From 7892c653cd77f69f7ebd4ac9820a07bd02b4d46c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Feb 2026 23:23:33 +0000 Subject: [PATCH 1/6] Bump actions/download-artifact from 7 to 8 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index de171ddd..811cb87f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -61,7 +61,7 @@ jobs: permissions: id-token: write # IMPORTANT: mandatory for trusted publishing steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: python-package-distributions path: dist/ @@ -84,7 +84,7 @@ jobs: permissions: id-token: write # IMPORTANT: mandatory for trusted publishing steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: python-package-distributions path: dist/ @@ -119,7 +119,7 @@ jobs: # Sign the package distributions with Sigstore # https://github.com/marketplace/actions/gh-action-sigstore-python - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 with: name: python-package-distributions path: dist/ From deebafe912892e461c1fe6f82a196ae409dfa655 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Feb 2026 23:23:38 +0000 Subject: [PATCH 2/6] Bump actions/upload-artifact from 6 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 811cb87f..8c98ab76 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,7 +43,7 @@ jobs: requirements: tox - name: Build source (sdist) and binary (wheel) distributions run: tox -e build-dists - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 with: name: python-package-distributions path: dist/ From bdf1b6f1b244b4e0f29f1474f853bd4c7df7a203 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Mar 2026 23:23:14 +0000 Subject: [PATCH 3/6] Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.2.0 to 3.3.0. - [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases) - [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/v3.2.0...v3.3.0) --- updated-dependencies: - dependency-name: sigstore/gh-action-sigstore-python dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8c98ab76..a17ee29a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -124,7 +124,7 @@ jobs: name: python-package-distributions path: dist/ - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v3.2.0 + uses: sigstore/gh-action-sigstore-python@v3.3.0 with: inputs: >- ./dist/*.tar.gz From abd6f8bb098d0d6b3b3e70756b170162f63c3f96 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Mar 2026 23:23:20 +0000 Subject: [PATCH 4/6] Bump codecov/codecov-action from 5 to 6 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5...v6) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d6d0566f..6bfe52b0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -104,7 +104,7 @@ jobs: # Upload coverage reports to Codecov - name: Upload coverage to codecov - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v6 env: OS: "${{ matrix.os }}" PYTHON: "${{ matrix.python-version }}" From 5d15fe42f3a8c1c98911d82e99639aff822fc42c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 9 Apr 2026 23:23:37 +0000 Subject: [PATCH 5/6] Bump actions/github-script from 8 to 9 Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v8...v9) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- .github/workflows/check-release-notes.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/check-release-notes.yml b/.github/workflows/check-release-notes.yml index 0f3924ad..29ff11b5 100644 --- a/.github/workflows/check-release-notes.yml +++ b/.github/workflows/check-release-notes.yml @@ -86,7 +86,7 @@ jobs: - name: Resolve comment if: ${{ env.MISSING_CHANGELOG_ENTRY == '0' && steps.fc.outputs.comment-id != '' }} - uses: actions/github-script@v8 + uses: actions/github-script@v9 with: script: | query = `mutation minimizeComment { @@ -104,7 +104,7 @@ jobs: - name: Unresolve comment if: ${{ env.MISSING_CHANGELOG_ENTRY == '1' && steps.fc.outputs.comment-id != '' }} - uses: actions/github-script@v8 + uses: actions/github-script@v9 with: script: | query = `mutation unminimizeComment { From 176fc73678bc91ba778973bcbb7cd3ff18751055 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 24 May 2026 21:40:35 +0000 Subject: [PATCH 6/6] Add changelog entries for GitHub Actions dependency bumps Co-authored-by: tpvasconcelos <17701527+tpvasconcelos@users.noreply.github.com> --- docs/reference/changelog.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/reference/changelog.md b/docs/reference/changelog.md index 5211e960..e7bf832f 100644 --- a/docs/reference/changelog.md +++ b/docs/reference/changelog.md @@ -7,6 +7,11 @@ Unreleased changes ### CI/CD +- Bump actions/download-artifact from 7 to 8 ({gh-pr}`368`) +- Bump actions/upload-artifact from 6 to 7 ({gh-pr}`369`) +- Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 ({gh-pr}`370`) +- Bump codecov/codecov-action from 5 to 6 ({gh-pr}`371`) +- Bump actions/github-script from 8 to 9 ({gh-pr}`373`) - pre-commit autoupdate ({gh-pr}`374`) ---