Skip to content

Commit 45810c1

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the actions-updates group across 1 directory with 8 updates
Bumps the actions-updates group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.1` | `2.21.1` | | [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.1.0` | `10.2.0` | | [edera-dev/actions/report-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [edera-dev/actions/reclaim-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [edera-dev/actions/configure-azure-sccache](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.208` | `1.0.241` | Updates `step-security/harden-runner` from 2.20.1 to 2.21.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@v2.20.1...e14015d) Updates `actions/checkout` from 4.4.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.4.0...3d3c42e) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@bec219d...c18668a) Updates `edera-dev/actions/report-disk-space` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `edera-dev/actions/reclaim-disk-space` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `edera-dev/actions/configure-azure-sccache` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `anthropics/claude-code-action` from 1.0.208 to 1.0.241 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@e8c2d7c...cab360f) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-updates - dependency-name: anthropics/claude-code-action dependency-version: 1.0.231 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: edera-dev/actions/configure-azure-sccache dependency-version: 0.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/reclaim-disk-space dependency-version: 0.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/report-disk-space dependency-version: 0.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: step-security/harden-runner dependency-version: 2.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 690e16d commit 45810c1

9 files changed

Lines changed: 28 additions & 28 deletions

‎.github/workflows/buildenv-diff.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
labels: edera-16
1919
steps:
2020
- name: Harden the runner (Audit all outbound calls)
21-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
21+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
2222
with:
2323
egress-policy: audit
2424
- name: checkout repository

‎.github/workflows/buildenv.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,13 +38,13 @@ jobs:
3838
runs-on: "${{ matrix.runner }}"
3939
steps:
4040
- name: Harden the runner (Audit all outbound calls)
41-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
41+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4242
with:
4343
egress-policy: audit
4444
- name: checkout repository
4545
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
4646
- name: docker setup buildx
47-
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
47+
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
4848
- name: docker login ghcr.io
4949
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
5050
with:
@@ -89,13 +89,13 @@ jobs:
8989
labels: edera-16
9090
steps:
9191
- name: Harden the runner (Audit all outbound calls)
92-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
92+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
9393
with:
9494
egress-policy: audit
9595
- name: install cosign
9696
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
9797
- name: docker setup buildx
98-
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
98+
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
9999
- name: docker login ghcr.io
100100
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
101101
with:

‎.github/workflows/digestabot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828

2929
steps:
3030
- name: Harden the runner (Audit all outbound calls)
31-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
31+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
3232
with:
3333
egress-policy: audit
3434

‎.github/workflows/lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
curl -sSfL "https://github.com/koalaman/shellcheck/releases/download/v${SHELLCHECK_VERSION}/shellcheck-v${SHELLCHECK_VERSION}.linux.x86_64.tar.xz" | tar -xJ -C /tmp
3232
install -m755 "/tmp/shellcheck-v${SHELLCHECK_VERSION}/shellcheck" "${HOME}/.local/bin/shellcheck"
3333
- name: Install the latest version of uv
34-
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
34+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
3535
with:
3636
python-version: "3.14"
3737
- name: Show versions

‎.github/workflows/matrix.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ jobs:
2424
labels: edera-16
2525
steps:
2626
- name: Harden the runner (Audit all outbound calls)
27-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
27+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
2828
with:
2929
egress-policy: audit
3030
- name: Install the latest version of uv
31-
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
31+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
3232
with:
3333
python-version: "3.14"
3434
- name: Setup Crane
@@ -83,17 +83,17 @@ jobs:
8383
KERNEL_ARCH: "${{ matrix.builds.arch }}"
8484
steps:
8585
- name: Harden the runner (Audit all outbound calls)
86-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
86+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
8787
with:
8888
egress-policy: audit
8989

