From 9e87056cfd3a3e39955e985cd27082c172379946 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 03:44:57 +0000 Subject: [PATCH] Bump the actions group with 4 updates Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-go](https://github.com/actions/setup-go) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) Updates `actions/setup-python` from 6.3.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6.5.0...v7.0.0) Updates `github/codeql-action` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.0...v4.37.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 26 +++++++++++++------------- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/depscan.yml | 4 ++-- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 82d1178d3..ac852304a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -45,18 +45,18 @@ jobs: steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 10 persist-credentials: false - name: Set up Python ${{ matrix.pyver }} - uses: actions/setup-python@v6.3.0 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.pyver }} - name: Install Go - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod @@ -73,7 +73,7 @@ jobs: CFLAGS: -funsigned-char steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 # needed for :commit: docs role persist-credentials: false @@ -85,12 +85,12 @@ jobs: run: if grep -Inr ':code:`\s' kitty kitty_tests kittens docs *.py *.asciidoc *.rst *.go .gitattributes .gitignore; then echo Space at code block start found, aborting.; exit 1; fi - name: Set up Python - uses: actions/setup-python@v6.3.0 + uses: actions/setup-python@v7.0.0 with: python-version: "3.14" - name: Install Go - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod cache: false @@ -143,13 +143,13 @@ jobs: KITTY_SANITIZE: 1 steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 10 persist-credentials: false - name: Install Go - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod @@ -164,18 +164,18 @@ jobs: runs-on: macos-latest steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 # needed for :commit: docs role persist-credentials: false - name: Set up Python - uses: actions/setup-python@v6.3.0 + uses: actions/setup-python@v7.0.0 with: python-version: "3.14" - name: Install Go - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod @@ -202,7 +202,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 10 persist-credentials: false @@ -211,7 +211,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y curl xz-utils build-essential git pkg-config libxrandr-dev libxinerama-dev libxcursor-dev libxi-dev libgl1-mesa-dev libxkbcommon-x11-dev libfontconfig-dev libx11-xcb-dev libdbus-1-dev - name: Install Go - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 28b23b531..8288e0c78 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,7 +39,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. @@ -48,13 +48,13 @@ jobs: - name: Install Go if: matrix.language == 'c' || matrix.language == 'go' - uses: actions/setup-go@v6.5.0 + uses: actions/setup-go@v7.0.0 with: go-version-file: go.mod # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.0 + uses: github/codeql-action/init@v4.37.1 with: languages: ${{ matrix.language }} trap-caching: false @@ -64,7 +64,7 @@ jobs: run: python3 .github/workflows/ci.py build - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.0 + uses: github/codeql-action/analyze@v4.37.1 - name: Run govulncheck if: matrix.language == 'go' diff --git a/.github/workflows/depscan.yml b/.github/workflows/depscan.yml index ad3273f62..94e95fb11 100644 --- a/.github/workflows/depscan.yml +++ b/.github/workflows/depscan.yml @@ -22,13 +22,13 @@ jobs: KITTY_BUNDLE: 1 steps: - name: Checkout source code - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 10 persist-credentials: false - name: Checkout bypy - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 1 persist-credentials: false