From 60278b25a22010dfea075c0a93139bdcaefd02dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Mar 2026 04:33:00 +0000 Subject: [PATCH] ci: bump the prod-actions group with 3 updates Bumps the prod-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance). Updates `actions/upload-artifact` from 6 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) Updates `actions/download-artifact` from 7 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) Updates `actions/attest-build-provenance` from 3 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-actions - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build_inc.yml | 2 +- .github/workflows/inc_tc_basedpyright.yml | 2 +- .github/workflows/inc_tc_mypy.yml | 2 +- .github/workflows/inc_tc_pyrefly.yml | 2 +- .github/workflows/inc_tc_pyright.yml | 2 +- .github/workflows/inc_tc_ty.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/test_inc.yml | 16 ++++++++-------- 8 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/build_inc.yml b/.github/workflows/build_inc.yml index e28b306..f4cccda 100644 --- a/.github/workflows/build_inc.yml +++ b/.github/workflows/build_inc.yml @@ -52,7 +52,7 @@ jobs: tox@4.36.1 run -v -e build-${{ matrix.flavor }} - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: dist-${{ matrix.flavor }} path: dist/* diff --git a/.github/workflows/inc_tc_basedpyright.yml b/.github/workflows/inc_tc_basedpyright.yml index 746cabd..449e89a 100644 --- a/.github/workflows/inc_tc_basedpyright.yml +++ b/.github/workflows/inc_tc_basedpyright.yml @@ -32,7 +32,7 @@ jobs: repository: abelcheung/ci-annotation-converter path: ci-annotation-converter - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 if: inputs.tarball-flavor != 'none' with: name: dist-${{ inputs.tarball-flavor }} diff --git a/.github/workflows/inc_tc_mypy.yml b/.github/workflows/inc_tc_mypy.yml index 88377fe..16ca242 100644 --- a/.github/workflows/inc_tc_mypy.yml +++ b/.github/workflows/inc_tc_mypy.yml @@ -32,7 +32,7 @@ jobs: repository: abelcheung/ci-annotation-converter path: ci-annotation-converter - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 if: inputs.tarball-flavor != 'none' with: name: dist-${{ inputs.tarball-flavor }} diff --git a/.github/workflows/inc_tc_pyrefly.yml b/.github/workflows/inc_tc_pyrefly.yml index ca93486..216cdf1 100644 --- a/.github/workflows/inc_tc_pyrefly.yml +++ b/.github/workflows/inc_tc_pyrefly.yml @@ -32,7 +32,7 @@ jobs: repository: abelcheung/ci-annotation-converter path: ci-annotation-converter - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 if: inputs.tarball-flavor != 'none' with: name: dist-${{ inputs.tarball-flavor }} diff --git a/.github/workflows/inc_tc_pyright.yml b/.github/workflows/inc_tc_pyright.yml index c1e82f5..0434cd1 100644 --- a/.github/workflows/inc_tc_pyright.yml +++ b/.github/workflows/inc_tc_pyright.yml @@ -32,7 +32,7 @@ jobs: repository: abelcheung/ci-annotation-converter path: ci-annotation-converter - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 if: inputs.tarball-flavor != 'none' with: name: dist-${{ inputs.tarball-flavor }} diff --git a/.github/workflows/inc_tc_ty.yml b/.github/workflows/inc_tc_ty.yml index 76d8e94..ea33032 100644 --- a/.github/workflows/inc_tc_ty.yml +++ b/.github/workflows/inc_tc_ty.yml @@ -26,7 +26,7 @@ jobs: ty: runs-on: ubuntu-slim steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 if: inputs.tarball-flavor != 'none' with: name: dist-${{ inputs.tarball-flavor }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1597734..58bd788 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -42,7 +42,7 @@ jobs: - "alt" steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: dist-${{ matrix.flavor }} path: dist @@ -67,13 +67,13 @@ jobs: id-token: write attestations: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: pattern: dist-* path: dist merge-multiple: true - - uses: actions/attest-build-provenance@v3 + - uses: actions/attest-build-provenance@v4 with: subject-path: | dist/*.whl diff --git a/.github/workflows/test_inc.yml b/.github/workflows/test_inc.yml index 7a9902a..76f5175 100644 --- a/.github/workflows/test_inc.yml +++ b/.github/workflows/test_inc.yml @@ -25,7 +25,7 @@ jobs: - "lxml60" runs-on: ubuntu-slim steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: dist-${{ inputs.flavor }} path: dist @@ -63,7 +63,7 @@ jobs: --installpkg ${{ steps.wheel-name.outputs.filename }} --result-json test-${{ inputs.flavor }}-mypy-stubtest-${{ matrix.lxml-ver }}.json - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: log-${{ inputs.flavor }}-mypy-stubtest-${{ matrix.lxml-ver }} path: test-${{ inputs.flavor }}-mypy-*.json @@ -85,7 +85,7 @@ jobs: - "ubuntu-slim" runs-on: ${{ matrix.os }} steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: dist-${{ inputs.flavor }} path: dist @@ -120,7 +120,7 @@ jobs: --installpkg ${{ steps.wheel-name.outputs.filename }} --result-json test-${{ inputs.flavor }}-stub-${{ matrix.pyver }}.json - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: log-${{ inputs.flavor }}-stub-${{ matrix.pyver }} path: test-${{ inputs.flavor }}-stub-*.json @@ -143,7 +143,7 @@ jobs: - macos-14 runs-on: ${{ matrix.os }} steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: dist-${{ inputs.flavor }} path: dist @@ -183,7 +183,7 @@ jobs: --installpkg ${{ steps.wheel-name.outputs.filename }} --result-json test-${{ inputs.flavor }}-rt-${{ matrix.os }}-${{ matrix.pyver }}.json - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: log-${{ inputs.flavor }}-rt-${{ matrix.os }}-${{ matrix.pyver }} path: test-${{ inputs.flavor }}-rt-*.json @@ -197,13 +197,13 @@ jobs: actions: write steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: path: all-logs pattern: log-${{ inputs.flavor }}-* merge-multiple: true - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: alllogs-${{ inputs.flavor }} path: all-logs