From 5ee475d40cbd3efbeee8125babaaf90c350a5388 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 05:05:44 +0000 Subject: [PATCH] chore(deps)(deps): bump the github-actions group with 13 updates Bumps the github-actions group with 13 updates: | Package | From | To | | --- | --- | --- | | [jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_book.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_ci.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.0` | `1.14.1` | | [jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_sync.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | | [jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` | Updates `jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_book.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_ci.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `actions/attest` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/v4.1.1...v4.2.0) Updates `pypa/gh-action-pypi-publish` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.14.0...v1.14.1) Updates `jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_sync.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) Updates `jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml` from 1.1.3 to 1.2.2 - [Release notes](https://github.com/jebel-quant/rhiza/releases) - [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md) - [Commits](https://github.com/jebel-quant/rhiza/compare/v1.1.3...v1.2.2) --- updated-dependencies: - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_book.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/rhiza_benchmark.yml | 2 +- .github/workflows/rhiza_book.yml | 2 +- .github/workflows/rhiza_ci.yml | 2 +- .github/workflows/rhiza_codeql.yml | 2 +- .github/workflows/rhiza_fuzzing.yml | 2 +- .github/workflows/rhiza_marimo.yml | 2 +- .github/workflows/rhiza_mutation.yml | 2 +- .github/workflows/rhiza_release.yml | 6 +++--- .github/workflows/rhiza_scorecard.yml | 2 +- .github/workflows/rhiza_sync.yml | 2 +- .github/workflows/rhiza_weekly.yml | 2 +- 11 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/rhiza_benchmark.yml b/.github/workflows/rhiza_benchmark.yml index 5eedff11..a828854c 100644 --- a/.github/workflows/rhiza_benchmark.yml +++ b/.github/workflows/rhiza_benchmark.yml @@ -20,5 +20,5 @@ on: jobs: benchmark: - uses: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml@v1.2.2 secrets: inherit diff --git a/.github/workflows/rhiza_book.yml b/.github/workflows/rhiza_book.yml index af8be5bc..6be036ad 100644 --- a/.github/workflows/rhiza_book.yml +++ b/.github/workflows/rhiza_book.yml @@ -29,7 +29,7 @@ permissions: jobs: book: - uses: jebel-quant/rhiza/.github/workflows/rhiza_book.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_book.yml@v1.2.2 secrets: inherit permissions: contents: read diff --git a/.github/workflows/rhiza_ci.yml b/.github/workflows/rhiza_ci.yml index 3c245019..468d0358 100644 --- a/.github/workflows/rhiza_ci.yml +++ b/.github/workflows/rhiza_ci.yml @@ -26,5 +26,5 @@ on: jobs: ci: - uses: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml@v1.2.2 secrets: inherit diff --git a/.github/workflows/rhiza_codeql.yml b/.github/workflows/rhiza_codeql.yml index 975db9d1..0d108e3b 100644 --- a/.github/workflows/rhiza_codeql.yml +++ b/.github/workflows/rhiza_codeql.yml @@ -26,7 +26,7 @@ on: jobs: codeql: - uses: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml@v1.2.2 secrets: inherit permissions: security-events: write # Upload CodeQL results to code scanning diff --git a/.github/workflows/rhiza_fuzzing.yml b/.github/workflows/rhiza_fuzzing.yml index b396d4af..5ce055ec 100644 --- a/.github/workflows/rhiza_fuzzing.yml +++ b/.github/workflows/rhiza_fuzzing.yml @@ -34,7 +34,7 @@ permissions: jobs: fuzzing: - uses: jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml@v1.2.2 secrets: inherit permissions: contents: read diff --git a/.github/workflows/rhiza_marimo.yml b/.github/workflows/rhiza_marimo.yml index 98f46f25..34e8dc22 100644 --- a/.github/workflows/rhiza_marimo.yml +++ b/.github/workflows/rhiza_marimo.yml @@ -28,5 +28,5 @@ on: jobs: marimo: - uses: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml@v1.2.2 secrets: inherit diff --git a/.github/workflows/rhiza_mutation.yml b/.github/workflows/rhiza_mutation.yml index 9c2b6cf8..66cbd162 100644 --- a/.github/workflows/rhiza_mutation.yml +++ b/.github/workflows/rhiza_mutation.yml @@ -42,7 +42,7 @@ jobs: # this repo sets the `MUTATION_ENABLED` variable to 'true'. Gating here in # the caller keeps it optional regardless of the pinned reusable workflow. if: ${{ vars.MUTATION_ENABLED == 'true' }} - uses: jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml@v1.2.2 secrets: inherit permissions: contents: read diff --git a/.github/workflows/rhiza_release.yml b/.github/workflows/rhiza_release.yml index 69dd748a..93ea4993 100644 --- a/.github/workflows/rhiza_release.yml +++ b/.github/workflows/rhiza_release.yml @@ -221,7 +221,7 @@ jobs: version: "0.11.16" - name: Configure git auth for private packages - uses: jebel-quant/rhiza/.github/actions/configure-git-auth@v1.1.3 + uses: jebel-quant/rhiza/.github/actions/configure-git-auth@v1.2.2 with: token: ${{ secrets.GH_PAT }} @@ -286,7 +286,7 @@ jobs: # The XML format is provided for compatibility but doesn't need separate attestation. id: attest-sbom if: hashFiles('pyproject.toml') != '' && github.event.repository.private == false - uses: actions/attest@v4.1.1 + uses: actions/attest@v4.2.0 with: subject-path: sbom.cdx.json sbom-path: sbom.cdx.json @@ -430,7 +430,7 @@ jobs: # repository-url and password only used for custom feeds, not for PyPI with OIDC - name: Publish to PyPI if: ${{ steps.check_dist.outputs.should_publish == 'true' }} - uses: pypa/gh-action-pypi-publish@v1.14.0 + uses: pypa/gh-action-pypi-publish@v1.14.1 with: packages-dir: dist/ skip-existing: true diff --git a/.github/workflows/rhiza_scorecard.yml b/.github/workflows/rhiza_scorecard.yml index 91c3bf7e..3f968885 100644 --- a/.github/workflows/rhiza_scorecard.yml +++ b/.github/workflows/rhiza_scorecard.yml @@ -36,7 +36,7 @@ permissions: read-all jobs: scorecard: - uses: jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml@v1.2.2 secrets: inherit permissions: security-events: write # Upload the SARIF results to code scanning diff --git a/.github/workflows/rhiza_sync.yml b/.github/workflows/rhiza_sync.yml index a6ff63f0..21b9b358 100644 --- a/.github/workflows/rhiza_sync.yml +++ b/.github/workflows/rhiza_sync.yml @@ -35,7 +35,7 @@ on: jobs: sync: - uses: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml@v1.2.2 with: direct: ${{ github.event_name == 'push' }} create-pr: ${{ github.event_name != 'push' && (github.event_name == 'schedule' || inputs.create-pr == true) }} diff --git a/.github/workflows/rhiza_weekly.yml b/.github/workflows/rhiza_weekly.yml index 1263b3c4..b4a92964 100644 --- a/.github/workflows/rhiza_weekly.yml +++ b/.github/workflows/rhiza_weekly.yml @@ -28,5 +28,5 @@ on: jobs: weekly: - uses: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml@v1.1.3 + uses: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml@v1.2.2 secrets: inherit