From f3554764bb2ba248e7ef73cd1c3785dbb785f941 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 13:03:46 +0000 Subject: [PATCH] Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [github/codeql-action](https://github.com/github/codeql-action) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-python` from 6 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) Updates `github/codeql-action` from 4 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4) Updates `actions/download-artifact` from 5 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v5...v8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 24 ++++++++++++------------ .github/workflows/codeql.yml | 8 ++++---- .github/workflows/python-publish.yml | 24 ++++++++++++------------ .github/workflows/testpypi-publish.yml | 6 +++--- 4 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2ad8d5c..ca1630f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,8 +16,8 @@ jobs: name: Python quality runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip @@ -44,8 +44,8 @@ jobs: - os: macos-latest python: "3.12" steps: - - uses: actions/checkout@v6 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} cache: pip @@ -71,7 +71,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Configure MSVC if: runner.os == 'Windows' uses: ilammy/msvc-dev-cmd@v1 @@ -90,8 +90,8 @@ jobs: name: Visual codec report runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip @@ -115,8 +115,8 @@ jobs: name: Package metadata and source distribution runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip @@ -128,7 +128,7 @@ jobs: name: Native parser sanitizers runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Build parser mutation test with ASan and UBSan run: >- c++ -std=c++17 -O1 -g -fno-omit-frame-pointer -fsanitize=address,undefined @@ -140,8 +140,8 @@ jobs: name: Native codec benchmark runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f3c446f..ad5dc1c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,12 +29,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 # Setup Python and build dependencies for C++ compilation tracing - name: Set up Python if: matrix.language == 'c-cpp' - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip @@ -47,7 +47,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.37.4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -61,6 +61,6 @@ jobs: python setup.py build_ext --inplace - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.37.4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index 679a3d9..4e2d201 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -19,10 +19,10 @@ jobs: outputs: version: ${{ steps.package.outputs.version }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.12" - name: Validate package version and release tag @@ -74,7 +74,7 @@ jobs: label: macOS Apple Silicon artifact: macos-arm64 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - name: Build and test installed wheels @@ -96,10 +96,10 @@ jobs: needs: preflight runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.12" cache: pip @@ -142,15 +142,15 @@ jobs: needs: [preflight, wheels, sdist] runs-on: ubuntu-latest steps: - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.12" - - uses: actions/download-artifact@v5 + - uses: actions/download-artifact@v8 with: pattern: wheels-* path: dist merge-multiple: true - - uses: actions/download-artifact@v5 + - uses: actions/download-artifact@v8 with: name: sdist path: dist @@ -239,12 +239,12 @@ jobs: echo "wimf $VERSION already exists on PyPI; bump the version instead of overwriting it" exit 1 fi - - uses: actions/download-artifact@v5 + - uses: actions/download-artifact@v8 with: pattern: wheels-* path: dist merge-multiple: true - - uses: actions/download-artifact@v5 + - uses: actions/download-artifact@v8 with: name: sdist path: dist @@ -268,10 +268,10 @@ jobs: - os: macos-latest label: macOS Apple Silicon steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.12" - name: Install published wheel diff --git a/.github/workflows/testpypi-publish.yml b/.github/workflows/testpypi-publish.yml index c91b5e3..2a4e2b6 100644 --- a/.github/workflows/testpypi-publish.yml +++ b/.github/workflows/testpypi-publish.yml @@ -11,10 +11,10 @@ jobs: name: Build TestPyPI distributions runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.12" - name: Build and test representative native wheel @@ -44,7 +44,7 @@ jobs: name: testpypi url: https://test.pypi.org/p/wimf steps: - - uses: actions/download-artifact@v5 + - uses: actions/download-artifact@v8 with: name: testpypi-distributions path: dist