Skip to content

Commit 377fc6a

Browse files
chore: bump the actions-all group across 1 directory with 13 updates
Bumps the actions-all group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `4.2.0` | `10.0.1` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.169` | `1.0.220` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `3.35.5` | `4.38.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `3.35.5` | `4.38.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.6.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.3.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.0.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.1` | Updates `astral-sh/setup-uv` from 4.2.0 to 10.0.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@38f3f10...20cfd1b) Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...3d3c42e) Updates `anthropics/claude-code-action` from 1.0.169 to 1.0.220 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@37b464c...19dda84) Updates `github/codeql-action/init` from 3.35.5 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@458d36d...b96794f) Updates `github/codeql-action/analyze` from 3.35.5 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@458d36d...b96794f) Updates `docker/setup-buildx-action` from 3.12.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@8d2750c...37fe631) Updates `docker/login-action` from 3.7.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@c94ce9f...dbcb813) Updates `docker/build-push-action` from 6.19.2 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@10e90e3...53b7df9) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...5fda3b9) Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...8207627) Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@27d5ce7...55cc834) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.6.2...043fb46) Updates `actions/download-artifact` from 4.3.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...3e5f45b) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: anthropics/claude-code-action dependency-version: 1.0.210 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 587f2e3 commit 377fc6a

11 files changed

Lines changed: 60 additions & 60 deletions

.github/workflows/claude-pr-review.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ jobs:
4848

4949
steps:
5050
- name: Checkout code
51-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
51+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5252
with:
5353
fetch-depth: 0
5454
# Do NOT persist the GITHUB_TOKEN into .git/config. Default-true
@@ -88,7 +88,7 @@ jobs:
8888
# path; this bearer-token path skips that infra and is the same one
8989
# the Claude CLI uses directly (exercised end-to-end by the
9090
# live-tests BedrockRoute step).
91-
uses: anthropics/claude-code-action@37b464ce72700f7b2c5ff8d2db7fa7b15df792f5 # v1.0.169
91+
uses: anthropics/claude-code-action@19dda84776b3518d98b8798e591daee763049ed3 # v1.0.220
9292
env:
9393
AWS_BEARER_TOKEN_BEDROCK: ${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}
9494
AWS_REGION: ${{ secrets.AWS_REGION }}

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ jobs:
2525

2626
steps:
2727
- name: Checkout code
28-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
28+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2929

3030
- name: Initialize CodeQL
31-
uses: github/codeql-action/init@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
31+
uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
3232
with:
3333
languages: python
3434
queries: security-and-quality
3535

3636
- name: Perform CodeQL Analysis
37-
uses: github/codeql-action/analyze@458d36d7d4f47d0dd16ca424c1d3cda0060f1360 # v3.35.5
37+
uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0

.github/workflows/conventional-commits.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
echo "✓ PR title OK: $PR_TITLE"
3939
4040
- name: Checkout code
41-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
41+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4242
with:
4343
fetch-depth: 0
4444

.github/workflows/docker-publish.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151

5252
steps:
5353
- name: Checkout code
54-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
54+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5555

5656
- name: Read version from pyproject.toml
5757
id: ver
@@ -65,17 +65,17 @@ jobs:
6565
echo "owner_lc=${OWNER_LC}" >> "$GITHUB_OUTPUT"
6666
6767
- name: Set up Docker Buildx
68-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
68+
uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
6969

7070
- name: Log in to GHCR
71-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
71+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
7272
with:
7373
registry: ${{ env.REGISTRY }}
7474
username: ${{ github.actor }}
7575
password: ${{ secrets.GITHUB_TOKEN }}
7676

7777
- name: Build and push image
78-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
78+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
7979
with:
8080
context: .
8181
file: docker/Dockerfile

.github/workflows/docs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
# shared-pool runner slot for GitHub's 6h default.
4141
timeout-minutes: 10
4242
steps:
43-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
43+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4444

4545
- name: Assemble the published tree
4646
run: |

.github/workflows/harbor-e2e.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,23 +39,23 @@ jobs:
3939

4040
steps:
4141
- name: Checkout code
42-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
42+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4343

4444
- name: Set up Python 3.13
45-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
45+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
4646
with:
4747
python-version: "3.13"
4848

4949
- name: Set up Node.js 20
50-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
50+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
5151
with:
5252
node-version: "20"
5353

5454
- name: Install Claude CLI
5555
run: npm install -g @anthropic-ai/claude-code
5656

5757
- name: Cache dependencies
58-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
58+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
5959
with:
6060
path: |
6161
~/.cache/uv

.github/workflows/pr-checks.yml

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -50,15 +50,15 @@ jobs:
5050

5151
steps:
5252
- name: Checkout code
53-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
53+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5454

5555
- name: Set up Python 3.13
56-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
56+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
5757
with:
5858
python-version: "3.13"
5959

6060
- name: Cache dependencies
61-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
61+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
6262
with:
6363
# ``.venv`` is deliberately NOT cached: its interpreter symlinks
6464
# point at the exact hosted-Python patch, so a patch bump (e.g.
@@ -198,10 +198,10 @@ jobs:
198198
timeout-minutes: 15
199199
steps:
200200
- name: Checkout code
201-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
201+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
202202

