Merge pull request #434 from NHSDigital/APM-6800-Dependabotfix

APM-6800

Author: sathiya-nhs

.github/workflows/apigee-release-pipeline.yml

@@ -3,8 +3,11 @@ defaults:
   run:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
-  push
-permissions: read-all
+  push:
+    branches:
+      - master
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world:
@@ -89,10 +92,10 @@ jobs:
           token="${token#\"}"
           echo "APIGEE_ACCESS_TOKEN=$token" >> $GITHUB_ENV
 
-      - name: Install Python 3.9
+      - name: Install Python 3.13
         uses: actions/setup-python@v5
         with:
-          python-version: 3.9
+          python-version: 3.13
 
       - name: Upgrade python packaging tools
         run: python -m pip install --upgrade pip cryptography

.github/workflows/continous-integration-workflow.yaml

@@ -14,10 +14,10 @@ jobs:
         with:
           fetch-depth: 0  # This causes all history to be fetched, which is required for calculate-version to function	
 
-      - name: Install Python 3.9
+      - name: Install Python 3.13
         uses: actions/setup-python@v5
         with:
-          python-version: 3.9
+          python-version: 3.13
 
       - name: Update apt repositories
         run: sudo apt update
@@ -49,10 +49,14 @@ jobs:
       - name: Check licenses
         run: make check-licenses
 
+      # - name: Set SPEC_VERSION env var
+      #   run: echo ::set-env name=SPEC_VERSION::$(poetry run python scripts/calculate_version.py)
+      #   env:
+      #     ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+      
       - name: Set SPEC_VERSION env var
-        run: echo ::set-env name=SPEC_VERSION::$(poetry run python scripts/calculate_version.py)
-        env:
-          ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+        run: echo "SPEC_VERSION=$(poetry run python scripts/calculate_version.py)" >> "$GITHUB_ENV"
+
 
       - name: Create release (master only)
         id: create-release

.github/workflows/spec-release-pipeline.yml

@@ -4,7 +4,8 @@ defaults:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
   push
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world-spec:
@@ -38,10 +39,10 @@ jobs:
                 echo PR number - $pr_number
           fi
 
-      - name: Install Python 3.9
+      - name: Install Python 3.13
         uses: actions/setup-python@v5
         with:
-          python-version: 3.9
+          python-version: 3.13
 
       - name: Install Proxygen client
         run: |

README.md

@@ -33,7 +33,7 @@ The contents of this repository are protected by Crown Copyright (C).
 
 ### Proxygen
 
-Hello World is the first API to use API Management's Proxygen to deploy the proxy, products, sandbox and spec through API calls.
+Hello World is the first API to use API Management's Proxygen to deploy the proxy, products, sandbox and spec through API calls. 
 
 The Proxygen API calls are handled by the Proxygen CLI