diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 58b2efb..6cc3baf 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -20,7 +20,7 @@ jobs: uses: actions/setup-python@v7.0.0 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Install project dependencies run: | @@ -50,7 +50,7 @@ jobs: packages: bash curl git gpg - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Install project dependencies run: | @@ -78,7 +78,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Audit uses: pypa/gh-action-pip-audit@1220774d901786e6f652ae159f7b6bc8fea6d266 # v1.1.0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c385e15..a4efb29 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,16 +19,16 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL (Python) - uses: github/codeql-action/init@v4.37.1 + uses: github/codeql-action/init@v4.37.2 with: languages: python queries: security-and-quality,security-extended - name: Autobuild - uses: github/codeql-action/autobuild@v4.37.1 + uses: github/codeql-action/autobuild@v4.37.2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.1 + uses: github/codeql-action/analyze@v4.37.2 codeql-actions: name: "CodeQL GitHub Actions Scan" @@ -43,13 +43,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL (Actions) - uses: github/codeql-action/init@v4.37.1 + uses: github/codeql-action/init@v4.37.2 with: languages: actions queries: security-and-quality,security-extended - name: Autobuild - uses: github/codeql-action/autobuild@v4.37.1 + uses: github/codeql-action/autobuild@v4.37.2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.1 + uses: github/codeql-action/analyze@v4.37.2 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5cde069..665f1c7 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -24,7 +24,7 @@ jobs: uses: actions/setup-python@v7.0.0 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 - name: Sync env and build package run: |