From dd1bb99861e3c024555d917d5b9940b282ca1243 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 30 Aug 2026 01:30:32 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 3 updates Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/checkout` from 4.2.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.2.2...v7.0.1) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...v7.0.1) Updates `actions/download-artifact` from 4.3.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4.3.0...v8.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/audit.yml | 4 ++-- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/code-scanning.yml | 2 +- .github/workflows/dco.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/publish-mcp.yml | 2 +- .github/workflows/release.yml | 8 ++++---- .github/workflows/synaptic-maintenance.yml | 8 ++++---- 8 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index f608ef9..e32f813 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: taiki-e/install-action@v2 with: @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: taiki-e/install-action@v2 with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c1ad893..e890d3d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 with: components: rustfmt, clippy @@ -31,7 +31,7 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 30 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: Swatinem/rust-cache@v2 - run: cargo test --workspace --all-features --locked @@ -48,7 +48,7 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 30 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: Swatinem/rust-cache@v2 - run: cargo test -p synaptic --test mcp_e2e --all-features --locked @@ -65,7 +65,7 @@ jobs: runs-on: ${{ matrix.os }} timeout-minutes: 30 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: Swatinem/rust-cache@v2 - run: cargo test -p synaptic-store --all-features --locked @@ -79,7 +79,7 @@ jobs: env: RUSTDOCFLAGS: "-D warnings" steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: Swatinem/rust-cache@v2 - run: cargo doc --workspace --no-deps --all-features --locked @@ -137,7 +137,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 - uses: Swatinem/rust-cache@v2 - run: cargo test -p synaptic-extract --no-default-features --features lang-${{ matrix.lang }} --locked diff --git a/.github/workflows/code-scanning.yml b/.github/workflows/code-scanning.yml index 39f5ed8..256d35d 100644 --- a/.github/workflows/code-scanning.yml +++ b/.github/workflows/code-scanning.yml @@ -23,7 +23,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 with: components: clippy diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml index b25b1bc..2ad8978 100644 --- a/.github/workflows/dco.yml +++ b/.github/workflows/dco.yml @@ -10,7 +10,7 @@ jobs: signoff: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 9d089b9..bfdf356 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -22,7 +22,7 @@ jobs: contents: read pull-requests: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: actions/dependency-review-action@v5 with: fail-on-severity: high diff --git a/.github/workflows/publish-mcp.yml b/.github/workflows/publish-mcp.yml index e949cd3..d8a0867 100644 --- a/.github/workflows/publish-mcp.yml +++ b/.github/workflows/publish-mcp.yml @@ -13,7 +13,7 @@ jobs: contents: read steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7.0.1 - name: Set release version if: startsWith(github.ref, 'refs/tags/v') run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3d01270..0d3d3ea 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: target: x86_64-pc-windows-msvc runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@1.97.1 with: targets: ${{ matrix.target }} @@ -76,7 +76,7 @@ jobs: tar czf "${dist}.tar.gz" "$dist" shasum -a 256 "${dist}.tar.gz" | awk '{print $1}' > "${dist}.tar.gz.sha256" fi - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@v7.0.1 with: name: synaptic-${{ matrix.target }} path: | @@ -91,7 +91,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/') steps: - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@v8.0.1 with: path: dist merge-multiple: true @@ -110,7 +110,7 @@ jobs: runs-on: ubuntu-latest if: startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: Sync wiki/ to the GitHub wiki env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/synaptic-maintenance.yml b/.github/workflows/synaptic-maintenance.yml index fa6f267..3945155 100644 --- a/.github/workflows/synaptic-maintenance.yml +++ b/.github/workflows/synaptic-maintenance.yml @@ -65,7 +65,7 @@ jobs: base_sha: ${{ steps.synaptic.outputs.base_sha }} has_verified: ${{ steps.synaptic.outputs.has_verified }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false fetch-depth: 0 @@ -119,7 +119,7 @@ jobs: cloud_oidc_audience: ${{ inputs.cloud_oidc_audience || 'synaptic-api-maintenance' }} - name: Upload checksummed handoff only if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a with: name: synaptic-${{ inputs.automation_family || (github.event.schedule == '17 7 * * *' && 'dependency' || 'vulnerability') }}-${{ github.run_id }}-${{ github.run_attempt }} path: .synaptic-ci/handoffs @@ -148,7 +148,7 @@ jobs: permission-contents: write permission-pull-requests: write permission-workflows: write - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: ref: ${{ needs.repair.outputs.base_sha }} fetch-depth: 0 @@ -175,7 +175,7 @@ jobs: chmod 0755 "$binary" echo "binary=$binary" >> "$GITHUB_OUTPUT" echo "sha256=$actual_binary" >> "$GITHUB_OUTPUT" - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c with: name: synaptic-${{ inputs.automation_family || (github.event.schedule == '17 7 * * *' && 'dependency' || 'vulnerability') }}-${{ github.run_id }}-${{ github.run_attempt }} path: .synaptic-ci/handoffs