chore(deps): Bump the actions group across 1 directory with 8 updates - #1195
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
3cf73ed to
89e90ae
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 89e90ae8d0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 | ||
| uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 |
There was a problem hiding this comment.
The changes job immediately runs .github/scripts/test_ci_changes.py, but test_breg_contracts_pin_postgresql_and_use_the_product_entry_points still requires the previous setup-uv SHA at line 1679. With this new pin, that test fails on every CI run before the path-gated jobs are evaluated, so the assertion must be updated together with the workflow reference.
Useful? React with 👍 / 👎.
|
|
||
| - name: Upload platform coverage to Codecov | ||
| uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 | ||
| uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 |
There was a problem hiding this comment.
For root-workflow changes, the release-tool job runs check-gates-inventory.py, whose coverage policy still accepts only codecov/codecov-action@fb8b358... at release/scripts/check-gates-inventory.py:1338. This replacement therefore reports Platform coverage OIDC permission isolation as missing, and the corresponding inventory unit test fails; update the reviewed policy pin along with this action reference.
Useful? React with 👍 / 👎.
|
|
||
| - name: Install Go for the AWS-LC-FIPS source build | ||
| uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 | ||
| uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 |
There was a problem hiding this comment.
The release workflow tests still define SETUP_GO_ACTION as the previous 924ae3a... SHA in test_release_rehearsal.py, test_release_workflow_structure.py, and test_check_gates_inventory.py. Because workflow changes select the release-tool job, its checked-in test commands now fail on every bumped setup-go step, including this CI client-build step; synchronize those expected pins with the new reviewed SHA.
Useful? React with 👍 / 👎.
|
|
||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 | ||
| uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 |
There was a problem hiding this comment.
The reviewed commit message has no Signed-off-by: trailer, so it does not satisfy the repository's mandatory DCO policy; add a sign-off to the commit before it is merged.
AGENTS.md reference: AGENTS.md:L405-L407
Useful? React with 👍 / 👎.
Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.0.1` | `10.1.0` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.1` | `2.87.15` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.38.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.38.1` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@20cfd1b...bec219d) Updates `taiki-e/install-action` from 2.86.1 to 2.87.15 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@288e746...4076c08) Updates `codecov/codecov-action` from 7.0.0 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@fb8b358...303a32d) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@924ae3a...b7ad1da) Updates `github/codeql-action/init` from 4.37.7 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...1c5b675) Updates `github/codeql-action/analyze` from 4.37.7 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...1c5b675) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@cd2ce8f...368f825) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.14 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
89e90ae to
5dcf227
Compare
Bumps the actions group with 8 updates in the / directory:
10.0.110.1.02.86.12.87.157.0.07.1.14.2.04.4.16.5.07.0.04.37.74.38.14.37.74.38.15.0.05.0.1Updates
astral-sh/setup-uvfrom 10.0.1 to 10.1.0Release notes
Sourced from astral-sh/setup-uv's releases.
Commits
bec219dchore(deps-dev): roll up Dependabot updates (#1043)b90ec40fix: respect no proxy directive (#1037)421feb6chore: update known checksums for 0.12.12 (#1041)f634bf4Expose a Python "identity" output (#1036)a6772c8chore: update known checksums for 0.12.10/0.12.11 (#1038)e105c8fchore: update known checksums for 0.12.9 (#1035)cd13f92Verify downloads with astral-sh/versions checksums (#1033)3aef7b9chore: update known checksums for 0.12.7/0.12.8 (#1031)d08d816chore: update known checksums for 0.12.6 (#1030)19b4d1eHarden npm install defaults (#1026)Updates
taiki-e/install-actionfrom 2.86.1 to 2.87.15Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
4076c08Release 2.87.15f094888Update uv manifestdf9870fUpdatesyft@latestto 1.52.0d432ab2Update release-plz manifestf2e9e6cUpdate protoc manifest5546883Updatemise@latestto 2026.9.106dfd42aUpdatekingfisher@latestto 2.4.05157ed3Updatekache@latestto 0.23.178a18eaUpdatecoreutils@latestto 0.12.0b02e9c7Updatecargo-nextest@latestto 0.9.145Updates
codecov/codecov-actionfrom 7.0.0 to 7.1.1Release notes
Sourced from codecov/codecov-action's releases.
Commits
303a32dchore(release): 7.1.1 (#1973)0b35c9echore(release): 7.1.0 (#1971)Updates
docker/setup-buildx-actionfrom 4.2.0 to 4.4.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
f87e599Merge pull request #624 from crazy-max/skip-pull-with-endpointe700274chore: update generated content3061c91skip BuildKit image pre-pulls for explicit endpoints594f3bfMerge pull request #609 from crazy-max/pull-buildkit-image-before-createbd6e702chore: update generated content6268c9dpull BuildKit image before builder creatione823525Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...533ed8ebuild(deps): bump the codeql-actions group with 2 updatesbedaf13Merge pull request #620 from crazy-max/shared-error-helpersd5079fbchore: update generated contentUpdates
actions/setup-gofrom 6.5.0 to 7.0.0Release notes
Sourced from actions/setup-go's releases.
Commits
b7ad1dachore(deps): bump@actions/cacheto 6.2.0 (#771)0778a10Migrate to ESM and upgrade dependencies (#763)Updates
github/codeql-action/initfrom 4.37.7 to 4.38.1Release notes
Sourced from github/codeql-action/init's releases.
Changelog
Sourced from github/codeql-action/init's changelog.
... (truncated)
Commits
1c5b675Merge pull request #4152 from github/update-v4.38.1-a65b83a73a97cdcaAdd changelog entry for #4146cc6c691Update changelog for v4.38.1a65b83aMerge pull request #4146 from github/henrymercer/per-language-bundles-pr07fa87dClarify the latest-nightly eligibility exceptionf18f353Describe the bundle URL resolverecec9b5Share per-language telemetry fields without renaming79fe3a1Move download telemetry into the status-report directoryead1f7dRename the platform module549d498Simplify per-language platform eligibility checksUpdates
github/codeql-action/analyzefrom 4.37.7 to 4.38.1Release notes
Sourced from github/codeql-action/analyze's releases.
Changelog
Sourced from github/codeql-action/analyze's changelog.
... (truncated)
Commits
1c5b675Merge pull request #4152 from github/update-v4.38.1-a65b83a73a97cdcaAdd changelog entry for #4146cc6c691Update changelog for v4.38.1a65b83aMerge pull request #4146 from github/henrymercer/per-language-bundles-pr07fa87dClarify the latest-nightly eligibility exceptionf18f353Describe the bundle URL resolverecec9b5Share per-language telemetry fields without renaming79fe3a1Move download telemetry into the status-report directoryead1f7dRename the platform module549d498Simplify per-language platform eligibility checksUpdates
actions/deploy-pagesfrom 5.0.0 to 5.0.1Release notes
Sourced from actions/deploy-pages's releases.
Commits
368f825Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff7e97763Validate deployment polling intervals0143e11Add backoff and jitter to deployment polling5e98f10Merge pull request #440 from actions/user/adwitiya8b0625aImprove deployment request test coverage