From f02dc49990ea1a3d0bc7f1fbdf86d415e7d7c590 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Oct 2026 17:23:00 +0000 Subject: [PATCH] chore(ci): bump the actions group with 3 updates Bumps the actions group with 3 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/github-script](https://github.com/actions/github-script) and [alibaba/open-code-review](https://github.com/alibaba/open-code-review). Updates `astral-sh/setup-uv` from 10.0.1 to 10.2.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v10.0.1...v10.2.0) Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v9) Updates `alibaba/open-code-review` from 1.9.9 to 1.12.10 - [Release notes](https://github.com/alibaba/open-code-review/releases) - [Commits](https://github.com/alibaba/open-code-review/compare/v1.9.9...v1.12.10) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: alibaba/open-code-review dependency-version: 1.12.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/ocr-review.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 76fae05..bd5a8f1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: bun-version: 1.3.14 # setup-uv stopped publishing floating major tags in v8, so this is pinned # to an exact release rather than a tracking `@v10`. - - uses: astral-sh/setup-uv@v10.0.1 + - uses: astral-sh/setup-uv@v10.2.0 with: # The document tools declare their dependencies with PEP 723 inline # metadata, so the default lockfile globs match no file and the cache @@ -94,7 +94,7 @@ jobs: bun-version: 1.3.14 # setup-uv stopped publishing floating major tags in v8, so this is pinned # to an exact release rather than a tracking `@v10`. - - uses: astral-sh/setup-uv@v10.0.1 + - uses: astral-sh/setup-uv@v10.2.0 with: # The document tools declare their dependencies with PEP 723 inline # metadata, so the default lockfile globs match no file and the cache diff --git a/.github/workflows/ocr-review.yml b/.github/workflows/ocr-review.yml index 2e19a4b..9260984 100644 --- a/.github/workflows/ocr-review.yml +++ b/.github/workflows/ocr-review.yml @@ -81,7 +81,7 @@ jobs: - name: Get PR context id: pr-context if: github.event_name == 'issue_comment' - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: script: | // issue_comment events have no top-level pull_request fields, so @@ -96,7 +96,7 @@ jobs: core.setOutput('head_sha', pullRequest.head.sha); - name: Run OpenCodeReview - uses: alibaba/open-code-review@v1.9.9 + uses: alibaba/open-code-review@v1.12.10 with: llm_url: ${{ secrets.OCR_LLM_URL }} llm_auth_token: ${{ secrets.OCR_LLM_AUTH_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c30a060..0ebb4b9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -48,7 +48,7 @@ jobs: bun-version: 1.3.14 # setup-uv stopped publishing floating major tags in v8, so this is pinned # to an exact release rather than a tracking `@v10`. - - uses: astral-sh/setup-uv@v10.0.1 + - uses: astral-sh/setup-uv@v10.2.0 with: # The document tools declare their dependencies with PEP 723 inline # metadata, so the default lockfile globs match no file and the cache @@ -178,7 +178,7 @@ jobs: bun-version: 1.3.14 # setup-uv stopped publishing floating major tags in v8, so this is pinned # to an exact release rather than a tracking `@v10`. - - uses: astral-sh/setup-uv@v10.0.1 + - uses: astral-sh/setup-uv@v10.2.0 with: # The document tools declare their dependencies with PEP 723 inline # metadata, so the default lockfile globs match no file and the cache