From ba4387df305a7931c85c49d5a884bee8d95a63f5 Mon Sep 17 00:00:00 2001 From: Randolph Sapp Date: Wed, 8 Jul 2026 16:30:43 -0500 Subject: [PATCH 1/2] ci: add dependabot configuration Add a dependabot configuration to automatically manage dependency updates. Should shift this from me to something I can review and unblock more consistently. Signed-off-by: Randolph Sapp --- .github/dependabot.yml | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000..0e2337304 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,29 @@ +--- +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: ".github/workflows" + schedule: + interval: "monthly" + cooldown: + default-days: 7 + commit-message: + prefix: "ci" + groups: + ci: + patterns: + - "*" + + - package-ecosystem: "pip" + directory: "docker" + schedule: + interval: "weekly" + day: "monday" + cooldown: + default-days: 7 + commit-message: + prefix: "build" + groups: + pip: + patterns: + - "*" From 2ebf8de826d02fc61ff58f647f002bcca1cabf84 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Jul 2026 22:17:42 +0000 Subject: [PATCH 2/2] ci: Bump the ci group in /.github/workflows with 12 updates Bumps the ci group in /.github/workflows with 12 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | | [commit-check/commit-check-action](https://github.com/commit-check/commit-check-action) | `2` | `2.10.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `5` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4` | `5` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4.1.0` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4.2.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5` | `6.1.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `5` | `7` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `46` | `47` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v9) Updates `commit-check/commit-check-action` from 2 to 2.10.0 - [Release notes](https://github.com/commit-check/commit-check-action/releases) - [Commits](https://github.com/commit-check/commit-check-action/compare/v2...v2.10.0) Updates `actions/upload-pages-artifact` from 3 to 5 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v5) Updates `actions/deploy-pages` from 4 to 5 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v4...v5) Updates `docker/setup-buildx-action` from 3 to 4.1.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4.1.0) Updates `docker/login-action` from 3 to 4.2.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4.2.0) Updates `docker/metadata-action` from 5 to 6.1.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/v5...v6.1.0) Updates `docker/build-push-action` from 5 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v5...v7) Updates `tj-actions/changed-files` from 46 to 47 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](https://github.com/tj-actions/changed-files/compare/v46...v47) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: commit-check/commit-check-action dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: actions/upload-pages-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: docker/setup-buildx-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: docker/metadata-action dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: tj-actions/changed-files dependency-version: '47' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 6 +++--- .github/workflows/check-files.yml | 4 ++-- .github/workflows/check_toc_txt.yml | 4 ++-- .github/workflows/comment.yml | 4 ++-- .github/workflows/commit-check.yml | 4 ++-- .github/workflows/deploy.yml | 8 ++++---- .github/workflows/docker.yml | 10 +++++----- .github/workflows/rstcheck.yml | 4 ++-- .github/workflows/vale.yml | 4 ++-- .github/workflows/yamllint.yml | 2 +- 10 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ad5bef3e6..efaf72ff8 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -27,7 +27,7 @@ jobs: build-matrix: "${{ steps.matrix.outputs.matrix }}" steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -49,7 +49,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -65,7 +65,7 @@ jobs: make VERSION=${GITHUB_REF_NAME} - name: Upload artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: ${{ matrix.device }}-${{ matrix.os }} path: build/ diff --git a/.github/workflows/check-files.yml b/.github/workflows/check-files.yml index 25094d377..06559767a 100644 --- a/.github/workflows/check-files.yml +++ b/.github/workflows/check-files.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -70,7 +70,7 @@ jobs: [ "$WARNING_COUNT" -eq "0" ] - name: Save results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: results diff --git a/.github/workflows/check_toc_txt.yml b/.github/workflows/check_toc_txt.yml index 7a6f17442..d61340578 100644 --- a/.github/workflows/check_toc_txt.yml +++ b/.github/workflows/check_toc_txt.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -71,7 +71,7 @@ jobs: [ "$WARNING_COUNT" -eq "0" ] - name: Save results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: results diff --git a/.github/workflows/comment.yml b/.github/workflows/comment.yml index 88bf508c4..d5d95d085 100644 --- a/.github/workflows/comment.yml +++ b/.github/workflows/comment.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Download artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: results run-id: ${{ github.event.workflow_run.id }} @@ -29,7 +29,7 @@ jobs: path: results - name: Update pr with info from other runners - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/commit-check.yml b/.github/workflows/commit-check.yml index 4105d0d16..64ff5cb3d 100644 --- a/.github/workflows/commit-check.yml +++ b/.github/workflows/commit-check.yml @@ -17,13 +17,13 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false - name: Check commit - uses: commit-check/commit-check-action@v2 + uses: commit-check/commit-check-action@v2.10.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index db9421d5d..066612ecc 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -35,7 +35,7 @@ jobs: git config --global --add safe.directory "$PWD" - name: Download all artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: github-token: ${{ secrets.GITHUB_TOKEN }} path: build @@ -49,7 +49,7 @@ jobs: run: ./bin/dedupe.py - name: Upload static files as single artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v5 with: path: build @@ -63,4 +63,4 @@ jobs: steps: - name: Update github page deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5 diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index dd3d62f42..1990815a7 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -29,15 +29,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4.1.0 - name: Log into registry ${{ env.REGISTRY }} - uses: docker/login-action@v3 + uses: docker/login-action@v4.2.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -45,7 +45,7 @@ jobs: - name: Extract Docker metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@v6.1.0 with: flavor: latest=true tags: | @@ -54,7 +54,7 @@ jobs: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} - name: Build and push Docker image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: platforms: linux/amd64 context: docker diff --git a/.github/workflows/rstcheck.yml b/.github/workflows/rstcheck.yml index bbb834dd3..14b1b265f 100644 --- a/.github/workflows/rstcheck.yml +++ b/.github/workflows/rstcheck.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false @@ -70,7 +70,7 @@ jobs: [ "$WARNING_COUNT" -eq "0" ] - name: Save results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: results diff --git a/.github/workflows/vale.yml b/.github/workflows/vale.yml index 1e3fc04ca..801dfb077 100644 --- a/.github/workflows/vale.yml +++ b/.github/workflows/vale.yml @@ -28,13 +28,13 @@ jobs: mkdir -p /github/home/ - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false - name: Get changed files id: changed-files - uses: tj-actions/changed-files@v46 + uses: tj-actions/changed-files@v47 with: json: true escape_json: false diff --git a/.github/workflows/yamllint.yml b/.github/workflows/yamllint.yml index 56a8ed1d8..f660b2944 100644 --- a/.github/workflows/yamllint.yml +++ b/.github/workflows/yamllint.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: persist-credentials: false