[dependabot]

Bumps the github-actions group with 1 update: saadmk11/github-actions-version-updater.

Updates saadmk11/github-actions-version-updater from 1.0.1 to 1.0.2

Release notes

Sourced from saadmk11/github-actions-version-updater's releases.

Release v1.0.2

Version: v1.0.2

• Install update-gha[action]==1.0.2 from PyPI in an isolated CPython 3.14 environment.
• Replace Requests with HTTPX2 2.12 or newer, using pooled lookups, explicit timeouts, same-origin redirects, and sanitized connection errors.
• Require GitPython 3.2.1 or newer for the [action] extra to include its security fixes.
• Store Configuration.token as Pydantic SecretStr to mask it in configuration representations and JSON serialization. Python callers must use .get_secret_value() to read the token.
• Give the action's token input precedence over tokens in the job environment.
• Prevent logs, summaries, and diffs from injecting GitHub Actions commands.
• Use github-action-utils 2.0.0 for runner detection and job summaries. Update Changelog CI to v2.0.2.
• Run tests on Python 3.12–3.15 with uv-backed Tox, strict typing, and 100% statement and branch coverage.
• Require CI and clean wheel and source installations, with and without [action], before publishing releases through PyPI Trusted Publishing.

Changelog

Sourced from saadmk11/github-actions-version-updater's changelog.

Version: v1.0.2

• Install update-gha[action]==1.0.2 from PyPI in an isolated CPython 3.14 environment.
• Replace Requests with HTTPX2 2.12 or newer, using pooled lookups, explicit timeouts, same-origin redirects, and sanitized connection errors.
• Require GitPython 3.2.1 or newer for the [action] extra to include its security fixes.
• Store Configuration.token as Pydantic SecretStr to mask it in configuration representations and JSON serialization. Python callers must use .get_secret_value() to read the token.
• Give the action's token input precedence over tokens in the job environment.
• Prevent logs, summaries, and diffs from injecting GitHub Actions commands.
• Use github-action-utils 2.0.0 for runner detection and job summaries. Update Changelog CI to v2.0.2.
• Run tests on Python 3.12–3.15 with uv-backed Tox, strict typing, and 100% statement and branch coverage.
• Require CI and clean wheel and source installations, with and without [action], before publishing releases through PyPI Trusted Publishing.

Commits

• 6f0526e Merge pull request #130 from saadmk11/release-v1.0.2
• 846aaad Update CHANGELOG.md to remove old entries
• 7207a69 [Changelog CI] Add Changelog for Version v1.0.2
• 0779e00 Harden HTTPX2 integration and output handling
• 181705f Prepare v1.0.2 release
• d5a33f3 Merge pull request #129 from saadmk11/pre-commit-ci-update-config
• 608fd1e [pre-commit.ci] pre-commit autoupdate
• 8a809d4 Merge pull request #128 from saadmk11/pre-commit-ci-update-config
• b166c46 [pre-commit.ci] pre-commit autoupdate
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions