This is an automated email from the ASF dual-hosted git repository.
shahar1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new a89208e5405 Bump the github-actions-updates group across 1 directory
with 5 updates (#74110)
a89208e5405 is described below
commit a89208e5405251e2de0af842fb9e3d194e3a6be3
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Oct 3 15:41:31 2026 +0300
Bump the github-actions-updates group across 1 directory with 5 updates
(#74110)
Bumps the github-actions-updates group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.1.0` |
`10.2.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.38.1` | `4.38.2` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action)
| `4.38.1` | `4.38.2` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.38.1` | `4.38.2` |
| [gradle/actions/dependency-submission](https://github.com/gradle/actions)
| `6.3.0` | `6.4.0` |
Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
-
[Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7)
Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `github/codeql-action/autobuild` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)
Updates `gradle/actions/dependency-submission` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/gradle/actions/releases)
-
[Commits](https://github.com/gradle/actions/compare/9c971963bec38e04b3d30dcc455b5382be2fdbfb...3f5f9adaf7d9fecd50b5935e54106014257a94e6)
---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
dependency-version: 10.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/init
dependency-version: 4.38.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: gradle/actions/dependency-submission
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/ci-notification.yml | 2 +-
.github/workflows/codeql-analysis.yml | 6 +++---
.github/workflows/java-sdk-dependency-security.yml | 6 +++---
.github/workflows/notify-uv-lock-conflicts.yml | 2 +-
.github/workflows/registry-tests.yml | 2 +-
.github/workflows/scheduled-verify-release-calendar.yml | 2 +-
6 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/.github/workflows/ci-notification.yml
b/.github/workflows/ci-notification.yml
index d883fbe6cb3..82ce7b8c301 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -48,7 +48,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
+ uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
with:
version-file: uv.lock
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 6f836192fee..0b376d3377c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -136,13 +136,13 @@ jobs:
java-version: '11'
- name: Initialize CodeQL
- uses:
github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
+ uses:
github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
with:
languages: ${{ matrix.language }}
- name: Autobuild
if: matrix.language != 'java'
- uses:
github/codeql-action/autobuild@1c5b675653bb5c22dbe9b12b556ec555138e09fd #
v4.38.1
+ uses:
github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #
v4.38.2
- name: Build Java SDK
if: matrix.language == 'java'
@@ -150,7 +150,7 @@ jobs:
run: ./gradlew classes testClasses
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
+ uses:
github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/java-sdk-dependency-security.yml
b/.github/workflows/java-sdk-dependency-security.yml
index a0be4a8169d..6f151ab16ec 100644
--- a/.github/workflows/java-sdk-dependency-security.yml
+++ b/.github/workflows/java-sdk-dependency-security.yml
@@ -60,19 +60,19 @@ jobs:
working-directory: java-sdk
run: ./gradlew --no-daemon publishToMavenLocal -PskipSigning=true
- name: Submit main build dependency graph
- uses:
gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb
# v6.3.0
+ uses:
gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6
# v6.4.0
with:
build-root-directory: java-sdk
dependency-graph: generate-and-submit
validate-wrappers: true
- name: Submit Java example dependency graph
- uses:
gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb
# v6.3.0
+ uses:
gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6
# v6.4.0
with:
build-root-directory: java-sdk/example
dependency-graph: generate-and-submit
gradle-version: "8.14.5"
- name: Submit Scala Spark example dependency graph
- uses:
gradle/actions/dependency-submission@9c971963bec38e04b3d30dcc455b5382be2fdbfb
# v6.3.0
+ uses:
gradle/actions/dependency-submission@3f5f9adaf7d9fecd50b5935e54106014257a94e6
# v6.4.0
with:
build-root-directory: java-sdk/scala_spark_example
dependency-graph: generate-and-submit
diff --git a/.github/workflows/notify-uv-lock-conflicts.yml
b/.github/workflows/notify-uv-lock-conflicts.yml
index 77b9b74e1b0..e5065bc20f2 100644
--- a/.github/workflows/notify-uv-lock-conflicts.yml
+++ b/.github/workflows/notify-uv-lock-conflicts.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
+ uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
with:
version-file: uv.lock
- name: "Notify open PRs"
diff --git a/.github/workflows/registry-tests.yml
b/.github/workflows/registry-tests.yml
index 9b67cbc8730..27fb9e35c6e 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -56,7 +56,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
+ uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
with:
python-version: "3.12"
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml
b/.github/workflows/scheduled-verify-release-calendar.yml
index 5660e274bc3..f78eb566e4a 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -35,7 +35,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
+ uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 #
v10.2.0
with:
version-file: uv.lock
- name: "Verify release calendar"
