From 2897f8d4d88bd6c3248292c6bed5c98cd7e7fe51 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Nov 2025 16:59:59 +0000 Subject: [PATCH] MAINT: Bump the actions group across 1 directory with 10 updates Bumps the actions group with 10 updates in the /.github/workflows directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `5` | | [scientific-python/action-towncrier-changelog](https://github.com/scientific-python/action-towncrier-changelog) | `1` | `2` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` | | [actions/labeler](https://github.com/actions/labeler) | `5.0.0` | `6.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` | | [actions/first-interaction](https://github.com/actions/first-interaction) | `1.3.0` | `3.1.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.12.4` | `1.13.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.23.1` | `3.2.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` | | [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) | `3.1.1` | `3.2.0` | Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v5) Updates `scientific-python/action-towncrier-changelog` from 1 to 2 - [Release notes](https://github.com/scientific-python/action-towncrier-changelog/releases) - [Changelog](https://github.com/scientific-python/action-towncrier-changelog/blob/main/check_changelog.py) - [Commits](https://github.com/scientific-python/action-towncrier-changelog/compare/v1...v2) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v6) Updates `actions/labeler` from 5.0.0 to 6.0.1 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/8558fd74291d67161a8a78ce36a881fa63b766a9...634933edcd8ababfe52f92936142cc22ac488b1b) Updates `actions/github-script` from 7.0.1 to 8.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/60a0d83039c74a4aee543508d2ffcb1c3799cdea...ed597411d8f924073f98dfc5c65a23a2325f34cd) Updates `actions/first-interaction` from 1.3.0 to 3.1.0 - [Release notes](https://github.com/actions/first-interaction/releases) - [Commits](https://github.com/actions/first-interaction/compare/34f15e814fe48ac9312ccf29db4e74fa767cbab7...1c4688942c71f71d4f5502a26ea67c331730fa4d) Updates `pypa/gh-action-pypi-publish` from 1.12.4 to 1.13.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/76f52bc884231f62b9a034ebfe128415bbaabdfc...ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e) Updates `pypa/cibuildwheel` from 2.23.1 to 3.2.1 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/42728e866bbc80d544a70825bd9990b9a26f1a50...9c00cb4f6b517705a3794b22395aedc36257242c) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4) Updates `conda-incubator/setup-miniconda` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/conda-incubator/setup-miniconda/releases) - [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md) - [Commits](https://github.com/conda-incubator/setup-miniconda/compare/505e6394dae86d6a5c7fbb6e3fb8938e3e863830...835234971496cad1653abb28a638a281cf32541f) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: scientific-python/action-towncrier-changelog dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/labeler dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/first-interaction dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pypa/cibuildwheel dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: conda-incubator/setup-miniconda dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cffconvert-test.yml | 2 +- .github/workflows/check_changelog.yml | 4 ++-- .github/workflows/codeql.yml | 4 ++-- .github/workflows/labeler-title-regex.yml | 4 ++-- .github/workflows/open_actions.yml | 8 ++++---- .github/workflows/publish-to-test-pypi.yml | 8 ++++---- .github/workflows/update-lock-files.yml | 2 +- .github/workflows/wheels.yml | 20 ++++++++++---------- 8 files changed, 26 insertions(+), 26 deletions(-) diff --git a/.github/workflows/cffconvert-test.yml b/.github/workflows/cffconvert-test.yml index 16b9b10..1b4f9b7 100644 --- a/.github/workflows/cffconvert-test.yml +++ b/.github/workflows/cffconvert-test.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out a copy of the repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false diff --git a/.github/workflows/check_changelog.yml b/.github/workflows/check_changelog.yml index 5762687..57b2992 100644 --- a/.github/workflows/check_changelog.yml +++ b/.github/workflows/check_changelog.yml @@ -15,7 +15,7 @@ jobs: name: A reviewer will let you know if it is required or can be bypassed runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: fetch-depth: '0' - name: Check if tests have changed @@ -31,7 +31,7 @@ jobs: - name: Check changelog entry if: steps.tests_changed.outputs.check_changelog == 'true' - uses: scientific-python/action-towncrier-changelog@v1 + uses: scientific-python/action-towncrier-changelog@v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} BOT_USERNAME: changelog-bot diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ce79757..8eb6f84 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -67,7 +67,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false fetch-depth: 0 @@ -125,7 +125,7 @@ jobs: # exit 1 - name: Set up Python - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0 + uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 if: matrix.language == 'c-cpp' with: python-version: '3.11' diff --git a/.github/workflows/labeler-title-regex.yml b/.github/workflows/labeler-title-regex.yml index 03de57d..3bcb420 100644 --- a/.github/workflows/labeler-title-regex.yml +++ b/.github/workflows/labeler-title-regex.yml @@ -15,8 +15,8 @@ jobs: labeler: runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v4 - - uses: actions/setup-python@v5 + - uses: actions/checkout@v5 + - uses: actions/setup-python@v6 with: python-version: '3.9' - name: Install PyGithub diff --git a/.github/workflows/open_actions.yml b/.github/workflows/open_actions.yml index 4234e24..26cef2b 100644 --- a/.github/workflows/open_actions.yml +++ b/.github/workflows/open_actions.yml @@ -17,12 +17,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Label PR - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0 + uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 if: github.event_name == 'pull_request_target' && github.event.pull_request.user.login != 'meeseeksmachine' with: repo-token: "${{ secrets.GITHUB_TOKEN }}" - name: 'Reviewer Checklist' - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 if: github.event_name == 'pull_request_target' with: github-token: ${{ secrets.GITHUB_TOKEN }} @@ -44,7 +44,7 @@ jobs: - [ ] At the time of adding the milestone, if the milestone set requires a backport to release branch(es), apply the appropriate "backport-X.Y.x" label(s) *before* merge.` }) - name: Greet new contributors - uses: actions/first-interaction@34f15e814fe48ac9312ccf29db4e74fa767cbab7 # v1.3.0 + uses: actions/first-interaction@1c4688942c71f71d4f5502a26ea67c331730fa4d # v3.1.0 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" issue-message: > @@ -91,7 +91,7 @@ jobs: please send an e-mail directly to the private e-mail feedback@astropy.org. - name: 'Comment Draft PR' - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 if: github.event.pull_request.draft == true with: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/publish-to-test-pypi.yml b/.github/workflows/publish-to-test-pypi.yml index db3914e..2a3d11c 100644 --- a/.github/workflows/publish-to-test-pypi.yml +++ b/.github/workflows/publish-to-test-pypi.yml @@ -42,11 +42,11 @@ jobs: steps: # Step 1: Check out the code from the repository - name: Check out code - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # Step 2: Set up the Python environment - name: Python Setup - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0 + uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 with: python-version: '3.8' # Specify the Python version @@ -72,7 +72,7 @@ jobs: # Step 5a: Publish the package to TestPyPI (if selected) - name: Publish package distributions to TestPyPI if: ${{ github.event.inputs.pypi_repo == 'testpypi' }} - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 with: print-hash: true repository-url: https://test.pypi.org/legacy/ @@ -82,7 +82,7 @@ jobs: # Step 5b: Publish the package to PyPI (if selected) - name: Publish package distributions to PyPI if: ${{ github.event.inputs.pypi_repo == 'pypi' }} - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 with: print-hash: true user: __token__ diff --git a/.github/workflows/update-lock-files.yml b/.github/workflows/update-lock-files.yml index 2040475..bb4da66 100644 --- a/.github/workflows/update-lock-files.yml +++ b/.github/workflows/update-lock-files.yml @@ -35,7 +35,7 @@ jobs: update_script_args: "--select-tag cuda" steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Generate lock files run: | source build_tools/shared.sh diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml index aa9bf1d..50d873c 100644 --- a/.github/workflows/wheels.yml +++ b/.github/workflows/wheels.yml @@ -71,7 +71,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout lightnumpy - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # Gets the correct commit message for pull request with: ref: ${{ github.event.pull_request.head.sha }} @@ -171,14 +171,14 @@ jobs: steps: - name: Checkout Repository with all submodules recursively - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: # Fetches all nested submodules or submodules: true submodules: recursive fetch-tags: true - name: Python Setup # Used to push the built wheels - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 + uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 with: python-version: "3.x" @@ -331,7 +331,7 @@ jobs: echo "CIBW_BUILD_FRONTEND=$CIBW" >> "$GITHUB_ENV" - name: Build Wheels Packages - uses: pypa/cibuildwheel@42728e866bbc80d544a70825bd9990b9a26f1a50 # v2.23.1 + uses: pypa/cibuildwheel@9c00cb4f6b517705a3794b22395aedc36257242c # v3.2.1 env: # Step level enviroment NAME: '', $NAME, ${{ env.NAME }} # Set CIBW_PRERELEASE_PYTHONS to True to build for pre-release versions of Python CIBW_PRERELEASE_PYTHONS: True @@ -351,7 +351,7 @@ jobs: fi - name: Upload Wheelhouse Wheels Packages - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: >- ${{ matrix.python[0] }}-${{ join(matrix.buildplat, '-') }} @@ -361,7 +361,7 @@ jobs: path: ./wheelhouse/*.whl - name: Conda environment creation and activation anaconda-client - uses: conda-incubator/setup-miniconda@505e6394dae86d6a5c7fbb6e3fb8938e3e863830 # v3.1.1 + uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f # v3.2.0 with: # for installation of anaconda-client, required for upload to # anaconda.org @@ -442,11 +442,11 @@ jobs: steps: - name: Checkout lightnumpy - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: true # Used to push the built wheels - - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 + - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 with: # Build sdist on lowest supported Python python-version: "3.10" @@ -470,13 +470,13 @@ jobs: twine check dist/* - name: Upload Wheelhouse Wheels Packages - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: sdist path: ./dist/* - name: Conda environment creation and activation anaconda-client - uses: conda-incubator/setup-miniconda@505e6394dae86d6a5c7fbb6e3fb8938e3e863830 # v3.1.1 + uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f # v3.2.0 with: # for installation of anaconda-client, required for upload to # anaconda.org