From 340662391f7540f32c79be644ba36d48d0781886 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Nov 2026 22:22:08 +0000 Subject: [PATCH] ci: bump the minor-and-patch group across 1 directory with 5 updates Bumps the minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v7...v7.1.0) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/create-github-app-token/compare/v3.2.0...v3.3.0) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v7...v7.1.0) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/aamp-snapshot-check.yml | 2 +- .github/workflows/ai-review.yml | 2 +- .github/workflows/apps-web-check.yml | 2 +- .github/workflows/broken-links.yml | 2 +- .github/workflows/build-check.yml | 8 ++++---- .github/workflows/changeset-check.yml | 4 ++-- .github/workflows/check-image-alt-text.yml | 2 +- .github/workflows/check-seo-metadata.yml | 2 +- .github/workflows/check-testable-snippets.yml | 4 ++-- .github/workflows/deploy.yml | 4 ++-- .github/workflows/external-smoke.yml | 2 +- .github/workflows/forward-merge-3.0.yml | 4 ++-- .github/workflows/forward-merge-3.1.yml | 4 ++-- .github/workflows/forward-merge-3.2.yml | 4 ++-- .github/workflows/ipr-agreement.yml | 8 ++++---- .github/workflows/ipr-check-callable.yml | 8 ++++---- .github/workflows/migration-smoke-test.yml | 4 ++-- .github/workflows/publish-schema-pr-bundle.yml | 2 +- .github/workflows/release-docs.yml | 2 +- .github/workflows/release.yml | 12 ++++++------ .github/workflows/runtime-default-image.yml | 2 +- .github/workflows/sdk-interop.yml | 16 ++++++++-------- .github/workflows/sdk-response-conformance.yml | 6 +++--- .github/workflows/semgrep.yml | 2 +- .github/workflows/slash-command-dispatch.yml | 2 +- .github/workflows/training-agent-storyboards.yml | 12 ++++++------ .github/workflows/validate-agent-context.yml | 2 +- .github/workflows/validate-agent-roles-sync.yml | 2 +- .github/workflows/validate-schema-bundle.yml | 12 ++++++------ .../verify-matched-v4-runtime-attestation.yml | 8 ++++---- .github/workflows/wba-interop.yml | 4 ++-- 31 files changed, 75 insertions(+), 75 deletions(-) diff --git a/.github/workflows/aamp-snapshot-check.yml b/.github/workflows/aamp-snapshot-check.yml index 1831bd694f4..2936307d3ca 100644 --- a/.github/workflows/aamp-snapshot-check.yml +++ b/.github/workflows/aamp-snapshot-check.yml @@ -29,7 +29,7 @@ jobs: - uses: actions/checkout@v7.0.1 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml index 4e3989596e2..6de3a6fe960 100644 --- a/.github/workflows/ai-review.yml +++ b/.github/workflows/ai-review.yml @@ -37,7 +37,7 @@ jobs: - name: Mint App token (for the workflow-mod gate comment) id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.SECRETARIAT_APP_ID }} private-key: ${{ secrets.SECRETARIAT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/apps-web-check.yml b/.github/workflows/apps-web-check.yml index 16ee73593e6..2a4c3a544a0 100644 --- a/.github/workflows/apps-web-check.yml +++ b/.github/workflows/apps-web-check.yml @@ -54,7 +54,7 @@ jobs: - name: Setup Node.js if: steps.changes.outputs.web == 'true' - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: "24" cache: "npm" diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml index 4ff6509b524..a77ff6ca243 100644 --- a/.github/workflows/broken-links.yml +++ b/.github/workflows/broken-links.yml @@ -82,7 +82,7 @@ jobs: ref: ${{ github.event.workflow_run.head_branch || github.ref }} - name: Use Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: 'npm' diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml index eb150dac8ec..c8cfbd3fdb6 100644 --- a/.github/workflows/build-check.yml +++ b/.github/workflows/build-check.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" @@ -112,7 +112,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" @@ -149,7 +149,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" @@ -217,7 +217,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" diff --git a/.github/workflows/changeset-check.yml b/.github/workflows/changeset-check.yml index b64eb64c875..f6a50b5d1ac 100644 --- a/.github/workflows/changeset-check.yml +++ b/.github/workflows/changeset-check.