Skip to content

chore(deps)(deps): bump the github-actions group with 11 updates#895

Merged
tschm merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-a41968e796
Jul 22, 2026
Merged

chore(deps)(deps): bump the github-actions group with 11 updates#895
tschm merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-a41968e796

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 11 updates:

Package From To
actions/checkout 6.0.3 6.1.0
jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_book.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_ci.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml 1.2.1 1.2.2
jebel-quant/rhiza/.github/workflows/rhiza_paper.yml 1.2.1 1.2.2
jebel-quant/rhiza 1.2.1 1.2.2
actions/attest 4.1.1 4.2.0
pypa/gh-action-pypi-publish 1.14.0 1.14.1

Updates actions/checkout from 6.0.3 to 6.1.0

Release notes

Sourced from actions/checkout's releases.

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

Commits

Updates jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_book.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_book.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_ci.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_ci.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza/.github/workflows/rhiza_paper.yml from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_paper.yml's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza/.github/workflows/rhiza_paper.yml's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates jebel-quant/rhiza from 1.2.1 to 1.2.2

Release notes

Sourced from jebel-quant/rhiza's releases.

v1.2.2

Changelog

All notable changes to this project are documented in this file.

The format is based on Keep a Changelog, and entries are generated from Conventional Commits.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Changelog

Sourced from jebel-quant/rhiza's changelog.

[1.2.2] - 2026-07-20

Documentation

  • Add generated stats dashboard (#1427)

Dependencies

  • (deps) Update gcr.io/oss-fuzz-base/base-builder-python docker digest to 5a4612c (#1421)
  • (deps) Update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1422)
  • (deps) Update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • (deps) Update dependency typer to v0.27.0 (#1425)
  • (deps) Lock file maintenance (#1426)
  • (deps) Lock file maintenance (#1428)

Maintenance

  • Stop requiring deprecated License classifier (#1429)
  • Forbid deprecated License classifier in pyproject (#1430)

Other Changes

  • Delete .rhiza/make.d/releasing.mk (#1419)
Commits
  • b61e8e6 chore: release v1.2.2
  • 6ca1aea test: forbid deprecated License classifier in pyproject (#1430)
  • 10dd2cc chore: stop requiring deprecated License classifier (#1429)
  • ea6564e chore(deps): lock file maintenance (#1428)
  • 5e5b4c3 docs: add generated stats dashboard (#1427)
  • 498d001 chore(deps): lock file maintenance (#1426)
  • 99cf49c chore(deps): update dependency typer to v0.27.0 (#1425)
  • d962b77 chore(deps): update pre-commit hook astral-sh/uv-pre-commit to v0.11.29 (#1423)
  • 77d273e chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.22 (#1...
  • 636ccc6 chore(deps): update gcr.io/oss-fuzz-base/base-builder-python docker digest to...
  • Additional commits viewable in compare view

Updates actions/attest from 4.1.1 to 4.2.0

Release notes

Sourced from actions/attest's releases.

v4.2.0

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

Commits
  • f7c74d2 feat: support SHA-2 subject digests (#446)
  • 88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
  • 5dff824 Bump the actions-minor group with 3 updates (#453)
  • e67e539 Bump the npm-development group across 1 directory with 2 updates (#448)
  • 95f6155 Bump @​types/node from 25.9.2 to 26.1.1 (#449)
  • b644c72 Read subjects from GITHUB_ARTIFACTS_LIST (#447)
  • 7d3af28 Bump csv-parse from 6.2.1 to 7.0.1 (#437)
  • 52cbb4d Bump @​actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 d...
  • a5ce33e ci: download rebuilt dist/ artifact outside the checkout workspace (#445)
  • 4c65731 ci: auto-rebuild dist/ for Dependabot production bumps (#444)
  • Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.1

🛠️ Internal Dependencies

@​adisivaprasad💰 helped get rid of the GitHub Actions runner warning about the old Node 20 runtime being used by updating actions/setup-python from v5.6.0 to v6.2.0 in #408.

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.0...v1.14.1

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​jylenhof💰 for reminding me to work on this release!

GH Sponsors badge

Commits
  • ba38be9 Merge pull request #408 from adisivaprasad/bump-setup-python-v6
  • a6c5088 Bump actions/setup-python from v5.6.0 to v6.2.0
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependenc...

Description has been truncated

Bumps the github-actions group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `6.1.0` |
| [jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_book.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_ci.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza/.github/workflows/rhiza_paper.yml](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [jebel-quant/rhiza](https://github.com/jebel-quant/rhiza) | `1.2.1` | `1.2.2` |
| [actions/attest](https://github.com/actions/attest) | `4.1.1` | `4.2.0` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.0` | `1.14.1` |


Updates `actions/checkout` from 6.0.3 to 6.1.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.3...v6.1.0)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_book.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_ci.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza/.github/workflows/rhiza_paper.yml` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `jebel-quant/rhiza` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/jebel-quant/rhiza/releases)
- [Changelog](https://github.com/Jebel-Quant/rhiza/blob/main/CHANGELOG.md)
- [Commits](Jebel-Quant/rhiza@v1.2.1...v1.2.2)

Updates `actions/attest` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@v4.1.1...v4.2.0)

Updates `pypa/gh-action-pypi-publish` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.14.0...v1.14.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_benchmark.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_book.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_ci.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_codeql.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_marimo.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_mutation.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza/.github/workflows/rhiza_paper.yml
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: jebel-quant/rhiza
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/attest
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from tschm as a code owner July 21, 2026 05:08
@tschm
tschm merged commit 15890a6 into main Jul 22, 2026
63 checks passed
@tschm
tschm deleted the dependabot/github_actions/github-actions-a41968e796 branch July 22, 2026 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant