Skip to content

Commit 281c1db

Browse files
dependabot[bot]dependabot[bot]
authored
chore: bump the actions-all group across 1 directory with 13 updates
Bumps the actions-all group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `4.2.0` | `10.1.0` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.169` | `1.0.231` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `3.35.5` | `4.38.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `3.35.5` | `4.38.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.4.1` | | [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.6.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.4.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.0.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.1` | Updates `astral-sh/setup-uv` from 4.2.0 to 10.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@38f3f10...bec219d) Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...3d3c42e) Updates `anthropics/claude-code-action` from 1.0.169 to 1.0.231 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@37b464c...cfc3eb2) Updates `github/codeql-action/init` from 3.35.5 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@458d36d...1c5b675) Updates `github/codeql-action/analyze` from 3.35.5 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@458d36d...1c5b675) Updates `docker/setup-buildx-action` from 3.12.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@8d2750c...f87e599) Updates `docker/login-action` from 3.7.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@c94ce9f...dbcb813) Updates `docker/build-push-action` from 6.19.2 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@10e90e3...c3c9e26) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...5fda3b9) Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...8207627) Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@27d5ce7...55cc834) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.6.2...043fb46) Updates `actions/download-artifact` from 4.3.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...3e5f45b) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: anthropics/claude-code-action dependency-version: 1.0.210 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 7df5bd1 commit 281c1db

11 files changed

Lines changed: 63 additions & 63 deletions

‎.github/workflows/claude-pr-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ jobs:
4848

4949
steps:
5050
- name: Checkout code
51-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
51+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5252
with:
5353
fetch-depth: 0
5454
# Do NOT persist the GITHUB_TOKEN into .git/config. Default-true
@@ -88,7 +88,7 @@ jobs:
8888
# path; this bearer-token path skips that infra and is the same one
8989
# the Claude CLI uses directly (exercised end-to-end by the
9090
# live-tests BedrockRoute step).
91-
uses: anthropics/claude-code-action@37b464ce72700f7b2c5ff8d2db7fa7b15df792f5 # v1.0.169
91+
uses: anthropics/claude-code-action@cfc3eb22bfed5c26ef66e3223c982af27e4524de # v1.0.231
9292
env:
9393
AWS_BEARER_TOKEN_BEDROCK: ${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}
9494
AWS_REGION: ${{ secrets.AWS_REGION }}

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ jobs:
2525

2626
steps:
2727
- name: Checkout code
28-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
28+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2929

3030
- name: Initialize CodeQL
31-
uses: github/codeql-action/init@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
31+
uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
3232
with:
3333
languages: python
3434
queries: security-and-quality
3535

3636
- name: Perform CodeQL Analysis
37-
uses: github/codeql-action/analyze@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
37+
uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1

‎.github/workflows/conventional-commits.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
echo "✓ PR title OK: $PR_TITLE"
3939
4040
- name: Checkout code
41-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
41+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4242
with:
4343
fetch-depth: 0
4444

‎.github/workflows/docker-publish.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151

5252
steps:
5353
- name: Checkout code
54-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
54+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5555

5656
- name: Read version from pyproject.toml
5757
id: ver
@@ -65,17 +65,17 @@ jobs:
6565
echo "owner_lc=${OWNER_LC}" >> "$GITHUB_OUTPUT"
6666
6767
- name: Set up Docker Buildx
68-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
68+
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
6969

7070
- name: Log in to GHCR
71-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
71+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
7272
with:
7373
registry: ${{ env.REGISTRY }}
7474
username: ${{ github.actor }}
7575
password: ${{ secrets.GITHUB_TOKEN }}
7676

7777
- name: Build and push image
78-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
78+
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
7979
with:
8080
context: .
8181
file: docker/Dockerfile

‎.github/workflows/docs.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
# shared-pool runner slot for GitHub's 6h default.
4141
timeout-minutes: 10
4242
steps:
43-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
43+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4444

4545
- name: Assemble the published tree
4646
run: |

‎.github/workflows/harbor-e2e.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -44,23 +44,23 @@ jobs:
4444

4545
steps:
4646
- name: Checkout code
47-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
47+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4848

4949
- name: Set up Python 3.13
50-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
50+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
5151
with:
5252
python-version: "3.13"
5353

5454
- name: Set up Node.js 20
55-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
55+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
5656
with:
5757
node-version: "20"
5858

5959
- name: Install Claude CLI
6060
run: npm install -g @anthropic-ai/claude-code
6161

6262
- name: Cache dependencies
63-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
63+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
6464
with:
6565
path: |
6666
~/.cache/uv

‎.github/workflows/pr-checks.yml‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -60,15 +60,15 @@ jobs:
6060

6161
steps:
6262
- name: Checkout code
63-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
63+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
6464

6565
- name: Set up Python 3.13
66-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
66+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
6767
with:
6868
python-version: "3.13"
6969

7070
- name: Cache dependencies
71-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
71+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
7272
with:
7373
# ``.venv`` is deliberately NOT cached: its interpreter symlinks
7474
# point at the exact hosted-Python patch, so a patch bump (e.g.
@@ -213,10 +213,10 @@ jobs:
213213
timeout-minutes: 15
214214
steps:
215215
- name: Checkout code
216-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
216+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
217217

218218
- name: Set up Node.js 20
219-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
219+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
220220
with:
221221
node-version: "20"
222222

