dependabot[bot] opened a new pull request, #5012: URL: https://github.com/apache/arrow-adbc/pull/5012
Bumps the actions group with 4 updates: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action), [actions/setup-dotnet](https://github.com/actions/setup-dotnet), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby). Updates `zizmorcore/zizmor-action` from 0.8.0 to 0.8.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zizmorcore/zizmor-action/releases";>zizmorcore/zizmor-action's releases</a>.</em></p> <blockquote> <h2>v0.8.1</h2> <p><a href="https://github.com/sponsors/woodruffw/";>Sponsorship is appreciated!</a></p> <p>zizmor 1.32 is now the default version used by this action.</p> <p>Full release notes: <a href="https://docs.zizmor.sh/release-notes/%5B#1320%5D(https://redirect.github.com/zizmorcore/zizmor-action/issues/1320)">zizmorcore/zizmor-action#1320</a></p> <p><strong>Full Changelog</strong>: <a href="https://github.com/zizmorcore/zizmor-action/compare/v0.8.0...v0.8.1";>https://github.com/zizmorcore/zizmor-action/compare/v0.8.0...v0.8.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zizmorcore/zizmor-action/commit/45d7276c9ca790aabd705e31ca99c6185c3e76dd";><code>45d7276</code></a> Sync zizmor versions (<a href="https://redirect.github.com/zizmorcore/zizmor-action/issues/191";>#191</a>)</li> <li><a href="https://github.com/zizmorcore/zizmor-action/commit/ff3874113dd825e588b62d5ab9fe3da5411732ff";><code>ff38741</code></a> chore(deps): bump the github-actions group across 1 directory with 2 updates ...</li> <li><a href="https://github.com/zizmorcore/zizmor-action/commit/4a9eca449a683b2d742b9a431babf6a259edcdad";><code>4a9eca4</code></a> README: another troubleshooting section (<a href="https://redirect.github.com/zizmorcore/zizmor-action/issues/186";>#186</a>)</li> <li><a href="https://github.com/zizmorcore/zizmor-action/commit/83a041654ed09c7cc62da378a616f1eaba41c165";><code>83a0416</code></a> Bump pins (<a href="https://redirect.github.com/zizmorcore/zizmor-action/issues/185";>#185</a>)</li> <li>See full diff in <a href="https://github.com/zizmorcore/zizmor-action/compare/53290badfa369cb0bf7ad16342cb62c2fa47ac7b...45d7276c9ca790aabd705e31ca99c6185c3e76dd";>compare view</a></li> </ul> </details> <br /> Updates `actions/setup-dotnet` from 6.0.0 to 6.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-dotnet/releases";>actions/setup-dotnet's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Add check-latest input to reuse a locally installed .NET SDK and skip network calls by <a href="https://github.com/v-mahabaleshwars";><code>@v-mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/774";>actions/setup-dotnet#774</a></li> <li>Add skip-lts-prepass input to optimize .NET SDK installation process by <a href="https://github.com/v-chiranjib-swain";><code>@v-chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/791";>actions/setup-dotnet#791</a></li> <li>Add fallback install directory when default is not writable by <a href="https://github.com/v-priyagupta108";><code>@v-priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/785";>actions/setup-dotnet#785</a></li> </ul> <h3>Documentation</h3> <ul> <li>Document sdk.version validation for rollForward in global.json by <a href="https://github.com/v-priyagupta108";><code>@v-priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/763";>actions/setup-dotnet#763</a></li> <li>Docs: Add Microsoft docs link for dotnet-quality options by <a href="https://github.com/v-priyagupta108";><code>@v-priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/773";>actions/setup-dotnet#773</a></li> <li>Docs: Updating Documentation in README by <a href="https://github.com/v-lmvysakh";><code>@v-lmvysakh</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/776";>actions/setup-dotnet#776</a></li> <li>Clarify dotnet-quality behavior for multiple SDK versions by <a href="https://github.com/v-mahabaleshwars";><code>@v-mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/780";>actions/setup-dotnet#780</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Fix security vulnerabilities by <a href="https://github.com/v-HarithaVattikuti";><code>@v-HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/767";>actions/setup-dotnet#767</a></li> <li>ci: make validation caches read-only by <a href="https://github.com/philip-gai";><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/777";>actions/setup-dotnet#777</a></li> <li>Bump actions/checkout from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/764";>actions/setup-dotnet#764</a></li> <li>Bump browserslist from 4.28.2 to 4.28.8 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/781";>actions/setup-dotnet#781</a></li> <li>Bump eslint from 10.5.0 to 10.11.