From 4d60b2f205fedd2083b30d43152a3465d5d79d21 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 19:10:18 +0000 Subject: [PATCH 1/2] ci: bump the actions group across 1 directory with 2 updates Bumps the actions group with 2 updates in the / directory: [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ba38be9e461d3875417946c167d0b5f3d385a247...dc37677b2e1c63e2034f94d8a5b11f265b73ba33) Updates `astral-sh/setup-uv` from 9.0.0 to 10.0.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c771a70e6277c0a99b617c7a806ffedaca235ff9...20cfd1bf945f4377ade1205e4dbc17946fc9a30d) --- updated-dependencies: - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 63ee82f6..c9cae1ef 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -100,7 +100,7 @@ jobs: - name: Publish to PyPI if: steps.check_skip.outputs.skip != 'true' && steps.release.outputs.released == 'true' - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 - name: Publish GitHub Release if: steps.check_skip.outputs.skip != 'true' && steps.release.outputs.released == 'true' @@ -164,7 +164,7 @@ jobs: python-version: "3.12" - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 - name: Build package working-directory: target @@ -179,6 +179,6 @@ jobs: --validate-dist-dir target/dist - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1 with: packages-dir: target/dist/ From e24b8af16799de1761213e5ea18e4ea0898c5dd8 Mon Sep 17 00:00:00 2001 From: Richard Abrich Date: Tue, 18 Aug 2026 12:12:01 -0400 Subject: [PATCH 2/2] ci: refresh public artifact inventory --- public-artifacts.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/public-artifacts.json b/public-artifacts.json index 07120c45..031d5883 100644 --- a/public-artifacts.json +++ b/public-artifacts.json @@ -121,7 +121,7 @@ }, { "path": ".github/workflows/release.yml", - "sha256": "d986d5fd270150366769a7ea89b0f97f1e6a3a8a722aa0d6627c1d891fd2c16c" + "sha256": "0a184edbc125ce120296808b76d4984e3f7921c7759916405fe0c113ad444bd1" }, { "path": ".github/workflows/validate-claims.yml",