From ae1a54eee1dafa3ae8b199061de35648e776ece5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Oct 2025 17:45:52 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/codeql-action](https://github.com/github/codeql-action) | `3.30.5` | `4.31.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `5` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `5` | `6` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `6.7.0` | `7.1.2` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `c323c83e3ab58baf4acbc7b6b39eef0e0cb14e4d` | `da5ac40c5419dcf7f21630fb2f95e725ae8fb9d5` | Updates `github/codeql-action` from 3.30.5 to 4.31.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3599b3baa15b485a2e49ef411a7a4bb2452e7f93...4e94bd11f71e507f7f87df81788dff88d1dacbfb) Updates `actions/upload-artifact` from 4 to 5 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v5) Updates `actions/download-artifact` from 5 to 6 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v5...v6) Updates `astral-sh/setup-uv` from 6.7.0 to 7.1.2 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/b75a909f75acd358c2196fb9a5f1299a9a8868a4...85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41) Updates `zizmorcore/zizmor-action` from c323c83e3ab58baf4acbc7b6b39eef0e0cb14e4d to da5ac40c5419dcf7f21630fb2f95e725ae8fb9d5 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/c323c83e3ab58baf4acbc7b6b39eef0e0cb14e4d...da5ac40c5419dcf7f21630fb2f95e725ae8fb9d5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 7.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: da5ac40c5419dcf7f21630fb2f95e725ae8fb9d5 dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/dist.yml | 6 +++--- .github/workflows/release-python.yml | 2 +- .github/workflows/test-python.yml | 8 ++++---- .github/workflows/zizmor.yml | 2 +- 5 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 95b97a8..9d74b9e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -56,7 +56,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3 + uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3 with: languages: ${{ matrix.language }} build-mode: none @@ -72,6 +72,6 @@ jobs: pip install -e . - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3 + uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml index 3c2a4b1..75b4bab 100644 --- a/.github/workflows/dist.yml +++ b/.github/workflows/dist.yml @@ -55,7 +55,7 @@ jobs: cd .. python -c "from pymongo_search_utils import create_vector_search_index" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v5 with: name: "dist" path: ./dist/*.* @@ -66,13 +66,13 @@ jobs: name: Download Dist steps: - name: Download all workflow run artifacts - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v6 - name: Flatten directory working-directory: . run: | find . -mindepth 2 -type f -exec mv {} . \; find . -type d -empty -delete - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v5 with: name: all-dist-${{ github.run_id }} path: "./*" diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 535f0ec..583a0f6 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -84,7 +84,7 @@ jobs: id-token: write steps: - name: Download all the dists - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v6 with: name: all-dist-${{ github.run_id }} path: dist/ diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml index 9195d82..b07c806 100644 --- a/.github/workflows/test-python.yml +++ b/.github/workflows/test-python.yml @@ -27,7 +27,7 @@ jobs: persist-credentials: false fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v5 + uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v5 with: enable-cache: true python-version: ${{ matrix.python-version }} @@ -49,7 +49,7 @@ jobs: persist-credentials: false fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v5 + uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v5 with: enable-cache: true python-version: ${{ matrix.python-version }} @@ -70,13 +70,13 @@ jobs: persist-credentials: false fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v5 + uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v5 with: enable-cache: true python-version: ${{ env.MIN_PYTHON }} - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3 - name: Install uv - uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v5 + uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v5 with: enable-cache: true python-version: ${{ env.MIN_PYTHON }} diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2d025e0..c4e9aae 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -18,4 +18,4 @@ jobs: with: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@c323c83e3ab58baf4acbc7b6b39eef0e0cb14e4d + uses: zizmorcore/zizmor-action@da5ac40c5419dcf7f21630fb2f95e725ae8fb9d5