From fd77e67f66dd0735163a0eb6b45f08a1020cc744 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 12:35:51 +0000 Subject: [PATCH] ci: bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [runs-on/action](https://github.com/runs-on/action), [actions/setup-node](https://github.com/actions/setup-node) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `runs-on/action` from 2.3.1 to 2.5.0 - [Release notes](https://github.com/runs-on/action/releases) - [Commits](https://github.com/runs-on/action/compare/efac073ea2507ec18797de3a81704201ade11d9d...17b59092eb37ebfdbb034460892887c09100eaa3) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: runs-on/action dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/eve-evals.yml | 6 +++--- .github/workflows/playwright-cache.yml | 4 ++-- .github/workflows/pr-verify.yml | 2 +- .github/workflows/production-migrations.yml | 8 ++++---- .github/workflows/promotion-verify.yml | 2 +- .github/workflows/reusable-verify.yml | 20 ++++++++++---------- .github/workflows/status-page.yml | 2 +- 7 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/eve-evals.yml b/.github/workflows/eve-evals.yml index b2f5e7ea..d1802bc1 100644 --- a/.github/workflows/eve-evals.yml +++ b/.github/workflows/eve-evals.yml @@ -73,7 +73,7 @@ jobs: TENDNOTE_EVAL_DATABASE_URL: postgresql://tendnote:tendnote@localhost:5432/tendnote_eval steps: - name: Set up RunsOn - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -91,7 +91,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true @@ -135,7 +135,7 @@ jobs: - name: Upload Eve evaluation artifacts if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: eve-model-evaluations-${{ inputs.candidate_sha }} path: | diff --git a/.github/workflows/playwright-cache.yml b/.github/workflows/playwright-cache.yml index c28abfd3..d7ada6ca 100644 --- a/.github/workflows/playwright-cache.yml +++ b/.github/workflows/playwright-cache.yml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 15 steps: - name: Set up RunsOn - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -39,7 +39,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true diff --git a/.github/workflows/pr-verify.yml b/.github/workflows/pr-verify.yml index 24eeac7b..c30a3a00 100644 --- a/.github/workflows/pr-verify.yml +++ b/.github/workflows/pr-verify.yml @@ -47,7 +47,7 @@ jobs: steps: - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Check paths id: filter diff --git a/.github/workflows/production-migrations.yml b/.github/workflows/production-migrations.yml index d47676d4..9b883ea0 100644 --- a/.github/workflows/production-migrations.yml +++ b/.github/workflows/production-migrations.yml @@ -33,7 +33,7 @@ jobs: should_release: ${{ steps.validate.outputs.should_release }} steps: - name: Set up RunsOn - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Checkout validation script uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -57,7 +57,7 @@ jobs: timeout-minutes: 5 steps: - name: Set up RunsOn - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 # Do not publish a Vercel status here. The status action keys the commit # status by SHA and context, so a different Vercel project sharing this @@ -81,7 +81,7 @@ jobs: DEPLOY_SHA: ${{ github.event.client_payload.git.sha }} steps: - name: Set up RunsOn - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Report migration status to Vercel uses: vercel/repository-dispatch/actions/status@30f760c6640485cd92f8c785ef361382555fb712 # v1 @@ -97,7 +97,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true diff --git a/.github/workflows/promotion-verify.yml b/.github/workflows/promotion-verify.yml index f13b36c2..94b8d804 100644 --- a/.github/workflows/promotion-verify.yml +++ b/.github/workflows/promotion-verify.yml @@ -73,7 +73,7 @@ jobs: steps: - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Check promotion verification run: | diff --git a/.github/workflows/reusable-verify.yml b/.github/workflows/reusable-verify.yml index 9b358320..f4ed30b6 100644 --- a/.github/workflows/reusable-verify.yml +++ b/.github/workflows/reusable-verify.yml @@ -86,7 +86,7 @@ jobs: # `setup-node` pnpm cache silently keep talking to GitHub instead. - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -97,7 +97,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true @@ -131,7 +131,7 @@ jobs: steps: - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -142,7 +142,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true @@ -210,7 +210,7 @@ jobs: steps: - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 with: show_costs: summary @@ -225,7 +225,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true @@ -326,7 +326,7 @@ jobs: steps: - name: Set up RunsOn if: ${{ github.event_name != 'pull_request' || !github.event.pull_request.head.repo.fork }} - uses: runs-on/action@efac073ea2507ec18797de3a81704201ade11d9d # v2.3.1 + uses: runs-on/action@17b59092eb37ebfdbb034460892887c09100eaa3 # v2.5.0 with: show_costs: summary @@ -339,7 +339,7 @@ jobs: version: ${{ env.PNPM_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ env.NODE_VERSION }} check-latest: true @@ -403,7 +403,7 @@ jobs: # an answer if the passing runs are kept too. - name: Upload recorded diagnostics if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: instant-matrix-diagnostics path: | @@ -414,7 +414,7 @@ jobs: - name: Upload failure traces if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: instant-matrix-traces path: apps/web/.instant/test-results diff --git a/.github/workflows/status-page.yml b/.github/workflows/status-page.yml index 8f769b79..d9908d55 100644 --- a/.github/workflows/status-page.yml +++ b/.github/workflows/status-page.yml @@ -37,7 +37,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ">=24.22.1 <25" check-latest: true