From ad11480e343dde3142354daf4f0360521bb999a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Aug 2026 16:52:05 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish), [devr-tools/codeguard](https://github.com/devr-tools/codeguard), [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) and [docker/login-action](https://github.com/docker/login-action). Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ba38be9e461d3875417946c167d0b5f3d385a247...dc37677b2e1c63e2034f94d8a5b11f265b73ba33) Updates `devr-tools/codeguard` from 1.2.0 to 1.4.1 - [Release notes](https://github.com/devr-tools/codeguard/releases) - [Changelog](https://github.com/devr-tools/codeguard/blob/main/CHANGELOG.md) - [Commits](https://github.com/devr-tools/codeguard/compare/a1f8eb3aed6b6b645d42be2a8279b3f578328c40...d475da2923882f15e4060660f27a7dece5cb753b) Updates `Homebrew/actions/setup-homebrew` from 2026.07.20.1 to 2026.08.14.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](https://github.com/homebrew/actions/compare/df4b09108a1de9d6f995fe68f302b3f68bd6d2ef...8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4) Updates `docker/login-action` from 4.4.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...dbcb813823bdd20940b903addbd779551569679f) --- updated-dependencies: - dependency-name: devr-tools/codeguard dependency-version: 1.3.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Homebrew/actions/setup-homebrew dependency-version: 2026.07.29.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/homebrew-validation.yml | 2 +- .github/workflows/release.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 6465430..68ce73f 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -292,7 +292,7 @@ jobs: # Attestations stay on (the default): running in cd.yml makes both OIDC # claims resolve to cd.yml, so the PEP 740 attestation matches the cd.yml # trusted publisher. - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1 with: packages-dir: packaging/pypi/dist skip-existing: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5e8df59..ac14949 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -85,7 +85,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # make codeguard-ci: CI intentionally runs the stable Marketplace action instead of the in-repo binary. - - uses: devr-tools/codeguard@a1f8eb3aed6b6b645d42be2a8279b3f578328c40 + - uses: devr-tools/codeguard@d475da2923882f15e4060660f27a7dece5cb753b with: config: .codeguard/codeguard.yaml diff --git a/.github/workflows/homebrew-validation.yml b/.github/workflows/homebrew-validation.yml index 9beee34..c3bac26 100644 --- a/.github/workflows/homebrew-validation.yml +++ b/.github/workflows/homebrew-validation.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Set up Homebrew - uses: Homebrew/actions/setup-homebrew@df4b09108a1de9d6f995fe68f302b3f68bd6d2ef # main + uses: Homebrew/actions/setup-homebrew@8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4 # main - name: Clone Homebrew tap shell: bash diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 704ac54..8249742 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -188,7 +188,7 @@ jobs: uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0 - name: Log in to GHCR - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 with: registry: ghcr.io username: ${{ github.actor }}