chore(deps): bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #2960 · Kludex/uvicorn

dependabot · 2026-05-31T11:42:56Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
astral-sh/setup-uv	`8.0.0`	`8.1.0`
cloudflare/wrangler-action	`3.14.1`	`4.0.0`
actions/upload-artifact	`7.0.0`	`7.0.1`
pypa/gh-action-pypi-publish	`1.13.0`	`1.14.0`
peaceiris/actions-gh-pages	`4.0.0`	`4.1.0`
zizmorcore/zizmor-action	`0.5.2`	`0.5.6`

Updates astral-sh/setup-uv from 8.0.0 to 8.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v8.1.0 🌈 New input no-project

Changes

This add the a new boolean input no-project. It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

Add input no-project in combination with activate-environment @eifinger (#856)

🧰 Maintenance

fix: grant contents:write to validate-release job @eifinger (#860)

Add a release-gate step to the release workflow @zanieb (#859)

Draft commitish releases @eifinger (#858)

Add action-types.yml to instructions @eifinger (#857)

chore: update known checksums for 0.11.7 @github-actions[bot] (#853)

Refactor version resolving @eifinger (#852)

chore: update known checksums for 0.11.6 @github-actions[bot] (#850)

chore: update known checksums for 0.11.5 @github-actions[bot] (#845)

chore: update known checksums for 0.11.4 @github-actions[bot] (#843)

Add a release workflow @zanieb (#839)

chore: update known checksums for 0.11.3 @github-actions[bot] (#836)

📚 Documentation

Update ignore-nothing-to-cache documentation @eifinger (#833)

Pin setup-uv docs to v8 @eifinger (#829)

⬆️ Dependency updates

chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#855)

Commits

0880764 fix: grant contents:write to validate-release job (#860)
717d6ab Add a release-gate step to the release workflow (#859)
5a911eb Draft commitish releases (#858)
080c31e Add action-types.yml to instructions (#857)
b3e97d2 Add input no-project in combination with activate-environment (#856)
7dd591d chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#855)
1541b77 chore: update known checksums for 0.11.7 (#853)
cdfb2ee Refactor version resolving (#852)
cb84d12 chore: update known checksums for 0.11.6 (#850)
1912cc6 chore: update known checksums for 0.11.5 (#845)
Additional commits viewable in compare view

Updates cloudflare/wrangler-action from 3.14.1 to 4.0.0

Release notes

Sourced from cloudflare/wrangler-action's releases.

v4.0.0

Major Changes

#412 1029e90 Thanks @ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

v3.15.0

Minor Changes

#426 febbda6 Thanks @WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

Changelog

Sourced from cloudflare/wrangler-action's changelog.

Changelog

4.0.0

Major Changes

#412 1029e90 Thanks @ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

3.15.0

Minor Changes

#426 febbda6 Thanks @WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

3.14.1

Patch Changes

#358 cd6314a Thanks @penalosa! - Use secret bulk instead of deprecated secret:bulk command

3.14.0

Minor Changes

#351 4ff07f4 Thanks @Maximo-Guk! - Use wrangler outputs for version upload and wrangler deploy

Patch Changes

#350 e209094 Thanks @Maximo-Guk! - Handle failures in createGitHubDeployment and createGitHubJobSummary

3.13.1

Patch Changes

#345 e819570 Thanks @Maximo-Guk! - fix: Pages GitHub Deployment not triggering

3.13.0

Minor Changes

#325 cada7a6 Thanks @Maximo-Guk! - Add GitHub deployments and job summaries for parity with pages-action

#334 9fed19a Thanks @Maximo-Guk! - Bump default wrangler version to 3.90.0

3.12.1

Patch Changes

#319 59c04629408d58978884fadd18755f1a15f96157 Thanks @Maximo-Guk! - Fixes #317: Generate a new output directory with a randomUUID in the tmpDir, so that when the action is executed multiple times, we use the artifacts from that run, opposed to the artifacts from a previous run.

