Skip to content

Commit c9a9c31

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the gh-actions group across 1 directory with 13 updates
Bumps the gh-actions group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.8.1` | `0.9.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `7.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.2.0` | `3.7.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.7.1` | `3.12.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.5.1` | `5.10.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.9.0` | `6.18.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1.4.3` | `3.1.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `4` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.5` | `8.0.0` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v6) Updates `prefix-dev/setup-pixi` from 0.8.1 to 0.9.3 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](prefix-dev/setup-pixi@v0.8.1...v0.9.3) Updates `actions/upload-artifact` from 4 to 6 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v6) Updates `actions/download-artifact` from 4.1.8 to 7.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@fa0a91b...37930b1) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) Updates `docker/setup-qemu-action` from 3.2.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@49b3bc8...c7c5346) Updates `docker/setup-buildx-action` from 3.7.1 to 3.12.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@c47758b...8d2750c) Updates `docker/login-action` from 3.3.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@9780b0c...5e57cd1) Updates `docker/metadata-action` from 5.5.1 to 5.10.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@8e5442c...c299e40) Updates `docker/build-push-action` from 6.9.0 to 6.18.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@4f58ea7...2634353) Updates `actions/attest-build-provenance` from 1.4.3 to 3.1.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@1c608d1...00014ed) Updates `actions/upload-pages-artifact` from 3 to 4 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v4) Updates `peter-evans/create-pull-request` from 7.0.5 to 8.0.0 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@5e91468...98357b1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: prefix-dev/setup-pixi dependency-version: 0.9.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: actions/upload-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: docker/setup-buildx-action dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: docker/metadata-action dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: docker/build-push-action dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions - dependency-name: actions/attest-build-provenance dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/upload-pages-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 710fc09 commit c9a9c31

5 files changed

Lines changed: 26 additions & 26 deletions

File tree

‎.github/workflows/build.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -11,19 +11,19 @@ jobs:
1111
build:
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
14+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
1515
with:
1616
fetch-depth: 0
1717
- name: Set up pixi
18-
uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
18+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
1919
with:
2020
environments: build
2121
- name: Build project
2222
run: pixi run -e build build-wheel
2323
- name: Check package
2424
run: pixi run -e build check-wheel
2525
- name: Upload package
26-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
26+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
2727
with:
2828
name: artifact
2929
path: dist/*
@@ -37,7 +37,7 @@ jobs:
3737
id-token: write
3838
environment: pypi
3939
steps:
40-
- uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
40+
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
4141
with:
4242
name: artifact
4343
path: dist

‎.github/workflows/ci.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
code_change: ${{ steps.filter.outputs.code }}
2121
matrix: ${{ env.MATRIX }}
2222
steps:
23-
- uses: actions/checkout@v4
23+
- uses: actions/checkout@v6
2424
if: github.event_name != 'pull_request'
2525
- name: Check for code changes
2626
uses: dorny/paths-filter@v3
@@ -81,9 +81,9 @@ jobs:
8181
runs-on: ubuntu-latest
8282
steps:
8383
- name: Checkout branch
84-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
84+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
8585
- name: Set up pixi
86-
uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
86+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
8787
with:
8888
environments: default lint
8989
- name: pre-commit
@@ -103,11 +103,11 @@ jobs:
103103
- windows-latest
104104
steps:
105105
- name: Checkout branch
106-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
106+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
107107
with:
108108
fetch-depth: 0
109109
- name: Set up pixi
110-
uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
110+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
111111
with:
112112
environments: ${{ matrix.environment }}
113113
- name: Install repository
@@ -130,17 +130,17 @@ jobs:
130130
PANEL_LOG_LEVEL: info
131131
steps:
132132
- name: Checkout branch
133-
uses: actions/checkout@v4.2.2
133+
uses: actions/checkout@v6
134134
with:
135135
fetch-depth: 0
136136

137137
- name: Set up Pixi
138-
uses: prefix-dev/setup-pixi@v0.8.1
138+
uses: prefix-dev/setup-pixi@v0.9.4
139139
with:
140140
environments: ${{ matrix.environment }}
141141

142142
- name: Set up Python
143-
uses: actions/setup-python@v5
143+
uses: actions/setup-python@v6
144144
with:
145145
python-version: '3.11'
146146

@@ -163,7 +163,7 @@ jobs:
163163
shell: bash
164164

165165
- name: Upload UI Screenshots
166-
uses: actions/upload-artifact@v4
166+
uses: actions/upload-artifact@v6
167167
if: always()
168168
with:
169169
name: ui_screenshots_${{ runner.os }}

‎.github/workflows/docker.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout repository
28-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
28+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2929
with:
3030
fetch-depth: 0
3131

@@ -46,10 +46,10 @@ jobs:
4646
sudo docker image prune --all --force
4747
4848
- name: Set up QEMU
49-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
49+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
5050

5151
- name: Set up Docker Buildx
52-
uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
52+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
5353

5454
# Note: Fork detection is intentionally NOT implemented here.
5555
# Unlike the docs workflow, we allow forks to push to their own GHCR instances
@@ -58,15 +58,15 @@ jobs:
5858
# Each fork pushes to ghcr.io/<fork-owner>/holoviz-mcp, not the upstream registry.
5959
- name: Log in to GitHub Container Registry
6060
if: github.event_name != 'pull_request'
61-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
61+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
6262
with:
6363
registry: ${{ env.REGISTRY }}
6464
username: ${{ github.actor }}
6565
password: ${{ secrets.GITHUB_TOKEN }}
6666

6767
- name: Extract metadata (tags, labels)
6868
id: meta
69-
uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
69+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
7070
with:
7171
images: ${{ env.REGISTRY }}/${{ steps.image-name.outputs.IMAGE_NAME }}
7272
tags: |
@@ -93,7 +93,7 @@ jobs:
9393
9494
- name: Build and push Docker image
9595
id: build-and-push
96-
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
96+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
9797
with:
9898
context: .
9999
file: ./Dockerfile
@@ -119,7 +119,7 @@ jobs:
119119
120120
- name: Generate artifact attestation
121121
if: github.event_name != 'pull_request'
122-
uses: actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c # v1.4.3
122+
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
123123
with:
124124
subject-name: ${{ env.REGISTRY }}/${{ steps.image-name.outputs.IMAGE_NAME }}
125125
subject-digest: ${{ steps.build-and-push.outputs.digest }}

‎.github/workflows/docs.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,20 +26,20 @@ jobs:
2626
runs-on: ubuntu-latest
2727

2828
steps:
29-
- uses: actions/checkout@v4
29+
- uses: actions/checkout@v6
3030
with:
3131
fetch-depth: 0
3232

3333
- name: Set up Pixi
34-
uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
34+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
3535
with:
3636
environments: docs
3737

3838
- name: Build documentation
3939
run: pixi run -e docs build
4040

4141
- name: Upload artifact
42-
uses: actions/upload-pages-artifact@v3
42+
uses: actions/upload-pages-artifact@v4
4343
with:
4444
path: ./site
4545

‎.github/workflows/update-lockfiles.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,16 +12,16 @@ jobs:
1212
pixi-update:
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
15+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
1616
- name: Set up pixi
17-
uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
17+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
1818
with:
1919
run-install: false
2020
- name: Update lockfiles
2121
run: |
2222
pixi update --json --no-install | pixi exec pixi-diff-to-markdown >> diff.md
2323
- name: Create pull request
24-
uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
24+
uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
2525
with:
2626
token: ${{ secrets.GITHUB_TOKEN }}
2727
commit-message: Update pixi lockfile

0 commit comments

Comments
 (0)