From eb480d0fa5c8cf273e5a3e0de24c9cf58e72a8f2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Sep 2026 09:12:40 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2` | `4` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) Updates `actions/attest-build-provenance` from 2 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v4) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bundle.yml | 12 ++++++------ .github/workflows/ci.yml | 14 +++++++------- .github/workflows/codeql.yml | 6 +++--- .github/workflows/release.yml | 8 ++++---- 4 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/bundle.yml b/.github/workflows/bundle.yml index 3e3ffa1..cf2a49e 100644 --- a/.github/workflows/bundle.yml +++ b/.github/workflows/bundle.yml @@ -19,7 +19,7 @@ jobs: name: Notices and test data runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: taiki-e/install-action@v2 @@ -28,7 +28,7 @@ jobs: - name: Generate working-directory: rust run: cargo about generate about.hbs -o ../THIRD-PARTY-NOTICES.txt - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: third-party-notices path: THIRD-PARTY-NOTICES.txt @@ -38,7 +38,7 @@ jobs: manifest=$(cargo metadata --format-version 1 --locked --manifest-path rust/Cargo.toml | jq -r '.packages[] | select(.name == "las") | .manifest_path') cp -r "$(dirname "$manifest")/tests/data" test_data - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: test-data path: test_data @@ -63,7 +63,7 @@ jobs: - { name: macos-arm64, os: macos-latest } - { name: macos-x64, os: macos-15-intel } steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: Swatinem/rust-cache@v2 @@ -84,7 +84,7 @@ jobs: cmake --preset release -DLASRS_BUILD_TESTS=OFF -DLASRS_BUILD_EXAMPLES=OFF ${{ matrix.cmake-args }} cmake --build --preset release cmake --install build/release --prefix dist/lasrs-cpp - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: third-party-notices path: dist/lasrs-cpp/share/lasrs @@ -96,7 +96,7 @@ jobs: cmake --build build/package-$config ctest --test-dir build/package-$config --output-on-failure done - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: lasrs-cpp-${{ matrix.name }} path: dist/lasrs-cpp diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cbb3863..b5fef2f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -41,7 +41,7 @@ jobs: CC: ${{ matrix.config.cc }} CXX: ${{ matrix.config.cxx }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: Swatinem/rust-cache@v2 @@ -71,7 +71,7 @@ jobs: name: Subproject runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: Swatinem/rust-cache@v2 @@ -113,15 +113,15 @@ jobs: exclude: - { arch: arm64, image: "archlinux:latest" } steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install compiler id: deps run: bash .github/scripts/install-distro-deps.sh - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: lasrs-cpp-linux-${{ matrix.arch }} path: bundle - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: test-data path: test_data @@ -153,7 +153,7 @@ jobs: ASAN_OPTIONS: detect_leaks=1:strict_string_checks=1 UBSAN_OPTIONS: halt_on_error=1:print_stacktrace=1 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: Swatinem/rust-cache@v2 @@ -175,7 +175,7 @@ jobs: name: Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust run: .github/scripts/install-rust.sh - uses: Swatinem/rust-cache@v2 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ced4a4a..c1851e5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -27,8 +27,8 @@ jobs: - { language: rust, build-mode: none } - { language: actions, build-mode: none } steps: - - uses: actions/checkout@v4 - - uses: github/codeql-action/init@v3 + - uses: actions/checkout@v7 + - uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -42,6 +42,6 @@ jobs: run: | cmake --preset release cmake --build --preset release - - uses: github/codeql-action/analyze@v3 + - uses: github/codeql-action/analyze@v4 with: category: /language:${{ matrix.language }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8e79961..735a961 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: name: Check version and changelog runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Tag matches the project versions run: | version=${GITHUB_REF_NAME#v} @@ -48,8 +48,8 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v7 + - uses: actions/download-artifact@v8 with: pattern: lasrs-cpp-* path: dist @@ -68,7 +68,7 @@ jobs: fi done sha256sum *.zip *.tar.gz > SHA256SUMS.txt - - uses: actions/attest-build-provenance@v2 + - uses: actions/attest-build-provenance@v4 with: subject-path: | dist/*.zip