From 84db5246faab5bffb8909de60c75e7c692b5dd79 Mon Sep 17 00:00:00 2001 From: dlp-bot Date: Thu, 2 Jul 2026 20:18:59 +0200 Subject: [PATCH] [ci] Update 5 actions in 8 workflows (#17024) * Bump actions/cache v5.0.5 => v6.1.0 * Bump actions/setup-python v6.2.0 => v6.3.0 * Bump docker/setup-qemu-action v4.1.0 => v4.2.0 * Bump github/codeql-action v4.36.2 => v4.36.3 * Bump zizmorcore/zizmor-action v0.5.6 => v0.5.7 Authored by: dlp-bot --- .github/workflows/build.yml | 6 +++--- .github/workflows/challenge-tests.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/core.yml | 2 +- .github/workflows/quick-test.yml | 4 ++-- .github/workflows/release-nightly.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/test-workflows.yml | 4 ++-- 8 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 9dcab61625..4af7e8ee03 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -200,7 +200,7 @@ jobs: fetch-depth: 0 # Needed for changelog persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.10" @@ -265,7 +265,7 @@ jobs: - name: Set up QEMU if: matrix.qemu_platform - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 with: image: tonistiigi/binfmt:qemu-v10.0.4-56@sha256:30cc9a4d03765acac9be2ed0afc23af1ad018aed2c28ea4be8c2eb9afe03fbd1 cache-image: false @@ -442,7 +442,7 @@ jobs: with: persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: ${{ matrix.python_version }} architecture: ${{ matrix.arch }} diff --git a/.github/workflows/challenge-tests.yml b/.github/workflows/challenge-tests.yml index e0555c8ebc..a09ddda46d 100644 --- a/.github/workflows/challenge-tests.yml +++ b/.github/workflows/challenge-tests.yml @@ -44,7 +44,7 @@ jobs: with: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: ${{ matrix.python-version }} allow-prereleases: true diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b43d19089a..963271790b 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,12 +36,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: languages: ${{ matrix.language }} build-mode: none - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/core.yml b/.github/workflows/core.yml index d6d33a3dff..4f0b12329b 100644 --- a/.github/workflows/core.yml +++ b/.github/workflows/core.yml @@ -70,7 +70,7 @@ jobs: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: ${{ matrix.python-version }} allow-prereleases: true diff --git a/.github/workflows/quick-test.yml b/.github/workflows/quick-test.yml index 231c5c5b4f..e964901878 100644 --- a/.github/workflows/quick-test.yml +++ b/.github/workflows/quick-test.yml @@ -25,7 +25,7 @@ jobs: with: persist-credentials: false - name: Set up Python 3.10 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: '3.10' - name: Install test requirements @@ -51,7 +51,7 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: '3.14' - name: Install dev dependencies diff --git a/.github/workflows/release-nightly.yml b/.github/workflows/release-nightly.yml index ae6b2875da..ff69f1a590 100644 --- a/.github/workflows/release-nightly.yml +++ b/.github/workflows/release-nightly.yml @@ -27,7 +27,7 @@ jobs: run: echo "head=$(git rev-parse HEAD)" | tee -a "${GITHUB_OUTPUT}" - name: Cache nightly commit hash - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 env: SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3d57e4af72..14df50f3ba 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -90,7 +90,7 @@ jobs: persist-credentials: true # Needed to git-push the release commit ssh-key: ${{ secrets.RELEASE_KEY }} - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.13" # Keep this in sync with test-workflows.yml @@ -178,7 +178,7 @@ jobs: with: fetch-depth: 0 # Needed for changelog persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.13" @@ -250,7 +250,7 @@ jobs: path: artifact pattern: build-* merge-multiple: true - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.13" diff --git a/.github/workflows/test-workflows.yml b/.github/workflows/test-workflows.yml index 3d7c3012ab..0b075fbd0b 100644 --- a/.github/workflows/test-workflows.yml +++ b/.github/workflows/test-workflows.yml @@ -30,7 +30,7 @@ jobs: with: persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: "3.13" # Keep this in sync with release.yml's prepare job @@ -83,7 +83,7 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6 + uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 with: advanced-security: false persona: pedantic