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/772";>actions/setup-dotnet#772</a></li> <li>Bump eslint-plugin-jest from 29.15.2 to 29.16.6 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/771";>actions/setup-dotnet#771</a></li> <li>Bump undici from 6.28.0 to 6.29.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/784";>actions/setup-dotnet#784</a></li> <li>Bump actions/checkout from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/788";>actions/setup-dotnet#788</a></li> <li>Bump handlebars from 4.7.9 to 4.7.10 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/792";>actions/setup-dotnet#792</a></li> <li>Bump brace-expansion by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/790";>actions/setup-dotnet#790</a></li> <li>Prepare v6.1.0 release with updated cache dependency by <a href="https://github.com/v-HarithaVattikuti";><code>@v-HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-dotnet/pull/798";>actions/setup-dotnet#798</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/v-lmvysakh";><code>@v-lmvysakh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/776";>actions/setup-dotnet#776</a></li> <li><a href="https://github.com/v-chiranjib-swain";><code>@v-chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-dotnet/pull/791";>actions/setup-dotnet#791</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-dotnet/compare/v6.0.0...v6.1.0";>https://github.com/actions/setup-dotnet/compare/v6.0.0...v6.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-dotnet/commit/0f4a354dd5547a28c70b7853dbd95d5b67886e73";><code>0f4a354</code></a> Prepare v6.1.0 release with updated cache dependency (<a href="https://redirect.github.com/actions/setup-dotnet/issues/798";>#798</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/6ec5c6b286b66cf79f015cd3276f2eab462ba1b9";><code>6ec5c6b</code></a> Add fallback install directory when default is not writable (<a href="https://redirect.github.com/actions/setup-dotnet/issues/785";>#785</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/62573f4b60b156cb305166dcca336c2a9574d6ea";><code>62573f4</code></a> Bump brace-expansion (<a href="https://redirect.github.com/actions/setup-dotnet/issues/790";>#790</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/67290a9d23faa2b6594ee5c5b2d3338b56d927b2";><code>67290a9</code></a> Bump handlebars from 4.7.9 to 4.7.10 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/792";>#792</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/0072421cf6e93abd8c31251a408e089304f1f9d9";><code>0072421</code></a> Bump actions/checkout from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/788";>#788</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/9ead3175a9e8a676412315ab4ab2773dac3e0875";><code>9ead317</code></a> Bump undici from 6.28.0 to 6.29.1 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/784";>#784</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/349aa191ae05aee6d53db4bcba37bd6980e812fe";><code>349aa19</code></a> Add skip-lts-prepass input to optimize .NET SDK installation process (<a href="https://redirect.github.com/actions/setup-dotnet/issues/791";>#791</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/e2cf7c663b93c38144629f5d40b62d3eaaa63a03";><code>e2cf7c6</code></a> Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/771";>#771</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/75763629d4dad645cf9bda516293f9a79adc490d";><code>7576362</code></a> Bump eslint from 10.5.0 to 10.11.0 (<a href="https://redirect.github.com/actions/setup-dotnet/issues/772";>#772</a>)</li> <li><a href="https://github.com/actions/setup-dotnet/commit/074373ff885ac73f77e5f1d46785eeb8c925e06a";><code>074373f</code></a> Add check-latest input to reuse a locally installed .NET SDK and skip network...</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-dotnet/compare/a98b56852c35b8e3190ac28c8c2271da59106c68...0f4a354dd5547a28c70b7853dbd95d5b67886e73";>compare view</a></li> </ul> </details> <br /> Updates `astral-sh/setup-uv` from 10.3.2 to 10.3.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/setup-uv/releases";>astral-sh/setup-uv's releases</a>.