From 3cc3c88fa4bf6b28a298daa26f5353917c54b88e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 24 Jul 2026 17:05:03 +0000 Subject: [PATCH] chore(deps)!: Update GitHub Actions --- .github/workflows/docs-deploy.yml | 2 +- .github/workflows/pre-commit.yml | 4 ++-- .github/workflows/python-ci.yml | 14 +++++++------- .github/workflows/python-compatibility.yml | 4 ++-- .github/workflows/python-dependency-provenance.yml | 4 ++-- .github/workflows/python-docs.yml | 4 ++-- .github/workflows/python-fips-compatibility.yml | 4 ++-- .github/workflows/python-fuzzing.yml | 2 +- .github/workflows/python-mutation.yml | 4 ++-- .../workflows/python-performance-regression.yml | 4 ++-- .github/workflows/python-precommit.yml | 2 +- .github/workflows/python-publish-pypi.yml | 4 ++-- .github/workflows/python-release.yml | 8 ++++---- .github/workflows/python-sbom.yml | 6 +++--- .github/workflows/python-security-analysis.yml | 8 ++++---- .github/workflows/python-snyk.yml | 4 ++-- .github/workflows/python-sonarcloud.yml | 4 ++-- .github/workflows/python-supplemental-checks.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/security-analysis.yml | 2 +- .github/workflows/shell-tests.yml | 4 ++-- workflow-templates/python-ci.yml | 12 ++++++------ workflow-templates/python-compatibility.yml | 2 +- workflow-templates/python-container-security.yml | 2 +- workflow-templates/python-docs.yml | 12 ++++++------ workflow-templates/python-fips-compatibility.yml | 2 +- workflow-templates/python-mutation.yml | 2 +- workflow-templates/python-pr-validation.yml | 2 +- workflow-templates/python-publish-pypi.yml | 2 +- workflow-templates/python-release.yml | 4 ++-- workflow-templates/python-reuse.yml | 2 +- workflow-templates/python-sbom.yml | 2 +- workflow-templates/python-scorecard.yml | 2 +- workflow-templates/python-security-analysis.yml | 4 ++-- workflow-templates/python-slsa.yml | 4 ++-- workflow-templates/python-sonarcloud.yml | 2 +- 36 files changed, 75 insertions(+), 75 deletions(-) diff --git a/.github/workflows/docs-deploy.yml b/.github/workflows/docs-deploy.yml index 3950ec51..375971d0 100644 --- a/.github/workflows/docs-deploy.yml +++ b/.github/workflows/docs-deploy.yml @@ -44,7 +44,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 17aea230..649b77e7 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -54,7 +54,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' @@ -69,7 +69,7 @@ jobs: pre-commit-${{ runner.os }}- - name: Set up uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Create virtual environment # #CRITICAL: uv pip install requires an existing .venv (issue #106). diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml index b1e4d8c2..8d99a2b3 100644 --- a/.github/workflows/python-ci.yml +++ b/.github/workflows/python-ci.yml @@ -171,7 +171,7 @@ jobs: fi - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -529,7 +529,7 @@ jobs: fi - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -637,7 +637,7 @@ jobs: fi - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -748,7 +748,7 @@ jobs: fi - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -884,7 +884,7 @@ jobs: shell: bash - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -1004,7 +1004,7 @@ jobs: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} @@ -1155,7 +1155,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-compatibility.yml b/.github/workflows/python-compatibility.yml index 4238830d..394c2106 100644 --- a/.github/workflows/python-compatibility.yml +++ b/.github/workflows/python-compatibility.yml @@ -204,12 +204,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python ${{ matrix.python }} - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ matrix.python }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-dependency-provenance.yml b/.github/workflows/python-dependency-provenance.yml index 7d4f9ab4..8ab9db17 100644 --- a/.github/workflows/python-dependency-provenance.yml +++ b/.github/workflows/python-dependency-provenance.yml @@ -196,13 +196,13 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV if: env.PYTHON_STATE != 'skip' - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" diff --git a/.github/workflows/python-docs.yml b/.github/workflows/python-docs.yml index bcbc1cea..aa8e702b 100644 --- a/.github/workflows/python-docs.yml +++ b/.github/workflows/python-docs.yml @@ -81,12 +81,12 @@ jobs: fetch-depth: 0 # Full history for git-based