diff --git a/.github/workflows/check-release-notes.yml b/.github/workflows/check-release-notes.yml index 29ff11b5..1a8a9ff9 100644 --- a/.github/workflows/check-release-notes.yml +++ b/.github/workflows/check-release-notes.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 1 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Default MISSING_CHANGELOG_ENTRY to 1 run: echo 'MISSING_CHANGELOG_ENTRY=1' >> "$GITHUB_ENV" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6bfe52b0..3df39def 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 6 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-python with: python-version: "3.10" @@ -68,7 +68,7 @@ jobs: DIFF_AGAINST: HEAD timeout-minutes: 8 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work @@ -104,7 +104,7 @@ jobs: # Upload coverage reports to Codecov - name: Upload coverage to codecov - uses: codecov/codecov-action@v6 + uses: codecov/codecov-action@v7 env: OS: "${{ matrix.os }}" PYTHON: "${{ matrix.python-version }}" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 711fbf37..db89cfca 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: # actions: read # contents: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: github/codeql-action/init@v4 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a17ee29a..fb0387c6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 6 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work @@ -105,7 +105,7 @@ jobs: steps: # Generate the release notes - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work @@ -124,14 +124,14 @@ jobs: name: python-package-distributions path: dist/ - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v3.3.0 + uses: sigstore/gh-action-sigstore-python@v3.4.0 with: inputs: >- ./dist/*.tar.gz ./dist/*.whl - name: Create GitHub Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: body_path: LATEST_RELEASE_NOTES.md # `dist/` contains the built distributions, and the diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 26b1dc42..b62d60ac 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -43,7 +43,7 @@ repos: exclude: ^\.bumpversion\.cfg$ - repo: https://github.com/python-jsonschema/check-jsonschema.git - rev: 0.37.2 + rev: 0.37.4 hooks: - id: check-github-actions - id: check-github-workflows @@ -65,7 +65,7 @@ repos: - id: nbstripout - repo: https://github.com/codespell-project/codespell - rev: v2.4.2 + rev: v2.4.3 hooks: - id: codespell args: [ "-L", "probly", "-L", "mis" ] @@ -104,7 +104,7 @@ repos: additional_dependencies: [setuptools-scm] - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.13 + rev: v0.15.22 hooks: - id: ruff-format - id: ruff diff --git a/docs/reference/changelog.md b/docs/reference/changelog.md index 1b98a25c..89195a1a 100644 --- a/docs/reference/changelog.md +++ b/docs/reference/changelog.md @@ -16,6 +16,12 @@ Unreleased changes - Bump codecov/codecov-action from 5 to 6 ({gh-pr}`371`) - Bump actions/github-script from 8 to 9 ({gh-pr}`373`) - pre-commit autoupdate ({gh-pr}`374`) +- Bump softprops/action-gh-release from 2 to 3 ({gh-pr}`380`) +- Bump codecov/codecov-action from 6 to 7 ({gh-pr}`381`) +- Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 ({gh-pr}`382`) +- Bump actions/checkout from 6 to 7 ({gh-pr}`383`) +- pre-commit autoupdate ({gh-pr}`379`) +- Fix the test suite's compatibility with the latest pytest release ({gh-pr}`384`) - Use the official `astral-sh/setup-uv` action to install and cache `uv` in CI ({gh-pr}`386`) ---