From aa8193e1dc08ad86ca0042d00242a50599a3b9aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 7 Nov 2026 12:56:52 +0000 Subject: [PATCH] build(deps): bump the actions-minor-and-patch group across 1 directory with 5 updates Bumps the actions-minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.3.1` | `10.3.3` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.39.1` | `4.39.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.39.1` | `4.39.3` | | [helm/kind-action](https://github.com/helm/kind-action) | `1.15.1` | `1.15.2` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.31` | `2.90.1` | Updates `astral-sh/setup-uv` from 10.3.1 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2) Updates `github/codeql-action/init` from 4.39.1 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `github/codeql-action/analyze` from 4.39.1 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `helm/kind-action` from 1.15.1 to 1.15.2 - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](https://github.com/helm/kind-action/compare/1544676c07bb3570fcb70166beaa07c4528fd4aa...ea822c7bf1874f08e5a491df991c228edffc3376) Updates `taiki-e/install-action` from 2.87.31 to 2.90.1 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/1e29709c0ec63babbe8f266397a465f29a825f91...c509219cf42fba86913069efd0ade2458c59337b) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: github/codeql-action/init dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: github/codeql-action/analyze dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: helm/kind-action dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-and-patch - dependency-name: taiki-e/install-action dependency-version: 2.90.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-and-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/containers.yml | 2 +- .github/workflows/full-ci.yml | 6 +++--- .github/workflows/packaging.yml | 2 +- .github/workflows/prepare-release.yml | 2 +- .github/workflows/publish-sdks.yml | 2 +- .github/workflows/quality.yml | 4 ++-- .github/workflows/security.yml | 6 +++--- 9 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f6d06b43..6efdd891 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -165,7 +165,7 @@ jobs: - name: TypeScript SDK working-directory: sdk/typescript run: npm ci && npm run check - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Python SDK working-directory: sdk/python run: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 1332f193..130f944c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -43,7 +43,7 @@ jobs: with: go-version-file: services/agent-orchestrator/go.mod cache-dependency-path: services/agent-orchestrator/go.sum - - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + - uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -53,7 +53,7 @@ jobs: name: Build the orchestrator working-directory: services/agent-orchestrator run: go build ./... - - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + - uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 id: analyze with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/containers.yml b/.github/workflows/containers.yml index d9117d3a..765c8e46 100644 --- a/.github/workflows/containers.yml +++ b/.github/workflows/containers.yml @@ -334,7 +334,7 @@ jobs: run: | docker load < artifacts/server-image.tar.gz chmod +x artifacts/ag - - uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # v1.15.1 + - uses: helm/kind-action@ea822c7bf1874f08e5a491df991c228edffc3376 # v1.15.2 with: version: v0.30.0 node_image: kindest/node:v1.33.4 diff --git a/.github/workflows/full-ci.yml b/.github/workflows/full-ci.yml index 539ca4ba..bc99ec61 100644 --- a/.github/workflows/full-ci.yml +++ b/.github/workflows/full-ci.yml @@ -300,7 +300,7 @@ jobs: - name: TypeScript SDK (generate:check, types, lint, tests against the real server, package) working-directory: sdk/typescript run: npm ci && AG_SERVER_BIN=$GITHUB_WORKSPACE/target/debug/ag-server npm run check - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Python SDK (tests against the real server, ruff, mypy, generated code) working-directory: sdk/python run: | @@ -358,7 +358,7 @@ jobs: working-directory: sdk/typescript run: npm ci && AG_SERVER_BIN=$GITHUB_WORKSPACE/target/debug/ag-server npm test - if: matrix.kind == 'python' - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - if: matrix.kind == 'python' name: Python SDK tests working-directory: sdk/python @@ -510,7 +510,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Python 3.9 with PyYAML run: | uv venv --python 3.9 "$RUNNER_TEMP/py39" diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml index a1ca5eec..d2239a76 100644 --- a/.github/workflows/packaging.yml +++ b/.github/workflows/packaging.yml @@ -139,7 +139,7 @@ jobs: npm pack --pack-destination "$RUNNER_TEMP/npm" tar -tzf "$RUNNER_TEMP"/npm/*.tgz | sort npm publish --dry-run --access public - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Python SDK - build and twine check working-directory: sdk/python run: | diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml index 190c3115..2c8540e8 100644 --- a/.github/workflows/prepare-release.yml +++ b/.github/workflows/prepare-release.yml @@ -193,7 +193,7 @@ jobs: - uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master with: toolchain: stable - - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + - uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # v2.90.1 with: tool: cargo-cyclonedx@0.5.9 # The same script the Security workflow runs on every change (so a break shows up there, not at release time). diff --git a/.github/workflows/publish-sdks.yml b/.github/workflows/publish-sdks.yml index ab19a636..5e1de0f8 100644 --- a/.github/workflows/publish-sdks.yml +++ b/.github/workflows/publish-sdks.yml @@ -83,7 +83,7 @@ jobs: npm run check mkdir -p ../../dist/npm npm pack --pack-destination ../../dist/npm - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Python SDK working-directory: sdk/python run: | diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index d4abee15..73fd3356 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -43,7 +43,7 @@ jobs: with: cache-workspace-crates: true key: coverage - - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + - uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # v2.90.1 with: tool: cargo-llvm-cov@0.9.1 # The same environment as the test job of ci.yml: the namespace sandbox suites must run, not skip. @@ -106,7 +106,7 @@ jobs: cache-workspace-crates: true key: mutation-${{ matrix.crate }} - if: steps.pick.outputs.run == 'true' - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # v2.90.1 with: tool: cargo-mutants@27.1.0 - if: steps.pick.outputs.run == 'true' diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 2cc82d25..2d15e092 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -109,7 +109,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1 + - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - name: Audit the locked runtime dependencies working-directory: sdk/python run: | @@ -203,7 +203,7 @@ jobs: - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: cache-workspace-crates: true - - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + - uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # v2.90.1 with: tool: cargo-cyclonedx@0.5.9 - name: One CycloneDX SBOM per shipped binary and one for the web UI @@ -241,7 +241,7 @@ jobs: - uses: Swatinem/rust-cache@d1527c8f67ef9af357290475d4af4b0fab8f12e0 # v2.9.3 with: cache-workspace-crates: true - - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + - uses: taiki-e/install-action@c509219cf42fba86913069efd0ade2458c59337b # v2.90.1 with: tool: cargo-about@0.9.2 - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0