</em></p> <blockquote> <h2>v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback</h2> <h2>Changes</h2> <p>This release contains something that should have been included a very long time ago. Sorry for sleeping on that.</p> <p>This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)</p> <p>Also a big thank you to <a href="https://github.com/soujasK";><code>@soujasK</code></a> for a set of bugfixes 👏</p> <h2>🐛 Bug fixes</h2> <ul> <li>Use Astral mirror for version manifests with GitHub fallback <a href="https://github.com/eifinger";><code>@eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1119";>#1119</a>)</li> <li>fix: allow whitespace in uv requirement specifiers <a href="https://github.com/soujasK";><code>@soujasK</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1112";>#1112</a>)</li> <li>fix: resolve ~= specifiers with PEP 440 semantics <a href="https://github.com/soujasK";><code>@soujasK</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1111";>#1111</a>)</li> <li>fix: only report a saved cache when saving succeeded <a href="https://github.com/soujasK";><code>@soujasK</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1110";>#1110</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>chore: update known checksums for 0.13.6 @<a href="https://github.com/apps/github-actions";>github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1117";>#1117</a>)</li> </ul> <h2>📚 Documentation</h2> <ul> <li>docs: use JSDoc for compatible release specifier comment <a href="https://github.com/eifinger";><code>@eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1113";>#1113</a>)</li> <li>docs: update version references to v10.3.2 @<a href="https://github.com/apps/github-actions";>github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1104";>#1104</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/setup-uv/commit/68559e99cc807c1eb7e9238fd43a15bba460eec2";><code>68559e9</code></a> Use Astral mirror for version manifests with GitHub fallback (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1119";>#1119</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/0192b6951893e558e24cfbd971d641a8cd336a95";><code>0192b69</code></a> chore: update known checksums for 0.13.6 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1117";>#1117</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/2f29784424ba0f5755e2d0bbc18227082a5daff1";><code>2f29784</code></a> docs: use JSDoc for compatible release specifier comment (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1113";>#1113</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/9c7332190cf7291329c770bedb2ba1b3e441b37c";><code>9c73321</code></a> fix: allow whitespace in uv requirement specifiers (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1112";>#1112</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/80fbe0140ccf08d50eff5eeb98dff9021c415a21";><code>80fbe01</code></a> fix: resolve ~= specifiers with PEP 440 semantics (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1111";>#1111</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/36b7b57007634b5d947fd73fcd85c7b44863efec";><code>36b7b57</code></a> fix: only report a saved cache when saving succeeded (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1110";>#1110</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/56618cab7a58e3efc9b282dd3de75bbf1075db9b";><code>56618ca</code></a> docs: update version references to v10.3.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/1104";>#1104</a>)</li> <li>See full diff in <a href="https://github.com/astral-sh/setup-uv/compare/07a047e608db84b3d8c06cd9a7c7dcc9c355c18e...68559e99cc807c1eb7e9238fd43a15bba460eec2";>compare view</a></li> </ul> </details> <br /> Updates `ruby/setup-ruby` from 1.335.0 to 1.336.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ruby/setup-ruby/releases";>ruby/setup-ruby's releases</a>.</em></p> <blockquote> <h2>v1.336.0</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/ruby/setup-ruby/compare/v1.335.0...v1.336.0";>https://github.com/ruby/setup-ruby/compare/v1.335.0...v1.336.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ruby/setup-ruby/commit/de492cf36cbab201753d720ce4f4e336cd688c94";><code>de492cf</code></a> asan and asan-release are now available on ubuntu-26.04</li> <li>See full diff in <a href="https://github.com/ruby/setup-ruby/compare/7f797815d8adceb1c412e7abefdd1ab4abc47a5f...de492cf36cbab201753d720ce4f4e336cd688c94";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
