You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@magpie.apache.org by po...@apache.org on 2026/08/25 15:27:29 UTC
(magpie) branch main updated: chore(deps): bump the github-actions group across 1 directory with 4 updates (#1114)
This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/magpie.git
The following commit(s) were added to refs/heads/main by this push:
new 164e7af0 chore(deps): bump the github-actions group across 1 directory with 4 updates (#1114)
164e7af0 is described below
commit 164e7af0f08a278ff78f0a068c760e72e5368ea6
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Tue Aug 25 17:27:21 2026 +0200
chore(deps): bump the github-actions group across 1 directory with 4 updates (#1114)
Bumps the github-actions group with 4 updates in the / directory: [apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions), [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).
Updates `apache/infrastructure-actions/allowlist-check` from 4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 to 69afc125e535c4c41e7f1b7470f583087e0f344b
- [Commits](https://github.com/apache/infrastructure-actions/compare/4e9c961f587f72b170874b6f5cd4ac15f7f26eb8...69afc125e535c4c41e7f1b7470f583087e0f344b)
Updates `github/codeql-action/init` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)
Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)
Updates `astral-sh/setup-uv` from 9.0.0 to 10.0.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/c771a70e6277c0a99b617c7a806ffedaca235ff9...20cfd1bf945f4377ade1205e4dbc17946fc9a30d)
---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: 69afc125e535c4c41e7f1b7470f583087e0f344b
dependency-type: direct:production
dependency-group: github-actions
- dependency-name: github/codeql-action/init
dependency-version: 4.37.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
dependency-version: 10.0.1
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/codeql.yml | 4 ++--
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/sandbox-lint.yml | 2 +-
.github/workflows/skill-and-tool-validator.yml | 2 +-
.github/workflows/tests.yml | 2 +-
6 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml
index c63160d3..de0eedee 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -31,4 +31,4 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- - uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 # main # zizmor: ignore[ref-version-mismatch] tracks infrastructure-actions main; monorepo has no per-action version tags
+ - uses: apache/infrastructure-actions/allowlist-check@69afc125e535c4c41e7f1b7470f583087e0f344b # main # zizmor: ignore[ref-version-mismatch] tracks infrastructure-actions main; monorepo has no per-action version tags
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 513b43cb..812a2cd6 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -58,7 +58,7 @@ jobs:
persist-credentials: false
- name: Initialize CodeQL
- uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+ uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
with:
languages: ${{ matrix.language }}
# Neither the Python tools (stdlib-only / single OAuth dep, no
@@ -68,6 +68,6 @@ jobs:
queries: security-and-quality
- name: Perform CodeQL analysis
- uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+ uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
with:
category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index eb75d39a..a8e3ba31 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -44,7 +44,7 @@ jobs:
# - the `uv tool install prek` step below.
# Minimum uv version is pinned in the root `pyproject.toml`
# (`[tool.uv] required-version`).
- - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+ - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
# Sync the uv workspace with the dev group so that
diff --git a/.github/workflows/sandbox-lint.yml b/.github/workflows/sandbox-lint.yml
index 2c1bb5f1..bcee8815 100644
--- a/.github/workflows/sandbox-lint.yml
+++ b/.github/workflows/sandbox-lint.yml
@@ -51,7 +51,7 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+ - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
# Sync the workspace so `sandbox-lint` (a workspace member's
diff --git a/.github/workflows/skill-and-tool-validator.yml b/.github/workflows/skill-and-tool-validator.yml
index 365d3c52..f81b733f 100644
--- a/.github/workflows/skill-and-tool-validator.yml
+++ b/.github/workflows/skill-and-tool-validator.yml
@@ -47,7 +47,7 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+ - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
# Sync every workspace member so the validator's
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e9d044ba..06b07327 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -181,7 +181,7 @@ jobs:
# `pyproject.toml` + the workspace `uv.lock`. Minimum uv
# version is enforced by the root `pyproject.toml`'s
# `[tool.uv] required-version`.
- - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+ - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
- name: Sync workspace (installs ruff / mypy / pytest from root dev group)