From c2ac99abf2a55c4b94608af8ddab3914b83b906f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 14:00:00 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.6.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.179` | `1.0.183` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.2` | `9.0.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.1` | `1.14.2` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.95.9` | `3.96.0` | | [actions/stale](https://github.com/actions/stale) | `10` | `11` | Updates `docker/login-action` from 4.4.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.4.0...v4.6.0) Updates `anthropics/claude-code-action` from 1.0.179 to 1.0.183 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/b76a0776ae74036e77cd11018083743453d7ad35...be7b93b1907a4abad570368f3c74b6fe3807510b) Updates `astral-sh/setup-uv` from 8.3.2 to 9.0.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v8.3.2...v9.0.0) Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/ba38be9e461d3875417946c167d0b5f3d385a247...dc37677b2e1c63e2034f94d8a5b11f265b73ba33) Updates `trufflesecurity/trufflehog` from 3.95.9 to 3.96.0 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/27b0417c16317ca9a472a9a8092acce143b49c55...6f3c981e7b77f235fd2702dd74af25fc4b72bf11) Updates `actions/stale` from 10 to 11 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v10...v11) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.183 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/stale dependency-version: '11' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/benchmark_tests.yml | 16 ++++++++-------- .github/workflows/claude.yml | 2 +- .github/workflows/docker_publish.yml | 4 ++-- .github/workflows/fast_tests.yml | 2 +- .github/workflows/full_tests.yml | 4 ++-- .github/workflows/latest_deps_tests.yml | 6 +++--- .github/workflows/quality.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/security.yml | 2 +- .github/workflows/stale.yml | 2 +- 10 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/benchmark_tests.yml b/.github/workflows/benchmark_tests.yml index a03a0d474..7aab65d09 100644 --- a/.github/workflows/benchmark_tests.yml +++ b/.github/workflows/benchmark_tests.yml @@ -84,7 +84,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -242,7 +242,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -344,7 +344,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -451,7 +451,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -552,7 +552,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -660,7 +660,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -766,7 +766,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -870,7 +870,7 @@ jobs: - name: Login to Docker Hub if: ${{ env.DOCKERHUB_USERNAME != '' }} - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 13513da30..cf89b1fd0 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -53,7 +53,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35 # v1.0.179 + uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.183 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} additional_permissions: | diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml index 4d4522298..330facfcd 100644 --- a/.github/workflows/docker_publish.yml +++ b/.github/workflows/docker_publish.yml @@ -61,7 +61,7 @@ jobs: with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} @@ -96,7 +96,7 @@ jobs: with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} diff --git a/.github/workflows/fast_tests.yml b/.github/workflows/fast_tests.yml index 6fcf241ce..db5db285a 100644 --- a/.github/workflows/fast_tests.yml +++ b/.github/workflows/fast_tests.yml @@ -87,7 +87,7 @@ jobs: libusb-1.0-0-dev speech-dispatcher libgeos-dev portaudio19-dev - name: Setup uv and Python - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true version: ${{ env.UV_VERSION }} diff --git a/.github/workflows/full_tests.yml b/.github/workflows/full_tests.yml index fbd73fdf3..6705f4e1e 100644 --- a/.github/workflows/full_tests.yml +++ b/.github/workflows/full_tests.yml @@ -80,7 +80,7 @@ jobs: speech-dispatcher libgeos-dev portaudio19-dev - name: Setup uv and Python - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true version: ${{ env.UV_VERSION }} @@ -146,7 +146,7 @@ jobs: with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} diff --git a/.github/workflows/latest_deps_tests.yml b/.github/workflows/latest_deps_tests.yml index 7b1b90027..bc40f8f10 100644 --- a/.github/workflows/latest_deps_tests.yml +++ b/.github/workflows/latest_deps_tests.yml @@ -53,7 +53,7 @@ jobs: persist-credentials: false - name: Setup uv and Python - uses: astral-sh/setup-uv@v8.3.2 # zizmor: ignore[unpinned-uses] + uses: astral-sh/setup-uv@v9.0.0 # zizmor: ignore[unpinned-uses] with: version: ${{ env.UV_VERSION }} python-version: ${{ env.PYTHON_VERSION }} @@ -115,7 +115,7 @@ jobs: speech-dispatcher libgeos-dev portaudio19-dev - name: Setup uv and Python - uses: astral-sh/setup-uv@v8.3.2 # zizmor: ignore[unpinned-uses] + uses: astral-sh/setup-uv@v9.0.0 # zizmor: ignore[unpinned-uses] with: enable-cache: true version: ${{ env.UV_VERSION }} @@ -168,7 +168,7 @@ jobs: with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses] + uses: docker/login-action@v4.6.0 # zizmor: ignore[unpinned-uses] with: username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }} password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }} diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 797fe49fb..98095d0b0 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -74,7 +74,7 @@ jobs: persist-credentials: false - name: Setup uv and Python - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true version: "0.11.30" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8ae109f23..34e4eb0c0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -104,7 +104,7 @@ jobs: - name: Publish to TestPyPI for pre-releases # True for tags like 'v0.2.0-rc1' if: startsWith(github.ref, 'refs/tags/v') && contains(github.ref, '-') - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: repository-url: https://test.pypi.org/legacy/ verbose: true @@ -112,7 +112,7 @@ jobs: - name: Publish to PyPI if: startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, '-') - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1 + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2 with: verbose: true print-hash: true @@ -137,7 +137,7 @@ jobs: git curl libglib2.0-0 libegl1-mesa-dev ffmpeg libusb-1.0-0-dev \ speech-dispatcher libgeos-dev portaudio19-dev - name: Setup uv and Python - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: enable-cache: true # zizmor: ignore[cache-poisoning] version: ${{ env.UV_VERSION }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 87968a78d..0e0f7f426 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -49,6 +49,6 @@ jobs: persist-credentials: false - name: Secret Scanning - uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55 # v3.95.9 + uses: trufflesecurity/trufflehog@6f3c981e7b77f235fd2702dd74af25fc4b72bf11 # v3.96.0 with: extra_args: --only-verified diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 95c1d470f..c3d833e7d 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -52,7 +52,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/stale@v10 + - uses: actions/stale@v11 with: repo-token: ${{ secrets.GITHUB_TOKEN }} stale-issue-label: stale