Skip to content

Commit 59c1fd1

Browse files
timsaucerclaude
timsaucer
and
claude
authored
build(deps): consolidate open Dependabot dependency updates (#1734)
Applies 21 open Dependabot PRs in a single change so CI runs once over the combined result rather than 21 times over lockfiles that each invalidate the next. Cargo (Cargo.lock only; workspace ranges already admit these): arrow/arrow-array/arrow-schema/arrow-select 59.2.0 -> 59.3.0, uuid 1.23.3 -> 1.26.1, futures 0.3.32 -> 0.3.34, log 0.4.32 -> 0.4.34, async-trait 0.1.89 -> 0.1.92, serde_json 1.0.150 -> 1.0.151, tokio 1.52.3 -> 1.53.1, quinn-proto 0.11.14 -> 0.11.16. Python (uv.lock): tornado 6.5.7 -> 6.5.8, cryptography 49.0.0 -> 50.0.0, setuptools 82.0.1 -> 83.0.0. Actions: actions/checkout v6 -> v7, actions/setup-python v5/v6 -> v7, actions/cache v5 -> v6, taiki-e/install-action v2 -> v2.85.5, astral-sh/setup-uv 8.2.0 -> 10.0.1, github/codeql-action init and analyze 4.36.2 -> 4.37.9. The codeql-action bumps only pass together: the action rejects a run where init and analyze are on different versions, so #1700 and #1699 each fail alone with "Loaded a configuration file for version '4.37.9', but running version '4.36.2'". The SHA-pinned actions/checkout in codeql.yml goes to the v7 commit 3d3c42e5aac5ba805825da76410c181273ba90b1 rather than the stale v6 commit #1606 proposed, keeping the pin on the same major version as the tag refs elsewhere. Excludes #1652 (datafusion 54.0.0 -> 54.1.0), obsolete since main moved to DataFusion 55.1.0. Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
1 parent eeaddab commit 59c1fd1

7 files changed

Lines changed: 181 additions & 171 deletions

File tree

‎.github/workflows/build.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
lint-rust:
4646
runs-on: ubuntu-latest
4747
steps:
48-
- uses: actions/checkout@v6
48+
- uses: actions/checkout@v7
4949

5050
- name: Setup Rust
5151
uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
@@ -62,14 +62,14 @@ jobs:
6262
lint-python:
6363
runs-on: ubuntu-latest
6464
steps:
65-
- uses: actions/checkout@v6
65+
- uses: actions/checkout@v7
6666

6767
- name: Install Python
68-
uses: actions/setup-python@v5
68+
uses: actions/setup-python@v7
6969
with:
7070
python-version: "3.12"
7171

72-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
72+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
7373
with:
7474
enable-cache: true
7575

@@ -88,10 +88,10 @@ jobs:
8888
lint-toml:
8989
runs-on: ubuntu-latest
9090
steps:
91-
- uses: actions/checkout@v6
91+
- uses: actions/checkout@v7
9292

9393
- name: Install taplo
94-
uses: taiki-e/install-action@v2
94+
uses: taiki-e/install-action@v2.85.5
9595
with:
9696
tool: taplo-cli
9797

@@ -103,22 +103,22 @@ jobs:
103103
if: inputs.build_mode == 'release' && startsWith(github.ref, 'refs/tags/')
104104
runs-on: ubuntu-latest
105105
steps:
106-
- uses: actions/checkout@v6
106+
- uses: actions/checkout@v7
107107

108108
- name: Ensure [patch.crates-io] is empty
109109
run: python3 dev/check_crates_patch.py
110110

111111
generate-license:
112112
runs-on: ubuntu-latest
113113
steps:
114-
- uses: actions/checkout@v6
114+
- uses: actions/checkout@v7
115115

116-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
116+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
117117
with:
118118
enable-cache: true
119119

120120
- name: Install cargo-license
121-
uses: taiki-e/install-action@v2
121+
uses: taiki-e/install-action@v2.85.5
122122
with:
123123
tool: cargo-license
124124

@@ -142,7 +142,7 @@ jobs:
142142
matrix:
143143
python-tag: ["abi3", "3.14t"]
144144
steps:
145-
- uses: actions/checkout@v6
145+
- uses: actions/checkout@v7
146146

147147
- run: rm LICENSE.txt
148148
- name: Download LICENSE.txt
@@ -159,7 +159,7 @@ jobs:
159159
with:
160160
key: ${{ inputs.build_mode }}-${{ matrix.python-tag }}
161161

162-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
162+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
163163
with:
164164
enable-cache: true
165165

@@ -233,7 +233,7 @@ jobs:
233233
matrix:
234234
python-tag: ["abi3", "3.14t"]
235235
steps:
236-
- uses: actions/checkout@v6
236+
- uses: actions/checkout@v7
237237

