From e42b8cbefb907f7e69031d2886e9253e80f330f1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 2 Aug 2026 10:02:24 +0000 Subject: [PATCH 1/4] Bump actions/checkout from 7.0.0 to 7.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/build-and-test.yml | 4 ++-- .github/workflows/cxx.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/reuse.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index 0386dbc4b..ad26f66a6 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -48,7 +48,7 @@ jobs: os: [ubuntu-24.04, ubuntu-24.04-arm, windows-2022, windows-11-arm, macos-15] python: ["cp314t", "cp312", "cp311", "cp310"] # because of abi3 we don't need to build separate whls for python 3.13, 3.14 steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 with: submodules: recursive - name: Build wheels @@ -67,7 +67,7 @@ jobs: name: Build source distribution runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: submodules: recursive diff --git a/.github/workflows/cxx.yml b/.github/workflows/cxx.yml index 2090131a7..69c77cb21 100644 --- a/.github/workflows/cxx.yml +++ b/.github/workflows/cxx.yml @@ -15,7 +15,7 @@ jobs: cxx: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 with: submodules: recursive persist-credentials: false diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 67aff1598..83bf63b09 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -19,5 +19,5 @@ jobs: name: Ruff runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0 diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml index 22e33b5cd..4e6aa6ed8 100644 --- a/.github/workflows/reuse.yml +++ b/.github/workflows/reuse.yml @@ -13,7 +13,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v5.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5.0.1 with: persist-credentials: false - name: REUSE Compliance Check diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 5a456936b..3588114f7 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -21,7 +21,7 @@ jobs: actions: read # only needed for private repos steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false From 96d244f31a6cbc35f05d0a20e966a0a5c2fc2f0e Mon Sep 17 00:00:00 2001 From: Takeshi Watanabe Date: Sun, 2 Aug 2026 19:07:13 +0900 Subject: [PATCH 2/4] Apply suggestions from code review Co-authored-by: Takeshi Watanabe Signed-off-by: Takeshi Watanabe --- .github/workflows/build-and-test.yml | 2 +- .github/workflows/cxx.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/reuse.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index ad26f66a6..a87ae3065 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -48,7 +48,7 @@ jobs: os: [ubuntu-24.04, ubuntu-24.04-arm, windows-2022, windows-11-arm, macos-15] python: ["cp314t", "cp312", "cp311", "cp310"] # because of abi3 we don't need to build separate whls for python 3.13, 3.14 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive - name: Build wheels diff --git a/.github/workflows/cxx.yml b/.github/workflows/cxx.yml index 69c77cb21..47c9b4f46 100644 --- a/.github/workflows/cxx.yml +++ b/.github/workflows/cxx.yml @@ -15,7 +15,7 @@ jobs: cxx: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive persist-credentials: false diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 83bf63b09..2db9d7005 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -19,5 +19,5 @@ jobs: name: Ruff runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0 diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml index 4e6aa6ed8..4c127f487 100644 --- a/.github/workflows/reuse.yml +++ b/.github/workflows/reuse.yml @@ -13,7 +13,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v5.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: REUSE Compliance Check From 31f8b297cbb963eb0e02a3b865f9e4d8d3cde574 Mon Sep 17 00:00:00 2001 From: Takeshi Watanabe Date: Sun, 2 Aug 2026 19:11:44 +0900 Subject: [PATCH 3/4] Apply suggestion from @take-cheeze Signed-off-by: Takeshi Watanabe --- .github/workflows/build-and-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index a87ae3065..cf0233cb2 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -67,7 +67,7 @@ jobs: name: Build source distribution runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive From b77735be600342b7c0d1acf674db45f73043ab5e Mon Sep 17 00:00:00 2001 From: Takeshi Watanabe Date: Sun, 2 Aug 2026 19:18:14 +0900 Subject: [PATCH 4/4] Apply suggestions from code review Co-authored-by: Takeshi Watanabe Signed-off-by: Takeshi Watanabe --- .github/workflows/build-and-test.yml | 2 ++ .github/workflows/lint.yml | 2 ++ 2 files changed, 4 insertions(+) diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index cf0233cb2..0f0921e68 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -51,6 +51,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive + persist-credentials: false - name: Build wheels uses: pypa/cibuildwheel@4726cd35bb13f7bde50cf2761f2499ac7b3aa32c - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a @@ -70,6 +71,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive + persist-credentials: false - name: Build sdist run: pipx run build --sdist diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 2db9d7005..60f955a31 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -20,4 +20,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0