Skip to content

Commit b150653

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions group across 1 directory with 15 updates (#543)
2 parents e123cce + 55722c9 commit b150653

File tree

12 files changed

+58
-58
lines changed

12 files changed

+58
-58
lines changed

‎.github/workflows/bump-version.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
contents: write
4848
steps:
4949
- name: Harden Runner
50-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
50+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
5151
with:
5252
disable-sudo: true
5353
egress-policy: block
@@ -57,13 +57,13 @@ jobs:
5757
pypi.org:443
5858
5959
- name: Checkout Repository (no persist-credentials)
60-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
60+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6161
with:
6262
persist-credentials: false
6363
fetch-depth: 0
6464

6565
- name: Set up Python3
66-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
66+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
6767
with:
6868
python-version: "3.x"
6969

@@ -89,7 +89,7 @@ jobs:
8989
echo "new_version=$(bump-my-version show current_version)"
9090
9191
- name: Push Changes
92-
uses: ad-m/github-push-action@d91a481090679876dfc4178fef17f286781251df # v0.8.0
92+
uses: ad-m/github-push-action@77c5b412c50b723d2a4fbc6d71fb5723bcd439aa # v1.0.0
9393
with:
9494
force: false
9595
github_token: ${{ secrets.BUMP_VERSION_TOKEN }}

‎.github/workflows/cache-cleaner.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
actions: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
19+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block
@@ -27,7 +27,7 @@ jobs:
2727
release-assets.githubusercontent.com:443
2828
2929
- name: Checkout Repository
30-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
30+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3131
with:
3232
persist-credentials: false
3333

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,19 +53,19 @@ jobs:
5353
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
56+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
5757
with:
5858
disable-sudo: true
5959
egress-policy: audit
6060

6161
- name: Checkout Repository
62-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
62+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6363
with:
6464
persist-credentials: false
6565

6666
# Initializes the CodeQL tools for scanning.
6767
- name: Initialize CodeQL
68-
uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
68+
uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.29.5
6969
with:
7070
languages: ${{ matrix.language }}
7171
build-mode: ${{ matrix.build-mode }}
@@ -94,6 +94,6 @@ jobs:
9494
exit 1
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
97+
uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.29.5
9898
with:
9999
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2121
with:
2222
disable-sudo: true
2323
egress-policy: block
@@ -28,9 +28,9 @@ jobs:
2828
github.com:443
2929
3030
- name: Checkout Repository
31-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
31+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
persist-credentials: false
3434

3535
- name: Dependency Review
36-
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
36+
uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0

‎.github/workflows/first-pull-request.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,15 @@ jobs:
1616
pull-requests: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
19+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block
2323
allowed-endpoints: >
2424
api.github.com:443
2525
2626
- name: Verify Pull Request Opener
27-
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
27+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2828
with:
2929
script: |
3030
// Get a list of all issues created by the PR opener

