Skip to content

chore(deps): bump the github-actions group with 5 updates #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the github-actions group with 5 updates #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions .github/workflows/benchmark-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,8 +35,8 @@ jobs:
CODEROOK_LLM_API_KEY_ENV: CODEROOK_RELEASE_API_KEY
CODEROOK_RELEASE_API_KEY: ${{ secrets[matrix.secret] }}
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -51,7 +51,7 @@ jobs:
uv run python scripts/run_benchmark.py --suite release
--report-only
--output .benchmark-results/${{ matrix.route }}-${{ matrix.repeat }}
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
if: always()
with:
name: benchmark-${{ matrix.route }}-${{ matrix.repeat }}
Expand All @@ -65,14 +65,14 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
- run: uv python install 3.12
- run: uv sync --frozen
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
pattern: benchmark-*
path: .benchmark-results/raw
Expand All @@ -94,7 +94,7 @@ jobs:
--min-read-only-pass-rate 0.90
--min-security-pass-rate 1.0
--max-pass-rate-spread 0.10
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
if: always()
with:
name: benchmark-release-aggregate
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,9 +20,9 @@ jobs:
timeout-minutes: 10

steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7

- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -33,7 +33,7 @@ jobs:
- name: Sync locked environment
run: uv sync --frozen

- uses: actions/setup-node@v6
- uses: actions/setup-node@v7
with:
node-version: 24
cache: npm
Expand Down
14 changes: 7 additions & 7 deletions .github/workflows/crash-recovery.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ jobs:
os: [ubuntu-latest, windows-latest, macos-latest]

steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7

- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -37,7 +37,7 @@ jobs:
--min-rate 0.95
--output reports/crash-recovery.json

- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
if: always()
with:
name: crash-recovery-${{ matrix.os }}
Expand All @@ -51,9 +51,9 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7

- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -65,7 +65,7 @@ jobs:
run: uv sync --frozen

- name: Download platform reports
uses: actions/download-artifact@v7
uses: actions/download-artifact@v8
continue-on-error: true
with:
pattern: crash-recovery-*
Expand All @@ -80,7 +80,7 @@ jobs:
--min-rate 0.95
--output reports/aggregate/crash-recovery-aggregate.json

- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
if: always()
with:
name: crash-recovery-aggregate
Expand Down
22 changes: 11 additions & 11 deletions .github/workflows/distribution.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,16 +36,16 @@ jobs:
matrix:
os: [ubuntu-latest, windows-latest, macos-latest]
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
- run: uv python install 3.12
- run: uv sync --frozen
- run: uv build
- run: uv run python scripts/smoke_wheel.py dist
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: wheel-${{ matrix.os }}
path: dist/*
Expand All @@ -57,7 +57,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
- run: docker build --tag coderook:candidate .
- run: docker run --rm coderook:candidate coderook --version
- name: Container zero-credential Core, ping and TUI smoke
Expand Down Expand Up @@ -92,8 +92,8 @@ jobs:
target: macos-arm64
archive: coderook-macos-arm64.tar.gz
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -120,7 +120,7 @@ jobs:
run: >-
./dist/coderook-${{ matrix.target }}/runtime/bin/python3.12
./scripts/smoke_installed_runtime.py
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: coderook-portable-${{ matrix.target }}
path: dist/${{ matrix.archive }}
Expand All @@ -132,14 +132,14 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 20
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
- run: uv python install 3.12
- run: uv sync --frozen
- uses: actions/setup-node@v6
- uses: actions/setup-node@v7
with:
node-version: 22
cache: npm
Expand All @@ -156,7 +156,7 @@ jobs:
--screenshot artifacts/vscode-approval.png
- working-directory: editors/vscode
run: npm run check && npm run package
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: coderook-vscode
path: |
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/mcp-interop.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,8 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -27,7 +27,7 @@ jobs:
run: >-
uv run --no-sync python scripts/run_mcp_official_interop.py
--output-dir .interop-results/mcp
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: mcp-official-interop
path: .interop-results/mcp/*
Expand Down
20 changes: 10 additions & 10 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,10 +23,10 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
with:
fetch-depth: 0
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand Down Expand Up @@ -54,7 +54,7 @@ jobs:
env:
IMAGE: ghcr.io/${{ github.repository }}
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
- uses: docker/login-action@v4
with:
registry: ghcr.io
Expand Down Expand Up @@ -114,7 +114,7 @@ jobs:
sbom-path: container-metadata/coderook-container.spdx.json
push-to-registry: true
create-storage-record: false
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: coderook-container
path: container-metadata/*
Expand All @@ -130,7 +130,7 @@ jobs:
name: pypi
url: https://pypi.org/p/CodeRook
steps:
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: wheel-ubuntu-latest
path: dist
Expand All @@ -147,22 +147,22 @@ jobs:
attestations: write
artifact-metadata: write
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
with:
fetch-depth: 0
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
- run: uv python install 3.12
- run: uv sync --frozen
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: wheel-ubuntu-latest
path: release
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
pattern: coderook-portable-*
path: release
merge-multiple: true
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: coderook-container
path: release
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/remote-evidence.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,8 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
with:
enable-cache: true
cache-dependency-glob: uv.lock
Expand All @@ -27,7 +27,7 @@ jobs:
uv run python scripts/audit_github_release_evidence.py
--repo "$GITHUB_REPOSITORY"
--output reports/github-release-evidence.json
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
if: always()
with:
name: github-release-evidence
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/security.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,8 @@ jobs:
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
steps:
- uses: actions/checkout@v6
- uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
- name: Install Python
run: uv python install 3.12
- name: Sync locked environment
Expand All @@ -32,7 +32,7 @@ jobs:
--output reports/sandbox-boundary-${{ runner.os }}.json
- name: Upload sandbox evidence
if: always()
uses: actions/upload-artifact@v6
uses: actions/upload-artifact@v7
with:
name: sandbox-boundary-${{ runner.os }}
path: reports/sandbox-boundary-${{ runner.os }}.json
Expand All @@ -47,7 +47,7 @@ jobs:
contents: read
pull-requests: write
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
with:
fetch-depth: 0
- uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0
Expand All @@ -68,7 +68,7 @@ jobs:
matrix:
language: [python, javascript-typescript]
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@v7
- uses: github/codeql-action/init@v4
with:
languages: ${{ matrix.language }}
Expand Down