a78478edc4
chore(deps): bump the actions group with 4 updates ( #2867 )
...
* chore(deps): bump the actions group with 4 updates
Bumps the actions group with 4 updates: [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package ), [j178/prek-action](https://github.com/j178/prek-action ), [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ).
Updates `hynek/build-and-inspect-python-package` from 2.17.0 to 2.18.0
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases )
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hynek/build-and-inspect-python-package/compare/fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e...d44ca7d91762de7a7d5436ddae667c6da6d1c3df )
Updates `j178/prek-action` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/6ad80277337ad479fe43bd70701c3f7f8aa74db3...bdca6f102f98e2b4c7029491a53dfd366469e33d )
Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/create-github-app-token/compare/1b10c78c7865c340bc4f6099eb2f838309f1e8c3...bcd2ba49218906704ab6c1aa796996da409d3eb1 )
Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/b1d7e1fb5de872772f31590499237e7cce841e8e...5f14fd08f7cf1cb1609c1e344975f152c7ee938d )
---
updated-dependencies:
- dependency-name: hynek/build-and-inspect-python-package
dependency-version: 2.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: j178/prek-action
dependency-version: 2.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix create-github-app-token parameters
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: mayeut <mayeut@users.noreply.github.com >
2026-05-23 17:52:46 +02:00
dependabot[bot]
a9f58eb656
chore(deps): bump the actions group with 3 updates ( #2826 )
2026-04-25 16:20:36 +01:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
545670cbf5
chore(deps): bump the actions group with 5 updates ( #2823 )
...
Bumps the actions group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish ) | `1.13.0` | `1.14.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) | `7.6.0` | `8.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.0` | `7.0.1` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) | `3.0.0` | `3.1.1` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) | `8.1.0` | `8.1.1` |
Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases )
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e...cef221092ed1bacb1cc03d23a2d87d1d172e277b )
Updates `astral-sh/setup-uv` from 7.6.0 to 8.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](https://github.com/astral-sh/setup-uv/compare/v7.6...cec208311dfd045dd5311c1add060b2062131d57 )
Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
Updates `actions/create-github-app-token` from 3.0.0 to 3.1.1
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](https://github.com/actions/create-github-app-token/compare/f8d387b68d61c58ab83c6c016672934102569859...1b10c78c7865c340bc4f6099eb2f838309f1e8c3 )
Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/c0f553fe549906ede9cf27b5156039d195d2ece0...5f6978faf089d4d20b00c7766989d076bb2fc7f1 )
---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
dependency-version: 1.14.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: astral-sh/setup-uv
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/create-github-app-token
dependency-version: 3.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-25 07:31:36 +02:00
Matthieu Darbois
314d2268ab
fix(ci): use uv to run nox in the update-dependencies workflow ( #2808 )
...
While the `wntrblm/nox` action is itself pinned, it's a composite action using an unpinned `actions/setup-python` action which is now rejected.
Let's use `astral-sh/setup-uv` instead and run `nox` using `uv`.
2026-04-05 00:37:55 -05:00
Agriya Khetarpal
5d52226105
ci: pin GitHub Actions + pre-commit hooks ( #2744 )
...
* Update and pin GitHub Actions
* Pin pre-commit hooks too
* adjustments (don't pin official actions)
2026-03-24 18:03:54 -04:00
Joe Rickerby
741be9402c
Add GHA environment to update-dependencies workflow ( #2778 )
...
* Add GHA environment to update-dependencies workflow
See #2770
* activate the create-pull-request action to see if it works
* Revert "activate the create-pull-request action to see if it works"
This reverts commit b44f94d7a5c852b93b16157831b698f9c250628d.
* Only request the environment when we need it
2026-03-16 19:47:36 +00:00
Clément Robert
bc6f42d805
SEC: disable default gha permissions ( #2771 )
2026-03-12 01:15:38 +05:30
Clément Robert
eaf116e303
SEC: avoid leaking credentials in GHA ( #2769 )
2026-03-11 19:50:11 +05:30
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
f5a31ee79d
chore(deps): bump the actions group across 1 directory with 4 updates ( #2755 )
...
Bumps the actions group with 4 updates in the / directory: [actions/download-artifact](https://github.com/actions/download-artifact ), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
Updates `actions/attest-build-provenance` from 3.2.0 to 4.1.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/96278af6caaf10aea03fd8d33a09a777ca52d62f...a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 )
Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
Updates `wntrblm/nox` from 2025.11.12 to 2026.02.09
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2025.11.12...2026.02.09 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/attest-build-provenance
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: wntrblm/nox
dependency-version: 2026.02.09
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 16:31:23 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
5acadc2dfc
chore(deps): bump the actions group with 3 updates ( #2693 )
...
Bumps the actions group with 3 updates: [actions/download-artifact](https://github.com/actions/download-artifact ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `actions/download-artifact` from 6 to 7
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7 )
Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
Updates `peter-evans/create-pull-request` from 7 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: peter-evans/create-pull-request
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 20:31:18 +01:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ea4b3eb6a5
chore(deps): bump actions/checkout from 5 to 6 in the actions group ( #2672 )
...
