Skip to content

chore(deps)(deps): bump the github-actions group with 13 updates#793

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-a9e7182a66
Open

chore(deps)(deps): bump the github-actions group with 13 updates#793
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-a9e7182a66

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 13 updates:

Package From To
jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_book.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_ci.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml 1.1.3 1.2.2
jebel-quant/rhiza 1.1.3 1.2.2
actions/attest 4.1.1 4.2.0
pypa/gh-action-pypi-publish 1.14.0 1.14.1
jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_sync.yml 1.1.3 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml 1.1.3 1.2.2

Updates jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_book.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_ci.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (#1395)

Dependencies

  • (deps) Lock file maintenance (#1402)
  • (deps) Update dependency typer to v0.26.8 (#1407)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.28 (#1405)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.21 (#1404)
  • (deps) Update dependency mypy to v2.3.0 (#1406)

Maintenance

  • Remove the automated rhiza_sync feature (sync is now manual) (#1403)
  • Chore(deps)(deps): bump the github-actions group with 6 updates (#1409)
  • De-CLI make sync/validate — drop the rhiza-cli dependency (#1408)
  • Drop make bump/release targets — releasing moves to rhiza-claude /release (#1411)
  • Derive reusable Python matrix from BAIPP classifiers (#1414)
  • Remove rhiza-tools usage from make.d (suppression-audit, pip-audit, analyze-benchmarks) (#1416)
  • Remove all rhiza-tools usage from the template (#1415)

Other Changes

... (truncated)

Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml from 1.1.3 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

v1.2.1

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

v1.2.0

Changelog

All notable changes to this project are documented in this file.

... (truncated)

Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)

[1.2.1] - 2026-07-17

Maintenance

  • Bump rhiza self-reference workflow and action pins to v1.2.1

[1.2.0] - 2026-07-16

New Features

  • (bundles) Remove the claude bundle and its slash commands (#1396)

Bug Fixes

  • Dockerfile CMD, CHANGELOG duplicate, lazy test sources, NPX guard, git init commit, regex escape (

Bumps the github-actions group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_book.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_ci.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.0` | `1.14.1` |
| [jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_sync.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml](https://github.com/jebel-quant/rhiza) | `1.1.3` | `1.2.2` |


Updates `jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_book.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_ci.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `actions/attest` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@v4.1.1...v4.2.0)

Updates `pypa/gh-action-pypi-publish` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.14.0...v1.14.1)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_sync.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml` from 1.1.3 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.1.3...v1.2.2)

---
updated-dependencies:
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_book.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_fuzzing.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_scorecard.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_sync.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_weekly.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants