From 438ce399701f65028ecd0831e9caf6c3f22b155c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 21:37:20 +0000 Subject: [PATCH 1/2] build(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v4.1.1...v4.2.2) Updates `astral-sh/setup-uv` from 9.0.0 to 10.0.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v9.0.0...v10.0.1) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yml | 2 +- .github/workflows/ci.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 84aa29f..dbd0e66 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -40,7 +40,7 @@ jobs: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-path: "dist/*" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 24746ee..094b497 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ jobs: name: Lint steps: - uses: actions/checkout@v7 - - uses: astral-sh/setup-uv@v9.0.0 + - uses: astral-sh/setup-uv@v10.0.1 - run: uvx prek run -a --show-diff-on-failure checks: @@ -37,7 +37,7 @@ jobs: with: python-version: ${{ matrix.python-version }} allow-prereleases: true - - uses: astral-sh/setup-uv@v9.0.0 + - uses: astral-sh/setup-uv@v10.0.1 - name: Test package run: uv run --with "clang<19" --group test pytest @@ -57,7 +57,7 @@ jobs: with: python-version: ${{ matrix.python-version }} allow-prereleases: true - - uses: astral-sh/setup-uv@v9.0.0 + - uses: astral-sh/setup-uv@v10.0.1 - name: Test package env: From 24a5cae8049c48ba13b1e3b7b83d299778662a2a Mon Sep 17 00:00:00 2001 From: Henry Schreiner Date: Wed, 2 Sep 2026 18:50:26 -0400 Subject: [PATCH 2/2] build(deps): move to actions/attest Assisted-by: ClaudeCode:claude-opus-5 --- .github/workflows/cd.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index dbd0e66..ff3c776 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -40,7 +40,7 @@ jobs: path: dist - name: Generate artifact attestation for sdist and wheel - uses: actions/attest-build-provenance@v4.2.2 + uses: actions/attest@v4.2.2 with: subject-path: "dist/*"