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout ).
Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 11:28:39 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dd81fa002c
chore(deps): bump wntrblm/nox from 2025.10.16 to 2025.11.12 in the actions group ( #2666 )
...
chore(deps): bump wntrblm/nox in the actions group
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2025.10.16 to 2025.11.12
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2025.10.16...2025.11.12 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-version: 2025.11.12
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-18 09:48:43 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
a592c06add
chore(deps): bump wntrblm/nox from 2025.05.01 to 2025.10.16 in the actions group ( #2634 )
...
chore(deps): bump wntrblm/nox in the actions group
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2025.05.01 to 2025.10.16
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2025.05.01...2025.10.16 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-version: 2025.10.16
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-25 16:25:00 +01:00
8db3538534
chore(deps): bump the actions group with 2 updates ( #2551 )
...
* chore(deps): bump the actions group with 2 updates
Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
* Update actions versions in documentation/examples
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Rickerby <joerick@mac.com >
2025-08-12 09:03:34 -04:00
Henry Schreiner
327f5c327d
ci: add labels to autoupdate ( #2408 )
...
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
2025-05-22 11:01:58 +01:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
048ff03577
chore(deps): bump the actions group with 2 updates ( #2379 )
...
Bumps the actions group with 2 updates: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) and [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `actions/attest-build-provenance` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/c074443f1aee8d4aeeae555aebba3282517141b2...db473fddc028af60658334401dc6fa3ffd8669fd )
Updates `wntrblm/nox` from 2025.02.09 to 2025.05.01
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2025.02.09...2025.05.01 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 2.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: wntrblm/nox
dependency-version: 2025.05.01
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-05 16:21:01 +01:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
08cbc6f8d0
chore(deps): bump actions/create-github-app-token from 1 to 2 in the actions group ( #2351 )
...
chore(deps): bump actions/create-github-app-token in the actions group
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token ).
Updates `actions/create-github-app-token` from 1 to 2
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Commits](https://github.com/actions/create-github-app-token/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: '2'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-08 06:31:44 +02:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
fad71e8d6d
chore(deps): bump wntrblm/nox from 2024.10.09 to 2025.02.09 in the actions group ( #2273 )
...
chore(deps): bump wntrblm/nox in the actions group
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2024.10.09 to 2025.02.09
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2024.10.09...2025.02.09 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-10 11:17:31 -05:00
Matthieu Darbois
526df2f696
chore: fix deprecations warnings in update-dependencies workflow ( #2134 )
2025-01-21 07:47:53 +01:00
Matthieu Darbois and Joe Rickerby
a96545b729
feat: use python3.11+ for cibuildwheel driver ( #1912 )
...
* chore: use SPEC 0 schedule for cibuildwheel
* remove support for {python} and {pip} in commands
* Remove specific Python versions from the update-dependencies job
The requirements pinning is done by uv now, so we don't need to
run the versions of Python to do the pinning anymore.
---------
Co-authored-by: Joe Rickerby <joerick@mac.com >
2025-01-16 10:45:18 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
84ac771415
chore(deps): bump wntrblm/nox from 2024.04.15 to 2024.10.09 in the actions group ( #2041 )
...
chore(deps): bump wntrblm/nox in the actions group
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2024.04.15 to 2024.10.09
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2024.04.15...2024.10.09 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 13:09:03 +02:00
Henry Schreiner
08e5b97e57
ci: modernize update workflow ( #2010 )
2024-09-17 07:54:17 +02:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
9d2f46ce4e
chore(deps): bump the actions group with 2 updates ( #1999 )
...
Bumps the actions group with 2 updates: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `actions/attest-build-provenance` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/6149ea5740be74af77f260b9db67e633f6b0a9a1...1c608d11d69870c2092266b3f9a6f3abbf17002c )
Updates `peter-evans/create-pull-request` from 6 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-09 20:04:37 +01:00
Matthieu Darbois
44c4742477
feat: add Python 3.13 beta 1 ( #1815 )
2024-05-11 20:26:18 -04:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
208ca32050
chore(deps): bump wntrblm/nox from 2024.03.02 to 2024.04.15 in the actions group ( #1810 )
...
chore(deps): bump wntrblm/nox in the actions group
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2024.03.02 to 2024.04.15
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2024.03.02...2024.04.15 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-23 23:22:12 -04:00
87fff77282
chore(deps): bump the actions group with 1 update ( #1776 )
...
Bumps the actions group with 1 update: [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `wntrblm/nox` from 2023.04.22 to 2024.03.02
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2023.04.22...2024.03.02 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Joe Rickerby <joerick@mac.com >
2024-03-10 21:33:59 -04:00
Matthieu Darbois
75d6d9d55b
Merge branch 'main' into gha-images-latest
2024-02-10 09:58:58 +01:00
dependabot[bot]
abd05a65ba
chore(deps): bump the actions group with 1 update
...
Bumps the actions group with 1 update: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ).
Updates `peter-evans/create-pull-request` from 5 to 6
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-02-05 13:29:35 +00:00
Joe Rickerby
3bf1908dcb
Don't bother pinning OS images for Github Actions
...
