From cd96a6dbbc7aa5f70892f7e94c132dca8da5cf39 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 18 Oct 2026 14:14:07 +0000 Subject: [PATCH] ci(deps): bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/framework-release-watch.yml | 8 ++++---- .github/workflows/publish-pypi.yml | 4 ++-- .github/workflows/publish-testpypi.yml | 4 ++-- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ccd9910b..51d6aa33 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -598,7 +598,7 @@ jobs: run: pipx run --spec "nox==$NOX_VERSION" nox --no-venv --no-install -s benchmark - name: Upload the benchmark result for trending (#753) if: github.event_name == 'push' && github.ref == 'refs/heads/main' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: benchmark-result path: ${{ env.DONKEY_BENCHMARK_JSON }} diff --git a/.github/workflows/framework-release-watch.yml b/.github/workflows/framework-release-watch.yml index 059edcbb..46f4f5fe 100644 --- a/.github/workflows/framework-release-watch.yml +++ b/.github/workflows/framework-release-watch.yml @@ -191,7 +191,7 @@ jobs: --release "$RELEASE" --mode "${MODE:-co-bump}" --verify-json "$RUNNER_TEMP/verify.json" --outcome "install=$INSTALL" "verify=$VERIFY" "pytest=$PYTEST" "smoke=$SMOKE" - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: result-${{ matrix.extra }}-${{ matrix.package }} @@ -293,7 +293,7 @@ jobs: with: path: ${{ runner.temp }}/impact key: ${{ steps.cache.outputs.cache-primary-key }} - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: impact-${{ matrix.extra }}-${{ matrix.package }} @@ -320,13 +320,13 @@ jobs: - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 if: needs.detect.outputs.count != '0' && needs.detect.outputs.count != '' with: pattern: result-* path: ${{ runner.temp }}/results # The reviews are advisory: none at all is "impact review unavailable". - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 if: needs.detect.outputs.count != '0' && needs.detect.outputs.count != '' continue-on-error: true with: diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml index f556a8bd..ca776bf5 100644 --- a/.github/workflows/publish-pypi.yml +++ b/.github/workflows/publish-pypi.yml @@ -93,7 +93,7 @@ jobs: echo "Requires-Dist carries only >= floors." - name: the built wheel installs and imports in a clean virtualenv (#767) run: python scripts/smoke_test_wheel.py dist/*.whl - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: dist path: python/dist/ @@ -113,7 +113,7 @@ jobs: permissions: id-token: write # OIDC token for Trusted Publishing; no stored secret. steps: - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: dist path: dist/ diff --git a/.github/workflows/publish-testpypi.yml b/.github/workflows/publish-testpypi.yml index b5a430c9..e3163618 100644 --- a/.github/workflows/publish-testpypi.yml +++ b/.github/workflows/publish-testpypi.yml @@ -98,7 +98,7 @@ jobs: echo "Requires-Dist carries only >= floors." - name: the built wheel installs and imports in a clean virtualenv (#767) run: python scripts/smoke_test_wheel.py dist/*.whl - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: dist path: python/dist/ @@ -117,7 +117,7 @@ jobs: permissions: id-token: write # OIDC token for Trusted Publishing; no stored secret. steps: - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: dist path: dist/