Skip to content

Commit 3b5886b

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the github-actions-major group with 6 updates (#95)
Bumps the github-actions-major group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [actions/setup-python](https://github.com/actions/setup-python) | `6` | `7` | | [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `9.0.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `1.12.0` | `3.2.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` | | [actions/stale](https://github.com/actions/stale) | `9.1.0` | `10.4.0` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6...v7) Updates `actions/setup-python` from 6 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6...v7) Updates `actions/github-script` from 7.1.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7.1.0...v9) Updates `actions/create-github-app-token` from 1.12.0 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@v1.12.0...v3.2.0) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@924ae3a...b7ad1da) Updates `actions/stale` from 9.1.0 to 10.4.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5bef64f...1e223db) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major - dependency-name: actions/stale dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 46ae274 commit 3b5886b

19 files changed

Lines changed: 50 additions & 50 deletions

‎.github/workflows/agents-md-integrity.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -120,22 +120,22 @@ jobs:
120120
contents: read
121121
steps:
122122
- name: Checkout caller repo
123-
uses: actions/checkout@v6
123+
uses: actions/checkout@v7
124124
with:
125125
persist-credentials: false
126126

127127
- name: Load integrity check script
128128
# The checker comes from THIS repo (public, pinned via workflows_ref),
129129
# never from the caller's checkout, so a PR can't rewrite the check.
130-
uses: actions/checkout@v6
130+
uses: actions/checkout@v7
131131
with:
132132
repository: Comfy-Org/github-workflows
133133
ref: ${{ inputs.workflows_ref }}
134134
path: _agents_md_integrity
135135
persist-credentials: false
136136

137137
- name: Set up Python
138-
uses: actions/setup-python@v6
138+
uses: actions/setup-python@v7
139139
with:
140140
python-version: '3.12'
141141

‎.github/workflows/assign-prs-to-author.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
issues: write
4646
steps:
4747
- name: Assign unassigned PRs to their authors
48-
uses: actions/github-script@v9
48+
uses: actions/github-script@v9.0.0
4949
with:
5050
script: |
5151
const skipBots = ${{ inputs.skip-bots }};

‎.github/workflows/bump-agents-md-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,12 +66,12 @@ jobs:
6666
runs-on: ubuntu-latest
6767
steps:
6868
- name: Checkout
69-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
69+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7070
with:
7171
persist-credentials: false
7272

7373
- name: Generate Cloud Code Bot token
74-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
74+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
7575
id: token
7676
with:
7777
app-id: ${{ vars.APP_ID }}

‎.github/workflows/bump-assign-reviewers-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -71,12 +71,12 @@ jobs:
7171
runs-on: ubuntu-latest
7272
steps:
7373
- name: Checkout
74-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
74+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7575
with:
7676
persist-credentials: false
7777

7878
- name: Generate Cloud Code Bot token
79-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
79+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
8080
id: token
8181
with:
8282
app-id: ${{ vars.APP_ID }}

‎.github/workflows/bump-auto-label-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -97,12 +97,12 @@ jobs:
9797
timeout-minutes: 20
9898
steps:
9999
- name: Checkout
100-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
100+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
101101
with:
102102
persist-credentials: false
103103

104104
- name: Generate Cloud Code Bot token
105-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
105+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
106106
id: token
107107
with:
108108
app-id: ${{ vars.APP_ID }}

‎.github/workflows/bump-cursor-review-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,12 +78,12 @@ jobs:
7878
runs-on: ubuntu-latest
7979
steps:
8080
- name: Checkout
81-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
81+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
8282
with:
8383
persist-credentials: false
8484

8585
- name: Generate Cloud Code Bot token
86-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
86+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
8787
id: token
8888
with:
8989
app-id: ${{ vars.APP_ID }}