dates - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" diff --git a/.github/workflows/python-fips-compatibility.yml b/.github/workflows/python-fips-compatibility.yml index 40b7a955..a7f19675 100644 --- a/.github/workflows/python-fips-compatibility.yml +++ b/.github/workflows/python-fips-compatibility.yml @@ -167,7 +167,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -651,7 +651,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-fuzzing.yml b/.github/workflows/python-fuzzing.yml index 905b8573..f28377b9 100644 --- a/.github/workflows/python-fuzzing.yml +++ b/.github/workflows/python-fuzzing.yml @@ -116,7 +116,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} diff --git a/.github/workflows/python-mutation.yml b/.github/workflows/python-mutation.yml index 71387d00..24a8f908 100644 --- a/.github/workflows/python-mutation.yml +++ b/.github/workflows/python-mutation.yml @@ -139,12 +139,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-performance-regression.yml b/.github/workflows/python-performance-regression.yml index ad796749..acdc86c9 100644 --- a/.github/workflows/python-performance-regression.yml +++ b/.github/workflows/python-performance-regression.yml @@ -168,12 +168,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-precommit.yml b/.github/workflows/python-precommit.yml index ed8b690c..7fa65626 100644 --- a/.github/workflows/python-precommit.yml +++ b/.github/workflows/python-precommit.yml @@ -67,7 +67,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: python-version: ${{ inputs.python-version }} enable-cache: true diff --git a/.github/workflows/python-publish-pypi.yml b/.github/workflows/python-publish-pypi.yml index e0f44ea9..c7e31fd7 100644 --- a/.github/workflows/python-publish-pypi.yml +++ b/.github/workflows/python-publish-pypi.yml @@ -78,12 +78,12 @@ jobs: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-release.yml b/.github/workflows/python-release.yml index 850f354d..e7979c3a 100644 --- a/.github/workflows/python-release.yml +++ b/.github/workflows/python-release.yml @@ -149,7 +149,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -302,12 +302,12 @@ jobs: git checkout -B "$HEAD_BRANCH" - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -590,7 +590,7 @@ jobs: path: dist/ - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Publish to PyPI # Uses trusted publishing (OIDC) - configure at pypi.org/manage/account/publishing/ diff --git a/.github/workflows/python-sbom.yml b/.github/workflows/python-sbom.yml index ea9f3423..4defe427 100644 --- a/.github/workflows/python-sbom.yml +++ b/.github/workflows/python-sbom.yml @@ -117,12 +117,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" @@ -488,7 +488,7 @@ jobs: name: sboms - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} diff --git a/.github/workflows/python-security-analysis.yml b/.github/workflows/python-security-analysis.yml index 97f3681b..00fee056 100644 --- a/.github/workflows/python-security-analysis.yml +++ b/.github/workflows/python-security-analysis.yml @@ -175,12 +175,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true @@ -309,12 +309,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-snyk.yml b/.github/workflows/python-snyk.yml index 0357fb5c..1cba1acb 100644 --- a/.github/workflows/python-snyk.yml +++ b/.github/workflows/python-snyk.yml @@ -204,11 +204,11 @@ jobs: - name: Checkout repository uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true # Snyk SCA does not parse uv.lock; export the committed lockfile to a requirements file Snyk diff --git a/.github/workflows/python-sonarcloud.yml b/.github/workflows/python-sonarcloud.yml index 53f3a8c8..2951883b 100644 --- a/.github/workflows/python-sonarcloud.yml +++ b/.github/workflows/python-sonarcloud.yml @@ -224,12 +224,12 @@ jobs: fetch-depth: 0 # Disable shallow clone for better analysis - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/.github/workflows/python-supplemental-checks.yml b/.github/workflows/python-supplemental-checks.yml index 958ff304..115e1216 100644 --- a/.github/workflows/python-supplemental-checks.yml +++ b/.github/workflows/python-supplemental-checks.yml @@ -243,12 +243,12 @@ jobs: fetch-depth: 2 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ inputs.python-version }} - name: Set up uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Create virtual environment # #CRITICAL: uv pip install requires an existing .venv (issue #106). uv venv diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 1b5b6a59..332cfc1d 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -25,4 +25,4 @@ jobs: security-events: write contents: read actions: read - uses: ByronWilliamsCPA/.github/.github/workflows/python-scorecard.