From f28462140c5bf63f9f844e2967757f24f61f5df7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Mar 2026 16:47:52 +0000 Subject: [PATCH] Bump the dependencies group across 4 directories with 6 updates Bumps the dependencies group with 3 updates in the / directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [install-pinned/twine](https://github.com/install-pinned/twine) and [actions/download-artifact](https://github.com/actions/download-artifact). Bumps the dependencies group with 1 update in the /checkout directory: [actions/checkout](https://github.com/actions/checkout). Bumps the dependencies group with 1 update in the /setup-python directory: [actions/setup-python](https://github.com/actions/setup-python). Bumps the dependencies group with 1 update in the /setup-uv directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) Updates `install-pinned/twine` from 0540ad878c4a2669ed6363fed8e84b582c25eab5 to 2c96385a99671b0f0c6dfbd54387a0de53c57ff4 - [Release notes](https://github.com/install-pinned/twine/releases) - [Commits](https://github.com/install-pinned/twine/compare/0540ad878c4a2669ed6363fed8e84b582c25eab5...2c96385a99671b0f0c6dfbd54387a0de53c57ff4) Updates `actions/download-artifact` from 7 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd) Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405) Updates `astral-sh/setup-uv` from 7.1.6 to 7.3.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/681c641aba71e4a1c380be3ab5e12ad51f415867...5a095e7a2014a4212f075830d4f7277575a9d098) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: install-pinned/twine dependency-version: 2c96385a99671b0f0c6dfbd54387a0de53c57ff4 dependency-type: direct:production dependency-group: dependencies - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: astral-sh/setup-uv dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/python-build.yml | 2 +- .github/workflows/python-deploy.yml | 4 ++-- checkout/action.yml | 2 +- setup-python/action.yml | 2 +- setup-uv/action.yml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/python-build.yml b/.github/workflows/python-build.yml index 4582bb4..0c4d9a9 100644 --- a/.github/workflows/python-build.yml +++ b/.github/workflows/python-build.yml @@ -64,7 +64,7 @@ jobs: - if: (runner.os == 'Linux' && inputs.build-offline) == false run: python3 -m build --no-isolation ${{ inputs.build-args }} - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: ${{ inputs.artifact || 'wheels' }} path: dist/ diff --git a/.github/workflows/python-deploy.yml b/.github/workflows/python-deploy.yml index 89fd45a..953077d 100644 --- a/.github/workflows/python-deploy.yml +++ b/.github/workflows/python-deploy.yml @@ -38,8 +38,8 @@ jobs: runs-on: ubuntu-latest steps: - name: Install twine from PyPI - uses: install-pinned/twine@0540ad878c4a2669ed6363fed8e84b582c25eab5 # 5.0.0 - - uses: actions/download-artifact@v7 + uses: install-pinned/twine@2c96385a99671b0f0c6dfbd54387a0de53c57ff4 # 5.0.0 + - uses: actions/download-artifact@v8 with: name: ${{ inputs.artifact-name }} pattern: ${{ inputs.artifact-pattern }} diff --git a/checkout/action.yml b/checkout/action.yml index 6f7073d..690e225 100644 --- a/checkout/action.yml +++ b/checkout/action.yml @@ -5,6 +5,6 @@ runs: steps: - run: git config --global core.autocrlf false shell: bash - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with: persist-credentials: false diff --git a/setup-python/action.yml b/setup-python/action.yml index 12c9fab..f3022b9 100644 --- a/setup-python/action.yml +++ b/setup-python/action.yml @@ -8,7 +8,7 @@ inputs: runs: using: "composite" steps: - - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 + - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 with: python-version: ${{ inputs.python-version || (inputs.python-version-file == '' && hashFiles('.github/python-version.txt') == '' && hashFiles('.python-version') == '' && '3.13') || '' }} python-version-file: ${{ inputs.python-version-file || (inputs.python-version == '' && hashFiles('.github/python-version.txt') != '' && '.github/python-version.txt') || '' }} diff --git a/setup-uv/action.yml b/setup-uv/action.yml index f097f2b..1cb7d74 100644 --- a/setup-uv/action.yml +++ b/setup-uv/action.yml @@ -3,7 +3,7 @@ description: 'astral-sh/setup-uv with better defaults' runs: using: "composite" steps: - - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 + - uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 with: version: "0.9.2" enable-cache: ${{ !startsWith(github.ref, 'refs/tags/') }} # harden against cache poisoning