9090
- name: report disk space (before)
91-
uses: edera-dev/actions/report-disk-space@6e6996f6fff5d6016bcdc097e9065da6fb33ac7f # v0.0.17
91+
uses: edera-dev/actions/report-disk-space@faf60530c573a16a539da282eb6d17198a6d1416 # v0.0.19
9292
- name: reclaim runner disk space
9393
# Kernel builds never touch Rust or the hosted toolcache, so both
9494
# opt-in removals are on. Must stay before cosign-installer, which
9595
# installs into the toolcache this deletes.
96-
uses: edera-dev/actions/reclaim-disk-space@6e6996f6fff5d6016bcdc097e9065da6fb33ac7f # v0.0.17
96+
uses: edera-dev/actions/reclaim-disk-space@faf60530c573a16a539da282eb6d17198a6d1416 # v0.0.19
9797
with:
9898
remove-toolcache: 'true'
9999
remove-rust: 'true'
@@ -132,7 +132,7 @@ jobs:
132132
# - name: docker setup linux-kernel-oci
133133
# run: sudo uv run ./hack/build/docker-setup.py
134134
- name: docker setup buildx
135-
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
135+
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
136136
- name: docker login ghcr.io
137137
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
138138
with:
@@ -148,13 +148,13 @@ jobs:
148148
# list in hack/build/generate-docker-script.py (docker_compile); a
149149
# name missing there silently never reaches the build container.
150150
id: sccache
151-
uses: edera-dev/actions/configure-azure-sccache@6e6996f6fff5d6016bcdc097e9065da6fb33ac7f # v0.0.17
151+
uses: edera-dev/actions/configure-azure-sccache@faf60530c573a16a539da282eb6d17198a6d1416 # v0.0.19
152152
with:
153153
connection-string-rw: ${{ secrets.SCCACHE_AZURE_CONNECTION_STRING }}
154154
connection-string-ro: ${{ secrets.SCCACHE_AZURE_CONNECTION_STRING_RO }}
155155
key-prefix: kernel
156156
- name: Install the latest version of uv
157-
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
157+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
158158
with:
159159
python-version: "3.14"
160160
- name: generate docker script
@@ -172,7 +172,7 @@ jobs:
172172
- name: report disk space (after)
173173
# always() so ENOSPC failures still show where the disk went.
174174
if: always()
175-
uses: edera-dev/actions/report-disk-space@6e6996f6fff5d6016bcdc097e9065da6fb33ac7f # v0.0.17
175+
uses: edera-dev/actions/report-disk-space@faf60530c573a16a539da282eb6d17198a6d1416 # v0.0.19
176176
- name: upload digests
177177
# Only produced when publishing — push-by-digest path writes digests.json.
178178
if: ${{ inputs.publish }}
@@ -208,21 +208,21 @@ jobs:
208208
DIGESTS_DIR: digests
209209
steps:
210210
- name: Harden the runner (Audit all outbound calls)
211-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
211+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
212212
with:
213213
egress-policy: audit
214214
- name: checkout repository
215215
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
216216
- name: Install the latest version of uv
217-
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
217+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
218218
with:
219219
python-version: '3.14'
220220
- name: install python deps
221221
run: uv sync
222222
- name: install cosign
223223
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
224224
- name: docker setup buildx
225-
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
225+
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
226226
- name: docker login ghcr.io
227227
uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
228228
with:

‎.github/workflows/pr-review-selftest.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939
timeout-minutes: 10
4040
steps:
4141
- name: Harden runner
42-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
42+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4343
with:
4444
egress-policy: audit
4545

4646
- name: Checkout
47-
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
47+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4848
with:
4949
persist-credentials: false
5050

‎.github/workflows/pr-review-suggestions.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,12 +40,12 @@ jobs:
4040
id-token: write
4141
steps:
4242
- name: Harden runner
43-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
43+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4444
with:
4545
egress-policy: audit
4646

4747
- name: Checkout
48-
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
48+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4949
with:
5050
fetch-depth: 0
5151
persist-credentials: false
@@ -82,7 +82,7 @@ jobs:
8282
- name: Suggest
8383
id: suggest
8484
continue-on-error: true
85-
uses: anthropics/claude-code-action@e8c2d7c16c018cf1e694711c1c07a5f5db2b5eb1 # v1
85+
uses: anthropics/claude-code-action@cab360f6565aa35a51d6ce9e43f1f4287c0a32ea # v1
8686
env:
8787
GH_TOKEN: ${{ github.token }}
8888
with:

‎.github/workflows/pr-test-coverage.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939
id-token: write
4040
steps:
4141
- name: Harden runner
42-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
42+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4343
with:
4444
egress-policy: audit
4545

4646
- name: Checkout
47-
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
47+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
4848
with:
4949
fetch-depth: 0
5050
persist-credentials: false
@@ -87,7 +87,7 @@ jobs:
8787
- name: Review
8888
id: review
8989
continue-on-error: true
90-
uses: anthropics/claude-code-action@e8c2d7c16c018cf1e694711c1c07a5f5db2b5eb1 # v1
90+
uses: anthropics/claude-code-action@cab360f6565aa35a51d6ce9e43f1f4287c0a32ea # v1
9191
env:
9292
GH_TOKEN: ${{ github.token }}
9393
with:

‎.github/workflows/refresh-nvidia.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
labels: edera-16
1616
steps:
1717
- name: Harden the runner (Audit all outbound calls)
18-
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
18+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
1919
with:
2020
egress-policy: audit
2121
- name: checkout repository

0 commit comments

Comments
 (0)