From 264afb046f38ac3f11840a42863259bc9dc28873 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:37:30 +0000 Subject: [PATCH] build: bump the actions-deps group with 2 updates Bumps the actions-deps group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish). Updates `github/codeql-action` from 4 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4) Updates `pypa/gh-action-pypi-publish` from 1.14.1 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.14.1...v1.14.2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/medcat-v1_main.yml | 2 +- .github/workflows/medcat-v1_production.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e071e8da7..e8cc08886 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -69,7 +69,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.37.4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -97,6 +97,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.37.4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/medcat-v1_main.yml b/.github/workflows/medcat-v1_main.yml index aaa4322b2..5d5f02ebb 100644 --- a/.github/workflows/medcat-v1_main.yml +++ b/.github/workflows/medcat-v1_main.yml @@ -136,7 +136,7 @@ jobs: . - name: Publish dev distribution to Test PyPI - uses: pypa/gh-action-pypi-publish@v1.14.1 + uses: pypa/gh-action-pypi-publish@v1.14.2 with: password: ${{ secrets.TEST_PYPI_API_TOKEN }} repository_url: https://test.pypi.org/legacy/ diff --git a/.github/workflows/medcat-v1_production.yml b/.github/workflows/medcat-v1_production.yml index a8295a30d..20f1558af 100644 --- a/.github/workflows/medcat-v1_production.yml +++ b/.github/workflows/medcat-v1_production.yml @@ -66,7 +66,7 @@ jobs: - name: Publish production distribution to PyPI if: startsWith(github.ref, 'refs/tags') && ! github.event.release.prerelease - uses: pypa/gh-action-pypi-publish@v1.14.1 + uses: pypa/gh-action-pypi-publish@v1.14.2 with: # TODO CU-869a25n7e Use Trusted Platform Publisher based PyPI release password: ${{ secrets.PYPI_API_TOKEN }}