Skip to content

Commit 4d22fdc

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps)(deps): bump the github-actions group across 1 directory with 8 updates
Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.0.0` | `8.1.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4` | `5` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5` | `6` | | [actions/labeler](https://github.com/actions/labeler) | `5` | `6` | | [actions/cache](https://github.com/actions/cache) | `4` | `5` | Updates `astral-sh/setup-uv` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@v8.0.0...v8.1.0) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v9) Updates `actions/dependency-review-action` from 4 to 5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@v4...v5) Updates `amannn/action-semantic-pull-request` from 5 to 6 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@v5...v6) Updates `actions/labeler` from 5 to 6 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v5...v6) Updates `actions/cache` from 4 to 5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: amannn/action-semantic-pull-request dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/labeler dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent a0f3295 commit 4d22fdc

4 files changed

Lines changed: 22 additions & 22 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
- uses: actions/checkout@v6
6060

6161
- name: Install uv
62-
uses: astral-sh/setup-uv@v8.0.0
62+
uses: astral-sh/setup-uv@v8.1.0
6363
with:
6464
enable-cache: false
6565

@@ -81,7 +81,7 @@ jobs:
8181
fetch-depth: 0
8282

8383
- name: Install uv
84-
uses: astral-sh/setup-uv@v8.0.0
84+
uses: astral-sh/setup-uv@v8.1.0
8585
with:
8686
enable-cache: false
8787

@@ -145,7 +145,7 @@ jobs:
145145
fetch-depth: 0
146146

147147
- name: Install uv
148-
uses: astral-sh/setup-uv@v8.0.0
148+
uses: astral-sh/setup-uv@v8.1.0
149149
with:
150150
enable-cache: false
151151

@@ -209,7 +209,7 @@ jobs:
209209
python-version: "3.12"
210210

211211
- name: Install uv
212-
uses: astral-sh/setup-uv@v8.0.0
212+
uses: astral-sh/setup-uv@v8.1.0
213213
with:
214214
enable-cache: false
215215

‎.github/workflows/codeql.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
uses: actions/checkout@v6
4040

4141
- name: Initialize CodeQL
42-
uses: github/codeql-action/init@v3
42+
uses: github/codeql-action/init@v4
4343
with:
4444
languages: ${{ matrix.language }}
4545
queries: security-extended,security-and-quality
@@ -73,14 +73,14 @@ jobs:
7373
bun install
7474
7575
- name: Perform CodeQL Analysis
76-
uses: github/codeql-action/analyze@v3
76+
uses: github/codeql-action/analyze@v4
7777
with:
7878
category: "/language:${{ matrix.language }}"
7979
output: sarif-results
8080
upload: true
8181

8282
- name: Upload SARIF as artifact
83-
uses: actions/upload-artifact@v4
83+
uses: actions/upload-artifact@v7
8484
with:
8585
name: codeql-results-${{ matrix.language }}
8686
path: sarif-results
@@ -107,13 +107,13 @@ jobs:
107107
--severity WARNING
108108
109109
- name: Upload Semgrep results to GitHub
110-
uses: github/codeql-action/upload-sarif@v3
110+
uses: github/codeql-action/upload-sarif@v4
111111
with:
112112
sarif_file: semgrep-results.sarif
113113
category: semgrep
114114

115115
- name: Upload Semgrep results as artifact
116-
uses: actions/upload-artifact@v4
116+
uses: actions/upload-artifact@v7
117117
with:
118118
name: semgrep-results
119119
path: semgrep-results.sarif
@@ -137,13 +137,13 @@ jobs:
137137
severity: 'CRITICAL,HIGH'
138138

139139
- name: Upload Trivy results to GitHub Security
140-
uses: github/codeql-action/upload-sarif@v3
140+
uses: github/codeql-action/upload-sarif@v4
141141
with:
142142
sarif_file: trivy-results.sarif
143143
category: trivy
144144

145145
- name: Upload Trivy results as artifact
146-
uses: actions/upload-artifact@v4
146+
uses: actions/upload-artifact@v7
147147
with:
148148
name: trivy-results
149149
path: trivy-results.sarif
@@ -157,7 +157,7 @@ jobs:
157157

158158
steps:
159159
- name: Check scan results
160-
uses: actions/github-script@v7
160+
uses: actions/github-script@v9
161161
with:
162162
script: |
163163
const jobs = ${{ toJSON(needs) }};

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
- uses: actions/checkout@v6
3030

3131
- name: Dependency Review
32-
uses: actions/dependency-review-action@v4
32+
uses: actions/dependency-review-action@v5
3333
with:
3434
fail-on-severity: moderate
3535
allow-licenses: >-
@@ -66,7 +66,7 @@ jobs:
6666
- uses: actions/checkout@v6
6767

6868
- name: Install uv
69-
uses: astral-sh/setup-uv@v8.0.0
69+
uses: astral-sh/setup-uv@v8.1.0
7070
with:
7171
enable-cache: true
7272

‎.github/workflows/pr-validation.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
timeout-minutes: 5
2424
steps:
2525
- name: Validate PR title (Conventional Commits)
26-
uses: amannn/action-semantic-pull-request@v5
26+
uses: amannn/action-semantic-pull-request@v6
2727
with:
2828
types: |
2929
feat
@@ -53,7 +53,7 @@ jobs:
5353
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5454

5555
- name: Check PR size
56-
uses: actions/github-script@v7
56+
uses: actions/github-script@v9
5757
with:
5858
script: |
5959
const pr = context.payload.pull_request;
@@ -80,7 +80,7 @@ jobs:
8080
steps:
8181
- uses: actions/checkout@v6
8282

83-
- uses: actions/labeler@v5
83+
- uses: actions/labeler@v6
8484
with:
8585
repo-token: ${{ secrets.GITHUB_TOKEN }}
8686
configuration-path: .github/labeler.yml
@@ -135,11 +135,11 @@ jobs:
135135
python-version: "3.13"
136136

137137
- name: Install uv
138-
uses: astral-sh/setup-uv@v8.0.0
138+
uses: astral-sh/setup-uv@v8.1.0
139139
with:
140140
enable-cache: true
141141

142-
- uses: actions/cache@v4
142+
- uses: actions/cache@v5
143143
with:
144144
path: ~/.cache/pre-commit
145145
key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -157,7 +157,7 @@ jobs:
157157
- uses: actions/checkout@v6
158158

159159
- name: Install uv
160-
uses: astral-sh/setup-uv@v8.0.0
160+
uses: astral-sh/setup-uv@v8.1.0
161161
with:
162162
enable-cache: true
163163

@@ -197,7 +197,7 @@ jobs:
197197
fetch-depth: 0
198198

199199
- name: Install uv
200-
uses: astral-sh/setup-uv@v8.0.0
200+
uses: astral-sh/setup-uv@v8.1.0
201201
with:
202202
enable-cache: true
203203

@@ -284,7 +284,7 @@ jobs:
284284
if: always()
285285
steps:
286286
- name: Check all jobs passed
287-
uses: actions/github-script@v7
287+
uses: actions/github-script@v9
288288
with:
289289
script: |
290290
const jobs = ${{ toJSON(needs) }};

0 commit comments

Comments
 (0)