From 3ac2f855b0172e1e3000e2770d5fec573094575e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 2 Feb 2026 02:21:14 +0000 Subject: [PATCH] build(deps): Bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [sbomify/github-action](https://github.com/sbomify/github-action) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `sbomify/github-action` from 0.12 to 0.13 - [Release notes](https://github.com/sbomify/github-action/releases) - [Commits](https://github.com/sbomify/github-action/compare/7906c48e206fe1a885df761bc7239ff3dcfef6b8...e344ec6e6916948ce49720a9ac5bafafb7119d47) Updates `astral-sh/setup-uv` from 7.2.0 to 7.2.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/61cb8a9741eeb8a550a1b8544337180c0fc8476b...803947b9bd8e9f986429fa0c5a41c367cd732b41) --- updated-dependencies: - dependency-name: sbomify/github-action dependency-version: '0.13' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-publish.yml | 2 +- .github/workflows/python-package.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml index 19ab55d..dcd44e2 100644 --- a/.github/workflows/build-publish.yml +++ b/.github/workflows/build-publish.yml @@ -115,7 +115,7 @@ jobs: name: python-package-distributions path: dist/ - name: Generate SBOM - uses: sbomify/github-action@7906c48e206fe1a885df761bc7239ff3dcfef6b8 # v0.12 + uses: sbomify/github-action@e344ec6e6916948ce49720a9ac5bafafb7119d47 # v0.13 env: TOKEN: ${{ secrets.SBOMIFY_TOKEN }} COMPONENT_ID: 'wy8Kpn8rF9' diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml index a1a290b..590d644 100644 --- a/.github/workflows/python-package.yml +++ b/.github/workflows/python-package.yml @@ -32,7 +32,7 @@ jobs: with: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0 + uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1 - name: Install dependencies, Lint with flake8, Test with pytest run: | sudo apt-get install python3-poetry-plugin-export