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@v7.0.1 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' @@ -45,7 +45,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/check-image-alt-text.yml b/.github/workflows/check-image-alt-text.yml index 002646bf2ca..8404431ce95 100644 --- a/.github/workflows/check-image-alt-text.yml +++ b/.github/workflows/check-image-alt-text.yml @@ -19,7 +19,7 @@ jobs: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/check-seo-metadata.yml b/.github/workflows/check-seo-metadata.yml index 6bf5ee2ed34..eb55f4f980b 100644 --- a/.github/workflows/check-seo-metadata.yml +++ b/.github/workflows/check-seo-metadata.yml @@ -19,7 +19,7 @@ jobs: with: ref: ${{ github.event.pull_request.head.sha }} - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/check-testable-snippets.yml b/.github/workflows/check-testable-snippets.yml index e7ebb8830d6..a34171cc37c 100644 --- a/.github/workflows/check-testable-snippets.yml +++ b/.github/workflows/check-testable-snippets.yml @@ -20,7 +20,7 @@ jobs: fetch-depth: 0 # Need full history for diff - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' @@ -46,7 +46,7 @@ jobs: - name: Upload docs example coverage artifact if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: docs-example-coverage path: | diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 66c926656eb..99ed4c468be 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -493,7 +493,7 @@ jobs: fi - name: Setup Node.js for artifact build - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" @@ -565,7 +565,7 @@ jobs: - name: Upload Fly forensics if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: fly-forensics-${{ github.run_id }} path: /tmp/forensics/ diff --git a/.github/workflows/external-smoke.yml b/.github/workflows/external-smoke.yml index d6e39977200..44df82c85a7 100644 --- a/.github/workflows/external-smoke.yml +++ b/.github/workflows/external-smoke.yml @@ -20,7 +20,7 @@ jobs: timeout-minutes: 5 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm diff --git a/.github/workflows/forward-merge-3.0.yml b/.github/workflows/forward-merge-3.0.yml index 42141aa9ca5..94b813cf851 100644 --- a/.github/workflows/forward-merge-3.0.yml +++ b/.github/workflows/forward-merge-3.0.yml @@ -38,7 +38,7 @@ jobs: # recursion rule. Closes #3417. - name: Mint AAO Release Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -60,7 +60,7 @@ jobs: # The release-record resolver (scripts/forward-merge-release-records.cjs) # regenerates schema discovery through scripts/build-schemas.cjs. - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm diff --git a/.github/workflows/forward-merge-3.1.yml b/.github/workflows/forward-merge-3.1.yml index ec0ed5aaf0c..f08188f39b9 100644 --- a/.github/workflows/forward-merge-3.1.yml +++ b/.github/workflows/forward-merge-3.1.yml @@ -38,7 +38,7 @@ jobs: # recursion rule. Closes #3417. - name: Mint AgenticAdvertising.org Release Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -60,7 +60,7 @@ jobs: # The release-record resolver (scripts/forward-merge-release-records.cjs) # regenerates schema discovery through scripts/build-schemas.cjs. - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm diff --git a/.github/workflows/forward-merge-3.2.yml b/.github/workflows/forward-merge-3.2.yml index 9a8154dbea1..ade632265ed 100644 --- a/.github/workflows/forward-merge-3.2.yml +++ b/.github/workflows/forward-merge-3.2.yml @@ -38,7 +38,7 @@ jobs: # recursion rule. Closes #3417. - name: Mint AgenticAdvertising.org Release Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -60,7 +60,7 @@ jobs: # The release-record resolver (scripts/forward-merge-release-records.cjs) # regenerates schema discovery through scripts/build-schemas.cjs. - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm diff --git a/.github/workflows/ipr-agreement.yml b/.github/workflows/ipr-agreement.yml index a602e90106f..cf4fe49a50f 100644 --- a/.github/workflows/ipr-agreement.yml +++ b/.github/workflows/ipr-agreement.yml @@ -49,7 +49,7 @@ jobs: # script's API calls. Same pattern as ipr-check-callable.yml. - name: Mint AAO IPR Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.IPR_APP_ID }} private-key: ${{ secrets.IPR_APP_PRIVATE_KEY }} @@ -65,7 +65,7 @@ jobs: persist-credentials: true - name: Setup Node - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' @@ -98,7 +98,7 @@ jobs: # See the `check` job for why this uses the aao-ipr-bot App token. - name: Mint AAO IPR Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.IPR_APP_ID }} private-key: ${{ secrets.IPR_APP_PRIVATE_KEY }} @@ -114,7 +114,7 @@ jobs: persist-credentials: true - name: Setup Node - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/ipr-check-callable.yml b/.github/workflows/ipr-check-callable.yml index 534aaf5b029..738a0051aec 100644 --- a/.github/workflows/ipr-check-callable.yml +++ b/.github/workflows/ipr-check-callable.yml @@ -66,7 +66,7 @@ jobs: steps: - name: Mint AAO IPR Bot installation token (scoped to adcp) id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.IPR_APP_ID }} private-key: ${{ secrets.IPR_APP_PRIVATE_KEY }} @@ -84,7 +84,7 @@ jobs: persist-credentials: true - name: Setup Node - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' @@ -122,7 +122,7 @@ jobs: steps: - name: Mint AAO IPR Bot installation token (scoped to adcp) id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.IPR_APP_ID }} private-key: ${{ secrets.IPR_APP_PRIVATE_KEY }} @@ -140,7 +140,7 @@ jobs: persist-credentials: true - name: Setup Node - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' diff --git a/.github/workflows/migration-smoke-test.yml b/.github/workflows/migration-smoke-test.yml index 2bcc4cd944f..75a90c57c89 100644 --- a/.github/workflows/migration-smoke-test.yml +++ b/.github/workflows/migration-smoke-test.yml @@ -59,7 +59,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" @@ -979,7 +979,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: "npm" diff --git a/.github/workflows/publish-schema-pr-bundle.yml b/.github/workflows/publish-schema-pr-bundle.yml index 7670d95385a..80e5b6966d0 100644 --- a/.github/workflows/publish-schema-pr-bundle.yml +++ b/.github/workflows/publish-schema-pr-bundle.yml @@ -21,7 +21,7 @@ jobs: env: PR_HEAD_SHA: ${{ github.event.workflow_run.head_sha }} steps: - - uses: actions/download-artifact@v8.0.1 + - uses: actions/download-artifact@v8.0.2 with: name: schema-pr-bundle-${{ github.event.workflow_run.head_sha }} path: bundle diff --git a/.github/workflows/release-docs.yml b/.github/workflows/release-docs.yml index f56944a6880..83de0f59bc2 100644 --- a/.github/workflows/release-docs.yml +++ b/.github/workflows/release-docs.yml @@ -50,7 +50,7 @@ jobs: # are blocked by GitHub's recursion rule. Closes #3417. - name: Mint AAO Release Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 13046e0bfc3..4d454ea6f4a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -93,7 +93,7 @@ jobs: run: node scripts/check-release-state.cjs current - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: 'npm' @@ -224,7 +224,7 @@ jobs: # GitHub's recursion-blocking rule. Closes #3417. - name: Mint AAO Release Bot installation token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -242,7 +242,7 @@ jobs: run: node scripts/check-release-state.cjs current - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: 'npm' @@ -314,7 +314,7 @@ jobs: id: changesets-token timeout-minutes: 2 if: steps.release-artifacts.outputs.has_release_artifacts == 'false' - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -400,7 +400,7 @@ jobs: id: reconciliation-token timeout-minutes: 2 if: always() && steps.release-artifacts.outputs.has_release_artifacts == 'false' && steps.changesets-token.outcome == 'success' - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -419,7 +419,7 @@ jobs: - name: Retain Changesets reconciliation evidence if: always() && steps.release-artifacts.outputs.has_release_artifacts == 'false' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: changesets-transaction-${{ github.run_id }}-${{ github.run_attempt }} path: ${{ runner.temp }}/release-hooks/state.json diff --git a/.github/workflows/runtime-default-image.yml b/.github/workflows/runtime-default-image.yml index 1a56d444f57..47b3128015a 100644 --- a/.github/workflows/runtime-default-image.yml +++ b/.github/workflows/runtime-default-image.yml @@ -91,7 +91,7 @@ jobs: - name: Retain footprint and smoke