Skip to content

chore(deps): Bump the actions group across 1 directory with 6 updates #1043

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

chore(deps): Bump the actions group across 1 directory with 6 updates #1043

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ jobs:
run: products/identifiers/scripts/generate.py --check-references

- name: Install uv
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the required DCO sign-off

Commit 17a06baa3aa64ce114aa7f67cd350909b43317ef has no Signed-off-by trailer, so the repository's .github/workflows/dco.yml check will reject any PR containing this commit; recreate it with git commit -s or otherwise add the required trailer.

AGENTS.md reference: AGENTS.md:L405-L407

Useful? React with 馃憤聽/ 馃憥.

with:
version: "0.11.16"

Expand Down Expand Up @@ -217,7 +217,7 @@ jobs:
save-if: ${{ github.ref == 'refs/heads/main' }}

- name: Install pinned coverage tool
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }}

Expand Down Expand Up @@ -329,7 +329,7 @@ jobs:
workspaces: products/platform/fuzz -> target

- name: Install pinned cargo-fuzz
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }}

Expand Down Expand Up @@ -369,7 +369,7 @@ jobs:
save-if: ${{ github.ref == 'refs/heads/main' }}

- name: Install cargo-deny
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-deny@0.19.8

Expand Down Expand Up @@ -537,7 +537,7 @@ jobs:
save-if: ${{ github.ref == 'refs/heads/main' }}

- name: Install uv
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
with:
version: "0.11.16"

Expand Down Expand Up @@ -759,7 +759,7 @@ jobs:

- name: Install uv
if: matrix.lane != 'immediate-actions'
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 13, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update the CI classifier's pinned setup-uv assertion

The unconditional Test CI classifier step runs .github/scripts/test_ci_changes.py, but test_breg_contracts_pin_postgresql_and_use_the_product_entry_points still asserts that this BReg step uses the old 20cfd1bf... SHA at line 1629. With the new bec219d... pin, that test now fails on every CI run before the classified jobs proceed; update the assertion alongside this dependency bump.

AGENTS.md reference: AGENTS.md:L251-L254

Useful? React with 馃憤聽/ 馃憥.

with:
version: "0.11.16"

Expand Down Expand Up @@ -982,7 +982,7 @@ jobs:
run: python3 -m unittest release/scripts/test_compare_release_image_layouts.py

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e
with:
version: v0.33.0
driver-opts: image=moby/buildkit:v0.31.2@sha256:2f5adac4ecd194d9f8c10b7b5d7bceb5186853db1b26e5abd3a657af0b7e26ec
Expand Down Expand Up @@ -1235,7 +1235,7 @@ jobs:
save-if: ${{ github.ref == 'refs/heads/main' }}

- name: Install uv
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
with:
version: "0.11.16"

Expand Down Expand Up @@ -1404,7 +1404,7 @@ jobs:
save-if: ${{ github.ref == 'refs/heads/main' }}

- name: Install uv
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
with:
version: "0.11.16"

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,13 +38,13 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Initialize CodeQL
uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
queries: security-and-quality

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
with:
category: "/language:${{ matrix.language }}"
2 changes: 1 addition & 1 deletion .github/workflows/docs-pages.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -298,7 +298,7 @@ jobs:

- name: Deploy to GitHub Pages
id: deployment
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5
uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5
with:
# State the action's maximum explicitly. A deployment that remains
# queued for ten minutes is a provider-side failure and is retried
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/nightly-rust-coverage.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ jobs:
save-if: false

- name: Install pinned coverage tool
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }}

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/nightly-security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@ jobs:
uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2

- name: Install cargo-fuzz
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }}

Expand Down Expand Up @@ -128,7 +128,7 @@ jobs:
uses: Swatinem/rust-cache@f0d9c3887740aee45f6153b24b3a6b815192ec16 # v2

- name: Install cargo-fuzz
uses: taiki-e/install-action@288e746965032cfcc232e09af2daf5f23c14d780 # v2.86.1
uses: taiki-e/install-action@3f74d7c16a4242f1c95561e98edc25d36adb4375 # v2.87.12
with:
tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }}

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-candidate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -372,7 +372,7 @@ jobs:

- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
with:
version: ${{ env.RELEASE_BUILDX_VERSION }}
driver-opts: image=${{ env.RELEASE_BUILDKIT_IMAGE }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-rehearsal.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -255,7 +255,7 @@ jobs:
- name: Set up Docker Buildx for advisory evidence
if: ${{ inputs.advisory_evidence }}
id: advisory-buildx
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
with:
version: ${{ env.RELEASE_BUILDX_VERSION }}
driver-opts: image=${{ env.RELEASE_BUILDKIT_IMAGE }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-repeatability.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -200,7 +200,7 @@ jobs:

- name: Set up Docker Buildx
id: buildx
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
with:
version: ${{ env.RELEASE_BUILDX_VERSION }}
driver-opts: image=${{ env.RELEASE_BUILDKIT_IMAGE }}
Expand Down
Loading