build(deps): bump the actions group across 1 directory with 4 updates (#263)

dependabot[bot] · web-flow · commit f38480a84dc9 · 2026-02-18T04:07:09.000-08:00
Bumps the actions group with 4 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [mlugg/setup-zig](https://github.com/mlugg/setup-zig), [cross-platform-actions/action](https://github.com/cross-platform-actions/action) and [PyO3/maturin-action](https://github.com/pyo3/maturin-action). Updates `astral-sh/setup-uv` from 7.1.6 to 7.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's releases</a>.</em></p> <blockquote> <h2>v7.3.0 🌈 New features and bug fixes for activate-environment</h2> <h2>Changes</h2> <p>This release contains a few bug fixes and a new feature for the activate-environment functionality.</p> <h2>🐛 Bug fixes</h2> <ul> <li>fix: warn instead of error when no python to cache <a href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/762">#762</a>)</li> <li>fix: use --clear to create venv <a href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/761">#761</a>)</li> </ul> <h2>🚀 Enhancements</h2> <ul> <li>feat: add venv-path input for activate-environment <a href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/746">#746</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>chore: update known checksums for 0.10.0 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/759">#759</a>)</li> <li>refactor: tilde-expansion tests as unittests and no self-hosted tests <a href="https://github.com/eifinger"><code>@​eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/760">#760</a>)</li> <li>chore: update known checksums for 0.9.30 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/756">#756</a>)</li> <li>chore: update known checksums for 0.9.29 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/748">#748</a>)</li> </ul> <h2>📚 Documentation</h2> <ul> <li>Fix punctuation <a href="https://github.com/pm-dev563"><code>@​pm-dev563</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/747">#747</a>)</li> </ul> <h2>⬆️ Dependency updates</h2> <ul> <li>Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/753">#753</a>)</li> <li>Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/751">#751</a>)</li> <li>Bump actions/checkout from 6.0.1 to 6.0.2 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/740">#740</a>)</li> <li>Bump release-drafter/release-drafter from 6.1.0 to 6.2.0 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/743">#743</a>)</li> <li>Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/731">#731</a>)</li> <li>Bump actions/setup-node from 6.1.0 to 6.2.0 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/738">#738</a>)</li> </ul> <h2>v7.2.0 🌈 add outputs python-version and python-cache-hit</h2> <h2>Changes</h2> <p>Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:</p> <ul> <li><strong>python-version:</strong> The Python version that was set (same content as existing <code>UV_PYTHON</code>)</li> <li><strong>python-cache-hit:</strong> A boolean value to indicate the Python cache entry was found</li> </ul> <p>While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the &quot;normal&quot; cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.</p> <blockquote> <p>[!NOTE]<br /> This release will invalidate caches that contain the Python binaries. This happens a single time.</p> </blockquote> <h2>🐛 Bug fixes</h2> <ul> <li>chore: remove stray space from UV_PYTHON_INSTALL_DIR message <a href="https://github.com/akx"><code>@​akx</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/720">#720</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/setup-uv/commit/eac588ad8def6316056a12d4907a9d4d84ff7a3b"><code>eac588a</code></a> Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/753">#753</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/a97c6cbe9c11a3fc620e0f506b2967ef4fe74ebb"><code>a97c6cb</code></a> Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/751">#751</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/02182fa02a198f2423c87ba9a41982b2efbaa3ef"><code>02182fa</code></a> fix: warn instead of error when no python to cache (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/762">#762</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/a3b3eaea92d7cf978795e7ae0a996f861347b70b"><code>a3b3eae</code></a> chore: update known checksums for 0.10.0 