From a057a5058aca5b7680baa5717e4da73b067c2a5d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Dec 2025 19:12:06 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 4 updates Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `actions/checkout` from 5.0.1 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v5.0.1...v6.0.1) Updates `actions/upload-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v5...v6) Updates `actions/download-artifact` from 6 to 7 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v6...v7) Updates `actions/attest-build-provenance` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v3.0.0...v3.1.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/attest-build-provenance dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 12 ++++++------ .github/workflows/conda-build.yml | 6 +++--- .github/workflows/lint.yml | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 01617d4..2a1efb8 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -23,14 +23,14 @@ jobs: name: Make SDist runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.1 with: fetch-depth: 0 - name: Build SDist run: pipx run build --sdist - - uses: actions/upload-artifact@v5 + - uses: actions/upload-artifact@v6.0.0 with: name: cibw-sdist path: dist/*.tar.gz @@ -65,7 +65,7 @@ jobs: cibw_skip: "pp* *musllinux* cp314*" steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.1 with: fetch-depth: 0 @@ -77,7 +77,7 @@ jobs: CIBW_SKIP: ${{ matrix.cibw_skip }} - name: Upload wheels - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v6.0.0 with: name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }} path: wheelhouse/*.whl @@ -93,14 +93,14 @@ jobs: if: github.event_name == 'release' && github.event.action == 'published' steps: - - uses: actions/download-artifact@v6 + - uses: actions/download-artifact@v7 with: pattern: cibw-* path: dist merge-multiple: true - name: Generate artifact attestations - uses: actions/attest-build-provenance@v3.0.0 + uses: actions/attest-build-provenance@v3.1.0 with: subject-path: "dist/*" diff --git a/.github/workflows/conda-build.yml b/.github/workflows/conda-build.yml index d161ca2..122b289 100644 --- a/.github/workflows/conda-build.yml +++ b/.github/workflows/conda-build.yml @@ -53,7 +53,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.1.4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4.1.4 with: fetch-depth: 0 @@ -194,7 +194,7 @@ jobs: fi - name: Store conda build artifacts - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: ${{ always() && steps.prepare-artifacts.outcome == 'success' }} with: name: ${{ steps.prepare-artifacts.outputs.BLD_ARTIFACT_NAME }} @@ -203,7 +203,7 @@ jobs: continue-on-error: true - name: Store conda build environment artifacts - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 # only relevant if build failed, see above if: ${{ always() && steps.determine-status.outputs.status == 'failure' && steps.prepare-artifacts.outcome == 'success' }} with: diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index f6e71ed..5b64070 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -7,7 +7,7 @@ jobs: runs-on: ubuntu-latest name: flake8-black steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v6.0.1 - name: Set up Python environment uses: actions/setup-python@v6 with: