From caff4d1ec2453fb8651e0f9411d0509525870f2c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 09:20:23 +0200 Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Bump=20the=20github-action?= =?UTF-8?q?s=20group=20with=202=20updates=20(#2458)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1) Updates `pypa/gh-action-pypi-publish` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e461d3875417946c167d0b5f3d385a247) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build-package.yml | 2 +- .github/workflows/ci-build-docs.yml | 2 +- .github/workflows/ci-check-links.yml | 2 +- .github/workflows/ci-tests.yml | 2 +- .github/workflows/publish-docs.yml | 2 +- .github/workflows/publish-pre-release.yml | 2 +- .github/workflows/publish-release.yml | 2 +- .github/workflows/publish-testpypi.yml | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/build-package.yml b/.github/workflows/build-package.yml index f4b585d3..10fdb745 100644 --- a/.github/workflows/build-package.yml +++ b/.github/workflows/build-package.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 📥 Checkout the repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: 🐍 Install uv and set Python version ${{ inputs.python-version }} uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/ci-build-docs.yml b/.github/workflows/ci-build-docs.yml index 2d738985..4d3215b4 100644 --- a/.github/workflows/ci-build-docs.yml +++ b/.github/workflows/ci-build-docs.yml @@ -22,7 +22,7 @@ jobs: timeout-minutes: 10 steps: - name: 📥 Checkout the repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: 🐍 Install uv and set Python uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/ci-check-links.yml b/.github/workflows/ci-check-links.yml index 280b1971..92d39619 100644 --- a/.github/workflows/ci-check-links.yml +++ b/.github/workflows/ci-check-links.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.1 - name: 🔗 Link Checker uses: lycheeverse/lychee-action@v2 diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml index 02335e72..6b9b5170 100644 --- a/.github/workflows/ci-tests.yml +++ b/.github/workflows/ci-tests.yml @@ -33,7 +33,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: 📥 Checkout the repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: 🐍 Install uv and set Python version ${{ matrix.python-version }} uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml index 13c03a42..2e34de87 100644 --- a/.github/workflows/publish-docs.yml +++ b/.github/workflows/publish-docs.yml @@ -32,7 +32,7 @@ jobs: timeout-minutes: 10 steps: - name: 📥 Checkout the repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/publish-pre-release.yml b/.github/workflows/publish-pre-release.yml index 4bac7801..0c3ae5ac 100644 --- a/.github/workflows/publish-pre-release.yml +++ b/.github/workflows/publish-pre-release.yml @@ -46,6 +46,6 @@ jobs: - name: 🚀 Publish to PyPi if: github.event_name != 'pull_request' - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 with: attestations: true diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 4b38c80d..e0651374 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -48,6 +48,6 @@ jobs: - name: 🚀 Publish to PyPi # We only want to publish to PyPi if the event is a release and it's not a pre-release. if: (github.event_name == 'release' && github.event.release.prerelease != true) || github.event_name == 'workflow_dispatch' - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 with: attestations: true diff --git a/.github/workflows/publish-testpypi.yml b/.github/workflows/publish-testpypi.yml index d32d86f0..3288d1f4 100644 --- a/.github/workflows/publish-testpypi.yml +++ b/.github/workflows/publish-testpypi.yml @@ -38,7 +38,7 @@ jobs: - name: 🚀 Publish to Test-PyPi if: github.event_name != 'pull_request' - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 with: repository-url: https://test.pypi.org/legacy/ attestations: true