From d4fa8a1533211c981887be9d8d42d5c5dc29a8d1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 05:44:58 +0000 Subject: [PATCH] Bump the github-actions-dependencies group across 1 directory with 4 updates Bumps the github-actions-dependencies group with 4 updates in the / directory: [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-node](https://github.com/actions/setup-node), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/agentic-workflow-validation.yml | 2 +- .github/workflows/codex-plugin-smoke.yml | 2 +- .github/workflows/eval-quality.yml | 2 +- .github/workflows/evaluation-run.yml | 8 ++++---- .github/workflows/evaluation-workflow-tests.yml | 6 +++--- .github/workflows/evaluation.yml | 10 +++++----- .github/workflows/markdownlint.yml | 2 +- .github/workflows/skill-coverage.yml | 4 ++-- .github/workflows/skill-validator.yml | 10 +++++----- 9 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/agentic-workflow-validation.yml b/.github/workflows/agentic-workflow-validation.yml index c42d2eab9d..fbb8e60c81 100644 --- a/.github/workflows/agentic-workflow-validation.yml +++ b/.github/workflows/agentic-workflow-validation.yml @@ -35,7 +35,7 @@ jobs: persist-credentials: false - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.12" diff --git a/.github/workflows/codex-plugin-smoke.yml b/.github/workflows/codex-plugin-smoke.yml index 7eb319d097..0225b7c5b8 100644 --- a/.github/workflows/codex-plugin-smoke.yml +++ b/.github/workflows/codex-plugin-smoke.yml @@ -47,7 +47,7 @@ jobs: global-json-file: global.json - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 diff --git a/.github/workflows/eval-quality.yml b/.github/workflows/eval-quality.yml index 841b317e33..3fa04f65e0 100644 --- a/.github/workflows/eval-quality.yml +++ b/.github/workflows/eval-quality.yml @@ -57,7 +57,7 @@ jobs: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.12" diff --git a/.github/workflows/evaluation-run.yml b/.github/workflows/evaluation-run.yml index 9a8c957620..047cae4c89 100644 --- a/.github/workflows/evaluation-run.yml +++ b/.github/workflows/evaluation-run.yml @@ -373,7 +373,7 @@ jobs: key: ${{ steps.cache-key.outputs.key }} - name: Upload trusted skill-validator archive - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: trusted-skill-validator-${{ github.run_id }} path: skill-validator-dist.tar.gz @@ -646,7 +646,7 @@ jobs: - name: Setup Node.js if: steps.find-evals.outputs.has_evals == 'true' - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 @@ -685,7 +685,7 @@ jobs: # run; matrix jobs never build it from the evaluated checkout. - name: Download trusted skill-validator archive if: steps.find-evals.outputs.has_evals == 'true' - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: trusted-skill-validator-${{ github.run_id }} path: ${{ runner.temp }}/trusted-validator-archive @@ -1239,7 +1239,7 @@ jobs: - name: Upload results if: always() && steps.find-evals.outputs.has_evals == 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: vally-results-${{ matrix.entry.name }} path: artifacts/TestResults/vally/${{ matrix.entry.name }}/ diff --git a/.github/workflows/evaluation-workflow-tests.yml b/.github/workflows/evaluation-workflow-tests.yml index 78b9b94e31..0399bff3fd 100644 --- a/.github/workflows/evaluation-workflow-tests.yml +++ b/.github/workflows/evaluation-workflow-tests.yml @@ -74,7 +74,7 @@ jobs: persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 @@ -91,7 +91,7 @@ jobs: persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 22 @@ -126,7 +126,7 @@ jobs: persist-credentials: false - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.12" diff --git a/.github/workflows/evaluation.yml b/.github/workflows/evaluation.yml index dcb96035a7..5f365141e9 100644 --- a/.github/workflows/evaluation.yml +++ b/.github/workflows/evaluation.yml @@ -898,7 +898,7 @@ jobs: - name: Download all result artifacts if: needs.evaluate.result != 'skipped' - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: vally-results-* path: all-results/ @@ -1129,7 +1129,7 @@ jobs: persist-credentials: false - name: Download evaluation artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: vally-results-* path: all-results/ @@ -1341,7 +1341,7 @@ jobs: - name: Download evaluation artifacts id: download if: steps.auth.outcome == 'success' && steps.checkout.outcome == 'success' - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: vally-results-* path: all-results/ @@ -1509,7 +1509,7 @@ jobs: persist-credentials: false - name: Download evaluation artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: pattern: vally-results-* path: all-results/ @@ -1721,7 +1721,7 @@ jobs: with: persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 20 diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml index cccf64636a..aa878f50ea 100644 --- a/.github/workflows/markdownlint.yml +++ b/.github/workflows/markdownlint.yml @@ -25,7 +25,7 @@ jobs: fetch-depth: 0 - name: Use Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 'lts/*' diff --git a/.github/workflows/skill-coverage.yml b/.github/workflows/skill-coverage.yml index 46adbf32ef..a892c4a912 100644 --- a/.github/workflows/skill-coverage.yml +++ b/.github/workflows/skill-coverage.yml @@ -293,7 +293,7 @@ jobs: - name: Upload coverage report if: steps.detect.outputs.count != '0' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: coverage-report path: coverage-report.md @@ -316,7 +316,7 @@ jobs: steps: - name: Download coverage report - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: coverage-report diff --git a/.github/workflows/skill-validator.yml b/.github/workflows/skill-validator.yml index d57bb01de8..3266a66c02 100644 --- a/.github/workflows/skill-validator.yml +++ b/.github/workflows/skill-validator.yml @@ -90,7 +90,7 @@ jobs: run: dotnet pack eng/skill-validator/src/SkillValidator.csproj --use-current-runtime /bl:artifacts/logs/pack-rid.binlog - name: Upload RID-specific NuGet package - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: skill-validator-${{ matrix.rid }} path: artifacts/package/release/Microsoft.DotNet.SkillValidator.${{ matrix.rid }}.*.nupkg @@ -105,7 +105,7 @@ jobs: tar -czf artifacts/assets/skill-validator-${{ matrix.rid }}.tar.gz -C artifacts/publish/SkillValidator/release . - name: Upload tar.gz archive - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: skill-validator-${{ matrix.rid }}.tar.gz path: artifacts/assets/skill-validator-${{ matrix.rid }}.tar.gz @@ -119,7 +119,7 @@ jobs: - name: Upload RID-agnostic NuGet package if: matrix.rid == env.AGNOSTIC_RID - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: archive: false name: skill-validator @@ -131,7 +131,7 @@ jobs: - name: Upload binlogs if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: binlogs-${{ matrix.rid }} path: artifacts/logs/*.binlog @@ -153,7 +153,7 @@ jobs: persist-credentials: true - name: Download all artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: path: release-assets merge-multiple: true