Fix #1612
The hassle of updating these pins (both for us and our users, most copy our documentation) seems to outweigh the benefit of the pin. The truth is that they're not really pins anyway, Github update them all the time, and they don't work for historical repeatability because old images are retired all the time.
2024-01-27 11:21:22 +00:00
Henry Schreiner
89d5bd58f5
chore: test and use 3.12 as host ( #1650 )
...
* chore: test and use 3.12 as host
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* chore: address feedback
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
---------
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
2023-10-27 01:21:59 -04:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
028455f481
chore(deps): bump tibdex/github-app-token from 1 to 2 ( #1606 )
...
Bumps [tibdex/github-app-token](https://github.com/tibdex/github-app-token ) from 1 to 2.
- [Release notes](https://github.com/tibdex/github-app-token/releases )
- [Commits](https://github.com/tibdex/github-app-token/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: tibdex/github-app-token
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 16:07:34 -04:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
386d36f5ad
chore(deps): bump actions/checkout from 3 to 4 ( #1595 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:06:24 -04:00
Henry Schreiner and Joe Rickerby
8499628a5b
feat: add Python 3.12 beta 1 ( #1507 )
...
* feat: add Python 3.12 beta 1
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* fix: try updating some versions to (near) final 3.6 supported version
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* tests: skip dep check on 3.6
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* Update test pip version pin
* Fix expected wheels check
---------
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
Co-authored-by: Joe Rickerby <joerick@mac.com >
2023-05-26 21:14:55 -07:00
mayeut
7efc7dbb91
chore: stop updating python 3.6 constraints
...
All dependencies (except distlib) dropped python 3.6, just stop trying updating.
2023-04-29 11:33:34 +02:00
dependabot[bot]
ba4a993591
build(deps): bump wntrblm/nox from 2022.11.21 to 2023.04.22
...
Bumps [wntrblm/nox](https://github.com/wntrblm/nox ) from 2022.11.21 to 2023.04.22.
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2022.11.21...2023.04.22 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-04-24 13:57:36 +00:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3ed1b65b3e
build(deps): bump peter-evans/create-pull-request from 4 to 5 ( #1467 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 4 to 5.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 18:53:08 +02:00
Matthieu Darbois
ff8e121fac
fix(ci): use ubuntu-20.04 for update workfow ( #1370 )
...
ubuntu-latest / 22.04 does not have python 3.6, use ubuntu-20.04 instead.
2022-12-11 10:48:12 +01:00
Henry Schreiner
636ea18338
Update .github/workflows/update-dependencies.yml
2022-11-29 09:21:15 -05:00
dependabot[bot]
8f07b73fec
Bump wntrblm/nox from 2022.8.7 to 2022.11.21
...
Bumps [wntrblm/nox](https://github.com/wntrblm/nox ) from 2022.8.7 to 2022.11.21.
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2022.8.7...2022.11.21 )
---
updated-dependencies:
- dependency-name: wntrblm/nox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-11-28 13:02:01 +00:00
Joe Rickerby
5b0d8e7d48
Merge pull request #1220 from pypa/henryiii/ci/noxaction
...
ci: use official nox action
2022-08-11 19:16:37 +01:00
Henry Schreiner
9ab7670f54
ci: use official nox action
2022-08-09 00:09:48 -04:00
Matthieu Darbois
462ba084ce
chore: run update workflow on pull request ( #1210 )
...
Allows to catch issues with the update workflow with related PRs.
2022-08-09 00:09:10 -04:00
c4f1c31ccc
chore(deps): bump actions/setup-python from 3 to 4 ( #1134 )
...
* chore(deps): bump actions/setup-python from 3 to 4
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* Apply suggestions from code review
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2022-07-05 09:13:25 -04:00
mayeut
2edd5270c3
mark CPython 3.11 as pre-release
2022-05-23 20:47:08 +02:00
mayeut
b8abcb128c
feature: add CPython 3.11 support
2022-05-23 20:47:08 +02:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
a2a54b9833
chore(deps): bump excitedleigh/setup-nox from 2.0.0 to 2.1.0 ( #1110 )
...
Bumps [excitedleigh/setup-nox](https://github.com/excitedleigh/setup-nox ) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/excitedleigh/setup-nox/releases )
- [Commits](https://github.com/excitedleigh/setup-nox/compare/v2.0.0...v2.1.0 )
---
updated-dependencies:
- dependency-name: excitedleigh/setup-nox
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-16 18:26:58 +02:00
Matthieu Darbois
2d1ad70d06
chore: use bot email for dependency update Pull Requests ( #1105 )
2022-05-09 08:27:30 +02:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
e1bcc10600
chore(deps): bump peter-evans/create-pull-request from 3 to 4 ( #1067 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 3 to 4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-29 10:10:59 -04:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
13b65414ae
chore(deps): bump actions/checkout from 2 to 3 ( #1046 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-07 10:50:33 -05:00
Henry Schreiner
9e787cf124
Update update-dependencies.yml
2021-08-25 17:37:42 -04:00
