_dispatch:
+  push:
+    tags:
+    - '[0-9]+.[0-9]+.[0-9]+b?[1-9]?'
 
 permissions:
   contents: read
@@ -9,7 +13,7 @@ jobs:
   release:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: actions/setup-python@v6
       with:
         python-version: '3.x'

.github/workflows/python_safety.yml

@@ -19,7 +19,7 @@ jobs:
           command -v xz && exit 0
           sudo apt-get -q update
           sudo DEBIAN_FRONTEND=noninteractive apt-get -qq --no-install-recommends install xz-utils
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Download shellcheck
         run: |
           curl -sSfLo shellcheck.tar.xz "$(curl -sSfH 'Authorization: Bearer ${{ github.token }}' 'https://api.github.com/repos/koalaman/shellcheck/releases/latest' | mawk -F\" '/"browser_download_url.*\.linux\.x86_64\.tar\.xz"/{print $4;exit}')"

.github/workflows/shellcheck.yml

@@ -15,11 +15,17 @@ jobs:
     strategy:
       matrix:
         include:
+          # Tests with oldest Python version able to build the project on oldest available runner images
+          - { dist: 'ubuntu-22.04', python: '3.9' }
+          - { dist: 'ubuntu-22.04-arm', python: '3.9' }
           # https://packages.ubuntu.com/search?suite=all&arch=any&searchon=names&keywords=python3
           - { dist: 'ubuntu-22.04', python: '3.10.6' }
           - { dist: 'ubuntu-24.04', python: '3.12.3' }
+          # No Python 3.14 supported for ubuntu-26.04 runners yet: https://raw.githubusercontent.com/actions/python-versions/main/versions-manifest.json
+          - { dist: 'ubuntu-24.04', python: '3.14.3' }
           - { dist: 'ubuntu-22.04-arm', python: '3.10.6' }
           - { dist: 'ubuntu-24.04-arm', python: '3.12.3' }
+          - { dist: 'ubuntu-24.04-arm', python: '3.14.3' }
       fail-fast: false
     runs-on: ${{ matrix.dist }}
     name: "Test on ${{ matrix.dist }}"
@@ -30,10 +36,10 @@ jobs:
           # error: externally-managed-environment
           echo -e '[global]\nbreak-system-packages=true' | sudo tee /etc/pip.conf
       # ERROR: Cannot uninstall pip 24.0, RECORD file not found. Hint: The package was installed by debian.
-      - run: sudo DEBIAN_FRONTEND="noninteractive" apt-get -qq autopurge python3-pip python3-setuptools python3-wheel
+      - run: sudo DEBIAN_FRONTEND='noninteractive' apt-get -qq autopurge python3-pip python3-setuptools python3-wheel
       - run: sudo apt-get -q update
-      - run: sudo DEBIAN_FRONTEND="noninteractive" apt-get -qq --no-install-recommends install curl ffmpeg motion v4l-utils
-      - uses: actions/checkout@v6
+      - run: sudo DEBIAN_FRONTEND='noninteractive' apt-get -qq --no-install-recommends install curl ffmpeg motion v4l-utils
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
@@ -42,9 +48,5 @@ jobs:
       - run: python3 -m build
       - run: python3 -m pip install .
       - run: mkdir --parents --verbose .mypy_cache
-      - run: mypy --ignore-missing-imports --install-types --non-interactive --exclude build/ . || true
-      - run: pytest --ignore=tests/test_utils/test_mjpeg.py
-                    --ignore=tests/test_utils/test_rtmp.py . || true
-      - run: pytest --fixtures tests/test_utils/test_mjpeg.py || true
-      - run: pytest --fixtures tests/test_utils/test_rtmp.py  || true
-      - run: pytest . || pytest --doctest-modules . || true
+      - run: mypy --ignore-missing-imports --install-types --non-interactive --exclude build/ .
+      - run: pytest