Repository navigation
chore(deps): bump the actions group across 1 directory with 6 updates - #2957
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
✅ Ditto reviewed
|
|
No dashboard preview for this commit. This PR resolved to preview profiles Stack previews are never automatic. A maintainer can provision one for this PR: gh workflow run preview-stack.yml -f pr=2957 # provision
gh workflow run preview-stack.yml -f pr=2957 -f action=retire # free the slotIt runs on the default branch, resolves the head commit from the API, and comments dashboard, Platform, and isolated Backroom URLs once readiness succeeds. Exact SHA: |
![ditto-code[bot]](https://avatars.githubusercontent.com/in/3889634?s=60&v=4){kind=small}
| run: uv run --locked pytest ditto/tests/preview -q | ||
|
|
||
| - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | ||
| - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 |
There was a problem hiding this comment.
🟠 High · bug — Update the setup-node SHA expected by the preview tests · 🔎 Verified by trace
This pin change makes test_preview_workflow_never_publishes_compat_or_prod() fail: it compares the workflow text against SETUP_NODE, which still contains the old SHA. Update that constant in ditto/tests/preview/test_workflow.py to the new SHA; the test also uses it for the publisher workflow assertion.
Contradicts an existing test. The tests pin the current behaviour: ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod()"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha()"). Fixing this means changing the test too; the reasoning above is why the test is wrong.
Why Ditto flagged this (confidence 97%)
Line 122 changes the setup-node SHA, but the unchanged ditto/tests/preview/test_workflow.py still defines SETUP_NODE with the prior SHA and asserts it appears in the workflow text. The preview proof job runs this test suite at line 120, so the pin update makes that job fail.
Git file evidence: ditto/tests/preview/test_workflow.py unchanged (5c0ecbf36252b920e0b38ff869cd1398ec63a292) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
Pinned by ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod()"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha()").
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
In `ditto/tests/preview/test_workflow.py`, update `SETUP_NODE` to `actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1` to match the updated pin in `.github/workflows/preview.yml` and the publisher workflow. Run `uv run --locked pytest ditto/tests/preview -q` and confirm the workflow assertions pass.
This behaviour is pinned by ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod()"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha()"). Change those tests in the same commit, and run them before and after the fix.
|
|
||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 | ||
| uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 |
There was a problem hiding this comment.
🟠 High · bug — Sync the Depot workflow mirrors with the updated action pins · 🔎 Verified by trace
This action-pin change makes the GitHub job differ from its unchanged Depot mirror. test_depot_keeps_the_current_executable_jobs compares those jobs after rewriting only runs-on and reusable-workflow paths, so the mismatch fails the test; the preview mirror is checked by a separate exact job comparison.
Why Ditto flagged this (confidence 93%)
Line 97 changes the GitHub action pin, while the corresponding Depot workflow is unchanged. The comparison in ditto/tests/test_depot_ci.py:30-42 normalizes only runner labels and reusable-workflow paths, so differing action pins make the job dictionaries unequal; the preview comparison at lines 105-112 likewise requires exact job equality.
Git file evidence: .depot/workflows/platform-verify.yml unchanged (a8fc0bac2e8839b5bd03b917f6d82706a1ed576e) from edf105f to 5f0e66d; .depot/workflows/ci.yml unchanged (b11786e14ee4ce149ec78fe187b1e685d1225025) from edf105f to 5f0e66d; .depot/workflows/backroom-ci.yml unchanged (2f4a080405daaaa30b7cbf04a41f8a132852af8e) from edf105f to 5f0e66d; .depot/workflows/model-relay.yml unchanged (76fcc3686cb63a5b9983e4bb9a9b95a37a785aab) from edf105f to 5f0e66d; .depot/workflows/preview.yml unchanged (19fc75c1e5a0e125289ef55e02a3af94c9ce56b6) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
Update the corresponding action pins in the Depot workflow mirrors to match the GitHub workflows changed in this PR. The mismatch is exposed by the `astral-sh/setup-uv` pin at `.github/workflows/platform-verify.yml:97`; check `.depot/workflows/platform-verify.yml`, `ci.yml`, `backroom-ci.yml`, `model-relay.yml`, and `preview.yml` against their GitHub counterparts. Verify with `cd apps/platform && uv run pytest ditto/tests/test_depot_ci.py -q`.
| run_install: false | ||
|
|
||
| - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | ||
| - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 |
There was a problem hiding this comment.
