From d02644e56561674b82e89fbee2192a233847351f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 03:57:41 +0000 Subject: [PATCH] chore(deps): bump the actions-deps group with 6 updates Bumps the actions-deps group with 6 updates: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.3.0` | `10.3.2` | | [aws-actions/setup-sam](https://github.com/aws-actions/setup-sam) | `89ddb14d60e682855e3fea4be85b3c56485de310` | `341eee193f458fa5aae5d52c94b0c5cf3a1c5a52` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | | [aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml](https://github.com/aws/aws-durable-execution-conformance-tests) | `2387bb48968f7420ddf55aaf6dc83a9f15778332` | `d4b7df927ea7eb7022bcca339d2cddd387d3d650` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.2` | `1.14.3` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.39.0` | `4.39.1` | Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.2 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...07a047e608db84b3d8c06cd9a7c7dcc9c355c18e) Updates `aws-actions/setup-sam` from 89ddb14d60e682855e3fea4be85b3c56485de310 to 341eee193f458fa5aae5d52c94b0c5cf3a1c5a52 - [Release notes](https://github.com/aws-actions/setup-sam/releases) - [Commits](https://github.com/aws-actions/setup-sam/compare/89ddb14d60e682855e3fea4be85b3c56485de310...341eee193f458fa5aae5d52c94b0c5cf3a1c5a52) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0) Updates `aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml` from 2387bb48968f7420ddf55aaf6dc83a9f15778332 to d4b7df927ea7eb7022bcca339d2cddd387d3d650 - [Release notes](https://github.com/aws/aws-durable-execution-conformance-tests/releases) - [Commits](https://github.com/aws/aws-durable-execution-conformance-tests/compare/2387bb48968f7420ddf55aaf6dc83a9f15778332...d4b7df927ea7eb7022bcca339d2cddd387d3d650) Updates `pypa/gh-action-pypi-publish` from 1.14.2 to 1.14.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33...7245906fb61fa33a13554f9d5fb856fe61758086) Updates `github/codeql-action/upload-sarif` from 4.39.0 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: aws-actions/setup-sam dependency-version: 341eee193f458fa5aae5d52c94b0c5cf3a1c5a52 dependency-type: direct:production dependency-group: actions-deps - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml dependency-version: d4b7df927ea7eb7022bcca339d2cddd387d3d650 dependency-type: direct:production dependency-group: actions-deps - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/cloud-tests.yml | 4 ++-- .github/workflows/conformance-tests.yml | 4 ++-- .github/workflows/ecr-release.yml | 8 ++++---- .github/workflows/js-examples.yml | 2 +- .github/workflows/lambda-layer-publish.yml | 4 ++-- .github/workflows/opentelemetry-conformance-tests.yml | 2 +- .github/workflows/pypi-publish.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/test-parser.yml | 2 +- 10 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index dfc01a16e..a1ce949bf 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -33,7 +33,7 @@ jobs: - name: Set up Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: python-version: "3.12" activate-environment: true @@ -64,7 +64,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Python ${{ matrix.python-version }} - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: python-version: ${{ matrix.python-version }} activate-environment: true diff --git a/.github/workflows/cloud-tests.yml b/.github/workflows/cloud-tests.yml index 91e9f0a27..2cccc40a5 100644 --- a/.github/workflows/cloud-tests.yml +++ b/.github/workflows/cloud-tests.yml @@ -65,7 +65,7 @@ jobs: - name: Setup Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: python-version: ${{ matrix.python-version }} activate-environment: true @@ -94,7 +94,7 @@ jobs: run: uv pip install hatch==1.16.5 - name: Setup SAM CLI - uses: aws-actions/setup-sam@89ddb14d60e682855e3fea4be85b3c56485de310 # v3 + uses: aws-actions/setup-sam@341eee193f458fa5aae5d52c94b0c5cf3a1c5a52 # v3 - name: Build examples run: | diff --git a/.github/workflows/conformance-tests.yml b/.github/workflows/conformance-tests.yml index b3d70c205..4440288f5 100644 --- a/.github/workflows/conformance-tests.yml +++ b/.github/workflows/conformance-tests.yml @@ -89,7 +89,7 @@ jobs: - name: Setup Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the Python 3.14 interpreter and activates a venv. - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: python-version: "3.14" activate-environment: true @@ -113,7 +113,7 @@ jobs: echo "Using AWS test account $ACTUAL_ACCOUNT_ID" - name: Setup SAM CLI - uses: aws-actions/setup-sam@89ddb14d60e682855e3fea4be85b3c56485de310 # v3 + uses: aws-actions/setup-sam@341eee193f458fa5aae5d52c94b0c5cf3a1c5a52 # v3 - name: Build conformance handlers run: python3 scripts/build_examples.py diff --git a/.github/workflows/ecr-release.yml b/.github/workflows/ecr-release.yml index 07ea5db7d..01404419a 100644 --- a/.github/workflows/ecr-release.yml +++ b/.github/workflows/ecr-release.yml @@ -44,7 +44,7 @@ jobs: ref: ${{ inputs.release_tag }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.13" @@ -181,7 +181,7 @@ jobs: ref: ${{ inputs.release_tag }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.13" @@ -292,7 +292,7 @@ jobs: ref: ${{ inputs.release_tag }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.13" @@ -423,7 +423,7 @@ jobs: ref: ${{ inputs.release_tag }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.13" diff --git a/.github/workflows/js-examples.yml b/.github/workflows/js-examples.yml index 1b911c7bb..ceff4a54f 100644 --- a/.github/workflows/js-examples.yml +++ b/.github/workflows/js-examples.yml @@ -55,7 +55,7 @@ jobs: path: js-sdk persist-credentials: false - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.14" diff --git a/.github/workflows/lambda-layer-publish.yml b/.github/workflows/lambda-layer-publish.yml index 9c833edf4..22d7574ca 100644 --- a/.github/workflows/lambda-layer-publish.yml +++ b/.github/workflows/lambda-layer-publish.yml @@ -73,7 +73,7 @@ jobs: ref: ${{ env.SOURCE_REF }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.11" @@ -156,7 +156,7 @@ jobs: ref: ${{ env.SOURCE_REF }} - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.11" diff --git a/.github/workflows/opentelemetry-conformance-tests.yml b/.github/workflows/opentelemetry-conformance-tests.yml index aed97f6e8..9d7835610 100644 --- a/.github/workflows/opentelemetry-conformance-tests.yml +++ b/.github/workflows/opentelemetry-conformance-tests.yml @@ -66,7 +66,7 @@ jobs: actions: write contents: read id-token: write - uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@2387bb48968f7420ddf55aaf6dc83a9f15778332 + uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@d4b7df927ea7eb7022bcca339d2cddd387d3d650 with: language: python runs_on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }} diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 705d01e6f..ea2ef48b4 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -35,7 +35,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.release.tag_name }} - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.11" @@ -82,7 +82,7 @@ jobs: path: dist/ - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3 with: packages-dir: dist/ diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 57aa33168..029380b80 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -75,6 +75,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: results.sarif diff --git a/.github/workflows/test-parser.yml b/.github/workflows/test-parser.yml index 68c26030d..ed152e72a 100644 --- a/.github/workflows/test-parser.yml +++ b/.github/workflows/test-parser.yml @@ -62,7 +62,7 @@ jobs: - name: Set up Python # The runner image is Amazon Linux; actions/setup-python only ships Ubuntu # builds, so uv provides the interpreter and activates a venv. - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: python-version: "3.13" activate-environment: true