From 4b1bec88f2c278abd1e378d8d0ca266ad9047db7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 10:01:49 +0000 Subject: [PATCH] chore(deps): bump the actions-deps group across 1 directory with 7 updates Bumps the actions-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml](https://github.com/aws/aws-durable-execution-conformance-tests) | `f18bd0b5f28c5c90e288d0fb8bca08a849b51863` | `e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.1` | `4.38.3` | | [aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml](https://github.com/aws/aws-durable-execution-ci) | `48b3b4349f7d00a6212b9d959427bd7df81ea99d` | `288e4317948ca778ebf01acca9342d8b898a1dc2` | Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) Updates `aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml` from f18bd0b5f28c5c90e288d0fb8bca08a849b51863 to e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2 - [Release notes](https://github.com/aws/aws-durable-execution-conformance-tests/releases) - [Commits](https://github.com/aws/aws-durable-execution-conformance-tests/compare/f18bd0b5f28c5c90e288d0fb8bca08a849b51863...e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml` from 48b3b4349f7d00a6212b9d959427bd7df81ea99d to 288e4317948ca778ebf01acca9342d8b898a1dc2 - [Release notes](https://github.com/aws/aws-durable-execution-ci/releases) - [Commits](https://github.com/aws/aws-durable-execution-ci/compare/48b3b4349f7d00a6212b9d959427bd7df81ea99d...288e4317948ca778ebf01acca9342d8b898a1dc2) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml dependency-version: e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2 dependency-type: direct:production dependency-group: actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml dependency-version: 288e4317948ca778ebf01acca9342d8b898a1dc2 dependency-type: direct:production dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/cloud-tests.yml | 2 +- .github/workflows/conformance-tests.yml | 4 ++-- .github/workflows/js-examples.yml | 4 ++-- .github/workflows/lambda-layer-publish.yml | 8 ++++---- .github/workflows/opentelemetry-conformance-tests.yml | 2 +- .github/workflows/pypi-publish.yml | 4 ++-- .github/workflows/scorecard.yml | 4 ++-- .github/workflows/stale-issue-closer.yml | 2 +- .github/workflows/test-parser.yml | 2 +- 10 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6cbca4dd8..73b0413d9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -33,7 +33,7 @@ jobs: - name: Set up Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: python-version: "3.12" activate-environment: true @@ -64,7 +64,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Python ${{ matrix.python-version }} - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: python-version: ${{ matrix.python-version }} activate-environment: true diff --git a/.github/workflows/cloud-tests.yml b/.github/workflows/cloud-tests.yml index da80a43e2..80b5051ed 100644 --- a/.github/workflows/cloud-tests.yml +++ b/.github/workflows/cloud-tests.yml @@ -65,7 +65,7 @@ jobs: - name: Setup Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: python-version: ${{ matrix.python-version }} activate-environment: true diff --git a/.github/workflows/conformance-tests.yml b/.github/workflows/conformance-tests.yml index 2d660987e..b3d70c205 100644 --- a/.github/workflows/conformance-tests.yml +++ b/.github/workflows/conformance-tests.yml @@ -89,7 +89,7 @@ jobs: - name: Setup Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the Python 3.14 interpreter and activates a venv. - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: python-version: "3.14" activate-environment: true @@ -158,7 +158,7 @@ jobs: - name: Upload conformance report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: conformance-report-${{ matrix.suite }} path: | diff --git a/.github/workflows/js-examples.yml b/.github/workflows/js-examples.yml index 76cfcbabf..1b911c7bb 100644 --- a/.github/workflows/js-examples.yml +++ b/.github/workflows/js-examples.yml @@ -59,7 +59,7 @@ jobs: with: python-version: "3.14" - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: # The JS SDK's CI runs on Node.js 22. node-version: "22.x" @@ -74,7 +74,7 @@ jobs: - name: Upload logs and report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: js-examples-logs path: ${{ runner.temp }}/js-examples diff --git a/.github/workflows/lambda-layer-publish.yml b/.github/workflows/lambda-layer-publish.yml index ae418a9ca..9c833edf4 100644 --- a/.github/workflows/lambda-layer-publish.yml +++ b/.github/workflows/lambda-layer-publish.yml @@ -139,7 +139,7 @@ jobs: cp packages/aws-durable-execution-sdk-python-otel/dist/*.whl release-dists/ - name: Upload wheels - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: lambda-layer-distributions path: release-dists/ @@ -161,7 +161,7 @@ jobs: python-version: "3.11" - name: Download wheels - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: lambda-layer-distributions path: release-dists/ @@ -180,7 +180,7 @@ jobs: echo "layer_zip=${LAYER_ZIP}" >> "$GITHUB_OUTPUT" - name: Upload layer artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: otel-plugin-layer path: ${{ steps.build-layer.outputs.layer_zip }} @@ -200,7 +200,7 @@ jobs: steps: - name: Download layer artifact - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: otel-plugin-layer path: dist/ diff --git a/.github/workflows/opentelemetry-conformance-tests.yml b/.github/workflows/opentelemetry-conformance-tests.yml index 4b4f2215a..6ce0099f5 100644 --- a/.github/workflows/opentelemetry-conformance-tests.yml +++ b/.github/workflows/opentelemetry-conformance-tests.yml @@ -66,7 +66,7 @@ jobs: actions: write contents: read id-token: write - uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@f18bd0b5f28c5c90e288d0fb8bca08a849b51863 + uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2 with: language: python runs_on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }} diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index e8be69555..ddc102c8a 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -50,7 +50,7 @@ jobs: run: python .github/scripts/check_dist_legal_files.py ${{ matrix.package.path }} - name: Upload distributions - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: release-dists-${{ matrix.package.name }} path: ${{ matrix.package.path }}/dist/ @@ -76,7 +76,7 @@ jobs: steps: - name: Retrieve release distributions - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-dists-${{ matrix.package.name }} path: dist/ diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 214750982..e39956bfd 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -66,7 +66,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: SARIF file path: results.sarif @@ -75,6 +75,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: sarif_file: results.sarif diff --git a/.github/workflows/stale-issue-closer.yml b/.github/workflows/stale-issue-closer.yml index e8e59137b..604383195 100644 --- a/.github/workflows/stale-issue-closer.yml +++ b/.github/workflows/stale-issue-closer.yml @@ -14,4 +14,4 @@ jobs: permissions: contents: read issues: write - uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@48b3b4349f7d00a6212b9d959427bd7df81ea99d + uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@288e4317948ca778ebf01acca9342d8b898a1dc2 diff --git a/.github/workflows/test-parser.yml b/.github/workflows/test-parser.yml index 53a2c2884..26d2eb80f 100644 --- a/.github/workflows/test-parser.yml +++ b/.github/workflows/test-parser.yml @@ -46,7 +46,7 @@ jobs: - name: Set up Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: python-version: "3.13" activate-environment: true