Bump the github-actions group with 5 updates (#8112)

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.2` | `1.3.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `7` | `8` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.2` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `3` | `4` |


Updates `autofix-ci/action` from 1.3.2 to 1.3.3
- [Release notes](https://github.com/autofix-ci/action/releases)
- [Commits](635ffb0c97...7a166d7532)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

Updates `docker/build-push-action` from 6.18.0 to 6.19.2
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](263435318d...10e90e3645)

Updates `actions/attest-build-provenance` from 3 to 4
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: autofix-ci/action
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 6.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2026-03-08 12:48:50 +01:00 committed by GitHub
parent d4b394a3bf
commit c32d1bbf33
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 13 additions and 13 deletions

View file

@ -38,4 +38,4 @@ jobs:
- uses: mhils/add-pr-ref-in-changelog@main
- uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27
- uses: autofix-ci/action@7a166d7532b277f34e16238930461bf77f9d7ed8

View file

@ -118,7 +118,7 @@ jobs:
- if: runner.os == 'Windows'
run: python -u release/build.py standalone-binaries
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: binaries.${{ matrix.platform }}
path: release/dist
@ -144,7 +144,7 @@ jobs:
env:
CI_BUILD_KEY: ${{ secrets.CI_BUILD_KEY }}
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: binaries.windows-installer
path: release/dist
@ -179,7 +179,7 @@ jobs:
needs: build-wheel
steps:
- uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: binaries.wheel
path: release/docker
@ -200,7 +200,7 @@ jobs:
sudo dpkg -i hugo*.deb
- run: ./docs/build.py
- uses: actions/upload-artifact@v6
- uses: actions/upload-artifact@v7
with:
name: docs
path: docs/public
@ -209,7 +209,7 @@ jobs:
env:
DOCS_ARCHIVE: ${{ github.ref_name }}
- if: startsWith(github.ref, 'refs/tags/')
uses: actions/upload-artifact@v6
uses: actions/upload-artifact@v7
with:
name: docs-archive
path: docs/public
@ -246,7 +246,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: binaries.wheel
path: release/docker
@ -283,7 +283,7 @@ jobs:
- name: Build and push
id: push
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
with:
context: release/docker
platforms: linux/amd64,linux/arm64
@ -292,7 +292,7 @@ jobs:
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
annotations: ${{ steps.meta.outputs.annotations }}
- uses: actions/attest-build-provenance@v3
- uses: actions/attest-build-provenance@v4
with:
subject-name: ghcr.io/${{ github.repository }}
subject-digest: ${{ steps.push.outputs.digest }}
@ -329,22 +329,22 @@ jobs:
with:
args: --only-group deploy
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
name: docs
path: docs/public
- if: startsWith(github.ref, 'refs/tags/')
uses: actions/download-artifact@v7
uses: actions/download-artifact@v8
with:
name: docs-archive
path: docs/archive
- uses: actions/download-artifact@v7
- uses: actions/download-artifact@v8
with:
pattern: binaries.*
merge-multiple: true
path: release/dist
- id: provenance
uses: actions/attest-build-provenance@v3
uses: actions/attest-build-provenance@v4
with:
subject-path: 'release/dist/*'
- run: |