Merge branch 'master' into feat/go-sdk-purge-stream-topic

Author: chengxilo

.github/actions/python-maturin/post-merge/action.yml

@@ -153,7 +153,7 @@ runs:
 
     - name: Install uv
       if: inputs.dry_run == 'false'
-      uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+      uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
 
     - name: Publish to PyPI
       if: inputs.dry_run == 'false'

.github/actions/python-maturin/pre-merge/action.yml

@@ -41,7 +41,7 @@ runs:
         tool: cargo-llvm-cov
 
     - name: Install uv
-      uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+      uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
 
     - name: Cache uv
       uses: actions/cache@v5

.github/dependabot.yml

@@ -282,7 +282,9 @@ updates:
           - "*"
 
   - package-ecosystem: "bazel"
-    directory: "/foreign/cpp"
+    directories:
+      - "/foreign/cpp"
+      - "/bdd/cpp"
     schedule:
       interval: "weekly"
       day: "thursday"

.github/workflows/_common.yml

@@ -58,7 +58,7 @@ jobs:
       - uses: actions/checkout@v7.0.0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
 
       - name: Check uv.lock files are in sync with pyproject.toml
         run: ./scripts/ci/uv-lock-check.sh --check
@@ -93,7 +93,7 @@ jobs:
         run: echo "version=$(cat .github/config/hawkeye.version)" >> "$GITHUB_OUTPUT"
 
       - name: Install HawkEye
-        uses: taiki-e/install-action@v2.82.7
+        uses: taiki-e/install-action@v2.82.9
         with:
           tool: hawkeye@${{ steps.hawkeye-version.outputs.version }}
 

.github/workflows/_test.yml

@@ -77,7 +77,7 @@ jobs:
       # Python SDK
       - name: Set up Docker Buildx for Python
         if: inputs.component == 'sdk-python' && inputs.task == 'test'
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Run Python SDK task
         if: inputs.component == 'sdk-python'

.github/workflows/_test_examples.yml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Setup uv
         if: startsWith(inputs.component, 'examples-') && inputs.task == 'examples-python'
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
 
       - name: Install PHP build dependencies
         if: startsWith(inputs.component, 'examples-') && inputs.task == 'examples-php'

.github/workflows/coverage-baseline.yml

@@ -60,7 +60,7 @@ jobs:
           free-disk-space-aggressive: "true"
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@v2.82.7
+        uses: taiki-e/install-action@v2.82.9
         with:
           tool: cargo-llvm-cov
 
@@ -238,12 +238,12 @@ jobs:
           save-cache: "false"
 
       - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@v2.82.7
+        uses: taiki-e/install-action@v2.82.9
         with:
           tool: cargo-llvm-cov
 
       - name: Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
 
       - name: Install dependencies
         run: |

.github/workflows/post-merge.yml

@@ -66,7 +66,7 @@ jobs:
       # preinstalled cargo (rust-toolchain.toml pins 1.96.0) and skips the
       # heavyweight build-cache restore.
       - name: Install cargo-rail
-        uses: taiki-e/install-action@v2.82.7
+        uses: taiki-e/install-action@v2.82.9
         with:
           tool: cargo-rail
 

.github/workflows/publish.yml

@@ -941,7 +941,7 @@ jobs:
           path: ${{ runner.temp }}/digests
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
       - name: Login to Docker Hub
         uses: ./.github/actions/utils/docker-login

.github/workflows/stale-prs.yml

@@ -29,7 +29,7 @@ jobs:
   stale:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@v10.3.0
         with:
           days-before-pr-stale: 7
           days-before-pr-close: 7