From 1bbf0e05d1c6c7d0d6c665b2a38c17244a7493f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 12:45:37 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 11 updates Bumps the actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `5` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4` | `5` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2` | `4` | | [tauri-apps/tauri-action](https://github.com/tauri-apps/tauri-action) | `0` | `1` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) Updates `actions/upload-pages-artifact` from 3 to 5 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v5) Updates `actions/deploy-pages` from 4 to 5 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v4...v5) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `actions/attest-build-provenance` from 2 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v4) Updates `tauri-apps/tauri-action` from 0 to 1 - [Release notes](https://github.com/tauri-apps/tauri-action/releases) - [Changelog](https://github.com/tauri-apps/tauri-action/blob/dev/CHANGELOG.md) - [Commits](https://github.com/tauri-apps/tauri-action/compare/v0...v1) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: tauri-apps/tauri-action dependency-version: '1' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/docs.yml | 8 ++++---- .github/workflows/image.yml | 26 +++++++++++++------------- .github/workflows/labels.yml | 4 ++-- .github/workflows/release.yml | 14 +++++++------- 5 files changed, 34 insertions(+), 34 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 076d5d7..8556803 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -41,11 +41,11 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 45 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ inputs.ref || github.ref }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 cache: npm @@ -103,7 +103,7 @@ jobs: # A screenshot of every step and what each check said, when something broke. - name: Keep the tour's screenshots if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: e2e-${{ matrix.name }} path: artifacts/e2e/ @@ -127,18 +127,18 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 45 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ inputs.ref || github.ref }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 - name: Build - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: # The checked-out files, not the event's commit: a release checks its tag. context: . @@ -207,7 +207,7 @@ jobs: - name: Keep the tour's screenshots if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: e2e-image-${{ matrix.name }} path: artifacts/e2e/ diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index e88d78b..2070263 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -32,15 +32,15 @@ jobs: name: Build the site runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version: 24 cache: npm - run: npm ci --no-audit --no-fund - name: The site, for GitHub Pages run: node scripts/docs.mjs build --pages - - uses: actions/upload-pages-artifact@v3 + - uses: actions/upload-pages-artifact@v5 with: path: artifacts/docs-pages @@ -53,4 +53,4 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5 diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index 962d922..4097ffb 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -50,11 +50,11 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 @@ -71,10 +71,10 @@ jobs: echo "created=$(git log -1 --format=%cI)" } >> "$GITHUB_OUTPUT" - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 - name: Build for the smoke test - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . platforms: ${{ matrix.platform }} @@ -87,7 +87,7 @@ jobs: - name: Smoke test run: node scripts/image.mjs smoke signallab:release - - uses: docker/login-action@v3 + - uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -97,7 +97,7 @@ jobs: # pushed by digest; the publish job gives both digests their tags. - name: Push by digest id: push - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . platforms: ${{ matrix.platform }} @@ -118,7 +118,7 @@ jobs: mkdir -p "$RUNNER_TEMP/digests" touch "$RUNNER_TEMP/digests/${DIGEST#sha256:}" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: digest-${{ matrix.name }} path: ${{ runner.temp }}/digests/* @@ -135,15 +135,15 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: path: ${{ runner.temp }}/digests pattern: digest-* @@ -160,9 +160,9 @@ jobs: echo "EOF" } >> "$GITHUB_OUTPUT" - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 - - uses: docker/login-action@v3 + - uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -193,7 +193,7 @@ jobs: echo "digest=$(docker buildx imagetools inspect "$IMAGE:$version" --format '{{json .Manifest}}' | jq -r .digest)" >> "$GITHUB_OUTPUT" - name: Attest where it was built - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-name: ${{ env.IMAGE }} subject-digest: ${{ steps.index.outputs.digest }} diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index ff9eefe..97bc3f7 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -25,8 +25,8 @@ jobs: name: Sync runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version: 24 - name: The labels of .github/labels.json diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d8b7751..72bb3a6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -41,10 +41,10 @@ jobs: outputs: id: ${{ steps.draft.outputs.id }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 - name: The tag matches the version @@ -73,11 +73,11 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 60 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 cache: npm @@ -101,7 +101,7 @@ jobs: # The updater installs only what the private key signed; its public half is in # tauri.conf.json. Without the secrets the build fails rather than ship unsigned. - name: Build and upload to the draft - uses: tauri-apps/tauri-action@v0 + uses: tauri-apps/tauri-action@v1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }} @@ -138,10 +138,10 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ env.TAG }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: 24 - name: SHA256SUMS.txt for every installer