‎.github/workflows/label.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,14 +23,14 @@ jobs:
2323
pull-requests: write
2424
steps:
2525
- name: Harden Runner
26-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
26+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2727
with:
2828
disable-sudo: true
2929
egress-policy: block
3030
allowed-endpoints: >
3131
api.github.com:443
3232
3333
- name: Label Pull Request
34-
uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
34+
uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
3535
with:
3636
repo-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/main.yml‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
25+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2626
with:
2727
disable-sudo: true
2828
egress-policy: block
@@ -31,19 +31,19 @@ jobs:
3131
github.com:443
3232
pypi.org:443
3333
- name: Checkout Repository
34-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
34+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3535
with:
3636
persist-credentials: false
3737
- name: Set up Python${{ matrix.python-version }}
38-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
38+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
3939
with:
4040
python-version: "3.x"
4141
cache: pip
4242
- name: Install CI libraries
4343
run: |
4444
python -m pip install --require-hashes -r CI/requirements_ci.txt
4545
- name: Environment Caching
46-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
46+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
4747
with:
4848
path: |
4949
.tox
@@ -68,16 +68,16 @@ jobs:
6868
tox-env: 'py3.10-coverage-upstream'
6969
steps:
7070
- name: Harden Runner
71-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
71+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
7272
with:
7373
disable-sudo: false
7474
egress-policy: audit
7575
- name: Checkout Repository
76-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
76+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7777
with:
7878
persist-credentials: false
7979
- name: Set up Python${{ matrix.python-version }}
80-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
80+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
8181
with:
8282
python-version: ${{ matrix.python-version }}
8383
cache: pip
@@ -105,15 +105,15 @@ jobs:
105105
106106
- name: Environment caching (macOS)
107107
if: matrix.os == 'macos-latest'
108-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
108+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
109109
with:
110110
path: |
111111
.tox
112112
~/Library/Caches/raven-testdata
113113
key: ${{ hashFiles('src/ravenpy/testing/registry.txt') }}-${{ env.RAVEN_TESTDATA_BRANCH }}-${{ matrix.os }}
114114
- name: Environment caching (Ubuntu)
115115
if: matrix.os == 'ubuntu-latest'
116-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
116+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
117117
with:
118118
path: |
119119
.tox
@@ -151,20 +151,20 @@ jobs:
151151
shell: bash -l {0}
152152
steps:
153153
- name: Harden Runner
154-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
154+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
155155
with:
156156
disable-sudo: true
157157
egress-policy: audit
158158
- name: Checkout Repository
159-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
159+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
160160
with:
161161
persist-credentials: false
162162
- name: Patch Environment File
163163
if: matrix.os == 'windows-latest'
164164
run: |
165165
sed -i 's/climpred >=2.4.0/xesmf/' environment.yml
166166
- name: Setup Conda (Micromamba) with Python${{ matrix.python-version }}
167-
uses: mamba-org/setup-micromamba@b09ef9b599704322748535812ca03efb2625677b # v2.0.5
167+
uses: mamba-org/setup-micromamba@add3a49764cedee8ee24e82dfde87f5bc2914462 # v2.0.7
168168
with:
169169
cache-downloads: true
170170
cache-environment: true
@@ -181,14 +181,14 @@ jobs:
181181
python -m pip check || true
182182
- name: Cache test data (macOS)
183183
if: matrix.os == 'macos-latest'
184-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
184+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
185185
with:
186186
path: |
187187
~/Library/Caches/raven-testdata
188188
key: ${{ hashFiles('src/ravenpy/testing/registry.txt') }}-${{ env.RAVEN_TESTDATA_BRANCH }}-conda-${{ matrix.os }}
189189
- name: Cache test data (Ubuntu)
190190
if: matrix.os == 'ubuntu-latest'
191-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
191+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
192192
with:
193193
path: |
194194
~/.cache/raven-testdata
@@ -215,7 +215,7 @@ jobs:
215215
runs-on: ubuntu-latest
216216
steps:
217217
- name: Harden Runner
218-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
218+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
219219
with:
220220
disable-sudo: true
221221
egress-policy: audit

‎.github/workflows/publish-pypi.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
21+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2222
with:
2323
disable-sudo: true
2424
egress-policy: block
@@ -31,12 +31,12 @@ jobs:
3131
upload.pypi.org:443
3232
3333
- name: Checkout Repository
34-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
34+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3535
with:
3636
persist-credentials: false
3737

3838
- name: Set up Python3
39-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
39+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
4040
with:
4141
python-version: "3.x"
4242

@@ -49,4 +49,4 @@ jobs:
4949
python -m flit build
5050
5151
- name: Publish distribution 📦 to PyPI
52-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
52+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

‎.github/workflows/scorecard.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
id-token: write
3131
steps:
3232
- name: Harden Runner
33-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
33+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3434
with:
3535
disable-sudo: true
3636
egress-policy: block
@@ -48,12 +48,12 @@ jobs:
4848
www.bestpractices.dev:443
4949
5050
- name: Checkout Repository
51-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
51+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5252
with:
5353
persist-credentials: false
5454

5555
- name: Run Analysis
56-
uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
56+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
5757
with:
5858
results_file: results.sarif
5959
results_format: sarif
@@ -81,6 +81,6 @@ jobs:
8181

8282
# Upload the results to GitHub's code scanning dashboard.
8383
- name: Upload to code-scanning
84-
uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # 3.29.5
84+
uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # 3.29.5
8585
with:
8686
sarif_file: results.sarif

‎.github/workflows/tag-testpypi.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,17 @@ jobs:
1717
contents: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2121
with:
2222
egress-policy: audit
2323

2424
- name: Checkout Repository
25-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
25+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2626
with:
2727
persist-credentials: false
2828

2929
- name: Create Release
30-
uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # 2.3.2
30+
uses: softprops/action-gh-release@aec2ec56f94eb8180ceec724245f64ef008b89f5 # 2.4.0
3131
env:
3232
# This token is provided by Actions, you do not need to create your own token
3333
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -46,7 +46,7 @@ jobs:
4646
runs-on: ubuntu-latest
4747
steps:
4848
- name: Harden Runner
49-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
49+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
5050
with:
5151
disable-sudo: true
5252
egress-policy: block
@@ -59,12 +59,12 @@ jobs:
5959
test.pypi.org:443
6060
6161
- name: Checkout Repository
62-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
62+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6363
with:
6464
persist-credentials: false
6565

6666
- name: Set up Python3
67-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
67+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
6868
with:
6969
python-version: "3.x"
7070

@@ -77,7 +77,7 @@ jobs:
7777
python -m flit build
7878
7979
- name: Publish distribution 📦 to Test PyPI
80-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
80+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
8181
with:
8282
repository-url: https://test.pypi.org/legacy/
8383
skip-existing: true

0 commit comments

Comments
 (0)