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/759">#759</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/78cebeceac116b9740b3fb83de1d99c68aa4ced9"><code>78cebec</code></a> fix: use --clear to create venv (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/761">#761</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/b6b8e2cd6a1bad11205c4c74af16307cdbecd194"><code>b6b8e2c</code></a> refactor: tilde-expansion tests as unittests and no self-hosted tests (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/760">#760</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/e31bec8546a22248f075a182e7e60c534bffa057"><code>e31bec8</code></a> chore: update known checksums for 0.9.30 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/756">#756</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/db2b65ebaeba7fdae1dfc2a646812fa8ebccefe2"><code>db2b65e</code></a> Bump actions/checkout from 6.0.1 to 6.0.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/740">#740</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/3511ff7054b4bdbf897f4410d573261859a8eeb2"><code>3511ff7</code></a> feat: add venv-path input for activate-environment (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/746">#746</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/99b0f0474b8c709992d2d82e9cfa8745d4715d14"><code>99b0f04</code></a> Fix punctuation (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/747">#747</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/setup-uv/compare/681c641aba71e4a1c380be3ab5e12ad51f415867...eac588ad8def6316056a12d4907a9d4d84ff7a3b">compare view</a></li> </ul> </details> <br /> Updates `mlugg/setup-zig` from 2.1.0 to 2.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mlugg/setup-zig/releases">mlugg/setup-zig's releases</a>.</em></p> <blockquote> <h2>v2.2.1</h2> <ul> <li>Print which version of Zig was installed</li> <li>Add a little more log output (helps debug cache issues)</li> </ul> <blockquote> <p>[!NOTE] The setup-zig project is now hosted on <a href="https://codeberg.org/mlugg/setup-zig">Codeberg</a>, and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are <strong>no plans</strong> to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to <a href="https://resources.github.com/actions/2026-pricing-changes-for-github-actions/">charge users by the minute for using their own hardware</a>).</p> </blockquote> <h2>v2.2.0</h2> <ul> <li>Update dependencies</li> <li>Replace libsodium dependency with node:crypto, improving target support</li> <li>Use hardcoded mirror list when ziglang.org is inaccessible</li> <li>Fix incorrect tarball names when fetching certain versions</li> </ul> <blockquote> <p>[!NOTE] The setup-zig project is now hosted on <a href="https://codeberg.org/mlugg/setup-zig">Codeberg</a>, and this GitHub repository exists as a mirror solely to work around the vendor lock-in mechanisms employed by GitHub Actions. While there are <strong>no plans</strong> to discontinue GitHub Actions support, I would nonetheless encourage users to consider upgrading to Forgejo Actions on a non-profit forge like Codeberg to avoid being affected by GitHub's profit-driven behavior (such as attempting to <a href="https://resources.github.com/actions/2026-pricing-changes-for-github-actions/">charge users by the minute for using their own hardware</a>).</p> </blockquote> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mlugg/setup-zig/commit/d1434d08867e3ee9daa34448df10607b98908d29"><code>d1434d0</code></a> Add a bit more logging</li> <li><a href="https://github.com/mlugg/setup-zig/commit/449e89608835f56846607aebd960b3a9354cafc3"><code>449e896</code></a> print resolved Zig version</li> <li><a href="https://github.com/mlugg/setup-zig/commit/e7d1537c378b83b8049f65dda471d87a2f7b2df2"><code>e7d1537</code></a> Use named capture groups for version string matching</li> <li><a href="https://github.com/mlugg/setup-zig/commit/43a69a570e4827ce2166cdae5b0bbd71e335fe45"><code>43a69a5</code></a> Use <code>cur_dev</code> and <code>min_dev</code> in comparison <code>versionLessThan</code></li> <li><a href="https://github.com/mlugg/setup-zig/commit/74650188d73cbf0d68104aaaebe699c3ae90512e"><code>7465018</code></a> use hardcoded community mirror list when ziglang.org is inaccessible</li> <li><a href="https://github.com/mlugg/setup-zig/commit/d91b47d4ef18469068fc2384bf44503bf3c3fa6e"><code>d91b47d</code></a> tests: fix typo in workflow</li> <li><a href="https://github.com/mlugg/setup-zig/commit/7296b2befa5301372c098a5e62c74443e7e041ef"><code>7296b2b</code></a> npm update</li> <li><a href="https://github.com/mlugg/setup-zig/commit/1796bca8848b891c399b7afc5099c1cef80e5dfb"><code>1796bca</code></a> minisign: replace libsodium dependency with node:crypto</li> <li><a href="https://github.com/mlugg/setup-zig/commit/c09d84c4b13ce959afbe39a64771dbe64aa0469a"><code>c09d84c</code></a> npm: remove direct dependency on unused package</li> <li>See full diff in <a href="https://github.com/mlugg/setup-zig/compare/fa65c4058643678a4e4a9a60513944a7d8d35440...d1434d08867e3ee9daa34448df10607b98908d29">compare view</a></li> </ul> </details> <br /> Updates `cross-platform-actions/action` from 0.31.0 to 0.32.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cross-platform-actions/action/releases">cross-platform-actions/action's releases</a>.</em></p> <blockquote> <h2>Cross Platform Action 0.32.0</h2> <h3>Added</h3> <ul> <li>Add support for OmniOS</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cross-platform-actions/action/blob/master/changelog.md">cross-platform-actions/action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>, and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2>[Unreleased]</h2> <h2>[0.32.0] - 2025-12-21</h2> <h3>Added</h3> <ul> <li>Add support for OmniOS</li> </ul> <h2>[0.31.0] - 2025-12-15</h2> <h3>Added</h3> <ul> <li>Add support for FreeBSD 15.0 (<a href="https://redirect.github.com/cross-platform-actions/action/issues/114">#114</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix empty hostname (<a href="https://redirect.github.com/cross-platform-actions/action/issues/113">#113</a>)</li> </ul> <h2>[0.30.0] - 2025-11-04</h2> <h3>Added</h3> <ul> <li>Document how to report a security vulnerability</li> <li>Add support for OpenBSD 7.8 (<a href="https://redirect.github.com/cross-platform-actions/action/issues/112">#112</a>)</li> </ul> <h3>Security</h3> <ul> <li>Fix potential code injection in the GitHub release workflow (<a href="https://github.com/cross-platform-actions/action/security/advisories/GHSA-928q-63gf-mc2x">#GHSA-928q-63gf-mc2x</a>)</li> </ul> <h2>[0.29.0] - 2025-07-22</h2> <h3>Added</h3> <ul> <li>Add support for FreeBSD 14.3 (<a href="https://redirect.github.com/cross-platform-actions/action/issues/106">#106</a>, <a href="https://redirect.github.com/cross-platform-actions/freebsd-builder/pull/9">freebsd-builder#9</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix file sync on Haiku (<a href="https://redirect.github.com/cross-platform-actions/action/issues/104">#104</a>)</li> </ul> <h2>[0.28.0] - 2025-05-19</h2> <h3>Added</h3> <ul> <li>Add support for FreeBSD 13.5 (<a href="https://redirect.github.com/cross-platform-actions/action/issues/99">#99</a>)</li> <li>Add support for OpenBSD 7.7 (<a href="https://redirect.github.com/cross-platform-actions/openbsd-builder/pull/21">openbsd-builder#21</a>)</li> <li>Add support for Haiku (<a href="https://redirect.github.com/cross-platform-actions/action/issues/30">#30</a>)</li> </ul> <h2>[0.27.0] - 2025-01-22</h2> <h3>Added</h3> <ul> <li>Add support for NetBSD 10.1 (<a href="https://redirect.github.com/cross-platform-actions/action/issues/95">#95</a>)</li> </ul> <h2>[0.26.0] - 2024-04-12</h2> <h3>Added</h3> <ul> <li>Add support for FreeBSD 13.4</li> <li>Add support for OpenBSD 7.6 (<a href="https://redirect.github.com/cross-platform-actions/openbsd-builder/issues/20">openbsd-builder#20</a>)</li> <li>Add support for FreeBSD 14.2</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cross-platform-actions/action/commit/492b0c80085400348c599edace11141a4ee73524"><code>492b0c8</code></a> Release 0.32.0</li> <li><a href="https://github.com/cross-platform-actions/action/commit/c17203c9d1e7b2bbfa4e4f22cb957ff0ba031939"><code>c17203c</code></a> Always run the release workflow</li> <li><a href="https://github.com/cross-platform-actions/action/commit/bd507108afb143eddf9f9b01f6c8983c3a249697"><code>bd50710</code></a> Bump checkout action to v6</li> <li><a href="https://github.com/cross-platform-actions/action/commit/6803af6bf3ca0f147da9876a6adaba019fe7bfa7"><code>6803af6</code></a> Add support for OmniOS</li> <li>See full diff in <a href="https://github.com/cross-platform-actions/action/compare/3fbf2723ff48aac8defe0070706f36088999fd47...492b0c80085400348c599edace11141a4ee73524">compare view</a></li> </ul> </details> <br /> Updates `PyO3/maturin-action` from 1.49.4 to 1.50.