From 725944f4237fb3e9f7214e48e1435acba774a0d4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Apr 2026 22:36:09 +0000 Subject: [PATCH] ci: bump the ci-updates group across 1 directory with 6 updates Bumps the ci-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/cache](https://github.com/actions/cache) | `5.0.4` | `5.0.5` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.6.0` | `8.1.0` | | [fossas/fossa-action](https://github.com/fossas/fossa-action) | `1.8.0` | `1.9.0` | | [act10ns/slack](https://github.com/act10ns/slack) | `2.1.0` | `2.2.0` | | [py-cov-action/python-coverage-comment-action](https://github.com/py-cov-action/python-coverage-comment-action) | `3.40` | `3.41` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.13.0` | `1.14.0` | Updates `actions/cache` from 5.0.4 to 5.0.5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae) Updates `astral-sh/setup-uv` from 7.6.0 to 8.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/37802adc94f370d6bfd71619e3f0bf239e1f3b78...08807647e7069bb48b6ef5acd8ec9567f424441b) Updates `fossas/fossa-action` from 1.8.0 to 1.9.0 - [Release notes](https://github.com/fossas/fossa-action/releases) - [Commits](https://github.com/fossas/fossa-action/compare/c414b9ad82eaad041e47a7cf62a4f02411f427a0...ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3) Updates `act10ns/slack` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/act10ns/slack/releases) - [Changelog](https://github.com/act10ns/slack/blob/master/RELEASE.md) - [Commits](https://github.com/act10ns/slack/compare/44541246747a30eb3102d87f7a4cc5471b0ffb7d...d96404edccc6d6467fc7f8134a420c851b1e9054) Updates `py-cov-action/python-coverage-comment-action` from 3.40 to 3.41 - [Release notes](https://github.com/py-cov-action/python-coverage-comment-action/releases) - [Commits](https://github.com/py-cov-action/python-coverage-comment-action/compare/7188638f871f721a365d644f505d1ff3df20d683...63f52f4fbbffada6e8dee8ec432de7e01df9ba79) Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e...cef221092ed1bacb1cc03d23a2d87d1d172e277b) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-updates - dependency-name: astral-sh/setup-uv dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci-updates - dependency-name: fossas/fossa-action dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-updates - dependency-name: act10ns/slack dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-updates - dependency-name: py-cov-action/python-coverage-comment-action dependency-version: '3.41' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-updates - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/api-docs.yaml | 2 +- .github/workflows/compliance.yml | 8 ++++---- .github/workflows/continuous-integration.yml | 10 +++++----- .github/workflows/deploy-prod.yml | 4 ++-- .github/workflows/deploy-test.yml | 4 ++-- .github/workflows/deploy.yml | 4 ++-- .github/workflows/high-prio-bug.yml | 2 +- .github/workflows/merge-queue.yml | 2 +- 8 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/api-docs.yaml b/.github/workflows/api-docs.yaml index 23176e9e..230c2387 100644 --- a/.github/workflows/api-docs.yaml +++ b/.github/workflows/api-docs.yaml @@ -24,7 +24,7 @@ jobs: python-version: 3.x - name: Setup cache - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: key: ${{ github.ref }} path: .cache diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml index 66e5b7d9..ae7261ef 100644 --- a/.github/workflows/compliance.yml +++ b/.github/workflows/compliance.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -35,20 +35,20 @@ jobs: - name: Send license report to Fossa # This will collect all necessary information (mostly used dependencies) and send it to the Fossa API - uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred + uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # Use a specific version if locking is preferred with: api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }} - name: Check license compliance # This will poll the Fossa API until they have processed the information which we've sent in the previous step # and fail if Fossa found an issue with the licences of our dependencies. - uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred + uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # Use a specific version if locking is preferred with: api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }} run-tests: true - name: Send Slack notification if license check failed - uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d + uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 if: failure() && github.ref == 'refs/heads/main' with: status: ${{ job.status }} diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index 9859ae41..6ebc8c05 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -29,7 +29,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -44,7 +44,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -78,7 +78,7 @@ jobs: # for coverage comment action fetch-depth: 1000 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -88,6 +88,6 @@ jobs: run: make tests-with-cov - name: Coverage comment id: coverage_comment - uses: py-cov-action/python-coverage-comment-action@7188638f871f721a365d644f505d1ff3df20d683 + uses: py-cov-action/python-coverage-comment-action@63f52f4fbbffada6e8dee8ec432de7e01df9ba79 with: GITHUB_TOKEN: ${{ github.token }} diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index 5729e31a..4109c8a6 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -18,7 +18,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -28,6 +28,6 @@ jobs: - name: Build run: make build - name: publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{env.pypi}} diff --git a/.github/workflows/deploy-test.yml b/.github/workflows/deploy-test.yml index a54653e0..94d33eba 100644 --- a/.github/workflows/deploy-test.yml +++ b/.github/workflows/deploy-test.yml @@ -20,13 +20,13 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" - name: Build run: make build - name: Publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{ env.pypi }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index afb927b5..a97f895f 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -27,7 +27,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -37,6 +37,6 @@ jobs: - name: Build run: make build - name: publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{env.pypi}} diff --git a/.github/workflows/high-prio-bug.yml b/.github/workflows/high-prio-bug.yml index 8ff46663..3900147a 100644 --- a/.github/workflows/high-prio-bug.yml +++ b/.github/workflows/high-prio-bug.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Send Slack alert for high priority bug - uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d + uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 with: status: High Priority Bug message: High Priority Bug ${{ github.event.issue.html_url }} diff --git a/.github/workflows/merge-queue.yml b/.github/workflows/merge-queue.yml index 6eb720bb..1499a9e1 100644 --- a/.github/workflows/merge-queue.yml +++ b/.github/workflows/merge-queue.yml @@ -39,7 +39,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10"