From 99622c35f11cfb83fdd5f7dda374968731b5c95d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Jan 2025 14:04:28 +0000
Subject: [PATCH] chore(deps): bump the actions group with 2 updates
Bumps the actions group with 2 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).
Updates `astral-sh/setup-uv` from 4 to 5
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/v4...v5)
Updates `actions/attest-build-provenance` from 1 to 2
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v2)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com>
---
.github/workflows/ci.yml | 6 +++---
.github/workflows/wheel.yml | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 73d74cfa..7258ef3a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
- uses: actions/setup-python@v5
with:
python-version: "3.x"
- - uses: astral-sh/setup-uv@v4
+ - uses: astral-sh/setup-uv@v5
- uses: pre-commit/action@v3.0.1
with:
extra_args: --all-files --hook-stage manual
@@ -51,7 +51,7 @@ jobs:
python-version: ${{ matrix.python-version }}
allow-prereleases: true
- - uses: astral-sh/setup-uv@v4
+ - uses: astral-sh/setup-uv@v5
- name: Install package
run: uv pip install --system -e .[test]
@@ -84,7 +84,7 @@ jobs:
with:
python-version: "3.x"
- - uses: astral-sh/setup-uv@v4
+ - uses: astral-sh/setup-uv@v5
- name: Install dot
run: sudo apt-get install graphviz
diff --git a/.github/workflows/wheel.yml b/.github/workflows/wheel.yml
index 683d510d..b222cbea 100644
--- a/.github/workflows/wheel.yml
+++ b/.github/workflows/wheel.yml
@@ -36,7 +36,7 @@ jobs:
path: dist
- name: Generate artifact attestation for sdist and wheel
- uses: actions/attest-build-provenance@v1
+ uses: actions/attest-build-provenance@v2
with:
subject-path: "dist/*"