From b026ee41d04dca65024384a3aafaa260d6aaa91e Mon Sep 17 00:00:00 2001 From: Naveen Date: Fri, 14 Aug 2026 23:46:05 -0500 Subject: [PATCH 1/2] chore: refresh CI dependency pins --- .github/dependabot.yml | 8 ++++++++ .github/workflows/ci.yml | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 00c2dfb..c577cb2 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,7 +4,15 @@ updates: directory: / schedule: interval: weekly + groups: + python-dependencies: + patterns: + - "*" - package-ecosystem: github-actions directory: / schedule: interval: weekly + groups: + github-actions: + patterns: + - "*" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1cfb964..d8fe403 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,11 +17,11 @@ jobs: python-version: ["3.11", "3.13"] steps: - name: Check out source - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Set up Python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ matrix.python-version }} cache: pip From 347b54516f82bd5ecfe78fbf0d12553215839341 Mon Sep 17 00:00:00 2001 From: Naveen Date: Fri, 14 Aug 2026 23:48:08 -0500 Subject: [PATCH 2/2] chore: avoid duplicate pull request CI --- .github/workflows/ci.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d8fe403..9825fa8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -2,6 +2,7 @@ name: CI on: push: + branches: [main] pull_request: permissions: