chore(deps): bump the actions group with 8 updates

Bumps the actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.2` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.179` | `1.0.183` | | [huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml](https://github.com/huggingface/doc-builder) | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | `7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c` | | [huggingface/doc-builder/.github/workflows/build_main_documentation.yml](https://github.com/huggingface/doc-builder) | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | `7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c` | | [huggingface/doc-builder/.github/workflows/build_pr_documentation.yml](https://github.com/huggingface/doc-builder) | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | `7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.2` | `9.0.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.95.9` | `3.96.0` | | [actions/stale](https://github.com/actions/stale) | `10` | `11` | Updates `docker/login-action` from 4.4.0 to 4.5.2 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.4.0...v4.5.2) Updates `anthropics/claude-code-action` from 1.0.179 to 1.0.183 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/b76a0776ae74036e77cd11018083743453d7ad35...be7b93b1907a4abad570368f3c74b6fe3807510b) Updates `huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml` from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](https://github.com/huggingface/doc-builder/compare/6108e850ae1cf2f71bb0815a600bcd50c39abfa7...7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c) Updates `huggingface/doc-builder/.github/workflows/build_main_documentation.yml` from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](https://github.com/huggingface/doc-builder/compare/6108e850ae1cf2f71bb0815a600bcd50c39abfa7...7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c) Updates `huggingface/doc-builder/.github/workflows/build_pr_documentation.yml` from 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 to 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](https://github.com/huggingface/doc-builder/compare/6108e850ae1cf2f71bb0815a600bcd50c39abfa7...7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c) Updates `astral-sh/setup-uv` from 8.3.2 to 9.0.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v8.3.2...v9.0.0) Updates `trufflesecurity/trufflehog` from 3.95.9 to 3.96.0 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/27b0417c16317ca9a472a9a8092acce143b49c55...6f3c981e7b77f235fd2702dd74af25fc4b72bf11) Updates `actions/stale` from 10 to 11 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v10...v11) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.183 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml dependency-version: 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c dependency-type: direct:production dependency-group: actions - dependency-name: huggingface/doc-builder/.github/workflows/build_main_documentation.yml dependency-version: 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c dependency-type: direct:production dependency-group: actions - dependency-name: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml dependency-version: 7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c dependency-type: direct:production dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/stale dependency-version: '11' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
2026-08-04 23:49:49 +00:00 · 2026-08-03 09:34:15 +00:00
11 changed files with 23 additions and 23 deletions
@@ -84,7 +84,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -242,7 +242,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -344,7 +344,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -451,7 +451,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -552,7 +552,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -660,7 +660,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -766,7 +766,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -870,7 +870,7 @@ jobs:

      - name: Login to Docker Hub
        if: ${{ env.DOCKERHUB_USERNAME != '' }}
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -53,7 +53,7 @@ jobs:

      - name: Run Claude Code
        id: claude
-        uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35  # v1.0.179
+        uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b  # v1.0.183
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          additional_permissions: |
@@ -61,7 +61,7 @@ jobs:
        with:
          cache-binary: false
      - name: Login to Docker Hub
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -96,7 +96,7 @@ jobs:
        with:
          cache-binary: false
      - name: Login to Docker Hub
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -33,7 +33,7 @@ jobs:
      github.event.workflow_run.event == 'pull_request' &&
      github.event.workflow_run.conclusion == 'success' &&
      github.repository == 'huggingface/lerobot'
-    uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@6108e850ae1cf2f71bb0815a600bcd50c39abfa7  # main
+    uses: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml@7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c  # main
    with:
      package_name: lerobot
    secrets:
@@ -55,7 +55,7 @@ jobs:
      github.repository == 'huggingface/lerobot'
    permissions:
      contents: read
-    uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@6108e850ae1cf2f71bb0815a600bcd50c39abfa7  # main
+    uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c  # main
    with:
      commit_sha: ${{ github.sha }}
      package: lerobot
@@ -78,7 +78,7 @@ jobs:
    permissions:
      contents: read
      pull-requests: write
-    uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@6108e850ae1cf2f71bb0815a600bcd50c39abfa7  # main
+    uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@7ccf6c02dc2e3aea1b07f6668f783b20c3bf407c  # main
    with:
      commit_sha: ${{ github.event.pull_request.head.sha }}
      pr_number: ${{ github.event.number }}
@@ -87,7 +87,7 @@ jobs:
          libusb-1.0-0-dev speech-dispatcher libgeos-dev portaudio19-dev

      - name: Setup uv and Python
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9  # v9.0.0
        with:
          enable-cache: true
          version: ${{ env.UV_VERSION }}
@@ -80,7 +80,7 @@ jobs:
          speech-dispatcher libgeos-dev portaudio19-dev

      - name: Setup uv and Python
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9  # v9.0.0
        with:
          enable-cache: true
          version: ${{ env.UV_VERSION }}
@@ -146,7 +146,7 @@ jobs:
        with:
          cache-binary: false
      - name: Login to Docker Hub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
+        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c  # v4.5.2
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -53,7 +53,7 @@ jobs:
          persist-credentials: false

      - name: Setup uv and Python
-        uses: astral-sh/setup-uv@v8.3.2 # zizmor: ignore[unpinned-uses]
+        uses: astral-sh/setup-uv@v9.0.0 # zizmor: ignore[unpinned-uses]
        with:
          version: ${{ env.UV_VERSION }}
          python-version: ${{ env.PYTHON_VERSION }}
@@ -115,7 +115,7 @@ jobs:
          speech-dispatcher libgeos-dev portaudio19-dev

      - name: Setup uv and Python
-        uses: astral-sh/setup-uv@v8.3.2 # zizmor: ignore[unpinned-uses]
+        uses: astral-sh/setup-uv@v9.0.0 # zizmor: ignore[unpinned-uses]
        with:
          enable-cache: true
          version: ${{ env.UV_VERSION }}
@@ -168,7 +168,7 @@ jobs:
        with:
          cache-binary: false
      - name: Login to Docker Hub
-        uses: docker/login-action@v4.4.0 # zizmor: ignore[unpinned-uses]
+        uses: docker/login-action@v4.5.2 # zizmor: ignore[unpinned-uses]
        with:
          username: ${{ secrets.DOCKERHUB_LEROBOT_USERNAME }}
          password: ${{ secrets.DOCKERHUB_LEROBOT_PASSWORD }}
@@ -137,7 +137,7 @@ jobs:
          git curl libglib2.0-0 libegl1-mesa-dev ffmpeg libusb-1.0-0-dev \
          speech-dispatcher libgeos-dev portaudio19-dev
      - name: Setup uv and Python
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9  # v9.0.0
        with:
          enable-cache: true # zizmor: ignore[cache-poisoning]
          version: ${{ env.UV_VERSION }}
@@ -49,6 +49,6 @@ jobs:
          persist-credentials: false

      - name: Secret Scanning
-        uses: trufflesecurity/trufflehog@27b0417c16317ca9a472a9a8092acce143b49c55  # v3.95.9
+        uses: trufflesecurity/trufflehog@6f3c981e7b77f235fd2702dd74af25fc4b72bf11  # v3.96.0
        with:
          extra_args: --only-verified
@@ -52,7 +52,7 @@ jobs:
      issues: write
      pull-requests: write
    steps:
-      - uses: actions/stale@v10
+      - uses: actions/stale@v11
        with:
          repo-token: ${{ secrets.GITHUB_TOKEN }}
          stale-issue-label: stale