receipts if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: default-runtime-footprint-${{ github.run_id }} path: ${{ runner.temp }}/default-runtime-footprint diff --git a/.github/workflows/sdk-interop.yml b/.github/workflows/sdk-interop.yml index 64830466372..2b5f4d2ad4f 100644 --- a/.github/workflows/sdk-interop.yml +++ b/.github/workflows/sdk-interop.yml @@ -64,10 +64,10 @@ jobs: timeout-minutes: 20 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: '3.12' - name: Install the SDKs @@ -83,10 +83,10 @@ jobs: timeout-minutes: 90 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: '3.12' - name: Install the SDKs @@ -100,7 +100,7 @@ jobs: --out "$RUNNER_TEMP/differential" - name: Upload candidate vectors and the summary if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: differential-coverage path: ${{ runner.temp }}/differential/ @@ -114,10 +114,10 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: '3.12' - name: Install the SDKs @@ -126,7 +126,7 @@ jobs: run: node tests/interop/matrix/run.cjs --out "$RUNNER_TEMP/matrix" - name: Upload the summary if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: interop-matrix path: ${{ runner.temp }}/matrix/ diff --git a/.github/workflows/sdk-response-conformance.yml b/.github/workflows/sdk-response-conformance.yml index 21e9c8e415a..9c71d2f6989 100644 --- a/.github/workflows/sdk-response-conformance.yml +++ b/.github/workflows/sdk-response-conformance.yml @@ -20,11 +20,11 @@ jobs: timeout-minutes: 15 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: '3.12' - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 @@ -49,7 +49,7 @@ jobs: node scripts/sdk-response-conformance/summary.cjs .context/sdk-response-conformance/report.json >> "$GITHUB_STEP_SUMMARY" - name: Retain wire observations and validation details if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: sdk-response-evidence path: .context/sdk-response-conformance/ diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index f6de6b92118..f89eaaa0f15 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -22,7 +22,7 @@ jobs: steps: - uses: actions/checkout@v7.0.1 - - uses: actions/setup-python@v7.0.0 + - uses: actions/setup-python@v7.1.0 with: python-version: "3.12" cache: pip diff --git a/.github/workflows/slash-command-dispatch.yml b/.github/workflows/slash-command-dispatch.yml index 51b79575fc8..b7c93bf68db 100644 --- a/.github/workflows/slash-command-dispatch.yml +++ b/.github/workflows/slash-command-dispatch.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Mint Secretariat App token id: app-token - uses: actions/create-github-app-token@v3.2.0 + uses: actions/create-github-app-token@v3.3.0 with: app-id: ${{ secrets.SECRETARIAT_APP_ID }} private-key: ${{ secrets.SECRETARIAT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/training-agent-storyboards.yml b/.github/workflows/training-agent-storyboards.yml index f7b17453adf..2b68a6b6e18 100644 --- a/.github/workflows/training-agent-storyboards.yml +++ b/.github/workflows/training-agent-storyboards.yml @@ -189,7 +189,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: 'npm' @@ -361,7 +361,7 @@ jobs: - name: Upload storyboards log on failure if: failure() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: storyboards-log-${{ matrix.surface }}-${{ matrix.tenant }} path: /tmp/storyboards.log @@ -578,7 +578,7 @@ jobs: - uses: actions/checkout@v7.0.1 - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: 'npm' @@ -615,7 +615,7 @@ jobs: - name: Upload /sales orchestrator artifacts if: always() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: storyboards-current-sales-orchestrator-${{ matrix.orchestrator }} path: | @@ -633,7 +633,7 @@ jobs: timeout-minutes: 10 steps: - name: Download /sales orchestrator artifacts - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: pattern: storyboards-current-sales-orchestrator-* path: /tmp/storyboards-sales-orchestrators @@ -724,7 +724,7 @@ jobs: - name: Upload aggregate /sales log on failure if: failure() - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: storyboards-log-current-sales path: /tmp/storyboards.log diff --git a/.github/workflows/validate-agent-context.yml