From 45df3ff8900e8e9cadb5e93f6dc8ea680c9ff775 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 02:11:45 +0000 Subject: [PATCH] chore: bump the actions group with 7 updates Bumps the actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.2.0` | `9.0.0` | | [canonical/oci-factory/.github/workflows/Build-Rock.yaml](https://github.com/canonical/oci-factory) | `de55cd493720fc91cf5b629a34a10b3be7b0434a` | `26adc1d6d1458dad6cb4176ed077def7b3ed1fcd` | | [canonical/oci-factory/.github/workflows/Test-Rock.yaml](https://github.com/canonical/oci-factory) | `de55cd493720fc91cf5b629a34a10b3be7b0434a` | `26adc1d6d1458dad6cb4176ed077def7b3ed1fcd` | | [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` | | [canonical/oci-factory/.github/actions/upload-rock](https://github.com/canonical/oci-factory) | `de55cd493720fc91cf5b629a34a10b3be7b0434a` | `26adc1d6d1458dad6cb4176ed077def7b3ed1fcd` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.3` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `astral-sh/setup-uv` from 8.2.0 to 9.0.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/fac544c07dec837d0ccb6301d7b5580bf5edae39...c771a70e6277c0a99b617c7a806ffedaca235ff9) Updates `canonical/oci-factory/.github/workflows/Build-Rock.yaml` from de55cd493720fc91cf5b629a34a10b3be7b0434a to 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd - [Release notes](https://github.com/canonical/oci-factory/releases) - [Commits](https://github.com/canonical/oci-factory/compare/de55cd493720fc91cf5b629a34a10b3be7b0434a...26adc1d6d1458dad6cb4176ed077def7b3ed1fcd) Updates `canonical/oci-factory/.github/workflows/Test-Rock.yaml` from de55cd493720fc91cf5b629a34a10b3be7b0434a to 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd - [Release notes](https://github.com/canonical/oci-factory/releases) - [Commits](https://github.com/canonical/oci-factory/compare/de55cd493720fc91cf5b629a34a10b3be7b0434a...26adc1d6d1458dad6cb4176ed077def7b3ed1fcd) Updates `actions/attest` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/a1948c3f048ba23858d222213b7c278aabede763...f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6) Updates `canonical/oci-factory/.github/actions/upload-rock` from de55cd493720fc91cf5b629a34a10b3be7b0434a to 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd - [Release notes](https://github.com/canonical/oci-factory/releases) - [Commits](https://github.com/canonical/oci-factory/compare/de55cd493720fc91cf5b629a34a10b3be7b0434a...26adc1d6d1458dad6cb4176ed077def7b3ed1fcd) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: canonical/oci-factory/.github/workflows/Build-Rock.yaml dependency-version: 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd dependency-type: direct:production dependency-group: actions - dependency-name: canonical/oci-factory/.github/workflows/Test-Rock.yaml dependency-version: 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd dependency-type: direct:production dependency-group: actions - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: canonical/oci-factory/.github/actions/upload-rock dependency-version: 26adc1d6d1458dad6cb4176ed077def7b3ed1fcd dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dependency-review.yaml | 2 +- .github/workflows/integration-test.yaml | 2 +- .github/workflows/lint.yaml | 4 ++-- .github/workflows/publish.yaml | 10 +++++----- .github/workflows/security.yaml | 4 ++-- .github/workflows/validate-pr-title.yaml | 2 +- .github/workflows/version-check.yaml | 4 ++-- .github/workflows/zizmor.yaml | 6 +++--- 8 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index c448192..fb9018a 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -14,7 +14,7 @@ jobs: contents: read steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Dependency review diff --git a/.github/workflows/integration-test.yaml b/.github/workflows/integration-test.yaml index 2ddc943..5f1f886 100644 --- a/.github/workflows/integration-test.yaml +++ b/.github/workflows/integration-test.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 8ca2945..f99ac3e 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -12,10 +12,10 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Lint the code run: make lint diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 5151234..539220e 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -37,7 +37,7 @@ jobs: needs: [prepare] strategy: matrix: ${{ fromJSON(needs.prepare.outputs.build-matrix) }} - uses: canonical/oci-factory/.github/workflows/Build-Rock.yaml@de55cd493720fc91cf5b629a34a10b3be7b0434a # memcached_1.6-26.04_35 + uses: canonical/oci-factory/.github/workflows/Build-Rock.yaml@26adc1d6d1458dad6cb4176ed077def7b3ed1fcd # memcached_1.6-26.04_35 with: rock-repo: ${{ github.event.pull_request.head.repo.full_name || github.repository }} rock-repo-commit: ${{ github.head_ref || github.ref_name }} @@ -55,7 +55,7 @@ jobs: strategy: fail-fast: false matrix: ${{ fromJSON(needs.prepare.outputs.build-matrix) }} - uses: canonical/oci-factory/.github/workflows/Test-Rock.yaml@de55cd493720fc91cf5b629a34a10b3be7b0434a # memcached_1.6-26.04_35 + uses: canonical/oci-factory/.github/workflows/Test-Rock.yaml@26adc1d6d1458dad6cb4176ed077def7b3ed1fcd # memcached_1.6-26.04_35 with: oci-archive-name: ${{ matrix.artifact-name }} @@ -87,12 +87,12 @@ jobs: upload-release-assets: false - name: Attest build provenance - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: ./rock/${{ matrix.artifact-name }} - name: Attest SBOM - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: ./rock/${{ matrix.artifact-name }} sbom-path: ./sbom.spdx.json @@ -114,7 +114,7 @@ jobs: packages: write steps: - name: Upload Rock to GHCR - uses: canonical/oci-factory/.github/actions/upload-rock@de55cd493720fc91cf5b629a34a10b3be7b0434a # memcached_1.6-26.04_35 + uses: canonical/oci-factory/.github/actions/upload-rock@26adc1d6d1458dad6cb4176ed077def7b3ed1fcd # memcached_1.6-26.04_35 with: artifact_name: ${{ matrix.artifact-name }} tags: ${{ matrix.tag }} diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index aaf5dc7..077a649 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Export locked dependencies (excluding this project) run: uv export --frozen --no-emit-project --no-hashes --format requirements-txt -o requirements.txt - name: Run pip-audit diff --git a/.github/workflows/validate-pr-title.yaml b/.github/workflows/validate-pr-title.yaml index 4b03817..9f83240 100644 --- a/.github/workflows/validate-pr-title.yaml +++ b/.github/workflows/validate-pr-title.yaml @@ -13,7 +13,7 @@ jobs: name: Validate PR title runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - run: python3 .github/check-conventional-pr-title.py diff --git a/.github/workflows/version-check.yaml b/.github/workflows/version-check.yaml index 2bce68d..9528e4e 100644 --- a/.github/workflows/version-check.yaml +++ b/.github/workflows/version-check.yaml @@ -12,11 +12,11 @@ jobs: version-check: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Check that all versions match run: | set -euo pipefail diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 0d7fc02..4c87f31 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -15,12 +15,12 @@ jobs: security-events: write steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Run zizmor run: uvx zizmor@v1.23.1 --format=sarif . > results.sarif @@ -28,7 +28,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: sarif_file: results.sarif category: zizmor