From be286605127dbc8e935bd5017ff4bae6ba3fc1d1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 31 Mar 2026 15:14:48 +0000 Subject: [PATCH] Bump the actions-dependencies group across 1 directory with 4 updates Bumps the actions-dependencies group with 4 updates in the / directory: [actions/cache](https://github.com/actions/cache), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/cache` from 5.0.1 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/9255dc7a253b0ccc959486e2bca901246202afeb...668228422ae6a00e4ad889ee87cd7109ec5666a7) Updates `actions/upload-artifact` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f) Updates `actions/download-artifact` from 7.0.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/37930b1c2abaa49bbe596cd826c3c89aef350131...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c) Updates `actions/create-github-app-token` from 2.2.1 to 3.0.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/29824e69f54612133e76f7eaac726eef6c875baf...f8d387b68d61c58ab83c6c016672934102569859) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: actions/create-github-app-token dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/pull-request-checks.yml | 10 +++++----- .github/workflows/release.yml | 4 ++-- .github/workflows/scheduled-updates.yml | 2 +- .github/workflows/weekly-checks.yml | 4 ++-- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/pull-request-checks.yml b/.github/workflows/pull-request-checks.yml index 7754e5e12..5bedb92d8 100644 --- a/.github/workflows/pull-request-checks.yml +++ b/.github/workflows/pull-request-checks.yml @@ -33,7 +33,7 @@ jobs: - name: Cache conda environment id: conda-env-cache - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 with: key: conda|${{runner.os}}-${{runner.arch}}|${{ hashFiles(format('requirements/locks/{0}-lock-linux-64.txt', matrix.py-ver)) }} path: | @@ -64,7 +64,7 @@ jobs: mv .coverage ".coverage.${py_ver}" - name: Upload coverage data as artifact - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f with: name: coverage-data-${{ matrix.py-ver }} path: .coverage.* @@ -95,7 +95,7 @@ jobs: run: pip install coverage - name: Download coverage artifact - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c with: pattern: coverage-data-* merge-multiple: true @@ -147,7 +147,7 @@ jobs: python-version: "3.x" - name: Restore pre-commit cache - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 with: key: pre-commit|${{runner.os}}-${{runner.arch}}|${{ env.pythonLocation }}|${{ hashFiles('.pre-commit-config.yaml') }} path: ~/.cache/pre-commit @@ -173,7 +173,7 @@ jobs: - name: Cache conda environment id: conda-env-cache - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 with: key: conda|${{runner.os}}-${{runner.arch}}|${{hashFiles('requirements/locks/latest')}} path: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 75f87b395..a34b5bf7c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -39,7 +39,7 @@ jobs: run: python3 -m build - name: "Upload package as artifact" - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f with: name: packages path: dist/ @@ -57,7 +57,7 @@ jobs: id-token: write steps: - name: Download package artifact - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c with: name: packages path: dist/ diff --git a/.github/workflows/scheduled-updates.yml b/.github/workflows/scheduled-updates.yml index 9a1082409..f457194a5 100644 --- a/.github/workflows/scheduled-updates.yml +++ b/.github/workflows/scheduled-updates.yml @@ -60,7 +60,7 @@ jobs: run: pre-commit autoupdate --freeze - name: Generate GitHub App Token - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf + uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 id: app-token with: app-id: ${{ secrets.AUTH_APP_ID }} diff --git a/.github/workflows/weekly-checks.yml b/.github/workflows/weekly-checks.yml index 142b2c6f6..7c04014b0 100644 --- a/.github/workflows/weekly-checks.yml +++ b/.github/workflows/weekly-checks.yml @@ -24,7 +24,7 @@ jobs: - name: Cache conda environment id: conda-env-cache - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 with: key: conda|${{runner.os}}-${{runner.arch}}|${{hashFiles('requirements/locks/latest')}} path: | @@ -67,7 +67,7 @@ jobs: - name: Cache conda environment id: conda-env-cache - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb + uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 with: key: conda|${{runner.os}}-${{runner.arch}}|${{ hashFiles(format('requirements/locks/{0}-lock-linux-64.txt', matrix.py-ver)) }} path: |