Skip to content

Commit 7046474

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions-monthly group across 1 directory with 9 updates
Bumps the actions-monthly group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.1.0` | `8.2.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | | [actions/cache/restore](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/cache/save](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `4.0.0rc1` | `4.1.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.1` | `4.36.2` | Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6.0.3...v7) Updates `astral-sh/setup-uv` from 8.1.0 to 8.2.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@0880764...fac544c) Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) Updates `actions/cache/restore` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...55cc834) Updates `actions/cache/save` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...55cc834) Updates `actions/setup-python` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...ece7cb0) Updates `pypa/cibuildwheel` from 4.0.0rc1 to 4.1.0 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@54327ab...2947353) Updates `github/codeql-action/init` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) Updates `github/codeql-action/analyze` from 4.36.1 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@87557b9...8aad20d) --- updated-dependencies: - dependency-name: actions/cache/restore dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-monthly - dependency-name: actions/cache/save dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-monthly - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-monthly - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-monthly - dependency-name: astral-sh/setup-uv dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-monthly - dependency-name: github/codeql-action/analyze dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-monthly - dependency-name: github/codeql-action/init dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-monthly - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-monthly - dependency-name: pypa/cibuildwheel dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-monthly ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 875f192 commit 7046474

17 files changed

Lines changed: 53 additions & 53 deletions

‎.github/workflows/backport.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
}}
3535
runs-on: ubuntu-latest
3636
steps:
37-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
37+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3838

3939
- name: Load branch name
4040
id: get-branch
@@ -54,7 +54,7 @@ jobs:
5454
if: github.repository_owner == 'nvidia' && github.event_name == 'workflow_dispatch'
5555
runs-on: ubuntu-latest
5656
steps:
57-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
57+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5858

5959
- name: Load branch from environment name
6060
if: inputs.backport-branch == null

‎.github/workflows/bandit.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,10 @@ jobs:
2323
security-events: write
2424
steps:
2525
- name: Checkout
26-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
26+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2727

2828
- name: Install uv
29-
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
29+
uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
3030
with:
3131
enable-cache: false
3232

@@ -45,6 +45,6 @@ jobs:
4545
with:
4646
args: "check --select S --ignore ${{ steps.ignore-codes.outputs.codes }} --output-format sarif --output-file results.sarif"
4747
- name: Upload SARIF file
48-
uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
48+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
4949
with:
5050
sarif_file: results.sarif

‎.github/workflows/build-docs.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
shell: bash -el {0}
5656
steps:
5757
- name: Checkout ${{ github.event.repository.name }}
58-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
58+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5959
with:
6060
fetch-depth: 1
6161
ref: ${{ inputs.git-tag }}
@@ -276,7 +276,7 @@ jobs:
276276
- name: Restore lychee cache
277277
if: ${{ !inputs.is-release && github.ref_name != 'main' && !startsWith(github.ref_name, 'release/') }}
278278
id: restore-lychee-cache
279-
uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
279+
uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
280280
with:
281281
path: .lycheecache
282282
key: docs-rendered-lychee-${{ env.PR_NUMBER }}-${{ github.sha }}
@@ -316,7 +316,7 @@ jobs:
316316

317317
- name: Save lychee cache
318318
if: ${{ always() && !inputs.is-release && github.ref_name != 'main' && !startsWith(github.ref_name, 'release/') && steps.restore-lychee-cache.outputs.cache-hit != 'true' && steps.restore-lychee-cache.outputs.cache-primary-key != '' }}
319-
uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
319+
uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
320320
with:
321321
path: .lycheecache
322322
key: ${{ steps.restore-lychee-cache.outputs.cache-primary-key }}

‎.github/workflows/build-wheel.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
(inputs.host-platform == 'win-64' && 'windows-2022') }}
4343
steps:
4444
- name: Checkout ${{ github.event.repository.name }}
45-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
45+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
4646
with:
4747
# Treeless clone: setuptools-scm needs the commit graph (`git describe`)
4848
# but not historical blobs.
@@ -77,7 +77,7 @@ jobs:
7777

