Skip to content

Commit 04238ef

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group with 7 updates (#469)
1 parent 592b217 commit 04238ef

11 files changed

Lines changed: 30 additions & 30 deletions

‎.github/workflows/_build.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
runs-on: ${{ inputs.os }}
3030
steps:
3131
- name: Harden Runner
32-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
32+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
3333
with:
3434
disable-sudo: true
3535
egress-policy: block
@@ -53,7 +53,7 @@ jobs:
5353
python-version: ${{ inputs.python-version }}
5454

5555
- name: Install uv
56-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
56+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
5757

5858
- name: Check git status (not Windows)
5959
if: runner.os != 'Windows'

‎.github/workflows/_build_doc.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ${{ inputs.os }}
2929
steps:
3030
- name: Harden Runner
31-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
31+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
3232
with:
3333
# Audit only: no secrets, read-only permissions — low blast radius.
3434
egress-policy: audit
@@ -42,7 +42,7 @@ jobs:
4242
python-version: ${{ inputs.python-version }}
4343

4444
- name: Install uv
45-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
45+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
4646

4747
- name: Install dependencies
4848
run: |

‎.github/workflows/_codeql.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232

3333
steps:
3434
- name: Harden Runner
35-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
35+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
3636
with:
3737
# Audit only: no secrets, read-only code scanning — low blast radius.
3838
egress-policy: audit
@@ -47,7 +47,7 @@ jobs:
4747

4848
# Initializes the CodeQL tools for scanning.
4949
- name: Initialize CodeQL
50-
uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3.29.5
50+
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3.29.5
5151
with:
5252
languages: python
5353
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -60,7 +60,7 @@ jobs:
6060
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
6161
# If this step fails, then you should remove it and run the build manually (see below)
6262
- name: Autobuild
63-
uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3.29.5
63+
uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3.29.5
6464

6565
# ℹ️ Command-line programs to run using the OS shell.
6666
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -73,6 +73,6 @@ jobs:
7373
# ./location_of_script_within_repo/buildscript.sh
7474

7575
- name: Perform CodeQL Analysis
76-
uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3.29.5
76+
uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3.29.5
7777
with:
7878
category: "/language:python"

‎.github/workflows/_pre_commit.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Harden Runner
24-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
24+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
2525
with:
2626
# Audit only: no secrets, read-only permissions — low blast radius.
2727
disable-sudo: true

‎.github/workflows/_test_futures_private.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151
PYTHON: ${{ inputs.python-version }}
5252
steps:
5353
- name: Harden Runner
54-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
54+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
5555
with:
5656
disable-sudo: true
5757
egress-policy: block
@@ -85,7 +85,7 @@ jobs:
8585
python-version: ${{ inputs.python-version }}
8686

8787
- name: Install uv
88-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
88+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
8989

9090
- name: Install package (Linux or macOS)
9191
if: runner.os != 'Windows'
@@ -128,7 +128,7 @@ jobs:
128128
129129
- name: Upload coverage to Codecov
130130
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
131-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
131+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
132132
with:
133133
token: ${{ secrets.CODECOV_TOKEN }}
134134
files: coverage.xml
@@ -140,7 +140,7 @@ jobs:
140140

141141
- name: Upload test results to Codecov
142142
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
143-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
143+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
144144
with:
145145
token: ${{ secrets.CODECOV_TOKEN }}
146146
files: junit-futures-private-rest.xml,junit-futures-private-ws.xml

‎.github/workflows/_test_futures_public.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PYTHON: ${{ inputs.python-version }}
4040
steps:
4141
- name: Harden Runner
42-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
42+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4343
with:
4444
disable-sudo: true
4545
egress-policy: block
@@ -72,7 +72,7 @@ jobs:
7272
python-version: ${{ inputs.python-version }}
7373

7474
- name: Install uv
75-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
75+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
7676

7777
- name: Install package (Linux or macOS)
7878
if: runner.os != 'Windows'
@@ -105,7 +105,7 @@ jobs:
105105
106106
- name: Upload coverage to Codecov
107107
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
108-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
108+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
109109
with:
110110
token: ${{ secrets.CODECOV_TOKEN }}
111111
files: coverage.xml
@@ -117,7 +117,7 @@ jobs:
117117

118118
- name: Upload test results to Codecov
119119
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
120-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
120+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
121121
with:
122122
token: ${{ secrets.CODECOV_TOKEN }}
123123
files: junit-futures-public-rest.xml,junit-futures-public-ws.xml

‎.github/workflows/_test_spot_private.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ jobs:
5252
PYTHON: ${{ inputs.python-version }}
5353
steps:
5454
- name: Harden Runner
55-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
55+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
5656
with:
5757
disable-sudo: true
5858
egress-policy: block
@@ -87,7 +87,7 @@ jobs:
8787
python-version: ${{ inputs.python-version }}
8888

8989
- name: Install uv
90-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
90+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
9191

9292
- name: Install package (Linux or macOS)
9393
if: runner.os != 'Windows'
@@ -128,7 +128,7 @@ jobs:
128128
129129
- name: Upload coverage to Codecov
130130
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
131-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
131+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
132132
with:
133133
token: ${{ secrets.CODECOV_TOKEN }}
134134
files: coverage.xml
@@ -140,7 +140,7 @@ jobs:
140140

141141
- name: Upload test results to Codecov
142142
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
143-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
143+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
144144
with:
145145
token: ${{ secrets.CODECOV_TOKEN }}
146146
files: junit-spot-private-rest.xml,junit-spot-private-ws.xml

‎.github/workflows/_test_spot_public.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PYTHON: ${{ inputs.python-version }}
4040
steps:
4141
- name: Harden Runner
42-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
42+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
4343
with:
4444
disable-sudo: true
4545
egress-policy: block
@@ -73,7 +73,7 @@ jobs:
7373
python-version: ${{ inputs.python-version }}
7474

7575
- name: Install uv
76-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
76+
uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
7777

7878
- name: Install package (Linux or macOS)
7979
if: runner.os != 'Windows'
@@ -106,7 +106,7 @@ jobs:
106106
107107
- name: Upload coverage to Codecov
108108
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
109-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
109+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
110110
with:
111111
token: ${{ secrets.CODECOV_TOKEN }}
112112
files: coverage.xml
@@ -118,7 +118,7 @@ jobs:
118118

119119
- name: Upload test results to Codecov
120120
if: runner.os != 'Windows' && github.actor == 'btschwertfeger'
121-
uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
121+
uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
122122
with:
123123
token: ${{ secrets.CODECOV_TOKEN }}
124124
files: junit-spot-public-rest.xml,junit-spot-public-ws.xml

‎.github/workflows/cicd.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -218,7 +218,7 @@ jobs:
218218
url: https://test.pypi.org/p/python-kraken-sdk
219219
steps:
220220
- name: Harden Runner
221-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
221+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
222222
with:
223223
disable-sudo: true
224224
egress-policy: block
@@ -275,7 +275,7 @@ jobs:
275275
url: https://pypi.org/p/python-kraken-sdk
276276
steps:
277277
- name: Harden Runner
278-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
278+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
279279
with:
280280
disable-sudo: true
281281
egress-policy: block

‎.github/workflows/dependabot_auto_merge.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
if: ${{ github.actor == 'dependabot[bot]' }}
2525
steps:
2626
- name: Harden Runner
27-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
27+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
2828
with:
2929
disable-sudo: true
3030
egress-policy: block

0 commit comments

Comments
 (0)