From 134212643bdcf07d6c0a6da45dfd2cb082f74113 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 04:14:22 +0000 Subject: [PATCH] build(deps): Bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia) | `2` | `3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) | `2` | `8` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.9` | `4.38.0` | | [hyperpolymath/smtp-notify-action](https://github.com/hyperpolymath/smtp-notify-action) | `0.2.0` | `0.3.0` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `julia-actions/setup-julia` from 2 to 3 - [Release notes](https://github.com/julia-actions/setup-julia/releases) - [Commits](https://github.com/julia-actions/setup-julia/compare/v2...v3) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `SonarSource/sonarqube-scan-action` from 2 to 8 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v2...v8) Updates `github/codeql-action` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.9...v4.38.0) Updates `hyperpolymath/smtp-notify-action` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/hyperpolymath/smtp-notify-action/releases) - [Changelog](https://github.com/hyperpolymath/smtp-notify-action/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/smtp-notify-action/compare/v0.2.0...v0.3.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: julia-actions/setup-julia dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: hyperpolymath/smtp-notify-action dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-benchmarks.yml | 16 ++++++++-------- .github/workflows/codeql.yml | 6 +++--- .github/workflows/krl-verification.yml | 14 +++++++------- .github/workflows/pages.yml | 4 ++-- .github/workflows/push-email-notify.yml | 2 +- .github/workflows/read-only-api-gate.yml | 2 +- .github/workflows/verification-image.yml | 2 +- 7 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/ci-benchmarks.yml b/.github/workflows/ci-benchmarks.yml index eaf9a9f..b71bef4 100644 --- a/.github/workflows/ci-benchmarks.yml +++ b/.github/workflows/ci-benchmarks.yml @@ -51,7 +51,7 @@ jobs: steps: - name: Checkout Quandledb repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -62,7 +62,7 @@ jobs: elixir-version: '1.16' - name: Set up Julia - uses: julia-actions/setup-julia@v2 + uses: julia-actions/setup-julia@v3 with: version: '1.12' @@ -89,10 +89,10 @@ jobs: steps: - name: Checkout Quandledb repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Checkout proven benchmarks repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: repository: ${{ env.BENCHMARKS_REPO }} path: proven @@ -109,7 +109,7 @@ jobs: ./run.sh --all - name: Upload benchmark results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: quandledb-benchmark-results @@ -125,7 +125,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -145,12 +145,12 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 - name: SonarQube scan - uses: SonarSource/sonarqube-scan-action@v2 + uses: SonarSource/sonarqube-scan-action@v8 with: args: >- -Dsonar.projectKey=quandledb diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 396df0c..0afc612 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -39,15 +39,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.9 + uses: github/codeql-action/init@v4.38.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.9 + uses: github/codeql-action/analyze@v4.38.0 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/krl-verification.yml b/.github/workflows/krl-verification.yml index d8089af..8826af6 100644 --- a/.github/workflows/krl-verification.yml +++ b/.github/workflows/krl-verification.yml @@ -43,13 +43,13 @@ jobs: timeout-minutes: 90 steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 # Julia >= 1.11 is required: server/Project.toml uses a [sources] table # (path-resolved sibling deps), which Pkg 1.10 silently ignores — the # instantiate then fails with "expected package … to be registered". - name: Install Julia 1.12 - uses: julia-actions/setup-julia@4c0cb0fce8556fdb04a90347310e5db8b1f98fb9 # v2.7.0 + uses: julia-actions/setup-julia@fa02766e078afaaf09b14210362cee14137e6a32 # v3.0.2 with: version: '1.12.6' @@ -78,21 +78,21 @@ jobs: # from ../../../ to ../../ without updating the symlink here, which broke # every instantiate with "expected package KnotTheory to exist at path". - name: Checkout KnotTheory.jl - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/KnotTheory.jl ref: 58a904d28212817053a14f73b415fd30a434857c path: deps/KnotTheory.jl - name: Checkout Skein.jl - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/Skein.jl ref: 84bfe4134d8fca9e22114db1ec8410aa6066ba90 path: deps/Skein.jl - name: Checkout AcceleratorGate.jl - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/AcceleratorGate.jl ref: b24e9f00d89edd5a4a7940252799737024c32d41 @@ -137,7 +137,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Install Agda + standard library run: | @@ -176,7 +176,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 # The ubuntu-latest image ships a Temurin JDK; TLC needs Java 11+. - name: Fetch TLA+ tools (pinned release, checksum-verified) diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 2371e9b..6eba772 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -22,9 +22,9 @@ jobs: image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff steps: - name: Checkout Site - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Checkout Ddraig SSG - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/ddraig-ssg path: .ddraig-ssg diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 579479c..8a96bf9 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -41,7 +41,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.2.0 + uses: hyperpolymath/smtp-notify-action@v0.3.0 with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/read-only-api-gate.yml b/.github/workflows/read-only-api-gate.yml index 6e58392..78c9b95 100644 --- a/.github/workflows/read-only-api-gate.yml +++ b/.github/workflows/read-only-api-gate.yml @@ -47,7 +47,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Scan server/serve.jl for mutating Skein.jl calls run: | diff --git a/.github/workflows/verification-image.yml b/.github/workflows/verification-image.yml index 9e82aac..2136583 100644 --- a/.github/workflows/verification-image.yml +++ b/.github/workflows/verification-image.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 25 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 with: persist-credentials: false - name: Build image and run embedded tests