From af779cf1e35a6ceca18c0dc88641479799b71957 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 21:59:36 +0000 Subject: [PATCH] fix(deps): update non-major dependencies --- .github/workflows/integration-test.yml | 8 ++++---- .github/workflows/mkdocs.yml | 4 ++-- .github/workflows/release.yaml | 8 ++++---- .github/workflows/test.yml | 4 ++-- .github/workflows/typecheck.yml | 4 ++-- .github/workflows/update-lockfile.yaml | 6 +++--- .github/workflows/update.yml | 6 +++--- .github/workflows/zizmor.yaml | 4 ++-- pyproject.toml | 2 +- 9 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index 8e36a09b2..9726d2612 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -52,11 +52,11 @@ jobs: - name: Verify Conda platform run: echo "Conda platform is $CONDA_PLATFORM" - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: ${{ matrix.python-version }} - name: install conda-lock @@ -138,7 +138,7 @@ jobs: os: [ ubuntu-latest, macos-latest, windows-latest ] python-version: [ "3.10", "3.14" ] steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - uses: conda-incubator/setup-miniconda@fc2d68f6413eb2d87b895e92f8584b5b94a10167 # v3.3.0 @@ -220,7 +220,7 @@ jobs: echo "CONDA_PLATFORM=linux-64" >> $GITHUB_ENV - name: Verify Conda platform run: echo "Conda platform is $CONDA_PLATFORM" - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Set up Conda diff --git a/.github/workflows/mkdocs.yml b/.github/workflows/mkdocs.yml index a3c4b2a6d..7d26a62e8 100644 --- a/.github/workflows/mkdocs.yml +++ b/.github/workflows/mkdocs.yml @@ -25,7 +25,7 @@ jobs: permissions: contents: write # for mkdocs gh-deploy to push to gh-pages branch steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: submodules: "recursive" fetch-depth: 0 # Fetch all history for .GitInfo and .Lastmod @@ -48,7 +48,7 @@ jobs: - run: echo "cache_id=$(date --utc '+%V')" >> $GITHUB_ENV - - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + - uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: key: mkdocs-material-${{ env.cache_id }} path: .cache diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 651af81d9..d79f10f91 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -17,15 +17,15 @@ jobs: contents: read actions: write # for uploading artifacts steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 persist-credentials: false - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: - python-version: "3.10" + python-version: "3.14" - name: build run: | @@ -64,4 +64,4 @@ jobs: name: dist-files path: dist - name: Publish a Python distribution to PyPI - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 839769622..c75a96d06 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -89,7 +89,7 @@ jobs: PYTHONUNBUFFERED: "1" FORCE_COLOR: "1" steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 persist-credentials: false @@ -151,7 +151,7 @@ jobs: --splits="${{ matrix.pytest-split-group-size }}" \ --group="${{ matrix.pytest-split-group-index }}" - - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 + - uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5 with: token: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml index 80c65ca55..f29300297 100644 --- a/.github/workflows/typecheck.yml +++ b/.github/workflows/typecheck.yml @@ -43,11 +43,11 @@ jobs: os: ubuntu-latest steps: # Initialization - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 persist-credentials: false - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 if: matrix.setup-micromamba == false with: python-version: 3.14 diff --git a/.github/workflows/update-lockfile.yaml b/.github/workflows/update-lockfile.yaml index 0df4f19a7..06a97d365 100644 --- a/.github/workflows/update-lockfile.yaml +++ b/.github/workflows/update-lockfile.yaml @@ -28,7 +28,7 @@ jobs: contents: read actions: write # for uploading artifacts steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Micromamba @@ -64,7 +64,7 @@ jobs: pull-requests: write # for creating pull requests actions: read # for downloading artifacts steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false @@ -74,7 +74,7 @@ jobs: path: environments/ - name: Open a pull request - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0 + uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 with: # # The default GITHUB_TOKEN doesn't allow other workflows to trigger. # # Thus if there are tests to be run, they won't be run. For more info, diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml index b0ef94d7f..96a756f13 100644 --- a/.github/workflows/update.yml +++ b/.github/workflows/update.yml @@ -24,7 +24,7 @@ jobs: pull-requests: write # Required to open the generated update pull request. issues: write # Required for generated update pull request metadata. steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -33,11 +33,11 @@ jobs: git config --global user.name 'Conda Bot' git config --global user.email '18747875+conda-bot@users.noreply.github.com' - - uses: conda/actions/combine-durations@7f6830b1428a9bd47f0b068892c77eae95207037 # v26.1.0 + - uses: conda/actions/combine-durations@0f4ec1506e74c12799813dc66e613a39077ea864 # v26.7.0 id: durations continue-on-error: true - - uses: conda/actions/template-files@7f6830b1428a9bd47f0b068892c77eae95207037 # v26.1.0 + - uses: conda/actions/template-files@0f4ec1506e74c12799813dc66e613a39077ea864 # v26.7.0 id: templates continue-on-error: true diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index a88cb6946..36cc250b9 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -17,11 +17,11 @@ jobs: actions: read # only needed for private repos steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1 + uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 with: persona: pedantic diff --git a/pyproject.toml b/pyproject.toml index 61af51634..a327ee17b 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -77,7 +77,7 @@ dependencies = [ "build >=1.2.1,<2.0.0", "cachecontrol[filecache] >=0.14.0,<0.15.0", "crashtest >=0.4.1,<0.5.0", - "dulwich >=0.22.6,<0.25", + "dulwich >=0.25.2,<0.26", "fastjsonschema >=2.18.0,<3.0.0", 'importlib-metadata >= 4.4 ; python_version <"3.10"', 'installer >=1.0.1,<2.0.0',