238238
- run: rm LICENSE.txt
239239
- name: Download LICENSE.txt
@@ -250,7 +250,7 @@ jobs:
250250
with:
251251
key: ${{ inputs.build_mode }}-${{ matrix.python-tag }}
252252

253-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
253+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
254254
with:
255255
enable-cache: true
256256

@@ -296,7 +296,7 @@ jobs:
296296
os: [macos-latest, windows-latest]
297297
python-tag: ["abi3", "3.14t"]
298298
steps:
299-
- uses: actions/checkout@v6
299+
- uses: actions/checkout@v7
300300

301301
- name: Setup Rust
302302
uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
@@ -315,12 +315,12 @@ jobs:
315315

316316
- name: Setup Python (free-threaded)
317317
if: matrix.python-tag != 'abi3'
318-
uses: actions/setup-python@v6
318+
uses: actions/setup-python@v7
319319
with:
320320
python-version: ${{ matrix.python-tag }}
321321
freethreaded: true
322322

323-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
323+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
324324
with:
325325
enable-cache: true
326326

@@ -379,7 +379,7 @@ jobs:
379379
matrix:
380380
python-tag: ["abi3", "3.14t"]
381381
steps:
382-
- uses: actions/checkout@v6
382+
- uses: actions/checkout@v7
383383

384384
- name: Setup Rust
385385
uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4
@@ -398,12 +398,12 @@ jobs:
398398

399399
- name: Setup Python (free-threaded)
400400
if: matrix.python-tag != 'abi3'
401-
uses: actions/setup-python@v6
401+
uses: actions/setup-python@v7
402402
with:
403403
python-version: ${{ matrix.python-tag }}
404404
freethreaded: true
405405

406-
- uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
406+
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
407407
with:
408408
enable-cache: true
409409

@@ -444,7 +444,7 @@ jobs:
444444
if: inputs.build_mode == 'release'
445445
runs-on: ubuntu-latest
446446
steps:
447-
- uses: actions/checkout@v6
447+
- uses: actions/checkout@v7
448448
- run: rm LICENSE.txt
449449
- name: Download LICENSE.txt
450450
uses: actions/download-artifact@v8
@@ -516,23 +516,23 @@ jobs:
516516
fi
517517
518518
- name: Checkout docs sources
519-
uses: actions/checkout@v6
519+
uses: actions/checkout@v7
520520

521521
- name: Checkout docs target branch
522522
if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref_type == 'tag')
523-
uses: actions/checkout@v6
523+
uses: actions/checkout@v7
524524
with:
525525
fetch-depth: 0
526526
ref: ${{ steps.target-branch.outputs.value }}
527527
path: docs-target
528528

529529
- name: Setup Python
530-
uses: actions/setup-python@v6
530+
uses: actions/setup-python@v7
531531
with:
532532
python-version: "3.10"
533533

534534
- name: Install dependencies
535-
uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
535+
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
536536
with:
537537
enable-cache: true
538538

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,16 +39,16 @@ jobs:
3939

4040
steps:
4141
- name: Checkout repository
42-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
42+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
4343
with:
4444
persist-credentials: false
4545

4646
- name: Initialize CodeQL
47-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
47+
uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
4848
with:
4949
languages: actions
5050

5151
- name: Perform CodeQL Analysis
52-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
52+
uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
5353
with:
5454
category: "/language:actions"

‎.github/workflows/dev.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,9 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@v6
33+
uses: actions/checkout@v7
3434
- name: Setup Python
35-
uses: actions/setup-python@v6
35+
uses: actions/setup-python@v7
3636
with:
3737
python-version: "3.14"
3838
- name: Audit licenses

‎.github/workflows/test.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -46,23 +46,23 @@ jobs:
4646
# Free-threaded builds — one wheel per interpreter.
4747
- { python-version: "3.14t", wheel-tag: "3.14t", freethreaded: true }
4848
steps:
49-
- uses: actions/checkout@v6
49+
- uses: actions/checkout@v7
5050

5151
- name: Setup Python
5252
id: setup-python
53-
uses: actions/setup-python@v6
53+
uses: actions/setup-python@v7
5454
with:
5555
python-version: ${{ matrix.python-version }}
5656
freethreaded: ${{ matrix.freethreaded }}
5757

5858
- name: Cache Cargo
59-
uses: actions/cache@v5
59+
uses: actions/cache@v6
6060
with:
6161
path: ~/.cargo
6262
key: cargo-cache-stable-${{ hashFiles('Cargo.lock') }}
6363

6464
- name: Install dependencies
65-
uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
65+
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
6666
with:
6767
enable-cache: true
6868

‎.github/workflows/verify-release-candidate.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ jobs:
6565
runs-on: ${{ matrix.runner }}
6666
steps:
6767
- name: Checkout repository
68-
uses: actions/checkout@v6
68+
uses: actions/checkout@v7
6969

7070
- name: Set up protoc
7171
uses: arduino/setup-protoc@v3

0 commit comments

Comments
 (0)