From e53b4df9313b19a9d52d99a0e6b7ca00a176044f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 04:55:24 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `6a191366842ac1502ba6c07e9b5acd5c2d9d8db3` | `7211c7186911605100540c5bfaaf822f462c53d8` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.6.0` | | [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.2` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` | Updates `astral-sh/setup-uv` from 6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 to 7211c7186911605100540c5bfaaf822f462c53d8 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/6a191366842ac1502ba6c07e9b5acd5c2d9d8db3...7211c7186911605100540c5bfaaf822f462c53d8) Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e) Updates `docker/login-action` from 4.4.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...dbcb813823bdd20940b903addbd779551569679f) Updates `actions/attest` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.1.1...v4.2.2) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/v2.4.3...v2.4.4) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 7211c7186911605100540c5bfaaf822f462c53d8 dependency-type: direct:production dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/attest dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 22 +++++++++++----------- .github/workflows/scorecard.yml | 2 +- .github/workflows/security.yml | 2 +- 4 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6c02c1f..11b3008 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} enable-cache: true @@ -50,7 +50,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} python-version: ${{ matrix.python-version }} @@ -103,7 +103,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} python-version: ${{ env.PYTHON_VERSION }} @@ -158,7 +158,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} python-version: ${{ env.PYTHON_VERSION }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6eeed58..f8c1035 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: with: fetch-depth: 0 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} python-version: ${{ env.PYTHON_VERSION }} @@ -110,10 +110,10 @@ jobs: - uses: actions/checkout@v7 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log in to GitHub Container Registry - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -143,7 +143,7 @@ jobs: sbom: true - name: Attest candidate image - uses: actions/attest@v4.1.1 + uses: actions/attest@v4.2.2 with: subject-name: ${{ env.IMAGE_REGISTRY }}/tsdhn-toolchain subject-digest: ${{ steps.build.outputs.digest }} @@ -179,10 +179,10 @@ jobs: - uses: actions/checkout@v7 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log in to GitHub Container Registry - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -214,7 +214,7 @@ jobs: sbom: true - name: Attest candidate image - uses: actions/attest@v4.1.1 + uses: actions/attest@v4.2.2 with: subject-name: ${{ env.IMAGE_REGISTRY }}/${{ matrix.image }} subject-digest: ${{ steps.build.outputs.digest }} @@ -248,7 +248,7 @@ jobs: docker compose version - name: Log in to GitHub Container Registry - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -297,10 +297,10 @@ jobs: id-token: write steps: - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log in to GitHub Container Registry - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -354,7 +354,7 @@ jobs: path: dist - name: Attest PyPI artifacts (SLSA build provenance) - uses: actions/attest@v4.1.1 + uses: actions/attest@v4.2.2 with: subject-path: dist/**/*.tar.gz,dist/**/*.whl show-summary: false diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 79e6f1a..18e3094 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -21,7 +21,7 @@ jobs: with: fetch-depth: 0 - - uses: ossf/scorecard-action@v2.4.3 + - uses: ossf/scorecard-action@v2.4.4 with: results_file: results.sarif results_format: sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index ac41069..2c2970a 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -49,7 +49,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@6a191366842ac1502ba6c07e9b5acd5c2d9d8db3 # 8.3.2 + - uses: astral-sh/setup-uv@7211c7186911605100540c5bfaaf822f462c53d8 # 8.3.2 with: version: ${{ env.UV_VERSION }} enable-cache: true