From 6013bbfaa0b72475e8f7a55c5505a4bb449f7df8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 03:06:07 +0000 Subject: [PATCH] build(deps): bump the actions group with 6 updates Bumps the actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [bencherdev/bencher](https://github.com/bencherdev/bencher) | `0.6.13` | `0.6.14` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.3.0` | `10.3.3` | | [docker/login-action](https://github.com/docker/login-action) | `4.6.0` | `4.7.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `4.3.3` | `4.3.5` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.11.2` | `31.11.3` | | [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) | `8.3.0` | `8.4.0` | Updates `bencherdev/bencher` from 0.6.13 to 0.6.14 - [Release notes](https://github.com/bencherdev/bencher/releases) - [Commits](https://github.com/bencherdev/bencher/compare/v0.6.13...v0.6.14) Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v10.3.0...v10.3.3) Updates `docker/login-action` from 4.6.0 to 4.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.6.0...v4.7.0) Updates `pypa/cibuildwheel` from 4.3.3 to 4.3.5 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/v4.3.3...v4.3.5) Updates `cachix/install-nix-action` from 31.11.2 to 31.11.3 - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Changelog](https://github.com/cachix/install-nix-action/blob/master/RELEASE.md) - [Commits](https://github.com/cachix/install-nix-action/compare/v31.11.2...v31.11.3) Updates `SonarSource/sonarqube-scan-action` from 8.3.0 to 8.4.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v8.3.0...v8.4.0) --- updated-dependencies: - dependency-name: bencherdev/bencher dependency-version: 0.6.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pypa/cibuildwheel dependency-version: 4.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: cachix/install-nix-action dependency-version: 31.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bench.yml | 2 +- .github/workflows/container.yml | 8 ++++---- .github/workflows/deploy.yml | 6 +++--- .github/workflows/nix.yml | 2 +- .github/workflows/qa-analysis.yml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml index c2c42fd46..f9762f834 100644 --- a/.github/workflows/bench.yml +++ b/.github/workflows/bench.yml @@ -162,7 +162,7 @@ jobs: benches/results/*.json if-no-files-found: warn - - uses: bencherdev/bencher@v0.6.13 + - uses: bencherdev/bencher@v0.6.14 # The project slug and API key go through the environment: `bencher` reads # BENCHER_PROJECT / BENCHER_API_KEY natively, and it keeps a maintainer-set diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml index 4ec56cbab..1727aa3f9 100644 --- a/.github/workflows/container.yml +++ b/.github/workflows/container.yml @@ -53,7 +53,7 @@ jobs: fetch-depth: 0 # such that setuptools_scm can do its job correctly - name: Install the latest version of uv - uses: astral-sh/setup-uv@v10.3.0 + uses: astral-sh/setup-uv@v10.3.3 - name: Build SDist id: sdist @@ -97,7 +97,7 @@ jobs: - uses: actions/checkout@v7.0.1 - name: Install the latest version of uv - uses: astral-sh/setup-uv@v10.3.0 + uses: astral-sh/setup-uv@v10.3.3 - name: Render the base Dockerfile run: | @@ -119,7 +119,7 @@ jobs: echo "ref=${BASE_IMAGE_NAME}:${hash}" >> "$GITHUB_OUTPUT" - name: Log in to the container registry - uses: docker/login-action@v4.6.0 + uses: docker/login-action@v4.7.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -213,7 +213,7 @@ jobs: path: build/container/app - name: Log in to the container registry - uses: docker/login-action@v4.6.0 + uses: docker/login-action@v4.7.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index dde8935fc..1c2cda8ea 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -150,7 +150,7 @@ jobs: fi - name: Install the latest version of uv - uses: astral-sh/setup-uv@v10.3.1 + uses: astral-sh/setup-uv@v10.3.3 - name: Build SDist run: | @@ -172,7 +172,7 @@ jobs: fetch-depth: 0 # such that hatch-vcs can read the tags - name: Install the latest version of uv - uses: astral-sh/setup-uv@v10.3.1 + uses: astral-sh/setup-uv@v10.3.3 - name: Build sdist and wheel run: uv build --package monoprop-bench-tools --out-dir bench-tools-dist @@ -206,7 +206,7 @@ jobs: with: fetch-depth: 0 - - uses: pypa/cibuildwheel@v4.3.3 + - uses: pypa/cibuildwheel@v4.3.5 with: extras: "uv" env: diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml index d2419da1c..0904cdd2b 100644 --- a/.github/workflows/nix.yml +++ b/.github/workflows/nix.yml @@ -47,7 +47,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install Nix - uses: cachix/install-nix-action@v31.11.2 + uses: cachix/install-nix-action@v31.11.3 # Evaluates every output, the `nix run` app and the other interpreters' # packages included, without building; the checks are the per-interpreter diff --git a/.github/workflows/qa-analysis.yml b/.github/workflows/qa-analysis.yml index 00b116667..7d3ee5902 100644 --- a/.github/workflows/qa-analysis.yml +++ b/.github/workflows/qa-analysis.yml @@ -215,7 +215,7 @@ jobs: name: coverage-reports - name: SonarQube Scan - uses: SonarSource/sonarqube-scan-action@v8.3.0 + uses: SonarSource/sonarqube-scan-action@v8.4.0 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} with: