From 15c61fa65bfa47b43e9fc546b435bb6a224b093d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 18 Dec 2024 14:55:48 +0000 Subject: [PATCH] :seedling: bump the github-actions group across 1 directory with 10 updates Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.2` | `4.2.2` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.0.0` | `3.2.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.17.0` | `2.22.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `4.5.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.0.0` | `5.2.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.4` | `4.1.8` | | [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) | `1.10.0` | `2.0.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.8.14` | `1.12.3` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.1.0` | `5.3.0` | | [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `3.0.0` | `3.1.2` | Updates `actions/checkout` from 4.1.2 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `docker/setup-qemu-action` from 3.0.0 to 3.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/68827325e0b33c7199eb31dd4e31fbe9023e06e3...49b3bc8e6bdd4a60e6116a5414239cba5943d3cf) Updates `pypa/cibuildwheel` from 2.17.0 to 2.22.0 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/v2.17...ee63bf16da6cddfb925f542f2c7b59ad50e93969) Updates `actions/upload-artifact` from 4.3.1 to 4.5.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/5d5d22a31266ced268874388b861e4b58bb5c2f3...6f51ac03b9356f520e9adb1b1b7802705f340c2b) Updates `actions/setup-go` from 5.0.0 to 5.2.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/0c52d547c9bc32b1aa3301fd7a9cb496313a4491...3041bf56c941b39c61721a86cd11f3bb1338122a) Updates `actions/download-artifact` from 4.1.4 to 4.1.8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/c850b930e6ba138125429b7e5c93fc707a7f8427...fa0a91b85d4f404e444e00e005971372dc801d16) Updates `slsa-framework/slsa-github-generator` from 1.10.0 to 2.0.0 - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v1.10.0...v2.0.0) Updates `pypa/gh-action-pypi-publish` from 1.8.14 to 1.12.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/81e9d935c883d0b210363ab89cf05f3894778450...67339c736fd9354cd4f8cb0b744f2b82a74b5c70) Updates `actions/setup-python` from 5.1.0 to 5.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/82c7e631bb3cdc910f68e0081d67478d79c6982d...0b93645e9fea7318ecaed2b359559ac225c90a2b) Updates `hashicorp/setup-terraform` from 3.0.0 to 3.1.2 - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/setup-terraform/compare/a1502cd9e758c50496cc9ac5308c4843bcd56d36...b9cd54a3c349d3f38e8881555d616ced269862dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: slsa-framework/slsa-github-generator dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: hashicorp/setup-terraform dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 36 +++++++++++++++++------------------ .github/workflows/test.yml | 12 ++++++------ 2 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index be5cfa3..dee51a0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,20 +20,20 @@ jobs: runs-on: ${{ matrix.runner }} steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Set up QEMU - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 + uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf with: platforms: arm64 - name: Build wheels - uses: pypa/cibuildwheel@7940a4c0e76eb2030e473a5f864f291f63ee879b + uses: pypa/cibuildwheel@ee63bf16da6cddfb925f542f2c7b59ad50e93969 env: CIBW_ENVIRONMENT: PATH=$(pwd)/go/bin:$PATH CIBW_BEFORE_ALL: sh ci-setup-golang.sh CIBW_SKIP: "*musllinux*" CIBW_ARCHS: ${{ matrix.cibw_arch }} - name: Upload Artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: wheels-linux-${{ matrix.cibw_arch }} path: ./wheelhouse/*.whl @@ -42,20 +42,20 @@ jobs: runs-on: windows-latest steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Set up Go - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 + uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a with: go-version: "1.21.5" cache: true cache-dependency-path: "gotfparse/go.sum" - name: Build wheels - uses: pypa/cibuildwheel@7940a4c0e76eb2030e473a5f864f291f63ee879b + uses: pypa/cibuildwheel@ee63bf16da6cddfb925f542f2c7b59ad50e93969 env: CGO_ENABLED: 1 CIBW_ARCHS: AMD64 - name: Upload Artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: wheels-windows path: ./wheelhouse/*.whl @@ -71,21 +71,21 @@ jobs: runs-on: macos-latest steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Set up Go - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 + uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a with: go-version: "1.21.5" cache: true cache-dependency-path: "gotfparse/go.sum" - name: Build wheels - uses: pypa/cibuildwheel@8d945475ac4b1aac4ae08b2fd27db9917158b6ce + uses: pypa/cibuildwheel@ee63bf16da6cddfb925f542f2c7b59ad50e93969 env: CGO_ENABLED: 1 CIBW_ARCHS: ${{ matrix.cibw_arch }} GOARCH: ${{ matrix.go_arch }} - name: Upload Artifacts - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: wheels-macos-${{ matrix.cibw_arch }} path: ./wheelhouse/*.whl @@ -97,7 +97,7 @@ jobs: hash: ${{ steps.hash.outputs.hash }} steps: - name: Fetch Wheels - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: pattern: "wheels-*" path: dist @@ -115,7 +115,7 @@ jobs: id-token: write contents: write # Can't pin with hash due to how this workflow works. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 with: base64-subjects: ${{ needs.Gather.outputs.hash }} @@ -127,9 +127,9 @@ jobs: if: startsWith(github.ref, 'refs/tags/') steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Fetch Wheels - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: pattern: "*" path: dist @@ -150,10 +150,10 @@ jobs: id-token: write steps: - name: Fetch Wheels - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: pattern: "wheels-*" path: dist merge-multiple: true - name: Upload to PYPI - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 + uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 9fd3890..6be6df5 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -16,9 +16,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Set up Python - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d + uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b with: python-version: "3.13" - name: Install dependencies @@ -46,19 +46,19 @@ jobs: python-version: 3.10 steps: - name: Checkout - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d + uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b with: python-version: ${{ matrix.python-version }} - name: Set up Terraform - uses: hashicorp/setup-terraform@a1502cd9e758c50496cc9ac5308c4843bcd56d36 + uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd with: terraform_wrapper: false - name: Set up Go - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 + uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a with: go-version: "1.21.5" cache: true