Skip to content

Commit 47e3f7d

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions group in /.github/workflows with 10 updates (#109)
1 parent c7da999 commit 47e3f7d

File tree

8 files changed

+34
-34
lines changed

8 files changed

+34
-34
lines changed

‎.github/workflows/cache-cleaner.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
actions: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
19+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block
@@ -26,7 +26,7 @@ jobs:
2626
objects.githubusercontent.com:443
2727
2828
- name: Checkout Repository
29-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
29+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3030
with:
3131
persist-credentials: false
3232

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,19 +53,19 @@ jobs:
5353
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
56+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
5757
with:
5858
disable-sudo: true
5959
egress-policy: audit
6060

6161
- name: Checkout Repository
62-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
62+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6363
with:
6464
persist-credentials: false
6565

6666
# Initializes the CodeQL tools for scanning.
6767
- name: Initialize CodeQL
68-
uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
68+
uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
6969
with:
7070
languages: ${{ matrix.language }}
7171
build-mode: ${{ matrix.build-mode }}
@@ -94,6 +94,6 @@ jobs:
9494
exit 1
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
97+
uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
9898
with:
9999
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2121
with:
2222
disable-sudo: true
2323
egress-policy: block
@@ -27,9 +27,9 @@ jobs:
2727
github.com:443
2828
2929
- name: Checkout Repository
30-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
30+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3131
with:
3232
persist-credentials: false
3333

3434
- name: Dependency Review
35-
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
35+
uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0

‎.github/workflows/first-pull-request.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,15 @@ jobs:
1616
pull-requests: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
19+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block
2323
allowed-endpoints: >
2424
api.github.com:443
2525
2626
- name: Verify Pull Request Opener
27-
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
27+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2828
with:
2929
script: |
3030
// Get a list of all issues created by the PR opener

‎.github/workflows/main.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -28,24 +28,24 @@ jobs:
2828
- "3.x"
2929
steps:
3030
- name: Harden Runner
31-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
31+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3232
with:
3333
disable-sudo: true
3434
egress-policy: audit
3535
- name: Checkout Repository
36-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
36+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3737
with:
3838
persist-credentials: false
3939
- name: Set up Python${{ matrix.python-version }}
40-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
40+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
4141
with:
4242
python-version: ${{ matrix.python-version }}
4343
cache: pip
4444
- name: Install CI libraries
4545
run: |
4646
python -m pip install --require-hashes -r CI/requirements_ci.txt
4747
- name: Environment Caching
48-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
48+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
4949
with:
5050
path: |
5151
.tox
@@ -68,24 +68,24 @@ jobs:
6868
- "3.13"
6969
steps:
7070
- name: Harden Runner
71-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
71+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
7272
with:
7373
disable-sudo: true
7474
egress-policy: audit
7575
- name: Checkout Repository
76-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
76+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7777
with:
7878
persist-credentials: false
7979
- name: Set up Python${{ matrix.python-version }}
80-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
80+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
8181
with:
8282
python-version: ${{ matrix.python-version }}
8383
cache: pip
8484
- name: Install CI libraries
8585
run: |
8686
python -m pip install --require-hashes -r CI/requirements_ci.txt
8787
- name: Environment Caching
88-
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
88+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
8989
with:
9090
path: .tox
9191
key: ${{ matrix.os }}-Python${{ matrix.python-version }}-${{ hashFiles('pyproject.toml', 'tox.ini') }}
@@ -104,7 +104,7 @@ jobs:
104104
runs-on: ubuntu-latest
105105
steps:
106106
- name: Harden Runner
107-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
107+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
108108
with:
109109
disable-sudo: true
110110
egress-policy: audit

‎.github/workflows/publish-pypi.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
id-token: write
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
21+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2222
with:
2323
disable-sudo: true
2424
egress-policy: block
@@ -29,11 +29,11 @@ jobs:
2929
ruf-repo-cdn.sigstore.dev:443
3030
upload.pypi.org:443
3131
- name: Checkout Repository
32-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
32+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3333
with:
3434
persist-credentials: false
3535
- name: Set up Python3
36-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
36+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
3737
with:
3838
python-version: "3.x"
3939
- name: Install CI libraries
@@ -43,4 +43,4 @@ jobs:
4343
run: |
4444
python -m flit build
4545
- name: Publish distribution 📦 to PyPI
46-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
46+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

‎.github/workflows/tag-testpypi.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,15 +17,15 @@ jobs:
1717
contents: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
20+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2121
with:
2222
egress-policy: audit
2323
- name: Checkout Repository
24-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
24+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2525
with:
2626
persist-credentials: false
2727
- name: Create Release
28-
uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # 2.3.2
28+
uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # 2.3.3
2929
env:
3030
# This token is provided by Actions, you do not need to create your own token
3131
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -44,7 +44,7 @@ jobs:
4444
id-token: write
4545
steps:
4646
- name: Harden Runner
47-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
47+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
4848
with:
4949
disable-sudo: true
5050
egress-policy: block
@@ -55,11 +55,11 @@ jobs:
5555
ruf-repo-cdn.sigstore.dev:443
5656
test.pypi.org:443
5757
- name: Checkout Repository
58-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
58+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5959
with:
6060
persist-credentials: false
6161
- name: Set up Python3
62-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
62+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
6363
with:
6464
python-version: "3.x"
6565
- name: Install CI libraries
@@ -69,7 +69,7 @@ jobs:
6969
run: |
7070
python -m flit build
7171
- name: Publish distribution 📦 to Test PyPI
72-
uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
72+
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
7373
with:
7474
repository-url: https://test.pypi.org/legacy/
7575
skip-existing: true

‎.github/workflows/workflow-warning.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,14 +25,14 @@ jobs:
2525
pull-requests: write
2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
28+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
2929
with:
3030
disable-sudo: true
3131
egress-policy: block
3232
allowed-endpoints: >
3333
api.github.com:443
3434
- name: Find Warning Comment
35-
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
35+
uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
3636
id: fc_warning
3737
with:
3838
issue-number: ${{ github.event.pull_request.number }}
@@ -54,7 +54,7 @@ jobs:
5454
**It is very important for the reviewer to ensure that the workflow changes are appropriate.**
5555
edit-mode: replace
5656
- name: Find Note Comment
57-
uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
57+
uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
5858
id: fc_note
5959
with:
6060
issue-number: ${{ github.event.pull_request.number }}

0 commit comments

Comments
 (0)