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pyo3/maturin-action/releases">PyO3/maturin-action's releases</a>.</em></p> <blockquote> <h2>v1.50.0</h2> <h2>What's Changed</h2> <ul> <li>ci: address lint findings, add zizmor workflow by <a href="https://github.com/woodruffw"><code>@​woodruffw</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/373">PyO3/maturin-action#373</a></li> <li>ci: pin dbhi/qus/action to a specific commit by <a href="https://github.com/woodruffw"><code>@​woodruffw</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/374">PyO3/maturin-action#374</a></li> <li>Add write permissions for contents by <a href="https://github.com/davidhewitt"><code>@​davidhewitt</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/376">PyO3/maturin-action#376</a></li> <li>place tool cache versions on path in order from oldest to newest by <a href="https://github.com/davidhewitt"><code>@​davidhewitt</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/381">PyO3/maturin-action#381</a></li> <li>Add alias for riscv on manylinux by <a href="https://github.com/boosterl"><code>@​boosterl</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/399">PyO3/maturin-action#399</a></li> <li>Document how to harden release pipelines by <a href="https://github.com/konstin"><code>@​konstin</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/400">PyO3/maturin-action#400</a></li> <li>Update dependencies to latest versions with ESM and Node 24 by <a href="https://github.com/messense"><code>@​messense</code></a> in <a href="https://redirect.github.com/PyO3/maturin-action/pull/409">PyO3/maturin-action#409</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/woodruffw"><code>@​woodruffw</code></a> made their first contribution in <a href="https://redirect.github.com/PyO3/maturin-action/pull/373">PyO3/maturin-action#373</a></li> <li><a href="https://github.com/davidhewitt"><code>@​davidhewitt</code></a> made their first contribution in <a href="https://redirect.github.com/PyO3/maturin-action/pull/376">PyO3/maturin-action#376</a></li> <li><a href="https://github.com/boosterl"><code>@​boosterl</code></a> made their first contribution in <a href="https://redirect.github.com/PyO3/maturin-action/pull/399">PyO3/maturin-action#399</a></li> <li><a href="https://github.com/konstin"><code>@​konstin</code></a> made their first contribution in <a href="https://redirect.github.com/PyO3/maturin-action/pull/400">PyO3/maturin-action#400</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/PyO3/maturin-action/compare/v1.49.4...v1.50.0">https://github.com/PyO3/maturin-action/compare/v1.49.4...v1.50.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PyO3/maturin-action/commit/b1bd829e37fef14c63f19162034228a2f3dc1021"><code>b1bd829</code></a> Update dependencies to latest versions with ESM and Node 24 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/409">#409</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/e8dfe2d9f0e4c3fe8e6b5d40ab1c54e9e3ea97d0"><code>e8dfe2d</code></a> Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/407">#407</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/a7a07374f7a69e674e46f32a8ad7690004b9d23d"><code>a7a0737</code></a> Bump actions/setup-python from 6.1.0 to 6.2.0 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/406">#406</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/0177072f838486be2a1e3a97fb91b74a6c7e5dee"><code>0177072</code></a> Bump actions/setup-node from 6.1.0 to 6.2.0 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/405">#405</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/0584c36cde02cadae312788bc5541cdbea6f80b7"><code>0584c36</code></a> Bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/404">#404</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/06e22d569d6127d6b8bf066808687d7e86824d1f"><code>06e22d5</code></a> Bump actions/checkout from 6.0.1 to 6.0.2 (<a href="https://redirect.github.com/pyo3/maturin-action/issues/403">#403</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/f8fa3c6571e491cfe3eaf56689be03d61a930a87"><code>f8fa3c6</code></a> Allow build