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-scorecard.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 diff --git a/.github/workflows/security-analysis.yml b/.github/workflows/security-analysis.yml index 60ef6056..5c9a3e5f 100644 --- a/.github/workflows/security-analysis.yml +++ b/.github/workflows/security-analysis.yml @@ -22,7 +22,7 @@ jobs: security-events: write pull-requests: write actions: read - uses: ByronWilliamsCPA/.github/.github/workflows/python-security-analysis.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-security-analysis.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: python-version: "3.12" run-codeql: false diff --git a/.github/workflows/shell-tests.yml b/.github/workflows/shell-tests.yml index 98a6a91b..004d82a0 100644 --- a/.github/workflows/shell-tests.yml +++ b/.github/workflows/shell-tests.yml @@ -82,12 +82,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/workflow-templates/python-ci.yml b/workflow-templates/python-ci.yml index da63b911..3a95433b 100644 --- a/workflow-templates/python-ci.yml +++ b/workflow-templates/python-ci.yml @@ -77,12 +77,12 @@ jobs: echo "pyproject-hash=${{ hashFiles('**/pyproject.toml') }}" >> $GITHUB_OUTPUT - name: Set up Python 3.12 - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" @@ -147,12 +147,12 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ matrix.python-version }} - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" @@ -214,12 +214,12 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python 3.12 - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" diff --git a/workflow-templates/python-compatibility.yml b/workflow-templates/python-compatibility.yml index 6bfd2769..aec8a9ae 100644 --- a/workflow-templates/python-compatibility.yml +++ b/workflow-templates/python-compatibility.yml @@ -32,7 +32,7 @@ permissions: jobs: compatibility: name: Compatibility Matrix - uses: ByronWilliamsCPA/.github/.github/workflows/python-compatibility.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-compatibility.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: python-versions: '["3.10", "3.11", "3.12", "3.13"]' operating-systems: '["ubuntu-latest"]' diff --git a/workflow-templates/python-container-security.yml b/workflow-templates/python-container-security.yml index 79033296..98764139 100644 --- a/workflow-templates/python-container-security.yml +++ b/workflow-templates/python-container-security.yml @@ -44,7 +44,7 @@ permissions: jobs: container-security: name: Container Security Scan - uses: ByronWilliamsCPA/.github/.github/workflows/python-container-security.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-container-security.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: dockerfile-path: './Dockerfile' build-image: true diff --git a/workflow-templates/python-docs.yml b/workflow-templates/python-docs.yml index 4ba94b28..85b534e2 100644 --- a/workflow-templates/python-docs.yml +++ b/workflow-templates/python-docs.yml @@ -55,12 +55,12 @@ jobs: fetch-depth: 0 # Required for git-based dates - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" @@ -109,12 +109,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" @@ -154,12 +154,12 @@ jobs: fetch-depth: 0 # Required for git-based dates - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true cache-dependency-glob: "uv.lock" diff --git a/workflow-templates/python-fips-compatibility.yml b/workflow-templates/python-fips-compatibility.yml index 52ef1af5..451d5ecf 100644 --- a/workflow-templates/python-fips-compatibility.yml +++ b/workflow-templates/python-fips-compatibility.yml @@ -63,7 +63,7 @@ permissions: jobs: fips-check: name: FIPS Compliance Check - uses: ByronWilliamsCPA/.github/.github/workflows/python-fips-compatibility.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-fips-compatibility.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: strict-mode: ${{ github.event.inputs.strict_mode || false }} include-tests: true diff --git a/workflow-templates/python-mutation.yml b/workflow-templates/python-mutation.yml index 537029cf..ea05bdae 100644 --- a/workflow-templates/python-mutation.yml +++ b/workflow-templates/python-mutation.yml @@ -36,7 +36,7 @@ permissions: jobs: mutation: name: Mutation Testing - uses: ByronWilliamsCPA/.github/.github/workflows/python-mutation.