From 4dc6f4072a4d67f78e5b74a2dab4356f3f8b3b05 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 08:35:59 +0000 Subject: [PATCH] chore(ci): bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [actions/cache](https://github.com/actions/cache) | `5` | `6` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `6` | `7` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) Updates `actions/setup-node` from 6 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-attest-gc.yml | 2 +- .github/workflows/claude-code-review.yml | 2 +- .github/workflows/claude.yml | 2 +- .github/workflows/cli-release.yml | 12 ++++++------ .github/workflows/deps-image.yml | 6 +++--- .github/workflows/fourmolu.yml | 4 ++-- .github/workflows/haskell.yml | 18 +++++++++--------- .github/workflows/production-image.yml | 10 +++++----- .github/workflows/pullrequest.yml | 20 ++++++++++---------- 9 files changed, 38 insertions(+), 38 deletions(-) diff --git a/.github/workflows/ci-attest-gc.yml b/.github/workflows/ci-attest-gc.yml index 9704b57dd..5e14ae330 100644 --- a/.github/workflows/ci-attest-gc.yml +++ b/.github/workflows/ci-attest-gc.yml @@ -20,5 +20,5 @@ jobs: name: Prune runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - run: scripts/ci/ci.sh gc "${{ github.event.inputs.days || 30 }}" diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 862118bc9..d46f9b1d5 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 1 diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 5e5d1312c..4f4826a3a 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -26,7 +26,7 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 1 diff --git a/.github/workflows/cli-release.yml b/.github/workflows/cli-release.yml index 750044db6..1d8b24faf 100644 --- a/.github/workflows/cli-release.yml +++ b/.github/workflows/cli-release.yml @@ -43,10 +43,10 @@ jobs: env: CABAL_DIR: /root/.cabal steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Cache dist-newstyle - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: dist-newstyle key: cli-linux-${{ matrix.arch }}-${{ hashFiles('cli/*.cabal', 'shared/*.cabal', 'cabal.project*') }}-${{ github.sha }} @@ -89,7 +89,7 @@ jobs: - arch: x86_64 runner: macos-15-intel steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Read GHC version from cabal.project id: ghc @@ -102,14 +102,14 @@ jobs: cabal-version: '3.14' - name: Cache Cabal - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ~/.cabal key: cli-macos-${{ matrix.arch }}-cabal-${{ hashFiles('cli/*.cabal', 'shared/*.cabal', 'cabal.project*') }} restore-keys: cli-macos-${{ matrix.arch }}-cabal- - name: Cache dist-newstyle - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: dist-newstyle key: cli-macos-${{ matrix.arch }}-dist-${{ hashFiles('cli/*.cabal', 'shared/*.cabal', 'cabal.project*') }} @@ -156,7 +156,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Download all artifacts uses: actions/download-artifact@v8 diff --git a/.github/workflows/deps-image.yml b/.github/workflows/deps-image.yml index 7149af548..7b0352794 100644 --- a/.github/workflows/deps-image.yml +++ b/.github/workflows/deps-image.yml @@ -29,7 +29,7 @@ jobs: - platform: linux/arm64 runner: ubuntu-24.04-arm steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Free Disk Space run: | @@ -40,7 +40,7 @@ jobs: sudo docker image prune --all --force - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Login to Container Registry uses: docker/login-action@v4 @@ -50,7 +50,7 @@ jobs: password: ${{ secrets.GH_TOKEN }} - name: Build and push platform image - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . file: ./Dockerfile.deps diff --git a/.github/workflows/fourmolu.yml b/.github/workflows/fourmolu.yml index d16db65c7..422b84603 100644 --- a/.github/workflows/fourmolu.yml +++ b/.github/workflows/fourmolu.yml @@ -14,13 +14,13 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: token: ${{ secrets.GITHUB_TOKEN }} # `make fmt` downloads the version the Makefile pins, so laptops and this bot agree. - name: Cache fourmolu - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: .ci/fourmolu-* key: