Skip to content

Commit 0254b00

Browse files
dependabot[bot]dependabot[bot]
authored
ci(deps): bump the actions group with 6 updates
Bumps the actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.0.0` | `6.2.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.1.2` | `8.0.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.1` | `6.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.31.2` | `4.35.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.0` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v6) Updates `actions/setup-python` from 6.0.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@e797f83...a309ff8) Updates `astral-sh/setup-uv` from 7.1.2 to 8.0.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@8585678...cec2083) Updates `codecov/codecov-action` from 5.5.1 to 6.0.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@5a10915...57e3a13) Updates `github/codeql-action` from 3.31.2 to 4.35.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3.31.2...c10b806) Updates `actions/upload-artifact` from 4.6.2 to 7.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...bbbca2d) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent b8e689f commit 0254b00

5 files changed

Lines changed: 25 additions & 25 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -28,17 +28,17 @@ jobs:
2828
name: Lint and format check
2929
runs-on: ubuntu-latest
3030
steps:
31-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
31+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
3232

3333
- name: Set up Python
34-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
34+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
3535
with:
3636
python-version: "3.14"
3737
cache: pip
3838
cache-dependency-path: pyproject.toml
3939

4040
- name: Install uv
41-
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7
41+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v7
4242
with:
4343
enable-cache: true
4444
cache-dependency-glob: "pyproject.toml"
@@ -56,17 +56,17 @@ jobs:
5656
name: Typecheck
5757
runs-on: ubuntu-latest
5858
steps:
59-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
59+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
6060

6161
- name: Set up Python
62-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
62+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
6363
with:
6464
python-version: "3.14"
6565
cache: pip
6666
cache-dependency-path: pyproject.toml
6767

6868
- name: Install uv
69-
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7
69+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v7
7070
with:
7171
enable-cache: true
7272
cache-dependency-glob: "pyproject.toml"
@@ -94,17 +94,17 @@ jobs:
9494
python-version: "3.14"
9595

9696
steps:
97-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
97+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
9898

9999
- name: Set up Python ${{ matrix.python-version }}
100-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
100+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
101101
with:
102102
python-version: ${{ matrix.python-version }}
103103
cache: pip
104104
cache-dependency-path: pyproject.toml
105105

106106
- name: Install uv
107-
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7
107+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v7
108108
with:
109109
enable-cache: true
110110
cache-dependency-glob: "pyproject.toml"
@@ -117,7 +117,7 @@ jobs:
117117

118118
- name: Upload coverage to Codecov
119119
if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.14'
120-
uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5
120+
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v5
121121
with:
122122
token: ${{ secrets.CODECOV_TOKEN }}
123123
file: ./coverage.xml
@@ -127,7 +127,7 @@ jobs:
127127
name: SAST
128128
runs-on: ubuntu-latest
129129
steps:
130-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
130+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
131131
- name: Install Semgrep
132132
run: pip install semgrep
133133
- name: Run Semgrep
@@ -137,7 +137,7 @@ jobs:
137137
name: Complexity
138138
runs-on: ubuntu-latest
139139
steps:
140-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
140+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
141141
- name: Install lizard
142142
run: pip install lizard==1.17.13
143143
- name: Check complexity
@@ -147,17 +147,17 @@ jobs:
147147
name: Build
148148
runs-on: ubuntu-latest
149149
steps:
150-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
150+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
151151

152152
- name: Set up Python
153-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
153+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
154154
with:
155155
python-version: "3.14"
156156
cache: pip
157157
cache-dependency-path: pyproject.toml
158158

159159
- name: Install uv
160-
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7
160+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v7
161161
with:
162162
enable-cache: true
163163
cache-dependency-glob: "pyproject.toml"

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,16 +24,16 @@ jobs:
2424

2525
steps:
2626
- name: Checkout repository
27-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
2828

2929
- name: Initialize CodeQL
30-
uses: github/codeql-action/init@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3
30+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v3
3131
with:
3232
languages: python
3333
# Queries: security-extended includes all security checks
3434
queries: security-extended
3535

3636
- name: Perform CodeQL Analysis
37-
uses: github/codeql-action/analyze@5d5cd550d3e189c569da8f16ea8de2d821c9bf7a # v3
37+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v3
3838
with:
3939
category: "/language:python"

‎.github/workflows/dependency-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: Checkout
14-
uses: actions/checkout@v4
14+
uses: actions/checkout@v6
1515

1616
- name: Dependency Review
1717
uses: actions/dependency-review-action@v4

‎.github/workflows/release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28,17 +28,17 @@ jobs:
2828
permissions:
2929
id-token: write # Required for PyPI OIDC trusted publishing
3030
steps:
31-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
31+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
3232

3333
- name: Set up Python
34-
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6
34+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
3535
with:
3636
python-version: "3.14"
3737
cache: pip
3838
cache-dependency-path: pyproject.toml
3939

4040
- name: Install uv
41-
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7
41+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v7
4242
with:
4343
enable-cache: true
4444
cache-dependency-glob: "pyproject.toml"

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Checkout code
30-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
30+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v5
3131
with:
3232
persist-credentials: false
3333

@@ -40,13 +40,13 @@ jobs:
4040
publish_results: true
4141

4242
- name: Upload artifact
43-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
43+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
4444
with:
4545
name: SARIF file
4646
path: results.sarif
4747
retention-days: 5
4848

4949
- name: Upload to code-scanning
50-
uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4
50+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4
5151
with:
5252
sarif_file: results.sarif

0 commit comments

Comments
 (0)