From d54ad461bd398b9ca47ebae22aea0f8f294d2e8e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 04:37:24 +0000 Subject: [PATCH] ci(ci-deps): update ci dependencies --- .github/workflows/bump.yml | 10 +++++----- .github/workflows/changelog-preview.yml | 8 ++++---- .github/workflows/claude-code-review.yml | 4 ++-- .github/workflows/claude.yml | 4 ++-- .github/workflows/docs.yml | 8 ++++---- .github/workflows/gitleaks.yml | 2 +- .github/workflows/test.yml | 6 +++--- .github/workflows/uv-lockfile-report.yml | 2 +- 8 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/bump.yml b/.github/workflows/bump.yml index fc06a5a..4e6402d 100644 --- a/.github/workflows/bump.yml +++ b/.github/workflows/bump.yml @@ -14,18 +14,18 @@ jobs: contents: write steps: - name: Check out - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: token: "${{ secrets.GITHUB_TOKEN }}" fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 with: python-version: "3.14" - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.19" + version: "0.11.29" enable-cache: true - name: Sync dependencies run: uv sync --frozen @@ -54,7 +54,7 @@ jobs: git push origin "v${{ steps.cz.outputs.next_version }}" - name: Release if: ${{ steps.cz.outputs.next_version != steps.cz.outputs.previous_version }} - uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3 with: body_path: "body.md" tag_name: v${{ steps.cz.outputs.next_version }} diff --git a/.github/workflows/changelog-preview.yml b/.github/workflows/changelog-preview.yml index 129c35e..c60e9f7 100644 --- a/.github/workflows/changelog-preview.yml +++ b/.github/workflows/changelog-preview.yml @@ -19,20 +19,20 @@ jobs: steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0 fetch-tags: true - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 with: python-version: "3.14" - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.19" + version: "0.11.29" enable-cache: true - name: Sync dependencies diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 1abee2f..cfb252b 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -27,13 +27,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 1 - name: Run Claude Code Review id: claude-review - uses: anthropics/claude-code-action@593d7a5c4e0073569f74772c2b7b64c30ec14707 # v1 + uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} plugin_marketplaces: "https://github.com/anthropics/claude-code.git" diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 6540d4a..f3b5e98 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -26,13 +26,13 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 1 - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@593d7a5c4e0073569f74772c2b7b64c30ec14707 # v1 + uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 141353a..59f9e01 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -19,18 +19,18 @@ jobs: steps: - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6 - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: lfs: true - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.19" + version: "0.11.29" enable-cache: true - name: "Set up Python" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 with: python-version-file: "pyproject.toml" diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index cc8f110..70e0e77 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -7,7 +7,7 @@ jobs: name: gitleaks runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0 - uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b19f3bc..4ec7e6d 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -29,14 +29,14 @@ jobs: FORCE_COLOR: 1 steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 with: python-version: ${{ matrix.python-version }} - name: Load cached venv id: cached-uv-dependencies - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5 with: path: /tmp/.uv-cache key: uv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/uv.lock') }} diff --git a/.github/workflows/uv-lockfile-report.yml b/.github/workflows/uv-lockfile-report.yml index c7f2ed7..542ee66 100644 --- a/.github/workflows/uv-lockfile-report.yml +++ b/.github/workflows/uv-lockfile-report.yml @@ -13,7 +13,7 @@ jobs: report: runs-on: ubuntu-latest steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0