@@ -243,11 +243,11 @@ jobs:
243243
timeout-minutes: 10
244244
steps:
245245
- name: Checkout code
246-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
246+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
247247

248248
# `claude plugin validate` ships in the Claude Code npm package.
249249
- name: Set up Node.js 20
250-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
250+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
251251
with:
252252
node-version: "20"
253253

@@ -261,7 +261,7 @@ jobs:
261261
run: claude plugin validate . --strict
262262

263263
- name: Install uv
264-
uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
264+
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
265265

266266
# Runs OUTSIDE the source tree, the way a user's copy of the template does:
267267
# no experiments/, no tasks/, no coder_eval checkout on the path. `plan` is a
@@ -305,10 +305,10 @@ jobs:
305305
timeout-minutes: 5
306306
steps:
307307
- name: Checkout code
308-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
308+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
309309

310310
- name: Set up Python 3.13
311-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
311+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
312312
with:
313313
python-version: "3.13"
314314

@@ -371,15 +371,15 @@ jobs:
371371

372372
steps:
373373
- name: Checkout code
374-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
374+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
375375

376376
- name: Set up Python 3.13
377-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
377+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
378378
with:
379379
python-version: "3.13"
380380

381381
- name: Cache dependencies
382-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
382+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
383383
with:
384384
# ``.venv`` is deliberately excluded: tarring/untarring tens of
385385
# thousands of small wheel files on Windows is what was tripping
@@ -424,7 +424,7 @@ jobs:
424424
run: .venv/Scripts/pytest tests/ -v -m "not live and not lint"
425425

426426
- name: Set up Node.js 20
427-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
427+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
428428
with:
429429
node-version: "20"
430430

@@ -520,23 +520,23 @@ jobs:
520520

521521
steps:
522522
- name: Checkout code
523-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
523+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
524524

525525
- name: Set up Python 3.13
526-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
526+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
527527
with:
528528
python-version: "3.13"
529529

530530
- name: Set up Node.js 20
531-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
531+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
532532
with:
533533
node-version: "20"
534534

535535
- name: Install Claude CLI
536536
run: npm install -g @anthropic-ai/claude-code
537537

538538
- name: Cache dependencies
539-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
539+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
540540
with:
541541
# ``.venv`` excluded: a hosted-Python patch bump orphans its
542542
# interpreter symlink (dangling ``.venv/bin/python`` -> exit 127).
@@ -716,15 +716,15 @@ jobs:
716716

717717
steps:
718718
- name: Checkout code
719-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
719+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
720720

721721
- name: Set up Python 3.13
722-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
722+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
723723
with:
724724
python-version: "3.13"
725725

726726
- name: Set up Node.js 20
727-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
727+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
728728
with:
729729
node-version: "20"
730730

@@ -735,7 +735,7 @@ jobs:
735735
# AgentConfig.isolation=true, so the SDK doesn't shell out to bwrap.
736736

737737
- name: Cache dependencies
738-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
738+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
739739
with:
740740
# ``.venv`` excluded: a hosted-Python patch bump orphans its
741741
# interpreter symlink (dangling ``.venv/bin/python`` -> exit 127).
@@ -902,10 +902,10 @@ jobs:
902902

903903
steps:
904904
- name: Checkout code
905-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
905+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
906906

907907
- name: Set up Python 3.13
908-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
908+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
909909
with:
910910
python-version: "3.13"
911911

@@ -976,15 +976,15 @@ jobs:
976976

977977
steps:
978978
- name: Checkout code
979-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
979+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
980980

981981
- name: Set up Python 3.13
982-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
982+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
983983
with:
984984
python-version: "3.13"
985985

986986
- name: Set up Node.js 20
987-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
987+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
988988
with:
989989
node-version: "20"
990990

@@ -1052,13 +1052,13 @@ jobs:
10521052
# Skip on fork PRs where secrets aren't available (matches e2e-smoke).
10531053
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
10541054
steps:
1055-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1055+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
10561056

10571057
# The composite action is agent-agnostic and does NOT install a coding-agent
10581058
# runtime. The dogfood task uses the default claude-code agent, so provide
10591059
# Node + the Claude CLI here (as e2e-smoke does), before invoking the action.
10601060
- name: Set up Node.js 20
1061-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
1061+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
10621062
with:
10631063
node-version: "20"
10641064
- name: Install Claude CLI
@@ -1198,7 +1198,7 @@ jobs:
11981198

11991199
steps:
12001200
- name: Checkout code
1201-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1201+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
12021202

12031203
- name: Check Delegate ROPC secrets present
12041204
id: gate
@@ -1239,13 +1239,13 @@ jobs:
12391239
12401240
- name: Set up Python 3.13
12411241
if: steps.gate.outputs.present == 'true'
1242-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1242+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
12431243
with:
12441244
python-version: "3.13"
12451245

12461246
- name: Set up Node.js 20
12471247
if: steps.gate.outputs.present == 'true'
1248-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
1248+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
12491249
with:
12501250
node-version: "20"
12511251

‎.github/workflows/publish-testpypi.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,15 +47,15 @@ jobs:
4747
id-token: write
4848
steps:
4949
- name: Checkout code
50-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
50+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5151

5252
- name: Set up Python 3.13
53-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
53+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
5454
with:
5555
python-version: "3.13"
5656

5757
- name: Install uv
58-
uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
58+
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
5959
with:
6060
enable-cache: true
6161

0 commit comments

Comments
 (0)