🟡 Medium · test — Update the pinned setup-node SHA in the workflow tests · 🔎 Verified by trace
The workflow now uses actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 at line 248, but ditto/tests/preview/test_workflow.py still defines SETUP_NODE as the previous SHA at line 10 and asserts it in both workflows at lines 46 and 439. Those assertions make the named tests fail; update the test constant to match the intentional action bump.
Contradicts an existing test. The tests pin the current behaviour: ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha"). Fixing this means changing the test too; the reasoning above is why the test is wrong.
Why Ditto flagged this (confidence 99%)
The changed workflow line 248 now references the new setup-node SHA, while the existing SETUP_NODE constant at test line 10 retains the old SHA and is asserted against this workflow at line 439; the test therefore fails on the updated workflow. The same stale constant is also asserted for the other workflow at line 46.
Pinned by ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha").
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
In `ditto/tests/preview/test_workflow.py`, update `SETUP_NODE` at line 10 from the old setup-node SHA to `actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1`. Keep the workflow assertions in place so they continue pinning the action SHA. Run `pytest -q ditto/tests/preview/test_workflow.py` and verify the tests pass.
This behaviour is pinned by ditto/tests/preview/test_workflow.py ("test_preview_workflow_never_publishes_compat_or_prod"), ditto/tests/preview/test_workflow.py ("test_trusted_dashboard_publisher_is_read_only_and_exact_sha"). Change those tests in the same commit, and run them before and after the fix.
| with: | ||
| persist-credentials: false | ||
| - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v3 | ||
| - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v3 |
There was a problem hiding this comment.
🟡 Medium · bug — Keep the Depot model-relay workflow pin in sync · 🔎 Verified by trace
This changes the GitHub Actions setup-uv pin at line 89, but .depot/workflows/model-relay.yml remains unchanged. The Depot workflow comparison test requires the executable jobs to match apart from its documented rewrites, so the differing action pin makes that test fail.
Why Ditto flagged this (confidence 85%)
Line 89 changes the GitHub workflow's setup-uv pin, while the corresponding .depot workflow is unchanged. The repository's Depot workflow contract compares executable jobs, so this pin mismatch causes the named comparison test to fail.
Git file evidence: .depot/workflows/model-relay.yml unchanged (76fcc3686cb63a5b9983e4bb9a9b95a37a785aab) from edf105f to 5f0e66d; ditto/tests/test_depot_ci.py unchanged (3a78e95a17a2abd5b96836833b97332a8eb8782e) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
Update `.depot/workflows/model-relay.yml` to use the same `astral-sh/setup-uv` SHA as `.github/workflows/model-relay.yml` at line 89, preserving the Depot-specific workflow rewrites. Run `pytest ditto/tests/test_depot_ci.py::test_depot_keeps_the_current_executable_jobs` to verify the workflows match.
|
|
||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v3 | ||
| uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v3 |
There was a problem hiding this comment.
🟡 Medium · bug — Keep the Depot CI mirror's setup-uv pin in sync · 🔎 Verified by trace
This change updates the GitHub workflow's setup-uv pin at line 67, but the unchanged .depot/workflows/ci.yml retains the old pin. The test_depot_keeps_the_current_executable_jobs[ci.yml] parity check compares the jobs, so this mismatch makes the test fail; update the Depot mirror to the new SHA as well.
Why Ditto flagged this (confidence 82%)
Line 67 changes the setup-uv SHA in .github/workflows/ci.yml, while repository evidence shows .depot/workflows/ci.yml is unchanged and the referenced parity test is present and unchanged. Given the test's full-job comparison, the differing pin makes the CI job definitions diverge and fails the test.
Git file evidence: .depot/workflows/ci.yml unchanged (b11786e14ee4ce149ec78fe187b1e685d1225025) from edf105f to 5f0e66d; ditto/tests/test_depot_ci.py unchanged (3a78e95a17a2abd5b96836833b97332a8eb8782e) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
Update `.depot/workflows/ci.yml` so its `astral-sh/setup-uv` SHA matches the new pin in `.github/workflows/ci.yml` at line 67. Run the focused `ditto/tests/test_depot_ci.py` parity test and confirm it passes.
| persist-credentials: false | ||
|
|
||
| - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 | ||
| - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 |
There was a problem hiding this comment.
