From 1bf36db56a223b44d3960be8167f78f3979ac86f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jul 2024 11:56:40 +0000 Subject: [PATCH] Bump the github-actions group across 2 directories with 8 updates Bumps the github-actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `4.1.7` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.24.6` | `3.25.12` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `4.3.4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.7` | `4.1.8` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.0.0` | `5.1.1` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.8.12` | `1.9.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.1` | `2.3.3` | Bumps the github-actions group with 2 updates in the /.github/actions/install-meltingpot directory: [actions/setup-python](https://github.com/actions/setup-python) and [actions/cache](https://github.com/actions/cache). Updates `actions/checkout` from 4.1.1 to 4.1.7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...692973e3d937129bcbf40652eb9f2f61becf3332) Updates `github/codeql-action` from 3.24.6 to 3.25.12 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8a470fddafa5cbb6266ee11b37ef4d8aae19c571...4fa2a7953630fd2f3fb380f21be14ede0169dd4f) Updates `actions/upload-artifact` from 4.3.1 to 4.3.4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.3.1...0b2256b8c012f0828dc542b3febcab082c67f72b) Updates `actions/download-artifact` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/65a9edc5881444af0b9093a5e628f2fe47ea3b2e...fa0a91b85d4f404e444e00e005971372dc801d16) Updates `actions/setup-python` from 5.0.0 to 5.1.1 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/0a5c61591373683505ea898e09a3ea4f39ef2b9c...39cd14951b08e74b54015e9e001cdefcf80e669f) Updates `pypa/gh-action-pypi-publish` from 1.8.12 to 1.9.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/e53eb8b103ffcb59469888563dc324e3c8ba6f06...ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0) Updates `ossf/scorecard-action` from 2.3.1 to 2.3.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...dc50aa9510b46c811795eb24b2f1ba02a914e534) Updates `actions/setup-python` from 5.0.0 to 5.1.1 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/0a5c61591373683505ea898e09a3ea4f39ef2b9c...39cd14951b08e74b54015e9e001cdefcf80e669f) Updates `actions/cache` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/ab5e6d0c87105b4c9c2047343972218f562e4319...0c45773b623bea8c8e75f6c82b208c3cf94ea4f9) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/actions/install-meltingpot/action.yml | 6 +++--- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/pylint-examples.yml | 2 +- .github/workflows/pylint-meltingpot.yml | 2 +- .github/workflows/pypi-publish.yml | 14 +++++++------- .github/workflows/pypi-test.yml | 2 +- .github/workflows/pytype-examples.yml | 2 +- .github/workflows/pytype-meltingpot.yml | 2 +- .github/workflows/scorecards-analysis.yml | 8 ++++---- .github/workflows/test-examples.yml | 2 +- .github/workflows/test-meltingpot.yml | 2 +- 11 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/actions/install-meltingpot/action.yml b/.github/actions/install-meltingpot/action.yml index 61f577c0..814173aa 100644 --- a/.github/actions/install-meltingpot/action.yml +++ b/.github/actions/install-meltingpot/action.yml @@ -26,13 +26,13 @@ runs: - name: Set up Python ${{ inputs.python-version }} id: setup-python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: ${{ inputs.python-version }} - name: Restore Melting Pot installation id: restore - uses: actions/cache/restore@ab5e6d0c87105b4c9c2047343972218f562e4319 + uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: | meltingpot/assets @@ -51,7 +51,7 @@ runs: - name: Save Melting Pot installation if: steps.restore.outputs.cache-hit != 'true' - uses: actions/cache/save@ab5e6d0c87105b4c9c2047343972218f562e4319 + uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: | meltingpot/assets diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d1ec1a81..460f9335 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -28,11 +28,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -46,7 +46,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -59,4 +59,4 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f diff --git a/.github/workflows/pylint-examples.yml b/.github/workflows/pylint-examples.yml index 81cf5c82..51f4ec26 100644 --- a/.github/workflows/pylint-examples.yml +++ b/.github/workflows/pylint-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples diff --git a/.github/workflows/pylint-meltingpot.yml b/.github/workflows/pylint-meltingpot.yml index 6aebfab5..b25ef0de 100644 --- a/.github/workflows/pylint-meltingpot.yml +++ b/.github/workflows/pylint-meltingpot.yml @@ -34,7 +34,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Melting Pot uses: ./.github/actions/install-meltingpot diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 9a3cec91..d6c87e7b 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -29,7 +29,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Update Python setup run: | pip install --upgrade pip @@ -39,7 +39,7 @@ jobs: - name: Build distribution run: python setup.py sdist - name: Save artifact - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 + uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b with: name: dist path: ./dist @@ -53,12 +53,12 @@ jobs: timeout-minutes: 60 steps: - name: Load artifact - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: name: dist path: ./dist - name: Set up Python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: '3.11' - name: Install Python dependencies @@ -86,18 +86,18 @@ jobs: timeout-minutes: 10 steps: - name: Load artifact - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: name: dist path: ./dist - name: Publish to TestPyPI if: github.event_name == 'release' || inputs.upload_to_test_pypi - uses: pypa/gh-action-pypi-publish@e53eb8b103ffcb59469888563dc324e3c8ba6f06 + uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 with: repository-url: https://test.pypi.org/legacy/ verbose: true - name: Publish to PyPI if: github.event_name == 'release' || inputs.upload_to_pypi - uses: pypa/gh-action-pypi-publish@e53eb8b103ffcb59469888563dc324e3c8ba6f06 + uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 with: verbose: true diff --git a/.github/workflows/pypi-test.yml b/.github/workflows/pypi-test.yml index 0333e695..f670cd0b 100644 --- a/.github/workflows/pypi-test.yml +++ b/.github/workflows/pypi-test.yml @@ -50,7 +50,7 @@ jobs: steps: - name: Set up Python ${{ matrix.python_version }} - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/pytype-examples.yml b/.github/workflows/pytype-examples.yml index 3fa6aac3..6603f3b7 100644 --- a/.github/workflows/pytype-examples.yml +++ b/.github/workflows/pytype-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples diff --git a/.github/workflows/pytype-meltingpot.yml b/.github/workflows/pytype-meltingpot.yml index 30949143..ccc45302 100644 --- a/.github/workflows/pytype-meltingpot.yml +++ b/.github/workflows/pytype-meltingpot.yml @@ -34,7 +34,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Melting Pot uses: ./.github/actions/install-meltingpot diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index eeba9353..8fd636fc 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -25,12 +25,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 + uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 with: results_file: results.sarif results_format: sarif @@ -49,7 +49,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b with: name: SARIF file path: results.sarif @@ -57,6 +57,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f with: sarif_file: results.sarif diff --git a/.github/workflows/test-examples.yml b/.github/workflows/test-examples.yml index 7083c63f..c691a30e 100644 --- a/.github/workflows/test-examples.yml +++ b/.github/workflows/test-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 90 steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples diff --git a/.github/workflows/test-meltingpot.yml b/.github/workflows/test-meltingpot.yml index 5ff8d327..2e74cacb 100644 --- a/.github/workflows/test-meltingpot.yml +++ b/.github/workflows/test-meltingpot.yml @@ -44,7 +44,7 @@ jobs: - '3.11' steps: - name: Checkout Melting Pot - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Melting Pot uses: ./.github/actions/install-meltingpot with: