From d2469bc449a3dc7728c67ab271cb1c8d6aa82d0f Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Mon, 8 Jun 2026 13:09:20 +0000 Subject: [PATCH 1/5] Bump actions/checkout v6.0.2 => v6.0.3 --- actions: actions/checkout: - sha: de0fac2e4500dabe0009e67214ff5f5447ce83dd tag: v6.0.2 - sha: df4cb1c069e1874edd31b4311f1884172cec0e10 tag: v6.0.3 workflows: ci.yml: - actions/checkout build.yml: - actions/checkout cooldown: '2026-06-08T13:09:05.724617Z' --- .github/workflows/build.yml | 10 +++++----- .github/workflows/ci.yml | 4 ++-- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index eb1e561..2e89cd6 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -78,13 +78,13 @@ jobs: f.write(f'matrix={json.dumps(matrix)}') - name: Checkout Pyinstaller-Builds - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: path: builds persist-credentials: false - name: Checkout PyInstaller - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 # Needed for git-describe repository: pyinstaller/pyinstaller @@ -189,13 +189,13 @@ jobs: mingw-w64-${{ matrix.env }}-python-pip - name: Checkout Pyinstaller-Builds - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: path: builds persist-credentials: false - name: Checkout PyInstaller - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: repository: pyinstaller/pyinstaller ref: ${{ inputs.commitish }} @@ -247,7 +247,7 @@ jobs: RELEASE_NOTES: ${{ needs.prepare.outputs.release_notes }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cf809f2..4236ff2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,7 +26,7 @@ jobs: contents: read runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false @@ -69,7 +69,7 @@ jobs: actions: read # Needed by zizmorcore/zizmor-action if repository is private runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false From cf883781afd7055397fb2a8330ab14f689bdf284 Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Mon, 8 Jun 2026 13:09:20 +0000 Subject: [PATCH 2/5] Bump zizmorcore/zizmor-action v0.5.2 => v0.5.6 --- actions: zizmorcore/zizmor-action: - sha: 71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 tag: v0.5.2 - sha: 5f14fd08f7cf1cb1609c1e344975f152c7ee938d tag: v0.5.6 workflows: ci.yml: - zizmorcore/zizmor-action cooldown: '2026-06-08T13:09:05.724617Z' --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4236ff2..e28aabb 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -74,7 +74,7 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2 + uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6 with: advanced-security: false persona: pedantic From 9c069fb218a8315f82cc5f48db29c3db097f34f8 Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Mon, 8 Jun 2026 13:09:20 +0000 Subject: [PATCH 3/5] Bump rhysd/actionlint 1.7.11 => 1.7.12 --- actions: rhysd/actionlint: - sha: 900919a84f2229bac68ca9cd4103ea297abc35e9689ebb842c6e34a3d1b01b0a tag: 1.7.11 - sha: 8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8 tag: 1.7.12 workflows: ci.yml: - rhysd/actionlint cooldown: '2026-06-08T13:09:05.724617Z' --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e28aabb..f4c939f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,8 +13,8 @@ concurrency: cancel-in-progress: ${{ github.event_name == 'pull_request' }} env: - ACTIONLINT_VERSION: "1.7.11" - ACTIONLINT_SHA256SUM: 900919a84f2229bac68ca9cd4103ea297abc35e9689ebb842c6e34a3d1b01b0a + ACTIONLINT_VERSION: "1.7.12" + ACTIONLINT_SHA256SUM: 8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8 ACTIONLINT_REPO: rhysd/actionlint GH_TELEMETRY: "false" From 28093b3525bca5106baa0a87d475ae0d7c7fb764 Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Mon, 8 Jun 2026 13:09:20 +0000 Subject: [PATCH 4/5] Bump actions/upload-artifact v7.0.0 => v7.0.1 --- actions: actions/upload-artifact: - sha: bbbca2ddaa5d8feaa63e36b76fdaad77386f024f tag: v7.0.0 - sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a tag: v7.0.1 workflows: build.yml: - actions/upload-artifact cooldown: '2026-06-08T13:09:05.724617Z' --- .github/workflows/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 2e89cd6..8491cac 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -155,7 +155,7 @@ jobs: python -m build --no-isolation --sdist --outdir=dist . - name: Upload artifacts - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: pyinstaller-${{ inputs.commitish }}-sdist path: | @@ -228,7 +228,7 @@ jobs: python -m build --no-isolation --wheel --outdir=dist . - name: Upload artifacts - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: pyinstaller-${{ inputs.commitish }}-${{ matrix.name }} path: | From 99bc5a3dc71232e6e206462cc90cb9ad800a42fd Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Mon, 8 Jun 2026 13:09:20 +0000 Subject: [PATCH 5/5] Bump msys2/setup-msys2 v2.30.0 => v2.31.1 --- actions: msys2/setup-msys2: - sha: 4f806de0a5a7294ffabaff804b38a9b435a73bda tag: v2.30.0 - sha: e9898307ac31d1a803454791be09ab9973336e1c tag: v2.31.1 workflows: build.yml: - msys2/setup-msys2 cooldown: '2026-06-08T13:09:05.724617Z' --- .github/workflows/build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 8491cac..5616cdb 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -178,7 +178,7 @@ jobs: steps: - name: Set up MinGW - uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 + uses: msys2/setup-msys2@e9898307ac31d1a803454791be09ab9973336e1c # v2.31.1 with: update: true msystem: ${{ matrix.sys }}