From 5c062b7796ece25df790eb424ffb7db8e95aabe4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 5 Sep 2026 07:06:49 +0000 Subject: [PATCH] chore: bump the actions group across 1 directory with 11 updates Bumps the actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `dd6e8fa51339814159486cd92b5ae3a051eb15d2` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.2` | `2.87.2` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/quarantine-policy.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/quarantine-prune.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/release-policy.yml](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `c56b0c1d1e82f5e3fffa733a32b9a503a172ee35` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/actions/pypi-publish-hardened](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/actions/pypi-publish-hardened/verify](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/npm-version-finalize.yml](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` | Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/dd6e8fa51339814159486cd92b5ae3a051eb15d2...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `taiki-e/install-action` from 2.86.2 to 2.87.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b6b84cf49ebfe0176417bdce007c624f0db37f20...1ed6d7be6168f6c9046541087ff549b6bc581fdf) Updates `stella/.github/.github/workflows/cla.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/48aacae31829ce15216a6b766b03a92fd2e84da3...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/workflows/quarantine-policy.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/699affd63b2d956f71b9833fbed239245aff7e86...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/workflows/quarantine-prune.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/699affd63b2d956f71b9833fbed239245aff7e86...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/workflows/release-policy.yml` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/0f814e1a0c6c7401778e661209553b6e15f8d92a...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/c56b0c1d1e82f5e3fffa733a32b9a503a172ee35...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/actions/pypi-publish-hardened` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/0f814e1a0c6c7401778e661209553b6e15f8d92a...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/actions/pypi-publish-hardened/verify` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/0f814e1a0c6c7401778e661209553b6e15f8d92a...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `stella/.github/.github/workflows/npm-version-finalize.yml` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/0f814e1a0c6c7401778e661209553b6e15f8d92a...7c43baa7e76584907c5b6e2876e1e9962a48518e) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938) --- updated-dependencies: - dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-policy.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-prune.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/release-policy.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/actions/pypi-publish-hardened dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/actions/pypi-publish-hardened/verify dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-finalize.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/autofix.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/cla.yml | 2 +- .github/workflows/mutants.yml | 2 +- .github/workflows/quarantine-policy.yml | 2 +- .github/workflows/quarantine-prune.yml | 2 +- .github/workflows/release-policy.yml | 2 +- .github/workflows/release-pr.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 10 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index c9fbcc4..9139822 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -15,4 +15,4 @@ permissions: jobs: dependabot-bun-dedupe: - uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@dd6e8fa51339814159486cd92b5ae3a051eb15d2 + uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1504dde..af322c7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -217,7 +217,7 @@ jobs: # snapshot-hygiene gate, `cargo ci-snapshot`); avoids a from-source # compile on every CI run. taiki-e/install-action verifies release # checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@1ed6d7be6168f6c9046541087ff549b6bc581fdf # v2.87.2 with: tool: nextest@0.9.140,cargo-deny@0.20.2,cargo-insta@1.48.0 diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 1daa833..b0b166c 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -27,7 +27,7 @@ jobs: || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' ) ) - uses: stella/.github/.github/workflows/cla.yml@48aacae31829ce15216a6b766b03a92fd2e84da3 + uses: stella/.github/.github/workflows/cla.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e with: allowlist: dependabot[bot],renovate[bot],github-actions[bot],google-labs-jules[bot],cursoragent secrets: diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml index 8b9ec1b..d3cda6c 100644 --- a/.github/workflows/mutants.yml +++ b/.github/workflows/mutants.yml @@ -34,7 +34,7 @@ jobs: - name: Install pinned Rust tools (checksum-verified) # nextest is the test runner used by cargo-mutants. taiki-e/install-action # verifies release checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@1ed6d7be6168f6c9046541087ff549b6bc581fdf # v2.87.2 with: tool: nextest@0.9.140,cargo-mutants@27.1.0 diff --git a/.github/workflows/quarantine-policy.yml b/.github/workflows/quarantine-policy.yml index fdf9a37..747793d 100644 --- a/.github/workflows/quarantine-policy.yml +++ b/.github/workflows/quarantine-policy.yml @@ -13,4 +13,4 @@ jobs: if: github.repository == 'stella/stdnum' permissions: contents: read - uses: stella/.github/.github/workflows/quarantine-policy.yml@699affd63b2d956f71b9833fbed239245aff7e86 + uses: stella/.github/.github/workflows/quarantine-policy.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e diff --git a/.github/workflows/quarantine-prune.yml b/.github/workflows/quarantine-prune.yml index 791aebe..0f52a5a 100644 --- a/.github/workflows/quarantine-prune.yml +++ b/.github/workflows/quarantine-prune.yml @@ -13,7 +13,7 @@ jobs: if: github.repository == 'stella/stdnum' permissions: contents: read - uses: stella/.github/.github/workflows/quarantine-prune.yml@699affd63b2d956f71b9833fbed239245aff7e86 + uses: stella/.github/.github/workflows/quarantine-prune.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/release-policy.yml b/.github/workflows/release-policy.yml index d8ced8f..ad0cf80 100644 --- a/.github/workflows/release-policy.yml +++ b/.github/workflows/release-policy.yml @@ -18,6 +18,6 @@ permissions: jobs: enforce: name: Enforce release boundaries - uses: stella/.github/.github/workflows/release-policy.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a + uses: stella/.github/.github/workflows/release-policy.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e permissions: contents: read diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index 14b64a4..ad7144f 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -15,7 +15,7 @@ jobs: name: Maintain version packages PR permissions: contents: read - uses: stella/.github/.github/workflows/changeset-release-pr.yml@c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 + uses: stella/.github/.github/workflows/changeset-release-pr.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e with: bun-version-file: package.json sync-cargo-inherited-lock: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index add6aeb..a043e2e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -331,7 +331,7 @@ jobs: id-token: write # Required only for PyPI trusted publishing. steps: - name: Prepare exact Python wheel set - uses: stella/.github/.github/actions/pypi-publish-hardened@0f814e1a0c6c7401778e661209553b6e15f8d92a + uses: stella/.github/.github/actions/pypi-publish-hardened@7c43baa7e76584907c5b6e2876e1e9962a48518e with: expected-version: ${{ needs.verify.outputs.version }} project-name: stella-stdnum @@ -344,7 +344,7 @@ jobs: packages-dir: dist skip-existing: true - name: Verify published PyPI files - uses: stella/.github/.github/actions/pypi-publish-hardened/verify@0f814e1a0c6c7401778e661209553b6e15f8d92a + uses: stella/.github/.github/actions/pypi-publish-hardened/verify@7c43baa7e76584907c5b6e2876e1e9962a48518e with: expected-version: ${{ needs.verify.outputs.version }} project-name: stella-stdnum @@ -354,7 +354,7 @@ jobs: needs: [verify, pack-native, pack-portable, publish-pypi] if: github.ref == 'refs/heads/main' && (needs.verify.outputs.publish == 'true') - uses: stella/.github/.github/workflows/npm-version-finalize.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a + uses: stella/.github/.github/workflows/npm-version-finalize.yml@7c43baa7e76584907c5b6e2876e1e9962a48518e with: package-files: | packages/stdnum/package.json diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e0dde25..6feab60 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,6 +30,6 @@ jobs: publish_results: true - name: Upload SARIF to GitHub Security tab - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: sarif_file: results.sarif