From ee96d127e181f3a87f615e7b4787281be1cbdfae Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:14:13 +0000 Subject: [PATCH 1/3] build(deps): bump the actions group with 4 updates Bumps the actions group with 4 updates: [CodSpeedHQ/action](https://github.com/codspeedhq/action), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-node](https://github.com/actions/setup-node) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish). Updates `CodSpeedHQ/action` from 3 to 4 - [Release notes](https://github.com/codspeedhq/action/releases) - [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codspeedhq/action/compare/v3...v4) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v6) Updates `actions/setup-node` from 4 to 5 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v5) Updates `pypa/gh-action-pypi-publish` from 1.12.4 to 1.13.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/76f52bc884231f62b9a034ebfe128415bbaabdfc...ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e) --- updated-dependencies: - dependency-name: CodSpeedHQ/action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/benchmark.yml | 2 +- .github/workflows/binary-builds.yml | 2 +- .github/workflows/bump-n-release.yml | 4 ++-- .github/workflows/node-js-packaging.yml | 8 ++++---- .github/workflows/pre-commit-hooks.yml | 2 +- .github/workflows/python-packaging.yml | 12 ++++++------ .github/workflows/run-dev-tests.yml | 2 +- 7 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 635bf217..7ff033f7 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -55,7 +55,7 @@ jobs: - name: Build the benchmark target(s) run: cargo codspeed build - name: Run benchmarks - uses: CodSpeedHQ/action@v3 + uses: CodSpeedHQ/action@v4 with: run: cargo codspeed run token: ${{ secrets.CODSPEED_TOKEN }} diff --git a/.github/workflows/binary-builds.yml b/.github/workflows/binary-builds.yml index f285f025..b0b40c99 100644 --- a/.github/workflows/binary-builds.yml +++ b/.github/workflows/binary-builds.yml @@ -148,7 +148,7 @@ jobs: persist-credentials: false - name: Install Rust run: rustup update stable --no-self-update - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: 3.x - name: Download built assets diff --git a/.github/workflows/bump-n-release.yml b/.github/workflows/bump-n-release.yml index 188f94cf..7b56ee23 100644 --- a/.github/workflows/bump-n-release.yml +++ b/.github/workflows/bump-n-release.yml @@ -31,10 +31,10 @@ jobs: with: token: ${{ secrets.BUMP_N_RELEASE }} fetch-depth: 0 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: 3.x - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v5 with: node-version: 20.x - run: yarn install diff --git a/.github/workflows/node-js-packaging.yml b/.github/workflows/node-js-packaging.yml index bdf2145b..a7ef9684 100644 --- a/.github/workflows/node-js-packaging.yml +++ b/.github/workflows/node-js-packaging.yml @@ -73,7 +73,7 @@ jobs: steps: - uses: actions/checkout@v5 - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 22 cache: yarn @@ -194,7 +194,7 @@ jobs: steps: - uses: actions/checkout@v5 - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: ${{ matrix.node }} cache: yarn @@ -231,7 +231,7 @@ jobs: steps: - uses: actions/checkout@v5 - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: ${{ matrix.node }} cache: yarn @@ -294,7 +294,7 @@ jobs: steps: - uses: actions/checkout@v5 - name: Setup node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 22 cache: yarn diff --git a/.github/workflows/pre-commit-hooks.yml b/.github/workflows/pre-commit-hooks.yml index 43a82c91..22277711 100644 --- a/.github/workflows/pre-commit-hooks.yml +++ b/.github/workflows/pre-commit-hooks.yml @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v5 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v5 with: node-version: 22 cache: yarn diff --git a/.github/workflows/python-packaging.yml b/.github/workflows/python-packaging.yml index 3f506557..a784affb 100644 --- a/.github/workflows/python-packaging.yml +++ b/.github/workflows/python-packaging.yml @@ -59,7 +59,7 @@ jobs: target: ppc64le steps: - uses: actions/checkout@v5 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: '3.x' @@ -110,7 +110,7 @@ jobs: target: x86 steps: - uses: actions/checkout@v5 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: '3.x' architecture: ${{ matrix.platform.target }} @@ -138,7 +138,7 @@ jobs: target: aarch64 steps: - uses: actions/checkout@v5 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: '3.x' - name: Build wheels @@ -157,7 +157,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v5 - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: 3.x - name: Build sdist @@ -185,7 +185,7 @@ jobs: merge-multiple: true - name: Setup Python if: ${{ !startsWith(github.ref, 'refs/tags/') }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: 3.x - name: Check distributions @@ -193,7 +193,7 @@ jobs: run: pipx run twine check dist/* - name: Publish to PyPI if: startsWith(github.ref, 'refs/tags/') - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e with: attestations: true skip-existing: true diff --git a/.github/workflows/run-dev-tests.yml b/.github/workflows/run-dev-tests.yml index 88ef76e0..9b16b63a 100644 --- a/.github/workflows/run-dev-tests.yml +++ b/.github/workflows/run-dev-tests.yml @@ -52,7 +52,7 @@ jobs: with: tool: cargo-nextest,cargo-llvm-cov,cargo-binstall - - uses: actions/setup-python@v5 + - uses: actions/setup-python@v6 with: python-version: 3.x From 57e81aefc8907f43a3520cc22c1e07d3fb917b94 Mon Sep 17 00:00:00 2001 From: Brendan <2bndy5@gmail.com> Date: Mon, 8 Sep 2025 16:00:58 -0700 Subject: [PATCH 2/3] explicitly set benchmark to measure instrumentation --- .github/workflows/benchmark.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 7ff033f7..afb33384 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -57,5 +57,6 @@ jobs: - name: Run benchmarks uses: CodSpeedHQ/action@v4 with: + mode: instrumentation run: cargo codspeed run token: ${{ secrets.CODSPEED_TOKEN }} From 56a64cf7ba56e7e56664690f3db6c2889f22a819 Mon Sep 17 00:00:00 2001 From: Brendan <2bndy5@gmail.com> Date: Mon, 8 Sep 2025 19:13:34 -0700 Subject: [PATCH 3/3] append version comment to pinned SHA --- .github/workflows/python-packaging.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python-packaging.yml b/.github/workflows/python-packaging.yml index a784affb..f633f20a 100644 --- a/.github/workflows/python-packaging.yml +++ b/.github/workflows/python-packaging.yml @@ -193,7 +193,7 @@ jobs: run: pipx run twine check dist/* - name: Publish to PyPI if: startsWith(github.ref, 'refs/tags/') - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 with: attestations: true skip-existing: true