‎.github/workflows/bump-groom-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -77,12 +77,12 @@ jobs:
7777
runs-on: ubuntu-latest
7878
steps:
7979
- name: Checkout
80-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
80+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
8181
with:
8282
persist-credentials: false
8383

8484
- name: Generate Cloud Code Bot token
85-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
85+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
8686
id: token
8787
with:
8888
app-id: ${{ vars.APP_ID }}

‎.github/workflows/bump-pr-size-callers.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,12 +70,12 @@ jobs:
7070
runs-on: ubuntu-latest
7171
steps:
7272
- name: Checkout
73-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
73+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
7474
with:
7575
persist-credentials: false
7676

7777
- name: Generate Cloud Code Bot token
78-
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
78+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
7979
id: token
8080
with:
8181
app-id: ${{ vars.APP_ID }}

‎.github/workflows/cursor-review-auto-label.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ jobs:
8989
steps:
9090
- name: Generate GitHub App token
9191
id: app-token
92-
uses: actions/create-github-app-token@v3
92+
uses: actions/create-github-app-token@v3.2.0
9393
with:
9494
app-id: ${{ vars.APP_ID }}
9595
private-key: ${{ secrets.CLOUD_CODE_BOT_PRIVATE_KEY }}

‎.github/workflows/cursor-review.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -260,7 +260,7 @@ jobs:
260260
within_cap: ${{ steps.count.outputs.within_cap }}
261261
steps:
262262
- name: Checkout PR repo
263-
uses: actions/checkout@v6
263+
uses: actions/checkout@v7
264264
with:
265265
fetch-depth: 0
266266
persist-credentials: false
@@ -456,7 +456,7 @@ jobs:
456456
PY
457457
458458
- name: Checkout PR repo
459-
uses: actions/checkout@v6
459+
uses: actions/checkout@v7
460460
with:
461461
fetch-depth: 0
462462
persist-credentials: false
@@ -466,7 +466,7 @@ jobs:
466466
# pinned via workflows_ref) — never from the PR checkout, so a
467467
# malicious PR can't rewrite the prompt to exfiltrate the diff or
468468
# smuggle instructions to the model.
469-
uses: actions/checkout@v6
469+
uses: actions/checkout@v7
470470
with:
471471
repository: Comfy-Org/github-workflows
472472
ref: ${{ inputs.workflows_ref }}
@@ -587,13 +587,13 @@ jobs:
587587
pull-requests: write
588588
steps:
589589
- name: Checkout PR repo
590-
uses: actions/checkout@v6
590+
uses: actions/checkout@v7
591591
with:
592592
fetch-depth: 0
593593
persist-credentials: false
594594

595595
- name: Load cursor-review assets
596-
uses: actions/checkout@v6
596+
uses: actions/checkout@v7
597597
with:
598598
repository: Comfy-Org/github-workflows
599599
ref: ${{ inputs.workflows_ref }}
@@ -820,7 +820,7 @@ jobs:
820820
- name: Mint bot-identity token (optional)
821821
id: bot_token
822822
if: ${{ inputs.bot_app_id != '' }}
823-
uses: actions/create-github-app-token@v3
823+
uses: actions/create-github-app-token@v3.2.0
824824
with:
825825
app-id: ${{ inputs.bot_app_id }}
826826
private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
@@ -877,7 +877,7 @@ jobs:
877877
contents: read
878878
steps:
879879
- name: Load cursor-review assets
880-
uses: actions/checkout@v6
880+
uses: actions/checkout@v7
881881
with:
882882
repository: Comfy-Org/github-workflows
883883
ref: ${{ inputs.workflows_ref }}
@@ -931,7 +931,7 @@ jobs:
931931
contents: read
932932
steps:
933933
- name: Load cursor-review assets
934-
uses: actions/checkout@v6
934+
uses: actions/checkout@v7
935935
with:
936936
repository: Comfy-Org/github-workflows
937937
ref: ${{ inputs.workflows_ref }}

0 commit comments

Comments
 (0)