fourmolu-${{ hashFiles('Makefile') }} diff --git a/.github/workflows/haskell.yml b/.github/workflows/haskell.yml index 45ff07dcf..98b445b89 100644 --- a/.github/workflows/haskell.yml +++ b/.github/workflows/haskell.yml @@ -34,7 +34,7 @@ jobs: skip_e2e: ${{ steps.checks.outputs.skip_e2e }} skip_haskell: ${{ steps.haskell.outputs.skip_all }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - id: checks run: scripts/ci/ci.sh gate # Whether the whole container job (image pull + service containers + cabal @@ -49,10 +49,10 @@ jobs: if: needs.gate.outputs.skip_haskell != 'true' runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '22' cache: 'npm' @@ -179,10 +179,10 @@ jobs: CI_SHARDS: '4' CI_FINGERPRINTS: .ci/fingerprints.tsv steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Cache dist-newstyle - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: dist-newstyle key: ${{ runner.os }}-container-cabal-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-${{ github.sha }} @@ -302,8 +302,8 @@ jobs: env: FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - - uses: actions/checkout@v6 - - uses: docker/setup-buildx-action@v3 + - uses: actions/checkout@v7 + - uses: docker/setup-buildx-action@v4 - uses: docker/login-action@v4 with: registry: ghcr.io @@ -372,8 +372,8 @@ jobs: name: Release regression tests runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 with: node-version: '22' - run: scripts/ci/ci.sh run release-tests diff --git a/.github/workflows/production-image.yml b/.github/workflows/production-image.yml index d9ea91202..e40023dfd 100644 --- a/.github/workflows/production-image.yml +++ b/.github/workflows/production-image.yml @@ -24,25 +24,25 @@ jobs: outputs: digest: ${{ steps.image.outputs.digest }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ inputs.revision }} - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: '22' - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@v4 # The Dockerfile's dist-newstyle cache mount dies with each fresh runner, so every # build recompiled all of monoscope (~57 min). Carry it in the Actions cache: master # saves, PRs restore master's and stay read-only so they can't evict it. Paths sit # outside the checkout because release.sh refuses a dirty tree. - if: github.ref == 'refs/heads/master' - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ runner.temp }}/dist-newstyle key: prod-dist-${{ inputs.revision }} restore-keys: prod-dist- - if: github.ref != 'refs/heads/master' - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: ${{ runner.temp }}/dist-newstyle key: prod-dist-${{ inputs.revision }} diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml index a03610dc9..9f97d528e 100644 --- a/.github/workflows/pullrequest.yml +++ b/.github/workflows/pullrequest.yml @@ -36,7 +36,7 @@ jobs: skip_e2e: ${{ steps.checks.outputs.skip_e2e }} skip_haskell: ${{ steps.haskell.outputs.skip_all }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} - id: checks @@ -53,12 +53,12 @@ jobs: if: needs.gate.outputs.skip_haskell != 'true' runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '22' cache: 'npm' @@ -189,12 +189,12 @@ jobs: CI_SHARDS: '4' CI_FINGERPRINTS: .ci/fingerprints.tsv steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} - name: Cache dist-newstyle - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: dist-newstyle key: ${{ runner.os }}-container-cabal-${{ hashFiles('**/*.cabal', '**/cabal.project*') }}-${{ github.sha }} @@ -282,7 +282,7 @@ jobs: # Pin to the PR head SHA instead of head_ref: head_ref is the branch name, # which checkout fetches with a glob refspec that 404s on deleted or fork # branches (see i18n-yaml PR fetch failure). - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} token: ${{ secrets.GITHUB_TOKEN }} @@ -329,11 +329,11 @@ jobs: if: needs.gate.outputs.skip_ui_tests != 'true' runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '22' cache: 'npm' @@ -362,10 +362,10 @@ jobs: name: Release regression tests runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: '22' - run: scripts/ci/ci.sh run release-tests