From 2c18a4ba3b5441a882ba6e783f4bba6e17617e37 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jul 2026 03:05:18 +0000 Subject: [PATCH] [dependabot]: Bump the actions group across 1 directory with 4 updates Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [actions/cache](https://github.com/actions/cache). Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6.0.3...v7.0.0) Updates `github/codeql-action` from 4.36.2 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.36.2...v4.36.3) Updates `astral-sh/setup-uv` from 8.2.0 to 8.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v8.2.0...v8.3.0) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/autofix.yml | 2 +- .github/workflows/autopush.yml | 2 +- .github/workflows/check_changelog.yml | 2 +- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/credit.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/spec_zero.yml | 4 ++-- .github/workflows/tests.yml | 10 +++++----- 8 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 4e44f7f8c5f..0a6953c4664 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -12,7 +12,7 @@ jobs: name: Autoupdate changelog entry and headers runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - uses: actions/setup-python@v6 diff --git a/.github/workflows/autopush.yml b/.github/workflows/autopush.yml index 51ceaaad417..cd0436a67f0 100644 --- a/.github/workflows/autopush.yml +++ b/.github/workflows/autopush.yml @@ -11,7 +11,7 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: true token: ${{ secrets.MNE_BOT_TOKEN }} diff --git a/.github/workflows/check_changelog.yml b/.github/workflows/check_changelog.yml index 222810abde6..4d45709b787 100644 --- a/.github/workflows/check_changelog.yml +++ b/.github/workflows/check_changelog.yml @@ -13,7 +13,7 @@ jobs: name: Check towncrier entry in doc/changes/dev/ runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - uses: scientific-python/action-towncrier-changelog@v2 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 159c25e569f..3f590d42c7d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -38,13 +38,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6.0.3 + uses: actions/checkout@v7.0.0 with: persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4.36.2 + uses: github/codeql-action/init@v4.36.3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -58,7 +58,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4.36.2 + uses: github/codeql-action/autobuild@v4.36.3 # â„šī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -71,4 +71,4 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.36.2 + uses: github/codeql-action/analyze@v4.36.3 diff --git a/.github/workflows/credit.yml b/.github/workflows/credit.yml index 8d28e076799..caa9a767ad7 100644 --- a/.github/workflows/credit.yml +++ b/.github/workflows/credit.yml @@ -17,7 +17,7 @@ jobs: GH_TOKEN: ${{ secrets.MNE_BOT_TOKEN }} GITHUB_TOKEN: ${{ secrets.MNE_BOT_TOKEN }} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: true - uses: actions/setup-python@v6 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7d3d0bc4c86..393358d86a3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: package: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - uses: actions/setup-python@v6 diff --git a/.github/workflows/spec_zero.yml b/.github/workflows/spec_zero.yml index e63b3d4d55d..92c41a274f6 100644 --- a/.github/workflows/spec_zero.yml +++ b/.github/workflows/spec_zero.yml @@ -25,7 +25,7 @@ jobs: run: shell: bash -el {0} steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: true - name: Triage SSH @@ -41,7 +41,7 @@ jobs: timeout-minutes: 10 with: detached: true - - uses: astral-sh/setup-uv@v8.2.0 + - uses: astral-sh/setup-uv@v8.3.0 with: version: ">=0.9" activate-environment: true diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index a8b24aa0d3c..d62bc9aad41 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 3 steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - uses: actions/setup-python@v6 @@ -91,7 +91,7 @@ jobs: python: '3.14t' # free-threaded kind: pip-ft steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@v7.0.0 with: fetch-depth: 0 persist-credentials: false @@ -138,7 +138,7 @@ jobs: if: matrix.kind == 'conda' timeout-minutes: 20 # Python (if old) - - uses: astral-sh/setup-uv@v8.2.0 + - uses: astral-sh/setup-uv@v8.3.0 with: version: ">=0.9" activate-environment: true @@ -152,7 +152,7 @@ jobs: - run: python ./tools/github_actions_check_old_env.py if: matrix.kind == 'old' # Minimal commands on Linux (macOS stalls) - - uses: actions/cache@v5 + - uses: actions/cache@v6 with: key: minimal-commands-1 path: ~/minimal_cmds @@ -167,7 +167,7 @@ jobs: run: MNE_SKIP_TESTING_DATASET_TESTS=true pytest -m "not (ultraslowtest or pgtest)" --tb=short --cov=mne --cov-report xml -vv -rfE mne/ if: matrix.kind == 'minimal' - run: ./tools/get_testing_version.sh - - uses: actions/cache@v5 + - uses: actions/cache@v6 with: key: ${{ env.TESTING_VERSION }} path: ~/mne_data