From 1ec5c1f7d86f9ad7cc394ef73384e7fc734a3d79 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 1 Sep 2025 18:10:22 +0000 Subject: [PATCH 1/3] Bump the actions group with 2 updates Bumps the actions group with 2 updates: [actions/download-artifact](https://github.com/actions/download-artifact) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `actions/download-artifact` from 4 to 5 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v5) Updates `zizmorcore/zizmor-action` from 7f2abfff7488a44086dba64ed2f5a9b431508079 to a016d81e77496751b5c04eb1e8f00214bd396553 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/7f2abfff7488a44086dba64ed2f5a9b431508079...a016d81e77496751b5c04eb1e8f00214bd396553) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: a016d81e77496751b5c04eb1e8f00214bd396553 dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dist.yml | 2 +- .github/workflows/release-python.yml | 2 +- .github/workflows/test-python.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml index e5b36ad7dd..cbfee4fa55 100644 --- a/.github/workflows/dist.yml +++ b/.github/workflows/dist.yml @@ -143,7 +143,7 @@ jobs: name: Download Wheels steps: - name: Download all workflow run artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 - name: Flatten directory working-directory: . run: | diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 9cce310d91..0c10fa2e98 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -76,7 +76,7 @@ jobs: id-token: write steps: - name: Download all the dists - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 with: name: all-dist-${{ github.run_id }} path: dist/ diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml index d55c0d7c7c..b58c9cd32e 100644 --- a/.github/workflows/test-python.yml +++ b/.github/workflows/test-python.yml @@ -193,7 +193,7 @@ jobs: timeout-minutes: 20 steps: - name: Download sdist - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v5 - name: Unpack SDist shell: bash run: | diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index e7a39fa39e..2db3b43e7f 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -18,4 +18,4 @@ jobs: with: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@7f2abfff7488a44086dba64ed2f5a9b431508079 + uses: zizmorcore/zizmor-action@a016d81e77496751b5c04eb1e8f00214bd396553 From e44cf55392df63d1cc52376a75973fb85e0f946d Mon Sep 17 00:00:00 2001 From: Steven Silvester Date: Tue, 2 Sep 2025 07:34:53 -0500 Subject: [PATCH 2/3] undo change to download action --- .github/workflows/dist.yml | 2 +- .github/workflows/release-python.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dist.yml b/.github/workflows/dist.yml index cbfee4fa55..e5b36ad7dd 100644 --- a/.github/workflows/dist.yml +++ b/.github/workflows/dist.yml @@ -143,7 +143,7 @@ jobs: name: Download Wheels steps: - name: Download all workflow run artifacts - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v4 - name: Flatten directory working-directory: . run: | diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 0c10fa2e98..9cce310d91 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -76,7 +76,7 @@ jobs: id-token: write steps: - name: Download all the dists - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v4 with: name: all-dist-${{ github.run_id }} path: dist/ From 961feebed896c5a5b6bc92a3c965897cac22e987 Mon Sep 17 00:00:00 2001 From: Steven Silvester Date: Tue, 2 Sep 2025 07:36:17 -0500 Subject: [PATCH 3/3] undo change to download --- .github/workflows/test-python.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml index b58c9cd32e..d55c0d7c7c 100644 --- a/.github/workflows/test-python.yml +++ b/.github/workflows/test-python.yml @@ -193,7 +193,7 @@ jobs: timeout-minutes: 20 steps: - name: Download sdist - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v4 - name: Unpack SDist shell: bash run: |