loongarch64 and riscv64 for musllinux (<a href="https://redirect.github.com/pyo3/maturin-action/issues/408">#408</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/1511a230742392cd75fa3a9a6f1787ec9b898a9f"><code>1511a23</code></a> Document how to harden release pipelines (<a href="https://redirect.github.com/pyo3/maturin-action/issues/400">#400</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/47fbb7acd3db01f7830330b50689bd15135c12b9"><code>47fbb7a</code></a> Add alias for riscv on manylinux (<a href="https://redirect.github.com/pyo3/maturin-action/issues/399">#399</a>)</li> <li><a href="https://github.com/PyO3/maturin-action/commit/9fc14be1f56a0e5c89b663d5f17f4870b40033e5"><code>9fc14be</code></a> Update versions-manifest.json (<a href="https://redirect.github.com/pyo3/maturin-action/issues/398">#398</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pyo3/maturin-action/compare/86b9d133d34bc1b40018696f782949dac11bd380...b1bd829e37fef14c63f19162034228a2f3dc1021">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
@@ -126,7 +126,7 @@ jobs:
       - name: Install nushell
         uses: hustcer/setup-nu@920172d92eb04671776f3ba69d605d3b09351c30 # v3.22
       - name: Install uv
-        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
 
       - name: Run benchmark script
         working-directory: benchmark
diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
@@ -57,7 +57,7 @@ jobs:
           path: ~/.cargo
           key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }}
       - name: Install uv
-        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
       - name: Install cargo-binstall
         uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4
         env:
@@ -88,7 +88,7 @@ jobs:
           path: ~/.cargo
           key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }}
       - name: Install uv
-        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
       - name: Install cargo-binstall
         uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4
         env:
diff --git a/.github/workflows/node-js-packaging.yml b/.github/workflows/node-js-packaging.yml
@@ -99,7 +99,7 @@ jobs:
             .cargo-cache
             target/
           key: ${{ matrix.settings.target }}-cargo-${{ matrix.settings.host }}
-      - uses: mlugg/setup-zig@fa65c4058643678a4e4a9a60513944a7d8d35440 # v2.1.0
+      - uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
         if: ${{ contains(matrix.settings.build, ' -x ') }}
         with:
           version: 0.14.1
@@ -141,7 +141,7 @@ jobs:
           persist-credentials: false
       - name: Build
         id: build
-        uses: cross-platform-actions/action@3fbf2723ff48aac8defe0070706f36088999fd47 # v0.31.0
+        uses: cross-platform-actions/action@492b0c80085400348c599edace11141a4ee73524 # v0.32.0
         env:
           DEBUG: napi:*
           RUSTUP_IO_THREADS: 1
diff --git a/.github/workflows/python-packaging.yml b/.github/workflows/python-packaging.yml
@@ -79,7 +79,7 @@ jobs:
           fi
 
       - name: Build wheels
-        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
+        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter ${{ steps.is-openssl-vendored.outputs.enabled }}
@@ -122,7 +122,7 @@ jobs:
           python-version: '3.x'
           architecture: ${{ matrix.platform.target }}
       - name: Build wheels
-        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
+        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter
@@ -151,7 +151,7 @@ jobs:
         with:
           python-version: '3.x'
       - name: Build wheels
-        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
+        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter --features openssl-vendored
@@ -172,7 +172,7 @@ jobs:
         with:
           python-version: 3.x
       - name: Build sdist
-        uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
+        uses: PyO3/maturin-action@b1bd829e37fef14c63f19162034228a2f3dc1021 # v1.50.0
         with:
           command: sdist
           args: --out dist
diff --git a/.github/workflows/run-dev-tests.yml b/.github/workflows/run-dev-tests.yml
@@ -69,7 +69,7 @@ jobs:
           python-version: 3.x
 
       - name: Install uv
-        uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
