From 1cf3c488035eee97cc6046bc09ef1979dde39426 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 7 Jul 2026 05:08:40 +0000 Subject: [PATCH] chore(deps)(deps): bump the github-actions group across 1 directory with 11 updates Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza/.github/workflows/rhiza_book.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza/.github/workflows/rhiza_ci.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` | | [actions/attest](https://github.com/actions/attest) | `4.1.0` | `4.1.1` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [jebel-quant/rhiza/.github/workflows/rhiza_sync.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | | [jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml](https://github.com/jebel-quant/rhiza) | `0.19.1` | `0.19.9` | Updates `jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza/.github/workflows/rhiza_book.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza/.github/workflows/rhiza_ci.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `actions/setup-python` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6.2.0...v6.3.0) Updates `actions/attest` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.1.0...v4.1.1) Updates `docker/login-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.2.0...v4.4.0) Updates `jebel-quant/rhiza/.github/workflows/rhiza_sync.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) Updates `jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml` from 0.19.1 to 0.19.9 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v0.19.1...v0.19.9) --- updated-dependencies: - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_book.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml dependency-version: 0.19.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/rhiza_benchmark.yml | 2 +- .github/workflows/rhiza_book.yml | 2 +- .github/workflows/rhiza_ci.yml | 2 +- .github/workflows/rhiza_codeql.yml | 2 +- .github/workflows/rhiza_marimo.yml | 2 +- .github/workflows/rhiza_release.yml | 12 ++++++------ .github/workflows/rhiza_sync.yml | 2 +- .github/workflows/rhiza_weekly.yml | 2 +- 8 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/rhiza_benchmark.yml b/.github/workflows/rhiza_benchmark.yml index 66377c4..40ef5fb 100644 --- a/.github/workflows/rhiza_benchmark.yml +++ b/.github/workflows/rhiza_benchmark.yml @@ -20,5 +20,5 @@ on: jobs: benchmark: - uses: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml@v0.19.9 secrets: inherit diff --git a/.github/workflows/rhiza_book.yml b/.github/workflows/rhiza_book.yml index a4d42aa..e31dac8 100644 --- a/.github/workflows/rhiza_book.yml +++ b/.github/workflows/rhiza_book.yml @@ -24,7 +24,7 @@ on: jobs: book: - uses: jebel-quant/rhiza/.github/workflows/rhiza_book.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_book.yml@v0.19.9 secrets: inherit permissions: contents: read diff --git a/.github/workflows/rhiza_ci.yml b/.github/workflows/rhiza_ci.yml index 2e22316..a54003d 100644 --- a/.github/workflows/rhiza_ci.yml +++ b/.github/workflows/rhiza_ci.yml @@ -21,5 +21,5 @@ on: jobs: ci: - uses: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml@v0.19.9 secrets: inherit diff --git a/.github/workflows/rhiza_codeql.yml b/.github/workflows/rhiza_codeql.yml index ad83c34..56b5bdd 100644 --- a/.github/workflows/rhiza_codeql.yml +++ b/.github/workflows/rhiza_codeql.yml @@ -29,5 +29,5 @@ on: jobs: codeql: - uses: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml@v0.19.9 secrets: inherit diff --git a/.github/workflows/rhiza_marimo.yml b/.github/workflows/rhiza_marimo.yml index cd7f1a4..4fb4866 100644 --- a/.github/workflows/rhiza_marimo.yml +++ b/.github/workflows/rhiza_marimo.yml @@ -28,5 +28,5 @@ on: jobs: marimo: - uses: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml@v0.19.9 secrets: inherit diff --git a/.github/workflows/rhiza_release.yml b/.github/workflows/rhiza_release.yml index 26d8fb8..d59858e 100644 --- a/.github/workflows/rhiza_release.yml +++ b/.github/workflows/rhiza_release.yml @@ -207,7 +207,7 @@ jobs: version: "0.11.16" - name: Configure git auth for private packages - uses: jebel-quant/rhiza/.github/actions/configure-git-auth@v0.19.1 + uses: jebel-quant/rhiza/.github/actions/configure-git-auth@v0.19.9 with: token: ${{ secrets.GH_PAT }} @@ -246,7 +246,7 @@ jobs: - name: Install Python for SBOM generation if: hashFiles('pyproject.toml') != '' - uses: actions/setup-python@v6.2.0 + uses: actions/setup-python@v6.3.0 with: python-version-file: .python-version @@ -271,7 +271,7 @@ jobs: # Attest only the JSON format as it's the canonical machine-readable format. # The XML format is provided for compatibility but doesn't need separate attestation. if: hashFiles('pyproject.toml') != '' && github.event.repository.private == false - uses: actions/attest@v4.1.0 + uses: actions/attest@v4.1.1 with: subject-path: sbom.cdx.json sbom-path: sbom.cdx.json @@ -440,7 +440,7 @@ jobs: - name: Set up Python if: steps.check_conda.outputs.should_generate == 'true' - uses: actions/setup-python@v6.2.0 + uses: actions/setup-python@v6.3.0 with: python-version-file: .python-version @@ -512,7 +512,7 @@ jobs: - name: Login to Container Registry if: steps.check_publish.outputs.should_publish == 'true' - uses: docker/login-action@v4.2.0 + uses: docker/login-action@v4.4.0 with: registry: ${{ steps.registry.outputs.registry }} username: ${{ github.repository_owner }} @@ -585,7 +585,7 @@ jobs: uv sync --all-extras --all-groups --frozen - name: Set up Python - uses: actions/setup-python@v6.2.0 + uses: actions/setup-python@v6.3.0 - name: Generate Devcontainer Link id: devcontainer_link diff --git a/.github/workflows/rhiza_sync.yml b/.github/workflows/rhiza_sync.yml index 4065e7c..45d0bae 100644 --- a/.github/workflows/rhiza_sync.yml +++ b/.github/workflows/rhiza_sync.yml @@ -36,7 +36,7 @@ on: jobs: sync: - uses: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml@v0.19.9 with: direct: ${{ github.event_name == 'push' }} create-pr: ${{ github.event_name != 'push' && (github.event_name == 'schedule' || inputs.create-pr == true) }} diff --git a/.github/workflows/rhiza_weekly.yml b/.github/workflows/rhiza_weekly.yml index 0e05337..7b03886 100644 --- a/.github/workflows/rhiza_weekly.yml +++ b/.github/workflows/rhiza_weekly.yml @@ -28,5 +28,5 @@ on: jobs: weekly: - uses: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml@v0.19.1 + uses: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml@v0.19.9 secrets: inherit