203203
- name: Set up Node.js 20
204-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
204+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
205205
with:
206206
node-version: "20"
207207

@@ -228,11 +228,11 @@ jobs:
228228
timeout-minutes: 10
229229
steps:
230230
- name: Checkout code
231-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
231+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
232232

233233
# `claude plugin validate` ships in the Claude Code npm package.
234234
- name: Set up Node.js 20
235-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
235+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
236236
with:
237237
node-version: "20"
238238

@@ -246,7 +246,7 @@ jobs:
246246
run: claude plugin validate . --strict
247247

248248
- name: Install uv
249-
uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
249+
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
250250

251251
# Runs OUTSIDE the source tree, the way a user's copy of the template does:
252252
# no experiments/, no tasks/, no coder_eval checkout on the path. `plan` is a
@@ -290,10 +290,10 @@ jobs:
290290
timeout-minutes: 5
291291
steps:
292292
- name: Checkout code
293-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
293+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
294294

295295
- name: Set up Python 3.13
296-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
296+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
297297
with:
298298
python-version: "3.13"
299299

@@ -356,15 +356,15 @@ jobs:
356356

357357
steps:
358358
- name: Checkout code
359-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
359+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
360360

361361
- name: Set up Python 3.13
362-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
362+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
363363
with:
364364
python-version: "3.13"
365365

366366
- name: Cache dependencies
367-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
367+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
368368
with:
369369
# ``.venv`` is deliberately excluded: tarring/untarring tens of
370370
# thousands of small wheel files on Windows is what was tripping
@@ -409,7 +409,7 @@ jobs:
409409
run: .venv/Scripts/pytest tests/ -v -m "not live and not lint"
410410

411411
- name: Set up Node.js 20
412-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
412+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
413413
with:
414414
node-version: "20"
415415

@@ -500,23 +500,23 @@ jobs:
500500

501501
steps:
502502
- name: Checkout code
503-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
503+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
504504

505505
- name: Set up Python 3.13
506-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
506+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
507507
with:
508508
python-version: "3.13"
509509

510510
- name: Set up Node.js 20
511-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
511+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
512512
with:
513513
node-version: "20"
514514

515515
- name: Install Claude CLI
516516
run: npm install -g @anthropic-ai/claude-code
517517

518518
- name: Cache dependencies
519-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
519+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
520520
with:
521521
# ``.venv`` excluded: a hosted-Python patch bump orphans its
522522
# interpreter symlink (dangling ``.venv/bin/python`` -> exit 127).
@@ -670,15 +670,15 @@ jobs:
670670

671671
steps:
672672
- name: Checkout code
673-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
673+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
674674

675675
- name: Set up Python 3.13
676-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
676+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
677677
with:
678678
python-version: "3.13"
679679

680680
- name: Set up Node.js 20
681-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
681+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
682682
with:
683683
node-version: "20"
684684

@@ -689,7 +689,7 @@ jobs:
689689
# AgentConfig.isolation=true, so the SDK doesn't shell out to bwrap.
690690

691691
- name: Cache dependencies
692-
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
692+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
693693
with:
694694
# ``.venv`` excluded: a hosted-Python patch bump orphans its
695695
# interpreter symlink (dangling ``.venv/bin/python`` -> exit 127).
@@ -838,10 +838,10 @@ jobs:
838838

839839
steps:
840840
- name: Checkout code
841-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
841+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
842842

843843
- name: Set up Python 3.13
844-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
844+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
845845
with:
846846
python-version: "3.13"
847847

@@ -912,15 +912,15 @@ jobs:
912912

913913
steps:
914914
- name: Checkout code
915-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
915+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
916916

917917
- name: Set up Python 3.13
918-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
918+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
919919
with:
920920
python-version: "3.13"
921921

922922
- name: Set up Node.js 20
923-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
923+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
924924
with:
925925
node-version: "20"
926926

@@ -988,13 +988,13 @@ jobs:
988988
# Skip on fork PRs where secrets aren't available (matches e2e-smoke).
989989
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
990990
steps:
991-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
991+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
992992

993993
# The composite action is agent-agnostic and does NOT install a coding-agent
994994
# runtime. The dogfood task uses the default claude-code agent, so provide
995995
# Node + the Claude CLI here (as e2e-smoke does), before invoking the action.
996996
- name: Set up Node.js 20
997-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
997+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
998998
with:
999999
node-version: "20"
10001000
- name: Install Claude CLI

.github/workflows/publish-testpypi.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,15 +47,15 @@ jobs:
4747
id-token: write
4848
steps:
4949
- name: Checkout code
50-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
50+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5151

5252
- name: Set up Python 3.13
53-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
53+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
5454
with:
5555
python-version: "3.13"
5656

5757
- name: Install uv
58-
uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
58+
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
5959
with:
6060
enable-cache: true
6161

0 commit comments

Comments
 (0)