Skip to content

build(deps): bump the actions group across 1 directory with 9 updates #4967

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
prmukherj merged 11 commits into from
Mar 27, 2026
Merged

build(deps): bump the actions group across 1 directory with 9 updates #4967

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
cf004ae
build(deps): bump the actions group across 1 directory with 9 updates
dependabot[bot] Mar 1, 2026
7aae056
chore: adding changelog file 4967.dependencies.md [dependabot-skip]
pyansys-ci-bot Mar 1, 2026
55ccced
Merge branch 'main' into dependabot/github_actions/actions-0b115066e1
prmukherj Mar 5, 2026
ffe217a
Merge branch 'main' into dependabot/github_actions/actions-0b115066e1
prmukherj Mar 27, 2026
930a181
Update security issues.
prmukherj Mar 27, 2026
d2f82af
Updates.
prmukherj Mar 27, 2026
3ae1989
Updates.
prmukherj Mar 27, 2026
300ceea
Updates.
prmukherj Mar 27, 2026
cf6b11a
Updates.
prmukherj Mar 27, 2026
70bfacc
Updates.
prmukherj Mar 27, 2026
5fc389f
Updates.
prmukherj Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion .github/dependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,10 @@ version: 2
updates:
- package-ecosystem: "pip" # See documentation for possible values
directory: "/" # Location of package manifests
insecure-external-code-execution: allow
schedule:
interval: "monthly"
cooldown:
default-days: 7 # Wait 7 days before raising a PR for a newly published version.
labels:
- "Maintenance"
- "Dependencies"
Expand Down Expand Up @@ -38,6 +39,8 @@ updates:
directory: "/"
schedule:
interval: "monthly"
cooldown:
default-days: 7 # Wait 7 days before raising a PR for a newly published action version.
labels:
- "Maintenance"
groups:
Expand Down
71 changes: 35 additions & 36 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,10 +16,9 @@
cancel-in-progress: true

permissions:
contents: read
packages: read
pull-requests: read
issues: read
contents: read # Required for actions/checkout and repository reads across jobs.
packages: read # Required to pull Fluent images/packages from GHCR using GITHUB_TOKEN.
pull-requests: read # Required by PR metadata checks (for example, check-pr-title).

env:
API_CODE_CACHE: 7
Expand All @@ -42,12 +41,12 @@
name: "Add license headers"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Set up Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.MAIN_PYTHON_VERSION }}

Expand All @@ -64,10 +63,10 @@
if: github.event_name == 'push' && contains(github.ref, 'refs/tags')
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
contents: write # Required to commit and push CHANGELOG updates.
pull-requests: write # Required to create or update changelog PRs.
steps:
- uses: ansys/actions/doc-deploy-changelog@v10.2
- uses: ansys/actions/doc-deploy-changelog@v10.2.7

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions' step
Uses Step
Loading
uses 'ansys/actions/doc-deploy-changelog' with ref 'v10.2.7', not a pinned commit hash
with:
bot-user: ${{ secrets.PYANSYS_CI_BOT_USERNAME }}
bot-email: ${{ secrets.PYANSYS_CI_BOT_EMAIL }}
Expand All @@ -78,7 +77,7 @@
runs-on: ubuntu-latest
steps:
- name: Running Vale
uses: ansys/actions/doc-style@v10.2
uses: ansys/actions/doc-style@v10.2.7

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions' step
Uses Step
Loading
uses 'ansys/actions/doc-style' with ref 'v10.2.7', not a pinned commit hash
with:
token: ${{ secrets.GITHUB_TOKEN }}

Expand All @@ -87,13 +86,13 @@
runs-on: ubuntu-latest
steps:
- name: "Run PyAnsys code style checks"
uses: ansys/actions/code-style@v10.2
uses: ansys/actions/code-style@v10.2.7

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions' step
Uses Step
Loading
uses 'ansys/actions/code-style' with ref 'v10.2.7', not a pinned commit hash

commit-style:
name: "Run commit style checks"
runs-on: ubuntu-latest
steps:
- uses: ansys/actions/check-pr-title@v10.2
- uses: ansys/actions/check-pr-title@v10.2.7

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions' step
Uses Step
Loading
uses 'ansys/actions/check-pr-title' with ref 'v10.2.7', not a pinned commit hash
with:
token: ${{ secrets.GITHUB_TOKEN }}

Expand All @@ -112,7 +111,7 @@
os: macos-latest
steps:
- name: Build wheelhouse and perform smoke test
uses: ansys/actions/build-wheelhouse@v10.2
uses: ansys/actions/build-wheelhouse@v10.2.7

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'GitHub Actions' step
Uses Step
Loading
uses 'ansys/actions/build-wheelhouse' with ref 'v10.2.7', not a pinned commit hash
with:
library-name: ${{ env.PACKAGE_NAME }}
operating-system: ${{ matrix.os }}
Expand All @@ -136,7 +135,7 @@
name: "Actions Security"
runs-on: ubuntu-latest
steps:
- uses: ansys/actions/check-actions-security@21c9de9bee9692173780696d4a39964f20b9cfa3 # v10.1.5
- uses: ansys/actions/check-actions-security@1f4f0896a8e49d3aec2f02ced215b04a32c85f28 # v10.2.7
with:
generate-summary: true
token: ${{ secrets.GITHUB_TOKEN }}
Expand All @@ -152,12 +151,12 @@
PYTHONDONTWRITEBYTECODE: 1

