From 7905cd0d4b8cfe75d5eb310c4036f1beb216e5cb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 11:51:39 +0000 Subject: [PATCH] chore(actions): bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `step-security/harden-runner` from 2.22.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/v2.22.2...46b06cea07f9e64621fdf066ba77ac6915163d43) Updates `astral-sh/setup-uv` from 10.3.2 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/07a047e608db84b3d8c06cd9a7c7dcc9c355c18e...68559e99cc807c1eb7e9238fd43a15bba460eec2) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/knowledge-librarian.yaml | 8 ++++---- .github/workflows/knowledge-registrar.yaml | 4 ++-- .github/workflows/knowledge-release.yaml | 6 +++--- .github/workflows/knowledge-sync.yaml | 8 ++++---- .github/workflows/knowledge-website.yaml | 6 +++--- .github/workflows/main.yaml | 2 +- 6 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/knowledge-librarian.yaml b/.github/workflows/knowledge-librarian.yaml index 95064c6..a7f6f9d 100644 --- a/.github/workflows/knowledge-librarian.yaml +++ b/.github/workflows/knowledge-librarian.yaml @@ -42,7 +42,7 @@ jobs: record: ${{ steps.read.outputs.record }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -158,7 +158,7 @@ jobs: # installs packages, installs a skill everywhere but the repository # that publishes it, and runs a third-party agent. - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -169,7 +169,7 @@ jobs: persist-credentials: false # keep GITHUB_TOKEN off disk while the agent runs - name: Set up uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.12" @@ -430,7 +430,7 @@ jobs: pull-requests: write # open the review PR steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/knowledge-registrar.yaml b/.github/workflows/knowledge-registrar.yaml index 497745d..c74c45d 100644 --- a/.github/workflows/knowledge-registrar.yaml +++ b/.github/workflows/knowledge-registrar.yaml @@ -58,7 +58,7 @@ jobs: contents: read steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -73,7 +73,7 @@ jobs: fetch-depth: 0 - name: Set up uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.12" diff --git a/.github/workflows/knowledge-release.yaml b/.github/workflows/knowledge-release.yaml index 56761bc..aa69f71 100644 --- a/.github/workflows/knowledge-release.yaml +++ b/.github/workflows/knowledge-release.yaml @@ -76,7 +76,7 @@ jobs: TAG: ${{ inputs.tag || github.event.release.tag_name }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -216,7 +216,7 @@ jobs: - name: Set up uv if: steps.compare.outputs.changed == 'true' - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.12" @@ -519,7 +519,7 @@ jobs: TAG: ${{ inputs.tag || github.event.release.tag_name }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/knowledge-sync.yaml b/.github/workflows/knowledge-sync.yaml index 5eacb7e..b50b685 100644 --- a/.github/workflows/knowledge-sync.yaml +++ b/.github/workflows/knowledge-sync.yaml @@ -119,7 +119,7 @@ jobs: branch: ${{ steps.read.outputs.branch }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -279,7 +279,7 @@ jobs: changed: ${{ steps.run.outputs.changed }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -358,7 +358,7 @@ jobs: commit: ${{ steps.push.outputs.commit }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -605,7 +605,7 @@ jobs: contents: read # the push uses the sync token, not this one steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/knowledge-website.yaml b/.github/workflows/knowledge-website.yaml index efbaaba..f084e88 100644 --- a/.github/workflows/knowledge-website.yaml +++ b/.github/workflows/knowledge-website.yaml @@ -80,7 +80,7 @@ jobs: contents: read steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -92,7 +92,7 @@ jobs: fetch-depth: 0 - name: Set up uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: enable-cache: true cache-dependency-glob: .lokf/uv.lock @@ -161,7 +161,7 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 14d7e0b..2f6a482 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -43,7 +43,7 @@ jobs: # https://github.com/astral-sh/setup-uv - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: ${{ matrix.python-version }} enable-cache: true