From aedff8d295e5eafdfcc21db7dfdce8cab2c55e7b Mon Sep 17 00:00:00 2001 From: Kevin Stillhammer Date: Fri, 30 Jan 2026 09:31:31 +0100 Subject: [PATCH] Bump dependencies and actions (#311) --- .github/workflows/codeql-analysis.yml | 8 +- .github/workflows/release-drafter.yml | 2 +- .github/workflows/test.yml | 44 ++++---- .github/workflows/update-known-checksums.yml | 4 +- .github/workflows/update-major-minor-tags.yml | 2 +- biome.json | 2 +- dist/ruff-action/index.js | Bin 1577134 -> 1576739 bytes package-lock.json | 104 +++++++++--------- package.json | 8 +- 9 files changed, 87 insertions(+), 87 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 68a26b7..f9b5c77 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,13 +39,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10 + uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0 with: languages: ${{ matrix.language }} source-root: src @@ -57,7 +57,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10 + uses: github/codeql-action/autobuild@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -71,4 +71,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10 + uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0 diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index 8ca5833..ee8a5c0 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -17,6 +17,6 @@ jobs: pull-requests: read steps: - name: 🚀 Run Release Drafter - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0 + uses: release-drafter/release-drafter@6db134d15f3909ccc9eefd369f02bd1e9cffdf97 # v6.2.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 65c60ce..814c67a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -16,7 +16,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Actionlint @@ -42,7 +42,7 @@ jobs: matrix: os: [ubuntu-latest, macos-latest, macos-14, windows-latest] steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use latest version @@ -57,7 +57,7 @@ jobs: ruff-version: ["0.1.7", "0.1.8", "0.4.7", "0.4.10", "0.7", "0.7.x", ">=0.7.0"] os: [ ubuntu-latest, ubuntu-24.04-arm, macos-latest, macos-14, windows-latest ] steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use version ${{ matrix.ruff-version }} @@ -68,7 +68,7 @@ jobs: test-unsupported-version: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Try install old version @@ -88,7 +88,7 @@ jobs: test-version-from-version-file-pyproject: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use version from pyproject.toml @@ -107,7 +107,7 @@ jobs: test-default-version-from-pyproject: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml @@ -125,7 +125,7 @@ jobs: test-default-version-from-pyproject-dev-group: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml dev group @@ -144,7 +144,7 @@ jobs: test-default-version-from-pyproject-dependency-groups: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml dependency groups @@ -163,7 +163,7 @@ jobs: test-default-version-from-pyproject-dependency-groups-with-env-marker: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml with environment marker @@ -183,7 +183,7 @@ jobs: test-default-version-from-pyproject-poetry-groups: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml poetry group dependencies @@ -202,7 +202,7 @@ jobs: test-default-version-from-pyproject-poetry: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml poetry dependencies @@ -221,7 +221,7 @@ jobs: test-default-version-from-pyproject-optional-dependencies: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from pyproject.toml optional dependencies @@ -240,7 +240,7 @@ jobs: test-default-version-from-requirements: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from requirements.txt @@ -259,7 +259,7 @@ jobs: test-default-version-from-requirements-with-hash: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version from requirements-with-hash.txt @@ -278,7 +278,7 @@ jobs: test-semver-range: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use version 0.7 @@ -297,7 +297,7 @@ jobs: test-pep440-version-specifier: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Install