b/.github/workflows/validate-agent-context.yml index f711a65ca06..4e0f7ad9480 100644 --- a/.github/workflows/validate-agent-context.yml +++ b/.github/workflows/validate-agent-context.yml @@ -16,7 +16,7 @@ jobs: timeout-minutes: 2 steps: - uses: actions/checkout@v7.0.1 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' - name: Run validator diff --git a/.github/workflows/validate-agent-roles-sync.yml b/.github/workflows/validate-agent-roles-sync.yml index c8cd0e6b454..72faa58874f 100644 --- a/.github/workflows/validate-agent-roles-sync.yml +++ b/.github/workflows/validate-agent-roles-sync.yml @@ -17,7 +17,7 @@ jobs: timeout-minutes: 2 steps: - uses: actions/checkout@v7.0.1 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' - name: Regenerate from source diff --git a/.github/workflows/validate-schema-bundle.yml b/.github/workflows/validate-schema-bundle.yml index 319b1298bde..b5379e10ec1 100644 --- a/.github/workflows/validate-schema-bundle.yml +++ b/.github/workflows/validate-schema-bundle.yml @@ -31,7 +31,7 @@ jobs: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 1 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: npm @@ -88,7 +88,7 @@ jobs: cmp "${RUNNER_TEMP}/first.tgz.provenance.json" dist/protocol/latest.tgz.provenance.json - name: Upload protocol PR bundle - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: schema-pr-bundle-${{ github.event.pull_request.head.sha }} path: | @@ -104,7 +104,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/download-artifact@v8.0.1 + - uses: actions/download-artifact@v8.0.2 with: name: schema-pr-bundle-${{ github.event.pull_request.head.sha }} path: bundle @@ -126,7 +126,7 @@ jobs: path: sdk fetch-depth: 1 - - uses: actions/setup-node@v7 + - uses: actions/setup-node@v7.1.0 with: node-version: '24' cache: npm @@ -187,7 +187,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 steps: - - uses: actions/download-artifact@v8.0.1 + - uses: actions/download-artifact@v8.0.2 with: name: schema-pr-bundle-${{ github.event.pull_request.head.sha }} path: bundle @@ -203,7 +203,7 @@ jobs: path: sdk fetch-depth: 1 - - uses: actions/setup-python@v7.0.0 + - uses: actions/setup-python@v7.1.0 with: python-version: '3.12' cache: pip diff --git a/.github/workflows/verify-matched-v4-runtime-attestation.yml b/.github/workflows/verify-matched-v4-runtime-attestation.yml index bb3381138bb..2af7b51df66 100644 --- a/.github/workflows/verify-matched-v4-runtime-attestation.yml +++ b/.github/workflows/verify-matched-v4-runtime-attestation.yml @@ -34,7 +34,7 @@ jobs: test "$DISPATCH_SHA" = "$current_main_sha" test "$(git rev-parse HEAD)" = "$current_main_sha" echo "approved_main_sha=$current_main_sha" >> "$GITHUB_OUTPUT" - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: "24" cache: npm @@ -56,7 +56,7 @@ jobs: "${{ steps.verify.outputs.approved_main_sha }}" "$bundle_sha256" \ > /tmp/matched-v4-runtime-attestation.json - name: Transfer build output to the protected attestation job - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: matched-v4-runtime-build-${{ steps.verify.outputs.approved_main_sha }} path: | @@ -78,7 +78,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download the untrusted build output without executing it - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: matched-v4-runtime-build-${{ needs.verify-origin-main.outputs.approved_main_sha }} path: /tmp/matched-v4-runtime @@ -219,7 +219,7 @@ jobs: raise ValueError("deployment-environment value mismatch") PY - name: Retain verification inputs for the later protected runner - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: matched-v4-runtime-attestation-${{ github.sha }} path: | diff --git a/.github/workflows/wba-interop.yml b/.github/workflows/wba-interop.yml index 8edba691b5a..5d4db971d6a 100644 --- a/.github/workflows/wba-interop.yml +++ b/.github/workflows/wba-interop.yml @@ -34,7 +34,7 @@ jobs: timeout-minutes: 10 steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: '24' cache: npm @@ -45,7 +45,7 @@ jobs: - run: node tests/wba-interop/run.mjs --self --junit wba-interop.xml - name: Retain the JUnit report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: wba-interop path: wba-interop.xml