7878
- name: Set up Python
7979
id: setup-python1
80-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
80+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
8181
with:
8282
# WAR: setup-python is not relocatable, and cibuildwheel hard-wires to 3.12...
8383
# see https://github.com/actions/setup-python/issues/871
@@ -166,7 +166,7 @@ jobs:
166166
cuda-version: ${{ inputs.cuda-version }}
167167

168168
- name: Build cuda.bindings wheel
169-
uses: pypa/cibuildwheel@54327ab9d35de03b359ac25c97de9417d94639c0 # v4.0.0rc1
169+
uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
170170
with:
171171
package-dir: ./cuda_bindings/
172172
output-dir: ${{ env.CUDA_BINDINGS_ARTIFACTS_DIR }}
@@ -234,7 +234,7 @@ jobs:
234234
if-no-files-found: error
235235

236236
- name: Build cuda.core wheel
237-
uses: pypa/cibuildwheel@54327ab9d35de03b359ac25c97de9417d94639c0 # v4.0.0rc1
237+
uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
238238
with:
239239
package-dir: ./cuda_core/
240240
output-dir: ${{ env.CUDA_CORE_ARTIFACTS_DIR }}
@@ -336,7 +336,7 @@ jobs:
336336

337337
- name: Set up Python
338338
id: setup-python2
339-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
339+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
340340
with:
341341
python-version: ${{ matrix.python-version }}
342342
# TODO: remove allow-prereleases once 3.15 is officially supported
@@ -398,7 +398,7 @@ jobs:
398398
399399
- name: Build numpy wheel (pre-release Python)
400400
if: ${{ startsWith(matrix.python-version, '3.15') }}
401-
uses: pypa/cibuildwheel@54327ab9d35de03b359ac25c97de9417d94639c0 # v4.0.0rc1
401+
uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
402402
env:
403403
CIBW_BUILD: ${{ env.CIBW_BUILD }}
404404
CIBW_SKIP: "*-musllinux* *-win32"
@@ -500,7 +500,7 @@ jobs:
500500
rmdir $OLD_BASENAME
501501
502502
- name: Build cuda.core wheel
503-
uses: pypa/cibuildwheel@54327ab9d35de03b359ac25c97de9417d94639c0 # v4.0.0rc1
503+
uses: pypa/cibuildwheel@294735312765b09d24a2fbec22660ce817587d55 # v4.1.0
504504
with:
505505
package-dir: ./cuda_core/
506506
output-dir: ${{ env.CUDA_CORE_ARTIFACTS_DIR }}

‎.github/workflows/ci-nightly.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
CUDA_BUILD_VER: ${{ steps.find.outputs.cuda_build_ver }}
4040
steps:
4141
- name: Checkout repository
42-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
42+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
4343
with:
4444
fetch-depth: 1
4545

‎.github/workflows/ci-pixi-source-test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
timeout-minutes: 45
6464
steps:
6565
- name: Checkout ${{ github.event.repository.name }}
66-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
66+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
6767
with:
6868
# Full history + tags so setuptools-scm derives the real (13.x)
6969
# package version; a shallow checkout yields 0.1.dev1, which trips
@@ -126,7 +126,7 @@ jobs:
126126
ca-certificates git libgl1 libegl1
127127
128128
- name: Checkout ${{ github.event.repository.name }}
129-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
129+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
130130
with:
131131
# Full history + tags so setuptools-scm derives the real (13.x)
132132
# package version; a shallow checkout yields 0.1.dev1, which trips

