From e40c95e7e3c4a5d936baf764e651de200239ed5a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 1 Jun 2026 11:40:32 +0000 Subject: [PATCH] Build(deps): Bump the compatible group with 4 updates Bumps the compatible group with 4 updates: [actions/create-github-app-token](https://github.com/actions/create-github-app-token), [frequenz-floss/gh-action-dependabot-migrate](https://github.com/frequenz-floss/gh-action-dependabot-migrate), [frequenz-floss/gh-action-setup-python-with-deps](https://github.com/frequenz-floss/gh-action-setup-python-with-deps) and [actions/labeler](https://github.com/actions/labeler). Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/create-github-app-token/compare/1b10c78c7865c340bc4f6099eb2f838309f1e8c3...bcd2ba49218906704ab6c1aa796996da409d3eb1) Updates `frequenz-floss/gh-action-dependabot-migrate` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/frequenz-floss/gh-action-dependabot-migrate/releases) - [Commits](https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/45994e185a9040449304a470e8f02d0e197873b4...eb100d3cf732b4808a7776eee8f303521efd494b) Updates `frequenz-floss/gh-action-setup-python-with-deps` from 1.0.2 to 1.0.4 - [Release notes](https://github.com/frequenz-floss/gh-action-setup-python-with-deps/releases) - [Commits](https://github.com/frequenz-floss/gh-action-setup-python-with-deps/compare/e4d0b2ef8f5a1612d7827f3abaef17c931d2b946...b5707ffcd43ec4b24f2b24df712b43148cfa887f) Updates `actions/labeler` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/634933edcd8ababfe52f92936142cc22ac488b1b...f27b608878404679385c85cfa523b85ccb86e213) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible - dependency-name: frequenz-floss/gh-action-dependabot-migrate dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible - dependency-name: frequenz-floss/gh-action-setup-python-with-deps dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: compatible - dependency-name: actions/labeler dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-dependabot.yaml | 2 +- .github/workflows/black-migration.yaml | 4 ++-- .github/workflows/ci-pr.yaml | 2 +- .github/workflows/ci.yaml | 8 ++++---- .github/workflows/labeler.yml | 2 +- .github/workflows/repo-config-migration.yaml | 4 ++-- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/auto-dependabot.yaml b/.github/workflows/auto-dependabot.yaml index f12d16a..572bd44 100644 --- a/.github/workflows/auto-dependabot.yaml +++ b/.github/workflows/auto-dependabot.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/black-migration.yaml b/.github/workflows/black-migration.yaml index 09ca186..3dc86fb 100644 --- a/.github/workflows/black-migration.yaml +++ b/.github/workflows/black-migration.yaml @@ -55,7 +55,7 @@ jobs: steps: - name: Generate token id: create-app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} @@ -66,7 +66,7 @@ jobs: # Read/update pull request metadata and labels. permission-pull-requests: write - name: Migrate - uses: frequenz-floss/gh-action-dependabot-migrate@45994e185a9040449304a470e8f02d0e197873b4 # v1.1.1 + uses: frequenz-floss/gh-action-dependabot-migrate@eb100d3cf732b4808a7776eee8f303521efd494b # v1.2.1 with: migration-script: | import os diff --git a/.github/workflows/ci-pr.yaml b/.github/workflows/ci-pr.yaml index 2daa78f..e9825c4 100644 --- a/.github/workflows/ci-pr.yaml +++ b/.github/workflows/ci-pr.yaml @@ -39,7 +39,7 @@ jobs: submodules: true - name: Setup Python - uses: frequenz-floss/gh-action-setup-python-with-deps@e4d0b2ef8f5a1612d7827f3abaef17c931d2b946 # v1.0.2 + uses: frequenz-floss/gh-action-setup-python-with-deps@b5707ffcd43ec4b24f2b24df712b43148cfa887f # v1.0.4 with: python-version: ${{ env.DEFAULT_PYTHON_VERSION }} dependencies: .[dev-mkdocs] diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index ee598ea..31f7dd5 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -89,7 +89,7 @@ jobs: submodules: true - name: Setup Python - uses: frequenz-floss/gh-action-setup-python-with-deps@e4d0b2ef8f5a1612d7827f3abaef17c931d2b946 # v1.0.2 + uses: frequenz-floss/gh-action-setup-python-with-deps@b5707ffcd43ec4b24f2b24df712b43148cfa887f # v1.0.4 with: python-version: ${{ env.DEFAULT_PYTHON_VERSION }} dependencies: build @@ -147,7 +147,7 @@ jobs: > pyproject.toml - name: Setup Python - uses: frequenz-floss/gh-action-setup-python-with-deps@e4d0b2ef8f5a1612d7827f3abaef17c931d2b946 # v1.0.2 + uses: frequenz-floss/gh-action-setup-python-with-deps@b5707ffcd43ec4b24f2b24df712b43148cfa887f # v1.0.4 with: python-version: ${{ matrix.python }} dependencies: dist/*.whl @@ -188,7 +188,7 @@ jobs: submodules: true - name: Setup Python - uses: frequenz-floss/gh-action-setup-python-with-deps@e4d0b2ef8f5a1612d7827f3abaef17c931d2b946 # v1.0.2 + uses: frequenz-floss/gh-action-setup-python-with-deps@b5707ffcd43ec4b24f2b24df712b43148cfa887f # v1.0.4 with: python-version: ${{ env.DEFAULT_PYTHON_VERSION }} dependencies: .[dev-mkdocs] @@ -228,7 +228,7 @@ jobs: submodules: true - name: Setup Python - uses: frequenz-floss/gh-action-setup-python-with-deps@e4d0b2ef8f5a1612d7827f3abaef17c931d2b946 # v1.0.2 + uses: frequenz-floss/gh-action-setup-python-with-deps@b5707ffcd43ec4b24f2b24df712b43148cfa887f # v1.0.4 with: python-version: ${{ env.DEFAULT_PYTHON_VERSION }} dependencies: .[dev-mkdocs] diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 393ddfc..eedc657 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -20,7 +20,7 @@ jobs: # only use hashes to pick the action to execute (instead of tags or branches). # For more details read: # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # 6.0.1 + uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # 6.1.0 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" dot: true diff --git a/.github/workflows/repo-config-migration.yaml b/.github/workflows/repo-config-migration.yaml index 086fda1..8ab5e01 100644 --- a/.github/workflows/repo-config-migration.yaml +++ b/.github/workflows/repo-config-migration.yaml @@ -45,7 +45,7 @@ jobs: steps: - name: Generate token id: create-app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} @@ -58,7 +58,7 @@ jobs: # Allow pushes when migration changes workflow files. permission-workflows: write - name: Migrate - uses: frequenz-floss/gh-action-dependabot-migrate@45994e185a9040449304a470e8f02d0e197873b4 # v1.1.1 + uses: frequenz-floss/gh-action-dependabot-migrate@eb100d3cf732b4808a7776eee8f303521efd494b # v1.2.1 with: script-url-template: >- https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/{version}/cookiecutter/migrate.py