🟡 Medium · bug — Keep the Depot workflow pins in sync · 🔎 Verified by trace
The changes update the setup-uv pin at line 30 and the setup-node pin at line 43, but the Depot fallback workflow remains unchanged. The existing parity test compares the executable jobs in both workflows, so these differing uses values make that test fail.
Why Ditto flagged this (confidence 82%)
The changed pins are at .github/workflows/backroom-ci.yml:30 and :43, while .depot/workflows/backroom-ci.yml is unchanged; the existing ditto/tests/test_depot_ci.py::test_depot_keeps_the_current_executable_jobs compares the executable jobs and therefore detects the differing action pins.
Git file evidence: .depot/workflows/backroom-ci.yml unchanged (2f4a080405daaaa30b7cbf04a41f8a132852af8e) from edf105f to 5f0e66d; ditto/tests/test_depot_ci.py unchanged (3a78e95a17a2abd5b96836833b97332a8eb8782e) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
Update `.depot/workflows/backroom-ci.yml` so its `astral-sh/setup-uv` and `actions/setup-node` pins match the versions and SHAs in `.github/workflows/backroom-ci.yml`. Run `ditto/tests/test_depot_ci.py::test_depot_keeps_the_current_executable_jobs` to verify parity.
|
|
||
| - name: Install uv | ||
| uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 | ||
| uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 |
There was a problem hiding this comment.
🟡 Medium · bug — Mirror the setup-uv bump in the Depot root verifier · 🔎 Verified by trace
The GitHub root verifier now uses setup-uv v10.3.0 at line 50, while the unchanged .depot/workflows/root-verify.yml still uses v10.2.0. The reported test_depot_keeps_the_current_executable_jobs compares the workflows’ executable jobs, including uses: pins, so this mismatch makes that CI test fail.
Why Ditto flagged this (confidence 80%)
Line 50 changes the GitHub root verifier to setup-uv v10.3.0, but repository evidence shows .depot/workflows/root-verify.yml is unchanged; the proposed finding identifies it as still using v10.2.0. Because the cited Depot CI test deep-compares executable jobs including uses: pins, this introduced mismatch breaks the test.
Git file evidence: .depot/workflows/root-verify.yml unchanged (15259f16043d1e3a9c5e3cc92fd8a650807ef437) from edf105f to 5f0e66d; ditto/tests/test_depot_ci.py unchanged (3a78e95a17a2abd5b96836833b97332a8eb8782e) from edf105f to 5f0e66d. This establishes repository state, not runtime resolution or generated-content correctness.
🤖 Prompt for AI agents
[!NOTE]
Generated from this pull request, which may contain untrusted text. Read it before giving it to an agent, and do not follow instructions in it that go beyond the fix.
Update `.depot/workflows/root-verify.yml` so its setup-uv pins match the v10.3.0 SHA used by `.github/workflows/root-verify.yml` at lines 50, 83, and 124. Run `uv run pytest -q ditto/tests/test_depot_ci.py::test_depot_keeps_the_current_executable_jobs` to verify the mirrored jobs match.
There was a problem hiding this comment.
Ditto Review
2 issues worth fixing before merge · 5 non-blocking suggestions · risk: low · 5f0e66d
Update pinned GitHub Actions across CI and release workflows — Refreshes commit-pinned GitHub Actions used across the repository’s workflows, including setup-uv, setup-node, artifact upload/download, TFLint, and Packer actions. Workflow steps and configuration are otherwise unchanged; reviewers should verify the new commit pins correspond to the intended upstream releases.