‎.github/workflows/ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
CUDA_PREV_BUILD_VER: ${{ steps.get-vars.outputs.cuda_prev_build_ver }}
3535
steps:
3636
- name: Checkout repository
37-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
37+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3838
with:
3939
fetch-depth: 1
4040
- name: Get CUDA build versions
@@ -53,7 +53,7 @@ jobs:
5353
doc-only: ${{ steps.get-should-skip.outputs.doc_only }}
5454
steps:
5555
- name: Checkout repository
56-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
56+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5757
- name: Compute whether to skip builds and tests
5858
id: get-should-skip
5959
env:
@@ -105,7 +105,7 @@ jobs:
105105
test_pathfinder: ${{ steps.compose.outputs.test_pathfinder }}
106106
steps:
107107
- name: Checkout repository
108-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
108+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
109109
with:
110110
# Treeless clone: commit graph is needed for `git merge-base` and
111111
# `git diff --name-only` below, but historical blobs aren't.

‎.github/workflows/cleanup-pr-previews.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
if: github.repository_owner == 'NVIDIA'
2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@v6.0.3
31+
uses: actions/checkout@v7.0.0
3232
with:
3333
# Treeless clone: `git worktree add gh-pages` needs the commit graph,
3434
# but historical blobs aren't required.

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,16 +31,16 @@ jobs:
3131
build-mode: none
3232
steps:
3333
- name: Checkout repository
34-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
34+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3535

3636
- name: Initialize CodeQL
37-
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
37+
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
3838
with:
3939
languages: ${{ matrix.language }}
4040
build-mode: ${{ matrix.build-mode }}
4141
queries: security-extended
4242

4343
- name: Perform CodeQL Analysis
44-
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
44+
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
4545
with:
4646
category: "/language:${{matrix.language}}"

‎.github/workflows/coverage.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
CUDA_VER: ${{ steps.get-vars.outputs.cuda_ver }}
2323
steps:
2424
- name: Checkout ${{ github.event.repository.name }}
25-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
25+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2626
- name: Get CUDA version
2727
id: get-vars
2828
run: |
@@ -64,7 +64,7 @@ jobs:
6464
apt-get install -y git
6565
6666
- name: Checkout ${{ github.event.repository.name }}
67-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
67+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
6868
with:
6969
# Treeless clone: setuptools-scm needs the commit graph (`git describe`)
7070
# but not historical blobs.
@@ -99,7 +99,7 @@ jobs:
9999
echo "CUDA_PYTHON_COVERAGE=1" >> $GITHUB_ENV
100100
101101
- name: Set up Python
102-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
102+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
103103
with:
104104
python-version: ${{ env.PY_VER }}
105105
env:
@@ -199,15 +199,15 @@ jobs:
199199
CUDA_VER: ${{ needs.coverage-vars.outputs.CUDA_VER }}
200200
steps:
201201
- name: Checkout ${{ github.event.repository.name }}
202-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
202+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
203203
with:
204204
# Treeless clone: setuptools-scm needs the commit graph (`git describe`)
205205
# but not historical blobs.
206206
fetch-depth: 0
207207
filter: blob:none
208208

209209
- name: Set up Python
210-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
210+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
211211
with:
212212
python-version: ${{ env.PY_VER }}
213213

@@ -273,7 +273,7 @@ jobs:
273273
shell: bash --noprofile --norc -xeuo pipefail {0}
274274
steps:
275275
- name: Checkout ${{ github.event.repository.name }}
276-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
276+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
277277
with:
278278
fetch-depth: 1
279279

@@ -296,7 +296,7 @@ jobs:
296296
nvidia-smi
297297
298298
- name: Set up Python
299-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
299+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
300300
with:
301301
python-version: ${{ env.PY_VER }}
302302

@@ -399,10 +399,10 @@ jobs:
399399
contents: write
400400
steps:
401401
- name: Checkout ${{ github.event.repository.name }}
402-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
402+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
403403

404404
- name: Set up Python
405-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
405+
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
406406
with:
407407
python-version: ${{ env.PY_VER }}
408408

0 commit comments

Comments
 (0)