You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sedona.apache.org by ji...@apache.org on 2026/10/02 18:05:07 UTC
(sedona) branch branch-1.9.1 updated: build(deps): bump the github-actions-dependencies group with 5 updates (#3303)
This is an automated email from the ASF dual-hosted git repository.
jiayuasu pushed a commit to branch branch-1.9.1
in repository https://gitbox.apache.org/repos/asf/sedona.git
The following commit(s) were added to refs/heads/branch-1.9.1 by this push:
new 78094195a63 build(deps): bump the github-actions-dependencies group with 5 updates (#3303)
78094195a63 is described below
commit 78094195a639b65779fceb14ac9ea2ce1f5551c7
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Sep 9 20:47:16 2026 -0700
build(deps): bump the github-actions-dependencies group with 5 updates (#3303)
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
.github/workflows/codeql.yml | 4 ++--
.github/workflows/docker-build.yml | 2 +-
.github/workflows/docs.yml | 4 ++--
.github/workflows/example.yml | 2 +-
.github/workflows/java.yml | 2 +-
.github/workflows/pyflink.yml | 4 ++--
.github/workflows/python-extension.yml | 2 +-
.github/workflows/python-wheel.yml | 4 ++--
.github/workflows/python.yml | 4 ++--
.github/workflows/r.yml | 2 +-
10 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 966e1f25881..df073285144 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -45,12 +45,12 @@ jobs:
persist-credentials: false
- name: Initialize CodeQL
- uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
with:
languages: ${{ matrix.language }}
build-mode: none
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
+ uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
with:
category: 'Security'
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index bd49b1b5a03..e0fb068664e 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -61,7 +61,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: 17
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f2d68fb51dc..be1190f2f2f 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -45,7 +45,7 @@ jobs:
fetch-depth: 0
persist-credentials: true # zizmor: ignore[credential-persistence]
- name: Set up Java
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: '11'
@@ -71,7 +71,7 @@ jobs:
with:
python-version: '3.11'
- name: Install uv
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+ uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
- name: Sync doc environment
run: uv sync --group docs
- run: sudo apt update
diff --git a/.github/workflows/example.yml b/.github/workflows/example.yml
index ff93e6abda7..0e3f820766f 100644
--- a/.github/workflows/example.yml
+++ b/.github/workflows/example.yml
@@ -61,7 +61,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: '17'
diff --git a/.github/workflows/java.yml b/.github/workflows/java.yml
index a4a5d6c5bd6..e3686117793 100644
--- a/.github/workflows/java.yml
+++ b/.github/workflows/java.yml
@@ -95,7 +95,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: ${{ matrix.jdk }}
diff --git a/.github/workflows/pyflink.yml b/.github/workflows/pyflink.yml
index 5889b0f4ccd..890a63bf282 100644
--- a/.github/workflows/pyflink.yml
+++ b/.github/workflows/pyflink.yml
@@ -56,7 +56,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: '11'
@@ -64,7 +64,7 @@ jobs:
with:
python-version: ${{ matrix.python }}
- name: Install uv
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+ uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
- run: mvn package -pl "org.apache.sedona:sedona-flink-shaded_2.12" -am -DskipTests
- name: Install python package + flink extra
run: |
diff --git a/.github/workflows/python-extension.yml b/.github/workflows/python-extension.yml
index 67bab0ba541..9d55fcfdeb7 100644
--- a/.github/workflows/python-extension.yml
+++ b/.github/workflows/python-extension.yml
@@ -65,7 +65,7 @@ jobs:
with:
python-version: ${{ matrix.python }}
- name: Install uv
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+ uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
version: '0.9.22'
- name: Install dependencies (dev)
diff --git a/.github/workflows/python-wheel.yml b/.github/workflows/python-wheel.yml
index 3cc89e7776e..f81c93d052e 100644
--- a/.github/workflows/python-wheel.yml
+++ b/.github/workflows/python-wheel.yml
@@ -72,7 +72,7 @@ jobs:
image: tonistiigi/binfmt:qemu-v8.1.5
platforms: all
- name: Build wheels
- uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
+ uses: pypa/cibuildwheel@1828c10ab37f080699c7b81cea34097c684a7074 # v4.2.0
env:
CIBW_SKIP: 'pp* *musl*'
CIBW_ARCHS_LINUX: 'x86_64 aarch64'
@@ -94,7 +94,7 @@ jobs:
persist-credentials: false
- name: Install uv
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+ uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: false
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index d4febd9e3fb..f836c20221d 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -82,7 +82,7 @@ jobs:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'zulu'
java-version: '${{ matrix.java }}'
@@ -90,7 +90,7 @@ jobs:
with:
python-version: ${{ matrix.python }}
- name: Install uv
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+ uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
- name: Cache Maven packages
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
diff --git a/.github/workflows/r.yml b/.github/workflows/r.yml
index 082e0c4ac5e..60163193a0e 100644
--- a/.github/workflows/r.yml
+++ b/.github/workflows/r.yml
@@ -112,7 +112,7 @@ jobs:
_R_CHECK_FORCE_SUGGESTS_: false
- name: Install apache.sedona from source
run: Rscript -e 'install.packages("./R/", repos = NULL, type = "source")'
- - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
+ - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
with:
distribution: 'temurin'
java-version: '11'