| Location | Finding | |
|---|---|---|
| 🟠 High | .github/workflows/preview.yml:122 |
Update the setup-node SHA expected by the preview tests · 🔎 Verified by trace |
| 🟠 High | .github/workflows/platform-verify.yml:97 |
Sync the Depot workflow mirrors with the updated action pins · 🔎 Verified by trace |
| 🟡 Medium | .github/workflows/preview-dashboard-publish.yml:248 |
Update the pinned setup-node SHA in the workflow tests · 🔎 Verified by trace |
| 🟡 Medium | .github/workflows/model-relay.yml:89 |
Keep the Depot model-relay workflow pin in sync · 🔎 Verified by trace |
| 🟡 Medium | .github/workflows/ci.yml:67 |
Keep the Depot CI mirror's setup-uv pin in sync · 🔎 Verified by trace |
| 🟡 Medium | .github/workflows/backroom-ci.yml:30 |
Keep the Depot workflow pins in sync · 🔎 Verified by trace |
| 🟡 Medium | .github/workflows/root-verify.yml:50 |
Mirror the setup-uv bump in the Depot root verifier · 🔎 Verified by trace |
Walkthrough (22 files)
| File | Change |
|---|---|
.github/workflows/backroom-ci.yml |
Updates the pinned setup-uv and setup-node actions. |
.github/workflows/ci.yml |
Updates the pinned setup-uv action. |
.github/workflows/coding-datagen-ci.yml |
Updates the pinned setup-uv action. |
.github/workflows/coding-hippius-probe.yml |
Updates the pinned setup-uv and upload-artifact actions. |
.github/workflows/coding-hosted-image.yml |
Updates the pinned setup-uv and upload-artifact actions. |
.github/workflows/coding-hosted-runtime.yml |
Updates the pinned setup-uv and upload-artifact actions. |
.github/workflows/coding-native-release.yml |
Updates the pinned setup-uv and upload-artifact actions. |
.github/workflows/coding-starter-kit-ci.yml |
Updates the pinned setup-uv action. |
.github/workflows/dittobench.yml |
Updates the pinned setup-node action. |
.github/workflows/infra-ci.yml |
Updates the pinned TFLint setup and setup-uv actions. |
.github/workflows/model-relay.yml |
Updates the pinned setup-uv action. |
.github/workflows/platform-deploy.yml |
Updates the pinned artifact upload and download actions. |
.github/workflows/platform-pg-restore-drill.yml |
Updates the pinned setup-uv action. |
.github/workflows/platform-verify.yml |
Updates the pinned setup-uv and setup-node actions. |
.github/workflows/preview-dashboard-publish.yml |
Updates the pinned artifact upload/download and setup-node actions. |
.github/workflows/preview.yml |
Updates the pinned setup-uv, setup-node, and upload-artifact actions. |
.github/workflows/pylon-epoch-schedule.yml |
Updates the pinned setup-uv action. |
.github/workflows/release.yml |
Updates the pinned setup-uv and setup-node actions across release jobs. |
.github/workflows/root-verify.yml |
Updates the pinned setup-uv action. |
.github/workflows/screener-bake.yml |
Updates the pinned setup-packer action. |
.github/workflows/screener-ci.yml |
Updates the pinned setup-uv action in both jobs. |
.github/workflows/screener-core-e2e.yml |
Updates the pinned setup-uv action. |
Review details
- Models: review
z-ai/glm-5.3-flash· verifyopenai/gpt-6-luna - Findings: 17 candidates → 9 verified → 7 posted · 2 duplicates collapsed
- Withheld: rejected by verifier 8
- Context index: 5154 files · 4 changed symbols · 48 references
- Tokens: 5031539 in / 167208 out · $0.26
- Run:
49a049c8-3149-4e9d-862d-dcf6fbe4ffd0· engine v2.0.0 · details - Ditto approves or requests changes in a separate review (blocking: 🟠 High and above). Inference is billed through your Ditto Router endpoint.
Open in Ditto · reply @ditto review to re-run · @ditto fix to push fixes
diorwave
left a comment
diorwave
left a comment
There was a problem hiding this comment.
Dependency review: the upstream updates are clean, but CI is red because this PR is incomplete.
Upstream (no action takes a major bump):
- setup-uv v10.3.0 and setup-node v7.1.0 are verified tag commits. action.yml/dist only add a
python-archinput (setup-uv) and manifest-fetch retries/version verification (setup-node), and neither contacts new hosts. - upload-artifact v7.0.2 / download-artifact v8.0.2: the dist changes are
@actions/artifact6.3.1 (Retry-After, filename parsing). - setup-tflint v6.3.2 adds the semver guard on the release target.
- setup-packer
97ec700: dist/index.js, the map and action.yml are blob-identical to v3.4.0, so it's a runtime no-op.
Why cheatcodes and lint-and-test / tests (0-2) fail:
ditto/tests/test_depot_ci.pyrequires.depot/workflows/*.ymlto mirror.github/workflows. Dependabot's github-actions entry doesn't update.depot/, which still pins setup-uvc18668ad(v10.2.0) ×10 and setup-node82076278(v7.0.0) ×3.ditto/tests/preview/test_workflow.py:10hard-codesSETUP_NODE = "actions/setup-node@820762786026740c76f36085b0efc47a31fe5020".
No @dependabot ignore fits, because upstream is fine. This needs a companion commit updating the 13 .depot/workflows pins and the test constant, either on this branch or as a human PR that supersedes it (then @dependabot close). Worth also fixing the setup-uv pin comments while there: 11 of them say # v3 / # v9 for what is actually v10.x.
Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [terraform-linters/setup-tflint](https://github.com/terraform-linters/setup-tflint) | `6.3.1` | `6.3.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [hashicorp/setup-packer](https://github.com/hashicorp/setup-packer) | `c4e4b2636b98ce7566f9ec9c309e26821f695bd2` | `254642e8b3ad89428bed3a29fed882787a2d0139` | Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@c18668a...1c37ad0) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `terraform-linters/setup-tflint` from 6.3.1 to 6.3.2 - [Release notes](https://github.com/terraform-linters/setup-tflint/releases) - [Commits](terraform-linters/setup-tflint@1cf010d...6ffdbaa) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `hashicorp/setup-packer` from c4e4b2636b98ce7566f9ec9c309e26821f695bd2 to 254642e8b3ad89428bed3a29fed882787a2d0139 - [Release notes](https://github.com/hashicorp/setup-packer/releases) - [Commits](hashicorp/setup-packer@c4e4b26...254642e) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: hashicorp/setup-packer dependency-version: 97ec7008e79c4247af034e505b489f47f01173a6 dependency-type: direct:production dependency-group: actions - dependency-name: terraform-linters/setup-tflint dependency-version: 6.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
5f0e66d to
40b5798
Compare
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the actions group with 6 updates in the / directory:
10.2.010.3.07.0.07.1.07.0.17.0.26.3.16.3.28.0.18.0.2c4e4b2636b98ce7566f9ec9c309e26821f695bd2254642e8b3ad89428bed3a29fed882787a2d0139Updates
astral-sh/setup-uvfrom 10.2.0 to 10.3.0Release notes
Sourced from astral-sh/setup-uv's releases.
Commits
1c37ad0chore: update known checksums for 0.13.0 (#1089)b3c9b5fchore: update known checksums for 0.12.24 (#1084)b06acffAddpython-archsupport (#1079)c84232cchore: update known checksums for 0.12.23 (#1082)51fdd26Use macOS 15 runners for tests (#1081)a96208bchore: update known checksums for 0.12.22 (#1080)0e3884bchore: update known checksums for 0.12.21 (#1078)bcf0580chore: update known checksums for 0.12.20 (#1076)b92a892chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#1077)227a0f6chore: update known checksums for 0.12.19 (#1068)Updates
actions/setup-nodefrom 7.0.0 to 7.1.0Release notes
Sourced from actions/setup-node's releases.
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Updates
actions/upload-artifactfrom 7.0.1 to 7.0.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1Updates
terraform-linters/setup-tflintfrom 6.3.1 to 6.3.2Release notes
Sourced from terraform-linters/setup-tflint's releases.
Commits
6ffdbaaRelease v6.3.2d3d7a3aRequire a semver TFLint version (#470)4ebf8a3build(deps): Bump undici from 6.28.0 to 6.29.0 (#468)f79aeebbuild(deps): Bump js-yaml (#467)Updates
actions/download-artifactfrom 8.0.1 to 8.0.2Release notes
Sourced from actions/download-artifact's releases.
Commits
9000827Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2e455989Prepare download-artifact v8.0.2a00b90cMerge pull request #492 from actions/tunc-d-download-artifact-package-bump29bb7ceUpdate@actions/artifactto 6.3.1484a0b5Update the readme (#473)Updates
hashicorp/setup-packerfrom c4e4b2636b98ce7566f9ec9c309e26821f695bd2 to 254642e8b3ad89428bed3a29fed882787a2d0139Commits
254642eBump follow-redirects (#202)97ec700Bump undici to 6.28.1 and axios to 1.20.0 (#200)b0cba30Bump axios (#198)