This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch
dependabot/github_actions/github-actions-updates-493fc6dc58
in repository https://gitbox.apache.org/repos/asf/airflow.git
commit f829eb119f91477c982792748c300d67c88a504c
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Apr 3 17:00:40 2026 +0000
Bump the github-actions-updates group with 3 updates
Bumps the github-actions-updates group with 3 updates:
[actions/setup-go](https://github.com/actions/setup-go),
[github/codeql-action](https://github.com/github/codeql-action) and
[astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).
Updates `actions/setup-go` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-go/releases)
-
[Commits](https://github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417...4a3601121dd01d1626a1e23e37211e3254c1c06c)
Updates `github/codeql-action` from 4.32.6 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/0d579ffd059c29b07949a3cce3983f0780820c98...c10b8064de6f491fea524254123dbe5e09572f13)
Updates `astral-sh/setup-uv` from 7.6.0 to 8.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
-
[Commits](https://github.com/astral-sh/setup-uv/compare/37802adc94f370d6bfd71619e3f0bf239e1f3b78...cec208311dfd045dd5311c1add060b2062131d57)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: astral-sh/setup-uv
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
---
.github/workflows/ci-amd-arm.yml | 2 +-
.github/workflows/codeql-analysis.yml | 6 +++---
.github/workflows/registry-backfill.yml | 2 +-
.github/workflows/registry-tests.yml | 2 +-
4 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/.github/workflows/ci-amd-arm.yml b/.github/workflows/ci-amd-arm.yml
index b69791a09a5..ab34ba25882 100644
--- a/.github/workflows/ci-amd-arm.yml
+++ b/.github/workflows/ci-amd-arm.yml
@@ -843,7 +843,7 @@ jobs:
persist-credentials: false
# keep this in sync with go.mod in go-sdk/
- name: Setup Go
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 #
v6.3.0
+ uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c #
v6.4.0
with:
go-version: 1.24
cache-dependency-path: go-sdk/go.sum
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 0c21c6e43d6..a6ae94fd3fa 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -52,15 +52,15 @@ jobs:
persist-credentials: false
- name: Initialize CodeQL
- uses:
github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+ uses:
github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
with:
languages: ${{ matrix.language }}
- name: Autobuild
- uses:
github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 #
v4.32.6
+ uses:
github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 #
v4.35.1
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+ uses:
github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/registry-backfill.yml
b/.github/workflows/registry-backfill.yml
index 62483ca8c3d..a421ee4680a 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -118,7 +118,7 @@ jobs:
done
- name: "Install uv"
- uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #
v7.6.0
+ uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 #
v8.0.0
- name: "Install Breeze"
uses: ./.github/actions/breeze
diff --git a/.github/workflows/registry-tests.yml
b/.github/workflows/registry-tests.yml
index 38143ab8a6b..2c38e724b86 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -50,7 +50,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #
v7.6.0
+ uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 #
v8.0.0
with:
python-version: "3.12"
