From e8c906aa0b1e7bec67308efb8dfb0eee3f64efac Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 31 Aug 2025 20:52:11 +0000 Subject: [PATCH 1/2] Bump actions/setup-python from 4.9.1 to 5.6.0 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4.9.1 to 5.6.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/7f4fc3e22c37d6ff65e88745f38bd3157c663f7c...a26af69be951a213d495a4c3e4e4022e16d87065) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/python.yml | 2 +- .github/workflows/rust.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 8b9eeb2d..f56d3796 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # tag=v5.0.0 - name: Set up Python - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # tag=v4.9.0 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v4.9.0 with: python-version: "3.12" diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index e3e863cf..7aa39a5e 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -18,7 +18,7 @@ jobs: - name: List all files run: ls -a - name: Set up Python - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # tag=v4.9.0 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v4.9.0 with: python-version: '3.12' - name: Install rust From 3e7021337ab67fe99654a78bfd1fab92ce816532 Mon Sep 17 00:00:00 2001 From: Manuel Geiger <40306539+Ectras@users.noreply.github.com> Date: Mon, 1 Sep 2025 13:58:40 +0200 Subject: [PATCH 2/2] Fix CI tag comments manually Unfortunately, the original tag comment was wrong and Dependabot only updates comments if they match with the SHA. Fixing this now manually should allow future updates to update the comment as well. --- .github/workflows/python.yml | 2 +- .github/workflows/rust.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index f56d3796..4a53efb7 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # tag=v5.0.0 - name: Set up Python - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v4.9.0 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v5.6.0 with: python-version: "3.12" diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 7aa39a5e..972b471f 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -18,7 +18,7 @@ jobs: - name: List all files run: ls -a - name: Set up Python - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v4.9.0 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # tag=v5.6.0 with: python-version: '3.12' - name: Install rust