Skip to content

Commit 2ccd598

Browse files
chore(deps): update github actions
1 parent 1360d9a commit 2ccd598

16 files changed

Lines changed: 58 additions & 58 deletions

.github/workflows/_audit.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
packages: read
1414
steps:
1515
- name: Checkout
16-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
16+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1717
with:
1818
fetch-depth: 0
1919

2020
- name: Install uv
21-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
21+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2222
with:
2323
version-file: "pyproject.toml"
2424
enable-cache: true
@@ -37,7 +37,7 @@ jobs:
3737
run: make audit
3838

3939
- name: Upload audit results
40-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
40+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
4141
if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
4242
with:
4343
name: audit-results

.github/workflows/_build-native-only.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939

4040
steps:
4141
- name: Checkout
42-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
42+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
fetch-depth: 0
4545

4646
- name: Install uv
47-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
47+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
4848
with:
4949
version-file: "pyproject.toml"
5050
enable-cache: true
@@ -61,7 +61,7 @@ jobs:
6161
run: make dist_native
6262

6363
- name: Upload dist_native artifacts
64-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
64+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
6565
if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
6666
with:
6767
name: dist_native-${{ matrix.runner }}

.github/workflows/_claude-code.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -46,12 +46,12 @@ jobs:
4646
actions: read # Required for Claude to read CI results on PRs
4747
steps:
4848
- name: Checkout repository
49-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
49+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5050
with:
5151
fetch-depth: ${{ inputs.mode == 'interactive' && 0 || 1 }}
5252

5353
- name: Install uv
54-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
54+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
5555
with:
5656
version-file: "pyproject.toml"
5757
enable-cache: true
@@ -66,7 +66,7 @@ jobs:
6666
run: uv sync --all-extras --frozen --link-mode=copy
6767

6868
- name: Setup display
69-
uses: pyvista/setup-headless-display-action@7d84ae825e6d9297a8e99bdbbae20d1b919a0b19 # v4.2
69+
uses: pyvista/setup-headless-display-action@5bc8de3bc71fcda7a96439571287a554901541a0 # v4.3
7070

7171
- name: Print development version info
7272
if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
@@ -92,7 +92,7 @@ jobs:
9292
9393
- name: Run Claude Code (Automation Mode)
9494
if: inputs.mode == 'automation'
95-
uses: anthropics/claude-code-action@v1.0.29
95+
uses: anthropics/claude-code-action@v1.0.75
9696
with:
9797
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
9898
track_progress: ${{ inputs.track_progress }}

.github/workflows/_codeql.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
4141
steps:
4242
- name: Checkout repository
43-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
43+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4444

4545
# Add any setup steps before running the `github/codeql-action/init` action.
4646
# This includes steps like installing compilers or runtimes (`actions/setup-node`

.github/workflows/_docker-publish.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -24,34 +24,34 @@ jobs:
2424

2525
steps:
2626
- name: Checkout
27-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2828

2929
- name: Install dev tools
3030
shell: bash
3131
run: .github/workflows/_install_dev_tools.bash
3232

3333
- name: Set up QEMU
34-
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
34+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
3535

3636
- name: Set up Docker Buildx
37-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
37+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
3838

3939
- name: Log in to Docker Hub
40-
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
40+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
4141
with:
4242
username: ${{ secrets.DOCKER_USERNAME }}
4343
password: ${{ secrets.DOCKER_PASSWORD }}
4444

4545
- name: Log in to GitHub container registry
46-
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
46+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
4747
with:
4848
registry: ghcr.io
4949
username: ${{ github.actor }}
5050
password: ${{ secrets.GITHUB_TOKEN }}
5151

5252
- name: "(all target): Extract metadata (tags, labels) for Docker"
5353
id: meta-all
54-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
54+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
5555
with:
5656
images: |
5757
${{ env.DOCKER_IO_IMAGE_NAME_ALL }}
@@ -66,7 +66,7 @@ jobs:
6666
6767
- name: "(slim target): Extract metadata (tags, labels) for Docker"
6868
id: meta-slim
69-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
69+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
7070
with:
7171
images: |
7272
${{ env.DOCKER_IO_IMAGE_NAME_SLIM }}
@@ -81,7 +81,7 @@ jobs:
8181
8282
- name: "(all target): Build and push Docker image"
8383
id: build-and-push-all
84-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
84+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
8585
with:
8686
context: .
8787
file: ./Dockerfile
@@ -93,7 +93,7 @@ jobs:
9393

9494
- name: "(slim target): Build and push Docker image"
9595
id: build-and-push-slim
96-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
96+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
9797
with:
9898
context: .
9999
file: ./Dockerfile

.github/workflows/_ketryx_report_and_check.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,15 +29,15 @@ jobs:
2929
packages: read
3030
steps:
3131
- name: Checkout
32-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
32+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3333
with:
3434
fetch-depth: 0
3535

