From 47d593005c38cfe3ad5bd0d3b7f6f57c194a1701 Mon Sep 17 00:00:00 2001 From: "Lumberbot (aka Jack)" <39504233+meeseeksmachine@users.noreply.github.com> Date: Mon, 17 Jun 2024 16:36:54 -0700 Subject: [PATCH] build(backport): bump the actions group with 3 updates (#2521) * Backport PR https://github.com/scikit-hep/pyhf/pull/2520. Co-authored-by: Matthew Feickert --- .github/workflows/docker.yml | 6 +++--- .github/workflows/publish-package.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index e3b4616fa3..796f1d3e84 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -82,7 +82,7 @@ jobs: - name: Test build id: docker_build_test - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 with: context: . file: docker/Dockerfile @@ -120,7 +120,7 @@ jobs: # every PR will trigger a push event on main, so check the push event is actually coming from main if: github.event_name == 'push' && github.ref == 'refs/heads/main' && github.repository == 'scikit-hep/pyhf' id: docker_build_latest - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 with: context: . file: docker/Dockerfile @@ -137,7 +137,7 @@ jobs: - name: Build and publish to registry with release tag if: github.event_name == 'release' && github.event.action == 'published' && github.repository == 'scikit-hep/pyhf' id: docker_build_release - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 with: context: . file: docker/Dockerfile diff --git a/.github/workflows/publish-package.yml b/.github/workflows/publish-package.yml index 9803c69663..ed38b51558 100644 --- a/.github/workflows/publish-package.yml +++ b/.github/workflows/publish-package.yml @@ -109,7 +109,7 @@ jobs: (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'scikit-hep/pyhf') || (github.event_name == 'workflow_dispatch' && github.event.inputs.publish == 'true' && github.repository == 'scikit-hep/pyhf') || (github.event_name == 'release' && github.event.action == 'published' && github.repository == 'scikit-hep/pyhf') - uses: actions/attest-build-provenance@49df96e17e918a15956db358890b08e61c704919 # v1.2.0 + uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2 with: subject-path: "dist/pyhf-*" @@ -168,13 +168,13 @@ jobs: if: >- (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') && github.repository == 'scikit-hep/pyhf') || (github.event_name == 'workflow_dispatch' && github.event.inputs.publish == 'true' && github.repository == 'scikit-hep/pyhf') - uses: pypa/gh-action-pypi-publish@v1.8.14 + uses: pypa/gh-action-pypi-publish@v1.9.0 with: repository-url: https://test.pypi.org/legacy/ print-hash: true - name: Publish distribution 📦 to PyPI if: github.event_name == 'release' && github.event.action == 'published' && github.repository == 'scikit-hep/pyhf' - uses: pypa/gh-action-pypi-publish@v1.8.14 + uses: pypa/gh-action-pypi-publish@v1.9.0 with: print-hash: true