From 11688a4b74aebd54d4948f0d4dfd52ea6b6735e0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 07:06:38 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.1` | `1.14.2` | | [devr-tools/codeguard](https://github.com/devr-tools/codeguard) | `1.2.0` | `1.5.0` | | [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) | `2026.07.20.1` | `2026.08.14.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.6.0` | Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ba38be9e461d3875417946c167d0b5f3d385a247...dc37677b2e1c63e2034f94d8a5b11f265b73ba33) Updates `devr-tools/codeguard` from 1.2.0 to 1.5.0 - [Release notes](https://github.com/devr-tools/codeguard/releases) - [Changelog](https://github.com/devr-tools/codeguard/blob/main/CHANGELOG.md) - [Commits](https://github.com/devr-tools/codeguard/compare/a1f8eb3aed6b6b645d42be2a8279b3f578328c40...8d9ea157e0de725dfa74ee954be9f4ef6157d9f1) Updates `Homebrew/actions/setup-homebrew` from 2026.07.20.1 to 2026.08.14.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](https://github.com/homebrew/actions/compare/df4b09108a1de9d6f995fe68f302b3f68bd6d2ef...8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4) Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e) Updates `docker/login-action` from 4.4.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...dbcb813823bdd20940b903addbd779551569679f) --- updated-dependencies: - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: devr-tools/codeguard dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Homebrew/actions/setup-homebrew dependency-version: 2026.08.14.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/homebrew-validation.yml | 2 +- .github/workflows/release.yml | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 6465430..68ce73f 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -292,7 +292,7 @@ jobs: # Attestations stay on (the default): running in cd.yml makes both OIDC # claims resolve to cd.yml, so the PEP 740 attestation matches the cd.yml # trusted publisher. - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1 with: packages-dir: packaging/pypi/dist skip-existing: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5e8df59..2de907f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -85,7 +85,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # make codeguard-ci: CI intentionally runs the stable Marketplace action instead of the in-repo binary. - - uses: devr-tools/codeguard@a1f8eb3aed6b6b645d42be2a8279b3f578328c40 + - uses: devr-tools/codeguard@8d9ea157e0de725dfa74ee954be9f4ef6157d9f1 with: config: .codeguard/codeguard.yaml diff --git a/.github/workflows/homebrew-validation.yml b/.github/workflows/homebrew-validation.yml index 9beee34..c3bac26 100644 --- a/.github/workflows/homebrew-validation.yml +++ b/.github/workflows/homebrew-validation.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Set up Homebrew - uses: Homebrew/actions/setup-homebrew@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # main + uses: Homebrew/actions/setup-homebrew@8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4 # main - name: Clone Homebrew tap shell: bash diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 704ac54..5ec2444 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -172,7 +172,7 @@ jobs: uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 - name: Install cosign uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 @@ -188,7 +188,7 @@ jobs: uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0 - name: Log in to GHCR - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ghcr.io username: ${{ github.actor }}