3636
- name: Download test results for ubuntu-latest generated in _test.yml
3737
if: |
3838
!contains(inputs.commit_message, 'skip:ketryx') &&
3939
!contains(github.event.pull_request.labels.*.name, 'skip:ketryx')
40-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
40+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
4141
with:
4242
name: test-results-ubuntu-latest
4343
path: test-results
@@ -46,7 +46,7 @@ jobs:
4646
if: |
4747
!contains(inputs.commit_message, 'skip:ketryx') &&
4848
!contains(github.event.pull_request.labels.*.name, 'skip:ketryx')
49-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
49+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
5050
with:
5151
name: audit-results
5252
path: audit-results

.github/workflows/_lint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,12 +13,12 @@ jobs:
1313
packages: read
1414
steps:
1515
- name: Checkout
16-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
16+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1717
with:
1818
fetch-depth: 0
1919

2020
- name: Install uv
21-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
21+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2222
with:
2323
version-file: "pyproject.toml"
2424
enable-cache: true

.github/workflows/_package-publish.yml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -48,12 +48,12 @@ jobs:
4848

4949
steps:
5050
- name: Checkout
51-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
51+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5252
with:
5353
fetch-depth: 0
5454

5555
- name: Install uv
56-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
56+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
5757
with:
5858
version-file: "pyproject.toml"
5959
enable-cache: true
@@ -83,7 +83,7 @@ jobs:
8383
run: make dist_native
8484

8585
- name: Upload dist_native artifacts
86-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
86+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
8787
if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
8888
with:
8989
name: dist_native-${{ matrix.runner }}
@@ -98,12 +98,12 @@ jobs:
9898
packages: read
9999
steps:
100100
- name: Checkout
101-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
101+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
102102
with:
103103
fetch-depth: 0
104104

105105
- name: Install uv
106-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
106+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
107107
with:
108108
version-file: "pyproject.toml"
109109
cache-dependency-glob: uv.lock
@@ -114,7 +114,7 @@ jobs:
114114
run: .github/workflows/_install_dev_tools.bash
115115

116116
- name: Download native distribution artifacts
117-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
117+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
118118
with:
119119
pattern: dist_native-*
120120
path: dist_native_all/
@@ -156,7 +156,7 @@ jobs:
156156
run: make docs
157157

158158
- name: Generate release notes
159-
uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0
159+
uses: orhun/git-cliff-action@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 # v4.7.1
160160
id: git-cliff
161161
with:
162162
config: pyproject.toml
@@ -185,13 +185,13 @@ jobs:
185185
if: |
186186
(!contains(inputs.commit_message, 'skip:test:all')) &&
187187
(!contains(github.event.pull_request.labels.*.name, 'skip:test:all'))
188-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
188+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
189189
with:
190190
name: test-results-ubuntu-latest
191191
path: test-results
192192

193193
- name: Download audit results generated in _audit.yml
194-
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
194+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
195195
with:
196196
name: audit-results
197197
path: audit-results
@@ -244,7 +244,7 @@ jobs:
244244
echo "SLACKEOF" >> "$GITHUB_OUTPUT"
245245
246246
- name: Release Announcement
247-
uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1
247+
uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
248248
with:
249249
webhook: ${{ secrets.SLACK_WEBHOOK_URL_RELEASE_ANNOUNCEMENT }}
250250
webhook-type: webhook-trigger

.github/workflows/_scheduled-audit.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
id-token: write
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
with:
1919
fetch-depth: 0
2020

2121
- name: Install uv
22-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
22+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
2323
with:
2424
version-file: "pyproject.toml"
2525
enable-cache: true
@@ -87,7 +87,7 @@ jobs:
8787
exit $EXIT_CODE
8888
8989
- name: Upload test results
90-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
90+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
9191
if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
9292
with:
9393
name: test-results-scheduled

.github/workflows/_scheduled-test-daily.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -49,12 +49,12 @@ jobs:
4949
steps:
5050

5151
- name: Checkout
52-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
52+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5353
with:
5454
fetch-depth: 0
5555

5656
- name: Install uv
57-
uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
57+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
5858
with:
5959
version-file: "pyproject.toml"
6060
enable-cache: true
@@ -70,7 +70,7 @@ jobs:
7070

7171
# Need xdisplay for testing QuPath app integration
7272
- name: Setup display
73-
uses: pyvista/setup-headless-display-action@7d84ae825e6d9297a8e99bdbbae20d1b919a0b19 # v4.2
73+
uses: pyvista/setup-headless-display-action@5bc8de3bc71fcda7a96439571287a554901541a0 # v4.3
7474

7575
- name: Print development version info
7676
if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
@@ -182,7 +182,7 @@ jobs:
182182
summary-title: All very long running e2e tests passed
183183

184184
- name: Upload test artifacts for inspection
185-
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
185+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
186186
if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
187187
with:
188188
name: test-results-ubuntu-latest
@@ -325,7 +325,7 @@ jobs:
325325
fi
326326
327327
- name: Upload coverage reports to Codecov
328-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
328+
uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
329329
if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT')}}
330330
with:
331331
token: ${{ secrets.CODECOV_TOKEN }}

0 commit comments

Comments
 (0)