... (truncated)

Commits

ebbaa15 Automatic compilation
a61fbea Merge pull request #429 from cloudflare/changeset-release/main
e804ea3 Version Packages
8d0324a fix: update release workflow to v5 actions and regenerate lockfile
2f18b18 Merge pull request #431 from cloudflare/fix/semgrep-blocking-findings
622ff0d fix: upgrade checkout and setup-node to v5 for Node 24 runtime
f501f05 fix: force GitHub actions to run on Node 24 via env var
f990691 fix: resolve npm audit vulnerabilities via undici override and vitest v3
652762d fix: migrate action runtime from node20 to node24
bd3f4f0 fix: add retry support to worker health check using better-result
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795

Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796

Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits

043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
634250c Include changes in typespec/ts-http-runtime 0.3.5
e454baa Readme: bump all the example versions to v7 (#796)
74fad66 Update the readme with direct upload details (#795)
See full diff in compare view

Updates pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.0

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @whitequark💰 in #397.

📝 Docs

@woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #388 and @him2him2💰 brushed up some grammar in the README and SECURITY docs via #395.

🛠️ Internal Updates

@woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#391) and @webknjaz💰 added infra for using type annotations in the project (#381).

💪 New Contributors

@him2him2 made their first contribution in #395

@whitequark made their first contribution in #397

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

🙏 Special Thanks to @facutuesca💰 and @woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

Commits

cef2210 Merge pull request #397 from whitequark/patch-1
b4595e2 Enable verbose and print-hash by default.
e2bab26 Merge pull request #395 from him2him2/docs/fix-typos-and-grammar
7495c38 docs: fix typos and grammar in README and SECURITY
03f86fe Merge pull request #388 from woodruffw-forks/ww/rm-experimental
4c78f1c Merge branch 'unstable/v1' into ww/rm-experimental
b5a6e8b deps: bump sigstore and pypi-attestations
a48a03e remove another experimental mention
8087a88 action: remove a lingering mention of PEP 740 being experimental
3317ede 🧪 Integrate actionlint via pre-commit framework
Additional commits viewable in compare view

Updates peaceiris/actions-gh-pages from 4.0.0 to 4.1.0

Release notes

Sourced from peaceiris/actions-gh-pages's releases.

actions-github-pages v4.1.0

See CHANGELOG.md for more details.

What's Changed

Actions examples: update to modern versions of actions by @clintonsteiner in peaceiris/actions-gh-pages#1117

chore: update Node runtime and dependencies by @peaceiris in peaceiris/actions-gh-pages#1147

ci: harden GitHub Actions workflows by @peaceiris in peaceiris/actions-gh-pages#1156

New Contributors

@clintonsteiner made their first contribution in peaceiris/actions-gh-pages#1117

Full Changelog: peaceiris/actions-gh-pages@v4.0.0...v4.1.0

Changelog

Sourced from peaceiris/actions-gh-pages's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.1.0 (2026-05-12)

chore

add .codex/ (94ae2d2)

add hasInstallScript true (494ec9b)

update Node runtime and dependencies (#1147) (954f6bf), closes #1147

ci

change automerge to false (4b09552)

harden GitHub Actions workflows (#1156) (aa0466c), closes #1156

docs

add repository guidelines (a1f94b5)

bump to v4 from v3 (a16b61f)

fix note style (0b7567f)

update versions of actions (#1117) (aa83d0c), closes #1117

4.0.0 (2024-04-08)

build

node 20.11.1 (5049354)

chore

bump node16 to node20 (#1067) (4eb285e), closes #1067

downgrade engines.npm to 8.0.0 (87231bc)

ci

pin node-version to 18 (#981) (65ebf11), closes #981

docs

add Release Strategy (67f80d9)

fix link to Nuxt github-pages (#980) (88b4d2a), closes #980

remove braces in if conditions (#920) (0fbd122), closes #920

... (truncated)

Commits

84c30a8 chore(release): 4.1.0
6fa0f50 chore(release): Add build assets
3b7506a chore(deps): update dependency trim-newlines to v5 (#1158)
aa0466c ci: harden GitHub Actions workflows (#1156)
31835fb chore(deps): update actions/labeler action to v6 (#1153)
f4f1bc4 chore(deps): update peaceiris/actions-mdbook action to v2 (#1161)
a5e4979 chore(deps): update dependency ubuntu to v24 (#1159)
6cc3bac chore(deps): update github/codeql-action action to v4 (#1160)
0d6e9f4 chore(deps): update actions/setup-node action to v6 (#1154)
d70c101 chore(deps): update actions/upload-artifact action to v7 (#1155)
Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.5.2 to 0.5.6

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.6

1.25.2 is now available via the action

1.25.2 is now the default version of zizmor used by the action

v0.5.5

This is a no-op release.