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-mutation.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: source-directory: 'src' test-directory: 'tests' diff --git a/workflow-templates/python-pr-validation.yml b/workflow-templates/python-pr-validation.yml index 6a1ce4ae..95853870 100644 --- a/workflow-templates/python-pr-validation.yml +++ b/workflow-templates/python-pr-validation.yml @@ -33,7 +33,7 @@ permissions: jobs: pr-validation: name: PR Validation - uses: ByronWilliamsCPA/.github/.github/workflows/python-pr-validation.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-pr-validation.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: python-version: '3.12' source-directory: 'src' diff --git a/workflow-templates/python-publish-pypi.yml b/workflow-templates/python-publish-pypi.yml index 5832521d..6de33451 100644 --- a/workflow-templates/python-publish-pypi.yml +++ b/workflow-templates/python-publish-pypi.yml @@ -47,7 +47,7 @@ jobs: fetch-depth: 0 - name: Set up Python 3.12 - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' diff --git a/workflow-templates/python-release.yml b/workflow-templates/python-release.yml index 9d7fd4f5..ff47384f 100644 --- a/workflow-templates/python-release.yml +++ b/workflow-templates/python-release.yml @@ -53,12 +53,12 @@ jobs: fetch-depth: 0 # Full history for version detection - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/workflow-templates/python-reuse.yml b/workflow-templates/python-reuse.yml index e2970bfe..d2cef129 100644 --- a/workflow-templates/python-reuse.yml +++ b/workflow-templates/python-reuse.yml @@ -32,7 +32,7 @@ permissions: jobs: reuse: name: REUSE Compliance Check - uses: ByronWilliamsCPA/.github/.github/workflows/python-reuse.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-reuse.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: generate-spdx: true fail-on-missing: true diff --git a/workflow-templates/python-sbom.yml b/workflow-templates/python-sbom.yml index 386e9309..209a8bb3 100644 --- a/workflow-templates/python-sbom.yml +++ b/workflow-templates/python-sbom.yml @@ -35,7 +35,7 @@ permissions: jobs: sbom: name: SBOM Generation & Scan - uses: ByronWilliamsCPA/.github/.github/workflows/python-sbom.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-sbom.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: python-version: '3.12' fail-on-vulnerabilities: true diff --git a/workflow-templates/python-scorecard.yml b/workflow-templates/python-scorecard.yml index 47b7052a..8f2a42fe 100644 --- a/workflow-templates/python-scorecard.yml +++ b/workflow-templates/python-scorecard.yml @@ -29,7 +29,7 @@ permissions: jobs: scorecard: name: Scorecard Analysis - uses: ByronWilliamsCPA/.github/.github/workflows/python-scorecard.yml@6109af2dba735bef8bc387aa01e2645f50ccae6e # v7.0.25 + uses: ByronWilliamsCPA/.github/.github/workflows/python-scorecard.yml@7d12f5486ab5c856397ebaa4acd3c99ca385227c # v9.0.0 with: upload-sarif: true permissions: diff --git a/workflow-templates/python-security-analysis.yml b/workflow-templates/python-security-analysis.yml index 9f37dc3c..a403d87b 100644 --- a/workflow-templates/python-security-analysis.yml +++ b/workflow-templates/python-security-analysis.yml @@ -100,7 +100,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Setup Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' @@ -186,7 +186,7 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' diff --git a/workflow-templates/python-slsa.yml b/workflow-templates/python-slsa.yml index c603e93b..3e594cda 100644 --- a/workflow-templates/python-slsa.yml +++ b/workflow-templates/python-slsa.yml @@ -48,12 +48,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' - name: Install UV - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true diff --git a/workflow-templates/python-sonarcloud.yml b/workflow-templates/python-sonarcloud.yml index 638838d7..839342a4 100644 --- a/workflow-templates/python-sonarcloud.yml +++ b/workflow-templates/python-sonarcloud.yml @@ -52,7 +52,7 @@ jobs: fetch-depth: 0 # Disable shallow clone for better analysis - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: python-version: '3.12' cache: 'pip'