From c360b4fc0a89f4da4324945c32f47a9f9aa045a0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 13:22:30 +0000 Subject: [PATCH] chore(ci)(deps): bump the github-actions group across 1 directory with 6 updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `7` | | [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) | `3.1.0` | `3.3.0` | | [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file) | `5` | `6` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.92.4` | `3.92.5` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `1` | `2` | Updates `actions/upload-artifact` from 4 to 6 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v6) Updates `actions/download-artifact` from 4 to 7 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v7) Updates `hadolint/hadolint-action` from 3.1.0 to 3.3.0 - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](https://github.com/hadolint/hadolint-action/compare/v3.1.0...v3.3.0) Updates `peter-evans/create-issue-from-file` from 5 to 6 - [Release notes](https://github.com/peter-evans/create-issue-from-file/releases) - [Commits](https://github.com/peter-evans/create-issue-from-file/compare/v5...v6) Updates `trufflesecurity/trufflehog` from 3.92.4 to 3.92.5 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.92.4...v3.92.5) Updates `actions/create-github-app-token` from 1 to 2 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v1...v2) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: hadolint/hadolint-action dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/create-issue-from-file dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.92.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/create-github-app-token dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/advanced-metrics.yml | 2 +- .github/workflows/ci-tests.yml | 4 ++-- .github/workflows/dev-containers.yml | 2 +- .github/workflows/dev-pypi.yml | 2 +- .github/workflows/health-monitoring.yml | 4 ++-- .github/workflows/reusable-test.yml | 2 +- .github/workflows/security-code.yml | 2 +- .github/workflows/semantic-release.yml | 2 +- .github/workflows/test-matrix.yml | 2 +- 9 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/advanced-metrics.yml b/.github/workflows/advanced-metrics.yml index 81e7db268..ab3e6f57d 100644 --- a/.github/workflows/advanced-metrics.yml +++ b/.github/workflows/advanced-metrics.yml @@ -158,7 +158,7 @@ jobs: color: blue - name: Upload coverage report - uses: actions/upload-artifact@v4.4.3 + uses: actions/upload-artifact@v6 with: name: coverage-report retention-days: 30 diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml index 4e1d542b7..7fefc7fff 100644 --- a/.github/workflows/ci-tests.yml +++ b/.github/workflows/ci-tests.yml @@ -77,7 +77,7 @@ jobs: run: make build - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v6 with: name: build-artifacts-${{ needs.config.outputs.package-version }} retention-days: 60 @@ -107,7 +107,7 @@ jobs: fail-on-cache-miss: false - name: Download test results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v7 with: path: test-results/ diff --git a/.github/workflows/dev-containers.yml b/.github/workflows/dev-containers.yml index 1bb8f38d2..794365211 100644 --- a/.github/workflows/dev-containers.yml +++ b/.github/workflows/dev-containers.yml @@ -176,7 +176,7 @@ jobs: - name: Run Hadolint Dockerfile scan if: matrix.python-version == needs.config.outputs.default-python-version - uses: hadolint/hadolint-action@v3.1.0 + uses: hadolint/hadolint-action@v3.3.0 with: dockerfile: Dockerfile format: sarif diff --git a/.github/workflows/dev-pypi.yml b/.github/workflows/dev-pypi.yml index d93f5c22d..92688f899 100644 --- a/.github/workflows/dev-pypi.yml +++ b/.github/workflows/dev-pypi.yml @@ -139,7 +139,7 @@ jobs: make ci-build-sbom - name: Upload SBOM artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v6 with: name: reports-sbom-${{ needs.config.outputs.package-version }} path: | diff --git a/.github/workflows/health-monitoring.yml b/.github/workflows/health-monitoring.yml index 5d8c96471..19f0c5ab7 100644 --- a/.github/workflows/health-monitoring.yml +++ b/.github/workflows/health-monitoring.yml @@ -142,7 +142,7 @@ jobs: color: blue - name: Create health report issue - uses: peter-evans/create-issue-from-file@v5 + uses: peter-evans/create-issue-from-file@v6 with: title: "Weekly Health Report (${{ env.START_DATE }} to ${{ env.END_DATE }})" content-filepath: health-report.md @@ -151,7 +151,7 @@ jobs: automated-report - name: Upload artifacts - uses: actions/upload-artifact@v4.4.3 + uses: actions/upload-artifact@v6 with: name: health-report-${{ env.END_DATE }} retention-days: 30 diff --git a/.github/workflows/reusable-test.yml b/.github/workflows/reusable-test.yml index 9f4560b28..68306959c 100644 --- a/.github/workflows/reusable-test.yml +++ b/.github/workflows/reusable-test.yml @@ -85,7 +85,7 @@ jobs: continue-on-error: ${{ inputs.continue-on-error }} - name: Upload test results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v6 if: always() with: name: test-results-${{ inputs.test-type }}-${{ inputs.os }}-py${{ inputs.python-version || inputs.default-python-version }} diff --git a/.github/workflows/security-code.yml b/.github/workflows/security-code.yml index 2d928be1a..ede03a9fb 100644 --- a/.github/workflows/security-code.yml +++ b/.github/workflows/security-code.yml @@ -92,7 +92,7 @@ jobs: fetch-depth: 0 - name: Check for secrets with TruffleHog - uses: trufflesecurity/trufflehog@v3.92.4 + uses: trufflesecurity/trufflehog@v3.92.5 with: path: ./ base: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }} diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml index 6a234f929..cb022b693 100644 --- a/.github/workflows/semantic-release.yml +++ b/.github/workflows/semantic-release.yml @@ -48,7 +48,7 @@ jobs: steps: - name: Generate GitHub App Token id: app-token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@v2 with: app-id: ${{ secrets.GH_APP_ID }} private-key: ${{ secrets.GH_APP_PRIVATE_KEY }} diff --git a/.github/workflows/test-matrix.yml b/.github/workflows/test-matrix.yml index 76b5d2407..914724a3e 100644 --- a/.github/workflows/test-matrix.yml +++ b/.github/workflows/test-matrix.yml @@ -109,7 +109,7 @@ jobs: steps: - name: Download all test results - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v7 with: path: test-results/