From 13dd8120129aa9f03a3446768e0efe89db200785 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 15:12:04 +0000 Subject: [PATCH 1/2] Bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `astral-sh/setup-uv` from 9.0.0 to 10.0.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c771a70e6277c0a99b617c7a806ffedaca235ff9...20cfd1bf945f4377ade1205e4dbc17946fc9a30d) Updates `codecov/codecov-action` from a99c28d3f0da835de33ff2feb2e15691c7b9641f to fb8b3582c8e4def4969c97caa2f19720cb33a72f - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/a99c28d3f0da835de33ff2feb2e15691c7b9641f...fb8b3582c8e4def4969c97caa2f19720cb33a72f) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: fb8b3582c8e4def4969c97caa2f19720cb33a72f dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/code-check.yml | 2 +- .github/workflows/doc.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- .github/workflows/test.yml | 6 +++--- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/code-check.yml b/.github/workflows/code-check.yml index c3b7e7d1..b631e58f 100644 --- a/.github/workflows/code-check.yml +++ b/.github/workflows/code-check.yml @@ -24,7 +24,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" diff --git a/.github/workflows/doc.yml b/.github/workflows/doc.yml index 61d20615..1ad788c2 100644 --- a/.github/workflows/doc.yml +++ b/.github/workflows/doc.yml @@ -23,7 +23,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" @@ -53,7 +53,7 @@ jobs: fetch-depth: 0 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4319e81e..ddb601f7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -69,7 +69,7 @@ jobs: fi - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" @@ -110,7 +110,7 @@ jobs: contents: read steps: - name: Set up uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" enable-cache: false @@ -166,7 +166,7 @@ jobs: fetch-depth: 0 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 82fed365..00441413 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -53,7 +53,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: ${{ matrix.python-version }} @@ -70,7 +70,7 @@ jobs: - name: Upload coverage if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.14' - uses: codecov/codecov-action@a99c28d3f0da835de33ff2feb2e15691c7b9641f # v7 + uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7 with: files: coverage.xml fail_ci_if_error: false @@ -85,7 +85,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up uv and Python - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 with: version: "0.12.8" python-version: "3.14" From c207d0902edbbd1f612208ddd5bb3fa7320dea5d Mon Sep 17 00:00:00 2001 From: maclandrol Date: Thu, 3 Sep 2026 17:17:42 +0100 Subject: [PATCH 2/2] ci: stop Dependabot version updates Remove .github/dependabot.yml so Dependabot no longer opens monthly pip and github-actions version-update PRs on this repo. (Dependabot security alerts remain a separate repository setting.) Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/dependabot.yml | 21 --------------------- 1 file changed, 21 deletions(-) delete mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 2d461165..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,21 +0,0 @@ -version: 2 -updates: - - package-ecosystem: pip - directory: "/" - target-branch: dev - schedule: - interval: monthly - groups: - python-dependencies: - patterns: ["*"] - labels: [dependencies, python] - - - package-ecosystem: github-actions - directory: "/" - target-branch: dev - schedule: - interval: monthly - groups: - github-actions: - patterns: ["*"] - labels: [dependencies, ci]