From 88b43e9d3a55be7512b82e88686dc04740d52be3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 20:19:56 +0000 Subject: [PATCH] deps(actions): Bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.0.1` | `10.1.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.3.0` | `4.4.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.9` | `4.38.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.9` | `4.38.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.216` | `1.0.230` | Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4) Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) Updates `codecov/codecov-action` from 7.0.0 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...303a32d7a59b442fa8d48b6a1cc6825c09c847a5) Updates `github/codeql-action/init` from 4.37.9 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `anthropics/claude-code-action` from 1.0.216 to 1.0.230 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/d75b94d5ad426cb8546e6628b6f5f19b84e5cce1...4036a180cf690f49529f5d8c79c998855287f590) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.230 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-changelog.yml | 2 +- .github/workflows/ci-image.yml | 8 ++++---- .github/workflows/ci-lint.yml | 2 +- .github/workflows/ci-tests.yml | 6 +++--- .github/workflows/codeql.yml | 4 ++-- .github/workflows/daily-regen.yml | 4 ++-- .github/workflows/impl-generate.yml | 6 +++--- .github/workflows/impl-repair.yml | 6 +++--- .github/workflows/impl-review.yml | 2 +- .github/workflows/report-validate.yml | 2 +- .github/workflows/spec-create.yml | 4 ++-- .github/workflows/sync-postgres.yml | 2 +- .github/workflows/util-claude.yml | 4 ++-- 13 files changed, 26 insertions(+), 26 deletions(-) diff --git a/.github/workflows/ci-changelog.yml b/.github/workflows/ci-changelog.yml index 55bb709b252..5ed480a1ecf 100644 --- a/.github/workflows/ci-changelog.yml +++ b/.github/workflows/ci-changelog.yml @@ -70,7 +70,7 @@ jobs: python-version: '3.13' - name: Install uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 # `--no-project`: the tool is standard library only, so the gate answers # in seconds without syncing pandas, scipy and scikit-learn. diff --git a/.github/workflows/ci-image.yml b/.github/workflows/ci-image.yml index 5d59c9188aa..64b2f0cea6f 100644 --- a/.github/workflows/ci-image.yml +++ b/.github/workflows/ci-image.yml @@ -148,7 +148,7 @@ jobs: - name: Set up Buildx if: steps.check.outputs.should_build == 'true' - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 # push: false — nothing here reaches a registry; Cloud Build still owns the # published image. load: true puts the result into the local daemon so the @@ -156,7 +156,7 @@ jobs: # an unchanged dependency set at seconds instead of minutes. - name: Build the API image if: steps.check.outputs.should_build == 'true' - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: api/Dockerfile @@ -348,13 +348,13 @@ jobs: - name: Set up Buildx if: steps.check.outputs.should_build == 'true' - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 # Its own cache scope: this image shares no layer with the API's, and one # shared scope would have them evicting each other. - name: Build the app image if: steps.check.outputs.should_build == 'true' - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: app file: app/Dockerfile diff --git a/.github/workflows/ci-lint.yml b/.github/workflows/ci-lint.yml index feee6a3fa01..e9e4e2e65d3 100644 --- a/.github/workflows/ci-lint.yml +++ b/.github/workflows/ci-lint.yml @@ -68,7 +68,7 @@ jobs: - name: Install uv if: steps.check.outputs.should_lint == 'true' - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 - name: Install dependencies if: steps.check.outputs.should_lint == 'true' diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml index 3869be1f19d..29b8faf2c06 100644 --- a/.github/workflows/ci-tests.yml +++ b/.github/workflows/ci-tests.yml @@ -89,7 +89,7 @@ jobs: - name: Install uv if: steps.check.outputs.should_test == 'true' - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 - name: Install dependencies if: steps.check.outputs.should_test == 'true' @@ -150,7 +150,7 @@ jobs: - name: Upload coverage to Codecov if: steps.check.outputs.should_test == 'true' && github.actor != 'dependabot[bot]' - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.xml @@ -240,7 +240,7 @@ jobs: - name: Upload frontend coverage to Codecov if: steps.check.outputs.should_test == 'true' - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./app/coverage/coverage-final.json diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 1cfc10bddba..8eaaef5bdc7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -54,7 +54,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: languages: ${{ matrix.language }} build-mode: none @@ -66,6 +66,6 @@ jobs: - plots/** - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/daily-regen.yml b/.github/workflows/daily-regen.yml index 9fbf21d69c5..fa6743f01a5 100644 --- a/.github/workflows/daily-regen.yml +++ b/.github/workflows/daily-regen.yml @@ -237,7 +237,7 @@ jobs: # block the main regeneration pipeline. Skip cleanly and continue. continue-on-error: true timeout-minutes: 15 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: '--model haiku --settings ${{ github.workspace }}/.claude/settings.json' @@ -253,7 +253,7 @@ jobs: # rather than aborting the dispatch. continue-on-error: true timeout-minutes: 15 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: '--model haiku --settings ${{ github.workspace }}/.claude/settings.json' diff --git a/.github/workflows/impl-generate.yml b/.github/workflows/impl-generate.yml index f26ba6036cd..e7edce13c6b 100644 --- a/.github/workflows/impl-generate.yml +++ b/.github/workflows/impl-generate.yml @@ -229,7 +229,7 @@ jobs: python-version: '3.13' - name: Install uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 - name: Install system dependencies run: | @@ -422,7 +422,7 @@ jobs: id: claude continue-on-error: true timeout-minutes: 60 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model ${{ steps.inputs.outputs.model }} --settings ${{ github.workspace }}/.claude/settings.json" @@ -442,7 +442,7 @@ jobs: if: steps.claude.outcome == 'failure' id: claude_retry timeout-minutes: 60 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model ${{ steps.inputs.outputs.model }} --settings ${{ github.workspace }}/.claude/settings.json" diff --git a/.github/workflows/impl-repair.yml b/.github/workflows/impl-repair.yml index 912dc701225..722136e32a6 100644 --- a/.github/workflows/impl-repair.yml +++ b/.github/workflows/impl-repair.yml @@ -104,7 +104,7 @@ jobs: python-version: '3.13' - name: Install uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 - name: Install Python plotting dependencies if: steps.lang.outputs.language == 'python' @@ -160,7 +160,7 @@ jobs: id: claude continue-on-error: true timeout-minutes: 45 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model ${{ inputs.model || 'sonnet' }} --settings ${{ github.workspace }}/.claude/settings.json" @@ -180,7 +180,7 @@ jobs: if: steps.claude.outcome == 'failure' id: claude_retry timeout-minutes: 45 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model ${{ inputs.model || 'sonnet' }} --settings ${{ github.workspace }}/.claude/settings.json" diff --git a/.github/workflows/impl-review.yml b/.github/workflows/impl-review.yml index d5de4ab7136..1f1a91ad84b 100644 --- a/.github/workflows/impl-review.yml +++ b/.github/workflows/impl-review.yml @@ -333,7 +333,7 @@ jobs: id: review continue-on-error: true timeout-minutes: 30 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 env: LIBRARY: ${{ steps.pr.outputs.library }} SPEC_ID: ${{ steps.pr.outputs.specification_id }} diff --git a/.github/workflows/report-validate.yml b/.github/workflows/report-validate.yml index af9a2e22ff8..75be8c1f0f5 100644 --- a/.github/workflows/report-validate.yml +++ b/.github/workflows/report-validate.yml @@ -58,7 +58,7 @@ jobs: id: validate continue-on-error: true timeout-minutes: 10 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 env: ISSUE_TITLE: ${{ github.event.issue.title }} ISSUE_BODY: ${{ github.event.issue.body }} diff --git a/.github/workflows/spec-create.yml b/.github/workflows/spec-create.yml index fe5fcba0b43..bf41b16ffc6 100644 --- a/.github/workflows/spec-create.yml +++ b/.github/workflows/spec-create.yml @@ -69,7 +69,7 @@ jobs: id: process continue-on-error: true timeout-minutes: 30 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 env: ISSUE_TITLE: ${{ github.event.issue.title }} ISSUE_BODY: ${{ github.event.issue.body }} @@ -178,7 +178,7 @@ jobs: if: steps.check.outputs.should_run == 'true' && steps.process.outcome == 'failure' id: process_retry timeout-minutes: 30 - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 env: ISSUE_TITLE: ${{ github.event.issue.title }} ISSUE_BODY: ${{ github.event.issue.body }} diff --git a/.github/workflows/sync-postgres.yml b/.github/workflows/sync-postgres.yml index 941d8a49f5d..ef2d7ee5492 100644 --- a/.github/workflows/sync-postgres.yml +++ b/.github/workflows/sync-postgres.yml @@ -39,7 +39,7 @@ jobs: python-version: '3.13' - name: Install uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0 - name: Install dependencies run: | diff --git a/.github/workflows/util-claude.yml b/.github/workflows/util-claude.yml index aa47f344d0f..a229f86e123 100644 --- a/.github/workflows/util-claude.yml +++ b/.github/workflows/util-claude.yml @@ -41,7 +41,7 @@ jobs: - name: Run Claude Code id: claude continue-on-error: true - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model opus --settings ${{ github.workspace }}/.claude/settings.json" @@ -53,7 +53,7 @@ jobs: - name: Retry Claude (on failure) if: steps.claude.outcome == 'failure' id: claude_retry - uses: anthropics/claude-code-action@d75b94d5ad426cb8546e6628b6f5f19b84e5cce1 # v1 + uses: anthropics/claude-code-action@4036a180cf690f49529f5d8c79c998855287f590 # v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_args: "--model opus --settings ${{ github.workspace }}/.claude/settings.json"