From cb4d679f7bee413e111f372b8bf2e8b84de1d9de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Aug 2024 19:27:47 +0000 Subject: [PATCH 1/2] Bump actions/upload-artifact from 4.3.5 to 4.3.6 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.5 to 4.3.6. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/89ef406dd8d7e03cfd12d9e0a4a378f454709029...834a144ee995460fba8ed112a2fc961b36a5ec5a) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index fde920ccc..bbccd9207 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: Upload Artifact - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: SARIF file path: results.sarif From 12beaf1b2dfa8c94972839eac4688c85a16542ba Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 Aug 2024 19:49:31 +0000 Subject: [PATCH 2/2] Bump bump-my-version from 0.24.3 to 0.25.1 Bumps [bump-my-version](https://github.com/callowayproject/bump-my-version) from 0.24.3 to 0.25.1. - [Release notes](https://github.com/callowayproject/bump-my-version/releases) - [Changelog](https://github.com/callowayproject/bump-my-version/blob/master/CHANGELOG.md) - [Commits](https://github.com/callowayproject/bump-my-version/compare/0.24.3...0.25.1) --- updated-dependencies: - dependency-name: bump-my-version dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- CI/requirements_ci.in | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/CI/requirements_ci.in b/CI/requirements_ci.in index 66d88e126..be527ca91 100644 --- a/CI/requirements_ci.in +++ b/CI/requirements_ci.in @@ -1,4 +1,4 @@ -bump-my-version==0.24.3 +bump-my-version==0.25.1 coveralls==4.0.1 deptry==0.18.0 flit==3.9.0 diff --git a/pyproject.toml b/pyproject.toml index 9f93f54ef..380714ed7 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -63,7 +63,7 @@ dev = [ # Dev tools and testing "black[jupyter] ==24.8.0", "blackdoc ==0.3.9", - "bump-my-version ==0.24.3", + "bump-my-version ==0.25.1", "codespell ==2.3.0", "coverage[toml] >=7.5.0", "coveralls >=4.0.0",