From f58eb99fcceb48f439a2b162c36ba5a1b5cb2b37 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 05:45:28 +0000 Subject: [PATCH] build(deps): bump the actions group across 1 directory with 4 updates Bumps the actions group with 4 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [rust-lang/crates-io-auth-action](https://github.com/rust-lang/crates-io-auth-action), [actions/setup-python](https://github.com/actions/setup-python) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish). Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa) Updates `rust-lang/crates-io-auth-action` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/rust-lang/crates-io-auth-action/releases) - [Commits](https://github.com/rust-lang/crates-io-auth-action/compare/c6f97d42243bad5fab37ca0427f495c86d5b1a18...3268eb413133e2960fa4ae0e963ca76380c54cd9) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v7.0.0...v7.1.0) Updates `pypa/gh-action-pypi-publish` from 1.14.2 to 1.14.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33...7245906fb61fa33a13554f9d5fb856fe61758086) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: rust-lang/crates-io-auth-action dependency-version: 1.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/benchmark.yml | 2 +- .github/workflows/binary-builds.yml | 2 +- .github/workflows/build-docs.yml | 4 ++-- .github/workflows/bump-n-release.yml | 2 +- .github/workflows/python-packaging.yml | 8 ++++---- .github/workflows/run-dev-tests.yml | 4 ++-- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 9f4f9ddf..6bcb0c2b 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -137,7 +137,7 @@ jobs: - name: Install nushell uses: hustcer/setup-nu@95cd3bfe252450ef7d35dd9a7ddecf3484341134 # v3.28 - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 - name: Run benchmark script working-directory: benchmark diff --git a/.github/workflows/binary-builds.yml b/.github/workflows/binary-builds.yml index 0d0c3920..0208cb6d 100644 --- a/.github/workflows/binary-builds.yml +++ b/.github/workflows/binary-builds.yml @@ -218,7 +218,7 @@ jobs: path: clang-tools-manager - name: Establish provenance id: auth - uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5 + uses: rust-lang/crates-io-auth-action@3268eb413133e2960fa4ae0e963ca76380c54cd9 # v1.0.6 - name: Publish package env: PKG_NAME: ${{ startsWith(github.ref_name, 'cpp-linter') && 'cpp-linter' || 'clang-tools-manager' }} diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml index 1b3f5be4..2fb4ce5f 100644 --- a/.github/workflows/build-docs.yml +++ b/.github/workflows/build-docs.yml @@ -61,7 +61,7 @@ jobs: path: ~/.cargo key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 - name: Install cargo-binstall uses: cargo-bins/cargo-binstall@8a2045612414e945291083f820cd50b4d8fc2218 # v1.26.0 env: @@ -97,7 +97,7 @@ jobs: path: ~/.cargo key: ${{ runner.os }}-docs-cargo-${{ hashFiles('Cargo.lock') }} - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 - name: Install cargo-binstall uses: cargo-bins/cargo-binstall@8a2045612414e945291083f820cd50b4d8fc2218 # v1.26.0 env: diff --git a/.github/workflows/bump-n-release.yml b/.github/workflows/bump-n-release.yml index e6115c43..e84a1fcc 100644 --- a/.github/workflows/bump-n-release.yml +++ b/.github/workflows/bump-n-release.yml @@ -53,7 +53,7 @@ jobs: persist-credentials: true # needed for `git push` - name: Set up Python if: inputs.package == 'cpp-linter-py' - uses: actions/setup-python@v7.0.0 + uses: actions/setup-python@v7.1.0 with: python-version: 3.x - name: Install Node.js diff --git a/.github/workflows/python-packaging.yml b/.github/workflows/python-packaging.yml index 6e1565e7..a122745b 100644 --- a/.github/workflows/python-packaging.yml +++ b/.github/workflows/python-packaging.yml @@ -54,7 +54,7 @@ jobs: - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: actions/setup-python@v7.0.0 + - uses: actions/setup-python@v7.1.0 with: python-version: 3.x - name: Build sdist @@ -137,7 +137,7 @@ jobs: - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: actions/setup-python@v7.0.0 + - uses: actions/setup-python@v7.1.0 id: setup-python with: python-version: ${{ matrix.python.version }} @@ -175,7 +175,7 @@ jobs: merge-multiple: true - name: Setup Python if: ${{ !startsWith(github.ref, 'refs/tags/cpp-linter-py/v') }} - uses: actions/setup-python@v7.0.0 + uses: actions/setup-python@v7.1.0 with: python-version: 3.x - name: Check distributions @@ -183,7 +183,7 @@ jobs: run: pipx run twine check dist/* - name: Publish to PyPI if: startsWith(github.ref, 'refs/tags/cpp-linter-py/v') - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 with: skip-existing: true # This workflow is registered as a trusted publisher (for test-pypi and pypi). diff --git a/.github/workflows/run-dev-tests.yml b/.github/workflows/run-dev-tests.yml index ca3e8431..1ee2f950 100644 --- a/.github/workflows/run-dev-tests.yml +++ b/.github/workflows/run-dev-tests.yml @@ -71,12 +71,12 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} - - uses: actions/setup-python@v7.0.0 + - uses: actions/setup-python@v7.1.0 with: python-version: 3.x - name: Install uv - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 with: enable-cache: true cache-dependency-glob: "uv.lock"