build(deps): bump the actions group across 1 directory with 5 updates - #3304
build(deps): bump the actions group across 1 directory with 5 updates#3304dependabot[bot] wants to merge 1 commit into
Conversation
❌ 2 Tests Failed:
View the top 1 failed test(s) by shortest run time
View the full list of 1 ❄️ flaky test(s)
To view more test analytics, go to the Test Analytics Dashboard |
0651db9 to
53a2004
Compare
Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.2` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.2` | `9.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `4.1.0` | `4.1.1` | | [actions/stale](https://github.com/actions/stale) | `10` | `11` | Updates `docker/login-action` from 4.4.0 to 4.5.2 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v4.4.0...v4.5.2) Updates `astral-sh/setup-uv` from 8.3.2 to 9.0.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@v8.3.2...v9.0.0) Updates `actions/setup-python` from 6.3.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6.3.0...v7.0.0) Updates `pypa/cibuildwheel` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@v4.1.0...v4.1.1) Updates `actions/stale` from 10 to 11 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@v10...v11) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/stale dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pypa/cibuildwheel dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
53a2004 to
f0c20c2
Compare
Greptile SummaryThis PR updates five GitHub Actions dependencies across CI, release, Docker-build, autofix, and stale-management workflows.
Confidence Score: 4/5The PR appears safe to merge, with the non-blocking caveat that setup-uv v9 will retain larger GitHub Actions caches unless pruning is explicitly enabled. The action upgrades remain compatible with the workflows' current inputs and build targets; the only accepted concern is setup-uv's changed cache-pruning default and its resulting storage and eviction overhead. Files Needing Attention: .github/workflows/ci.yml and the other workflows upgraded to setup-uv v9 Important Files Changed
Reviews (1): Last reviewed commit: "build(deps): bump the actions group acro..." | Re-trigger Greptile |
| uses: astral-sh/setup-uv@v9.0.0 | ||
| with: | ||
| enable-cache: true |
There was a problem hiding this comment.
setup-uv retains larger caches
The v9 upgrade changes the default to prune-cache: false, so these cached jobs now save pre-built wheels that v8 pruned. This increases cache storage and can evict useful entries sooner, especially across the multi-version test matrix; set prune-cache: true explicitly when preserving the previous behavior is intended.
Knowledge Base Used: Build, CI, and Packaging
Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!
Bumps the actions group with 5 updates in the / directory:
4.4.04.5.28.3.29.0.06.3.07.0.04.1.04.1.11011Updates
docker/login-actionfrom 4.4.0 to 4.5.2Release notes
Sourced from docker/login-action's releases.
Commits
371161bMerge pull request #1058 from crazy-max/fix-dockerhub-oidc-error-handling5dc73dfchore: update generated content2aa1edesurface Docker Hub OIDC error responsesabd2ef4Merge pull request #1055 from crazy-max/test-registry-auth-oidcd49d3a9Merge pull request #1054 from crazy-max/oidc-missing-dhib58b17ctest: cover Docker Hub OIDC with registry-authbe646c2chore: update generated contentd77c059support dhi.io as Docker Hub OIDC registry06fb636Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...a8bc953[dependabot skip] chore: update generated contentUpdates
astral-sh/setup-uvfrom 8.3.2 to 9.0.0Release notes
Sourced from astral-sh/setup-uv's releases.
Commits
c771a70chore(deps): roll up Dependabot updates (#970)2f537cachore: update known checksums for 0.11.30 (#968)2269552Speed up version client by partial response reads (#807)47a7f4fChangeprune-cachedefault tofalse(#967)71966efchore(deps): roll up Dependabot updates (#962)f12b1f0fix: fall back to distribution ID when os-release has no version field (#961)ecd24ddchore: update known checksums for 0.11.29 (#960)6a19136docs: update version references to v8.3.2 (#949)Updates
actions/setup-pythonfrom 6.3.0 to 7.0.0Release notes
Sourced from actions/setup-python's releases.
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)Updates
pypa/cibuildwheelfrom 4.1.0 to 4.1.1Release notes
Sourced from pypa/cibuildwheel's releases.
Changelog
Sourced from pypa/cibuildwheel's changelog.
Commits
4726cd3Bump version: v4.1.11af5cd7docs: switch from mkdocs to properdocs (#2946)b21d76adocs: add missing cp314-pyodide_wasm32 to build-id table (#2947)03cbe93fix(macos): make matching python3-config available in build/test venvs (#2922)b7cac6dfix: don't error when a global build-frontend is set on pyodide (#2945)1520daffix: support platform-specific test runtime environment variables (#2941)17b7420[Bot] Update dependencies (#2939)f8d8ccachore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the actions group...265b435chore(deps): bump the actions group with 2 updates (#2942)3f8bd1cchore(deps): bump the actions group with 3 updates (#2938)Updates
actions/stalefrom 10 to 11Release notes
Sourced from actions/stale's releases.
... (truncated)
Changelog
Sourced from actions/stale's changelog.
... (truncated)
Commits
4391f3dFix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...eaf9131refactor: update imports to use ES module syntax and improve test structure (...