From 976da6d78f4b18f5d3a1223e765fac8017ac2791 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 11:13:29 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) and [webiny/action-conventional-commits](https://github.com/webiny/action-conventional-commits). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/v8.1.0...v8.1.1) Updates `webiny/action-conventional-commits` from 1.3.1 to 1.4.2 - [Release notes](https://github.com/webiny/action-conventional-commits/releases) - [Commits](https://github.com/webiny/action-conventional-commits/compare/v1.3.1...v1.4.2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: webiny/action-conventional-commits dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/automatic-api-update.yaml | 4 ++-- .github/workflows/lint.yaml | 12 ++++++------ .github/workflows/manual-api-update.yaml | 4 ++-- .github/workflows/publish-to-pypi.yml | 2 +- .github/workflows/test.yaml | 2 +- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/automatic-api-update.yaml b/.github/workflows/automatic-api-update.yaml index d7304bf..c0d2c80 100644 --- a/.github/workflows/automatic-api-update.yaml +++ b/.github/workflows/automatic-api-update.yaml @@ -8,7 +8,7 @@ jobs: name: "Create PR for API update" runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "actions/setup-node@v6" - name: "Update Buf Script" id: "buf-update" @@ -31,7 +31,7 @@ jobs: if: "steps.buf-update.outputs.updated == 'true'" run: "buf generate" - name: "Create Pull Request" - uses: "peter-evans/create-pull-request@v8.1.0" + uses: "peter-evans/create-pull-request@v8.1.1" if: "steps.buf-update.outputs.updated == 'true'" with: delete-branch: "true" diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 307999f..8231389 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -23,7 +23,7 @@ jobs: - "3.10" fail-fast: false steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "bewuethr/yamllint-action@v1.3.0" with: config-file: ".yamllint" @@ -46,13 +46,13 @@ jobs: matrix: language: ["python"] steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/codeql@main" trivy: name: "Analyze with Trivy" runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - name: "Run Trivy vulnerability scanner" uses: "aquasecurity/trivy-action@master" with: @@ -72,7 +72,7 @@ jobs: name: "Type Check with Mypy" runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "astral-sh/setup-uv@v7" - name: "mypy" run: "uv run --frozen mypy src/authzed" @@ -82,5 +82,5 @@ jobs: runs-on: "depot-ubuntu-24.04-small" if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')" steps: - - uses: "actions/checkout@v6" - - uses: "webiny/action-conventional-commits@v1.3.1" + - uses: "actions/checkout@v7" + - uses: "webiny/action-conventional-commits@v1.4.2" diff --git a/.github/workflows/manual-api-update.yaml b/.github/workflows/manual-api-update.yaml index 5eddb57..b22dc86 100644 --- a/.github/workflows/manual-api-update.yaml +++ b/.github/workflows/manual-api-update.yaml @@ -12,7 +12,7 @@ jobs: name: "Create PR for API update" runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "actions/setup-node@v6" - name: "Update Buf Script" id: "buf-update" @@ -35,7 +35,7 @@ jobs: if: "steps.buf-update.outputs.updated == 'true'" run: "buf generate" - name: "Create Pull Request" - uses: "peter-evans/create-pull-request@v8.1.0" + uses: "peter-evans/create-pull-request@v8.1.1" if: "steps.buf-update.outputs.updated == 'true'" with: delete-branch: "true" diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml index bfb52ea..e4652a1 100644 --- a/.github/workflows/publish-to-pypi.yml +++ b/.github/workflows/publish-to-pypi.yml @@ -14,7 +14,7 @@ jobs: # IMPORTANT: this permission is mandatory for Trusted Publishing id-token: "write" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "astral-sh/setup-uv@v7" # This gives us a version number without the release prefix - name: "Write release version" diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 99b42fc..841d985 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -30,7 +30,7 @@ jobs: - "3.13" - "3.14" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/action-spicedb@v1" with: version: "latest"