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Setup Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.PYTHON_VERSION }}

Expand All @@ -172,7 +171,7 @@
sudo apt-get install pandoc libegl1 make xvfb libfontconfig1 libxrender1 libxkbcommon-x11-0 -y

- name: Cache pip
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
path: ~/.cache/pip
key: Python-${{ runner.os }}-${{ env.PYTHON_VERSION }}-${{ hashFiles('pyproject.toml') }}
Expand Down Expand Up @@ -208,7 +207,7 @@
id: version

- name: Cache API Code
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
id: cache-api-code
with:
path: |
Expand All @@ -218,7 +217,7 @@

- name: Login to GitHub Container Registry
if: steps.cache-api-code.outputs.cache-hit != 'true'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: ansys-bot
Expand Down Expand Up @@ -259,7 +258,7 @@
popd

- name: Upload HTML Documentation
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: HTML-Documentation-tag-${{ env.DOC_DEPLOYMENT_IMAGE_TAG }}
path: HTML-Documentation-tag-${{ env.DOC_DEPLOYMENT_IMAGE_TAG }}.zip
Expand All @@ -278,12 +277,12 @@
PYTHONDONTWRITEBYTECODE: 1

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Setup Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.MAIN_PYTHON_VERSION }}

Expand All @@ -293,7 +292,7 @@
FLUENT_STABLE_IMAGE_DEV: ${{ vars.FLUENT_STABLE_IMAGE_DEV }}

- name: Cache pip
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
path: ~/.cache/pip
key: Python-${{ runner.os }}-${{ env.MAIN_PYTHON_VERSION }}-${{ hashFiles('pyproject.toml') }}
Expand All @@ -314,14 +313,14 @@
id: version

- name: Login to GitHub Container Registry
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: ansys-bot
password: ${{ secrets.GITHUB_TOKEN }}

- name: Cache API Code
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
id: cache-api-code
with:
path: src/ansys/fluent/core/generated
Expand Down Expand Up @@ -429,7 +428,7 @@
twine check dist/*

- name: Upload package
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: PyFluent-packages
path: |
Expand Down Expand Up @@ -466,13 +465,13 @@
FLUENT_IMAGE_TAG: ${{ matrix.version == 271 && vars.FLUENT_STABLE_IMAGE_DEV || matrix.image-tag }}

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Setup Python
if: ${{ !contains(github.event.pull_request.title, '[skip tests]') }}
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.MAIN_PYTHON_VERSION }}

Expand All @@ -483,7 +482,7 @@

- name: Download package
if: ${{ !contains(github.event.pull_request.title, '[skip tests]') }}
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
with:
name: PyFluent-packages
path: dist
Expand All @@ -501,7 +500,7 @@

- name: Login to GitHub Container Registry
if: ${{ !contains(github.event.pull_request.title, '[skip tests]') }}
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: ansys-bot
Expand All @@ -521,7 +520,7 @@

- name: Upload 26.1 Coverage Artifacts
if: matrix.image-tag == 'v26.1.latest'
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: coverage_report
path: ./htmlcov
Expand All @@ -540,12 +539,12 @@
PYTEST_XDIST_AUTO_NUM_WORKERS: 1

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

- name: Setup Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.MAIN_PYTHON_VERSION }}

Expand All @@ -570,7 +569,7 @@
id: version

- name: Login to GitHub Container Registry
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
with:
registry: ghcr.io
username: ansys-bot
Expand Down Expand Up @@ -604,12 +603,12 @@

steps:
- name: Set up Python
uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ env.MAIN_PYTHON_VERSION }}

- name: "Download the library artifacts from build-library step"
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
with:
name: PyFluent-packages
path: PyFluent-packages
Expand Down
16 changes: 10 additions & 6 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
name: "CodeQL"

permissions:
contents: read
security-events: read
actions: read
contents: read # Required to checkout and read repository contents during analysis.
security-events: read # Required for codeql-action/analyze to upload code scanning results.
actions: read # Required for CodeQL workflow/action metadata access.

on:
push:
Expand All @@ -14,6 +14,10 @@ on:
schedule: # At 01:27 AM, only on Tuesday
- cron: '27 1 * * 2'

concurrency:
group: codeql-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

jobs:
analyze:
name: Analyze
Expand All @@ -36,13 +40,13 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand All @@ -69,6 +73,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
with:
category: "/language:${{matrix.language}}"
8 changes: 6 additions & 2 deletions .github/workflows/dependency-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@
name: 'Dependency Review'
on: [pull_request]

concurrency:
group: dependency-review-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

permissions:
contents: read

Expand All @@ -16,8 +20,8 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: 'Dependency Review'
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
Loading
Loading