version 0.9.10 @@ -323,7 +323,7 @@ jobs: - os: macos-latest checksum: "af9583bff12afbca5d5670334e0187dd60c4d91bc71317d1b2dde70cb1200ba9" steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Checksum matches expected @@ -335,7 +335,7 @@ jobs: test-with-explicit-token: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use default version @@ -349,7 +349,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest] steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use args @@ -360,7 +360,7 @@ jobs: test-failure: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Format should fail @@ -396,7 +396,7 @@ jobs: matrix: os: [ ubuntu-latest, windows-latest ] steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use args @@ -409,7 +409,7 @@ jobs: test-parent-directory-pyproject: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Use version from parent directory pyproject.toml diff --git a/.github/workflows/update-known-checksums.yml b/.github/workflows/update-known-checksums.yml index e7b592c..171c73b 100644 --- a/.github/workflows/update-known-checksums.yml +++ b/.github/workflows/update-known-checksums.yml @@ -11,7 +11,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0 @@ -24,7 +24,7 @@ jobs: src/download/checksum/known-checksums.ts ${{ secrets.GITHUB_TOKEN }} - run: npm ci --ignore-scripts && npm run all - name: Create Pull Request - uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0 + uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0 with: commit-message: "chore: update known checksums" title: diff --git a/.github/workflows/update-major-minor-tags.yml b/.github/workflows/update-major-minor-tags.yml index e5d0cc0..8b187c4 100644 --- a/.github/workflows/update-major-minor-tags.yml +++ b/.github/workflows/update-major-minor-tags.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - name: Update Major Minor Tags diff --git a/biome.json b/biome.json index deeefb6..c5cc666 100644 --- a/biome.json +++ b/biome.json @@ -1,5 +1,5 @@ { - "$schema": "https://biomejs.dev/schemas/2.1.4/schema.json", + "$schema": "https://biomejs.dev/schemas/2.3.2/schema.json", "assist": { "actions": { "source": { diff --git a/dist/ruff-action/index.js b/dist/ruff-action/index.js index 2ae53e478aa3e253715d9c187c8b57498e098dea..1a19768a201f00a819b7fef1ca817f940497dc34 100644 GIT binary patch delta 969 zcmZWo&rcIU6wXpCv}h6NE0}dge}y@-B@mYOznB@hse)eMLVf__wv7IVMF_Lo`a)+!0(fnA2hb`Uynx&a3V}OnSfXeXycF~2ZEvV_083E!q z<}x)PrW`|veJ{3lvFFF|dQD8IK_d$C=X8?H@(l52gBG1^Nv7$EVDlQq#H_E>04T?u zzEZ7fK6qaL%v4a!9c}}WE%F8N>Z0wjgZKc+c;SeDeQH30egcKWM;t8y>9;fR~ zlgPN~&qz5@)h)`C+6o8=P!X+4RcU*uR5&4$QUZ4l965jlXCykayG{&M53|zDo9~ncZgT*l`2$Q z4_7R6qQck=4q`fw*=!cITu#G*0gN?;hV$6h2%R~DO_6uDKz9F^(B*5-x8muCTsv+w84&Lsc zwakn(rC?g)mWhcb1&%1hT6~1QsQWv2On7slw>`wcqn_kV^z{G+&; zrnrxXyS{WR26RXL_P)p5;!%Uxi+Y)gax!p1gx|Dp%C8hBz0O8kCrSVJ9 z8_0O^=L6A*{qk41(@hWVLX2L@PY0sODwt6J3N9y#a1B!Su{HRtg`WHkYw5{}{;GA- zILsDn`Ou`RNwumwI0`5;ks9>r#gEl2#puyJNJpA4xXdGTdtqBQ_5K5w=l= 18" @@ -4117,9 +4117,9 @@ } }, "node_modules/undici-types": { - "version": "7.10.0", - "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.10.0.tgz", - "integrity": "sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag==", + "version": "7.16.0", + "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz", + "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==", "dev": true, "license": "MIT" }, diff --git a/package.json b/package.json index c9d3399..552990c 100644 --- a/package.json +++ b/package.json @@ -33,14 +33,14 @@ "@octokit/plugin-paginate-rest": "^13.1.1", "@octokit/plugin-rest-endpoint-methods": "^16.0.0", "@renovatebot/pep440": "^4.2.1", - "smol-toml": "^1.4.1" + "smol-toml": "^1.6.0" }, "devDependencies": { - "@biomejs/biome": "2.1.4", + "@biomejs/biome": "2.3.2", "@types/jest": "^29.5.14", "@types/js-yaml": "^4.0.9", - "@types/node": "^24.2.1", - "@types/semver": "^7.7.0", + "@types/node": "^24.10.9", + "@types/semver": "^7.7.1", "@vercel/ncc": "^0.38.3", "jest": "^29.7.0", "js-yaml": "^4.1.0",