From 6fbb3b50f4f47dbe4328f52dba0dcb9940e71712 Mon Sep 17 00:00:00 2001 From: "renovate-bot-lohn[bot]" <294677373+renovate-bot-lohn[bot]@users.noreply.github.com> Date: Fri, 28 Aug 2026 19:27:03 +0000 Subject: [PATCH] ci(deps): update github-actions --- .github/actions/init-tools/action.yaml | 2 +- .github/workflows/ci.yaml | 4 ++-- .github/workflows/pr-title.yaml | 4 ++-- .github/workflows/release-please.yaml | 2 +- .github/workflows/release.yaml | 10 +++++----- .github/workflows/renovate.yaml | 2 +- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/actions/init-tools/action.yaml b/.github/actions/init-tools/action.yaml index cd1c44c..72299d5 100644 --- a/.github/actions/init-tools/action.yaml +++ b/.github/actions/init-tools/action.yaml @@ -12,6 +12,6 @@ runs: steps: # https://github.com/marketplace/actions/mise-action - name: Set up mise - uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4.2.0 + uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0 with: cache_key_prefix: mise-${{ inputs.cache-key }} diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 900cd27..05c8f0a 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -11,7 +11,7 @@ jobs: steps: # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize tools uses: ./.github/actions/init-tools @@ -37,7 +37,7 @@ jobs: # as falsy, so `cond && 0 || 1` collapses to `1` for both outcomes. # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: ${{ github.event_name != 'pull_request' && 1 || 0 }} diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml index 41170cd..811c434 100644 --- a/.github/workflows/pr-title.yaml +++ b/.github/workflows/pr-title.yaml @@ -27,7 +27,7 @@ jobs: # https://github.com/marketplace/actions/sticky-pull-request-comment - name: Post PR comment if: always() && steps.check.outcome == 'failure' - uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4 + uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5 with: header: pr-title message: | @@ -50,7 +50,7 @@ jobs: # https://github.com/marketplace/actions/sticky-pull-request-comment - name: Delete PR comment on success if: steps.check.outcome == 'success' - uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4 + uses: marocchino/sticky-pull-request-comment@5770ad5eb8f42dd2c4f34da00c94c5381e49af88 # v3.0.5 with: header: pr-title delete: true diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml index de19356..bad1535 100644 --- a/.github/workflows/release-please.yaml +++ b/.github/workflows/release-please.yaml @@ -25,7 +25,7 @@ jobs: # amended release-PR commit and re-trigger CI on it. # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1ab07e8..edd8bdc 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -16,7 +16,7 @@ jobs: steps: # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.ref_name }} fetch-depth: 0 @@ -57,7 +57,7 @@ jobs: # https://github.com/marketplace/actions/attest-build-provenance - name: Attest build provenance for all artifacts - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: dist/checksums.txt @@ -71,7 +71,7 @@ jobs: steps: # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.ref_name }} @@ -139,7 +139,7 @@ jobs: steps: # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.ref_name }} @@ -189,7 +189,7 @@ jobs: # https://github.com/marketplace/actions/pypi-publish - name: Publish to PyPI via Trusted Publishing - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: packages-dir: pypi/dist skip-existing: true diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml index e5031eb..49324be 100644 --- a/.github/workflows/renovate.yaml +++ b/.github/workflows/renovate.yaml @@ -41,7 +41,7 @@ jobs: steps: # https://github.com/marketplace/actions/checkout - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false