From 3b08540ccc304c29b51dfa8fa6b9960cfae30332 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 06:08:23 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [codecov/codecov-action](https://github.com/codecov/codecov-action), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `codecov/codecov-action` from 5 to 7 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5...v7) Updates `dependabot/fetch-metadata` from 2 to 3 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2...v3) Updates `actions/dependency-review-action` from 4 to 5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dependabot/fetch-metadata dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ai-agent.yml | 6 +++--- .github/workflows/auto-fix-security.yml | 2 +- .github/workflows/ci.yml | 8 ++++---- .github/workflows/data-pipeline.yml | 2 +- .github/workflows/dependabot-auto-merge.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/publish-pypi.yml | 2 +- .github/workflows/security.yml | 8 ++++---- .github/workflows/train-model.yml | 2 +- .github/workflows/validate-workflows.yml | 2 +- 10 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/ai-agent.yml b/.github/workflows/ai-agent.yml index c256157..59bdc59 100644 --- a/.github/workflows/ai-agent.yml +++ b/.github/workflows/ai-agent.yml @@ -93,7 +93,7 @@ jobs: issues: write steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -206,7 +206,7 @@ jobs: issues: write steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -299,7 +299,7 @@ jobs: issues: write steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/auto-fix-security.yml b/.github/workflows/auto-fix-security.yml index bac1b5a..fdef1ef 100644 --- a/.github/workflows/auto-fix-security.yml +++ b/.github/workflows/auto-fix-security.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e22806c..ca4ef90 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,7 +35,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Set up Python uses: actions/setup-python@v6 @@ -72,7 +72,7 @@ jobs: timeout-minutes: 10 steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Set up Python uses: actions/setup-python@v6 @@ -110,7 +110,7 @@ jobs: python-version: ['3.11', '3.12'] steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@v6 @@ -140,7 +140,7 @@ jobs: uv run pytest test/ -v --cov=src/astro_lab --cov-report=xml --cov-report=term-missing - name: Upload coverage reports - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v7 if: matrix.python-version == '3.11' with: files: ./coverage.xml diff --git a/.github/workflows/data-pipeline.yml b/.github/workflows/data-pipeline.yml index ebd1a99..31d53da 100644 --- a/.github/workflows/data-pipeline.yml +++ b/.github/workflows/data-pipeline.yml @@ -73,7 +73,7 @@ jobs: timeout-minutes: 45 steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Set up Python uses: actions/setup-python@v6 diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 110afba..e501517 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -12,7 +12,7 @@ jobs: steps: - name: Fetch Dependabot metadata id: meta - uses: dependabot/fetch-metadata@v2 + uses: dependabot/fetch-metadata@v3 with: github-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 41d3874..ee5006e 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 # Full history for git operations diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml index 50d2a05..5f792e6 100644 --- a/.github/workflows/publish-pypi.yml +++ b/.github/workflows/publish-pypi.yml @@ -15,7 +15,7 @@ jobs: timeout-minutes: 15 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python uses: actions/setup-python@v6 diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index f519bf4..e7f02d9 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -41,7 +41,7 @@ jobs: image: semgrep/semgrep steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Run Semgrep run: semgrep ci --sarif --output=semgrep-results.sarif @@ -71,7 +71,7 @@ jobs: contents: read steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 @@ -94,10 +94,10 @@ jobs: if: github.event_name == 'pull_request' steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Dependency Review - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high allow-licenses: >- diff --git a/.github/workflows/train-model.yml b/.github/workflows/train-model.yml index 9a493ea..2ee063d 100644 --- a/.github/workflows/train-model.yml +++ b/.github/workflows/train-model.yml @@ -90,7 +90,7 @@ jobs: timeout-minutes: 60 steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Set up Python uses: actions/setup-python@v6 diff --git a/.github/workflows/validate-workflows.yml b/.github/workflows/validate-workflows.yml index 3e6d288..cce7c45 100644 --- a/.github/workflows/validate-workflows.yml +++ b/.github/workflows/validate-workflows.yml @@ -23,7 +23,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Download actionlint id: get_actionlint