From 988f689e927f4569a9e12a74f654a1b90392c30f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Mar 2026 23:03:07 +0000 Subject: [PATCH] build(deps): bump the actions group with 3 updates Bumps the actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) Updates `actions/download-artifact` from 7 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) Updates `actions/attest-build-provenance` from 3 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd-python.yaml | 18 +++++++++--------- .github/workflows/cd-r.yaml | 14 +++++++------- .github/workflows/draft-pdf.yml | 2 +- 3 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/cd-python.yaml b/.github/workflows/cd-python.yaml index 33a0186f..bbcb3b01 100644 --- a/.github/workflows/cd-python.yaml +++ b/.github/workflows/cd-python.yaml @@ -57,7 +57,7 @@ jobs: sccache: 'true' manylinux: auto - name: Upload wheels - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: wheels-linux-${{ matrix.platform.target }} path: dist @@ -98,7 +98,7 @@ jobs: sccache: 'true' manylinux: musllinux_1_2 - name: Upload wheels - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: wheels-musllinux-${{ matrix.platform.target }} path: dist @@ -135,7 +135,7 @@ jobs: args: --release --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }} sccache: 'true' - name: Upload wheels - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: wheels-windows-${{ matrix.platform.target }} path: dist @@ -171,7 +171,7 @@ jobs: args: --release --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }} sccache: 'true' - name: Upload wheels - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: wheels-macos-${{ matrix.platform.target }} path: dist @@ -199,7 +199,7 @@ jobs: command: sdist args: --out dist --manifest-path ${{ env.MATURIN_MANIFEST_PATH }} - name: Upload sdist - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: wheels-sdist path: dist @@ -221,9 +221,9 @@ jobs: # Used to generate artifact attestation attestations: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'wheels-*/*' - name: Log version being published @@ -252,9 +252,9 @@ jobs: # Used to generate artifact attestation attestations: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'wheels-*/*' - name: Log version being published diff --git a/.github/workflows/cd-r.yaml b/.github/workflows/cd-r.yaml index f40434d2..c990da66 100644 --- a/.github/workflows/cd-r.yaml +++ b/.github/workflows/cd-r.yaml @@ -57,7 +57,7 @@ jobs: run: | move dist\*.zip dist\phylo2vec_${{ steps.determine-version.outputs.version }}_windows.zip - name: Upload package - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: r-package-windows path: dist/*.zip @@ -106,7 +106,7 @@ jobs: run: | mv dist/*.tgz dist/phylo2vec_${{ steps.determine-version.outputs.version }}_macos-${{ matrix.platform.target }}.tgz - name: Upload package - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: r-package-macos-${{ matrix.platform.target }} path: dist/*.tgz @@ -151,7 +151,7 @@ jobs: run: | mv dist/*.tar.gz dist/phylo2vec_${{ steps.determine-version.outputs.version }}_linux-x86_64.tar.gz - name: Upload package - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: r-package-linux path: dist/*.tar.gz @@ -167,9 +167,9 @@ jobs: contents: write attestations: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'r-package-*/*' - name: Set up R @@ -196,9 +196,9 @@ jobs: contents: write attestations: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 - name: Generate artifact attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: 'r-package-*/*' - name: Set up R diff --git a/.github/workflows/draft-pdf.yml b/.github/workflows/draft-pdf.yml index d3a58fb5..d85d3b0a 100644 --- a/.github/workflows/draft-pdf.yml +++ b/.github/workflows/draft-pdf.yml @@ -19,7 +19,7 @@ jobs: # This should be the path to the paper within your repo. paper-path: joss/paper.md - name: Upload - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: paper # This is the output path where Pandoc will write the compiled