v0.5.4

1.25.0 is now available via the action

1.25.0 is now the default version of zizmor used by the action

v0.5.3

What's Changed

1.24.0 and 1.24.1 are now available via the action

1.24.1 is now the default version of zizmor used by the action

Full Changelog: zizmorcore/zizmor-action@v0.5.2...v0.5.3

Commits

5f14fd0 Sync zizmor versions (#114)
a16621b Bump pins in README (#112)
1c03e04 chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the github-ac...
b572f7b Sync zizmor versions (#111)
06928c5 chore(deps): bump github/codeql-action in the github-actions group (#109)
5ea8b96 docs: Update link to GitHub docs (#108)
849ac26 chore(deps): bump the github-actions group with 2 updates (#106)
814f977 Bump pins in README (#103)
b1d7e1f Sync zizmor versions (#102)
a195b57 Sync zizmor versions (#100)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update CI and release workflows to the latest GitHub Actions and switch Cloudflare deploys to Wrangler v4 by default. Changes are limited to workflow files.

Dependencies
- cloudflare/wrangler-action to 4.0.0 (defaults to Wrangler v4)
- astral-sh/setup-uv to 8.1.0
- actions/upload-artifact to 7.0.1
- pypa/gh-action-pypi-publish to 1.14.0
- peaceiris/actions-gh-pages to 4.1.0
- zizmorcore/zizmor-action to 0.5.6
Migration
- To keep Wrangler v3, set wranglerVersion: "3.90.0" in the deploy step.

^{Written for commit eba05d9. Summary will update on new commits.}

…updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.0.0` | `8.1.0` | | [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `3.14.1` | `4.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.13.0` | `1.14.0` | | [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `4.0.0` | `4.1.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.2` | `0.5.6` | Updates `astral-sh/setup-uv` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@cec2083...0880764) Updates `cloudflare/wrangler-action` from 3.14.1 to 4.0.0 - [Release notes](https://github.com/cloudflare/wrangler-action/releases) - [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md) - [Commits](cloudflare/wrangler-action@da0e0df...ebbaa15) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@ed0c539...cef2210) Updates `peaceiris/actions-gh-pages` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/peaceiris/actions-gh-pages/releases) - [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md) - [Commits](peaceiris/actions-gh-pages@4f9cc66...84c30a8) Updates `zizmorcore/zizmor-action` from 0.5.2 to 0.5.6 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@71321a2...5f14fd0) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: cloudflare/wrangler-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peaceiris/actions-gh-pages dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

codspeed-hq · 2026-05-31T11:43:53Z

Merging this PR will not alter performance

✅ 24 untouched benchmarks

_{Comparing dependabot/github_actions/github-actions-1a75326b4f (eba05d9) with main (9f547bd)}

…5326b4f

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 31, 2026

dependabot Bot had a problem deploying to cloudflare May 31, 2026 11:43 Failure

Kludex mentioned this pull request May 31, 2026

Skip docs preview deploy for Dependabot PRs #2961

Merged

Merge branch 'main' into dependabot/github_actions/github-actions-1a7…

eba05d9

…5326b4f

Kludex had a problem deploying to cloudflare May 31, 2026 12:00 — with GitHub Actions Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the github-actions group across 1 directory with 6 updates#2960

chore(deps): bump the github-actions group across 1 directory with 6 updates#2960
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/github-actions-1a75326b4f

dependabot Bot commented on behalf of github May 31, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented May 31, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.1.0 🌈 New input no-project

Changes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v4.0.0

Major Changes

v3.15.0

Minor Changes

Changelog

4.0.0

Major Changes

3.15.0

Minor Changes

3.14.1

Patch Changes

3.14.0

Minor Changes

Patch Changes

3.13.1

Patch Changes

3.13.0

Minor Changes

3.12.1

Patch Changes

v7.0.1

What's Changed

v1.14.0

✨ What's Changed

📝 Docs

🛠️ Internal Updates

💪 New Contributors

actions-github-pages v4.1.0

What's Changed

New Contributors

Changelog

4.1.0 (2026-05-12)

chore

ci

docs

4.0.0 (2024-04-08)

build

chore

ci

docs

v0.5.6

v0.5.5

v0.5.4

v0.5.3

What's Changed

Summary by cubic

Uh oh!

codspeed-hq Bot commented May 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merging this PR will not alter performance

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github May 31, 2026 •

edited

Loading

v8.1.0 🌈 New input `no-project`

codspeed-hq Bot commented May 31, 2026 •

edited

Loading