Bump the github-actions group with 5 updates (#7844)

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [mhils/workflows](https://github.com/mhils/workflows) | `3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0` | `2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19` |
| [apple-actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) | `5.0.2` | `5.0.3` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `5` |
| [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.5.0` |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `5` |

Updates `mhils/workflows` from 3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0 to 2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
- [Release notes](https://github.com/mhils/workflows/releases)
- [Commits](https://github.com/mhils/workflows/compare/3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0...2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19)

Updates `apple-actions/import-codesign-certs` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](https://github.com/apple-actions/import-codesign-certs/compare/65cfbc37e1464d733524cb555b724878f278b8c3...95e84a1a18f2bdbc5c6ab9b7f4429372e4b13a8b)

Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

Updates `docker/login-action` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/74a5d142397b4f367a81961eba4e8cd7edddf772...184bdaa0721073962dff0199f1fb9940f07167d1)

Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: mhils/workflows
  dependency-version: 2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: apple-actions/import-codesign-certs
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml
index 0d2ac7ac88fa5b93956008014a2d2c454c4369fc..37625676af774eb884320c06c148c3b81bdb3fef 100644 (file)
--- a/.github/workflows/autofix.yml
+++ b/.github/workflows/autofix.yml
@@ -13,9 +13,9 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
 
       - run: ruff check --fix-only .
       - run: ruff format .

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index ad9de6014c252fb6f1418974c11cfcc336c9d4b8..45bdab8aad5b5fd9a80b1f1e10a2e6c167939702 100644 (file)
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -26,9 +26,9 @@ jobs:
     name: ${{ matrix.env }}
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
         with:
           args: --only-group tox
 
@@ -49,9 +49,9 @@ jobs:
             py: "3.12"
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
         with:
           args: --only-group tox
 
@@ -86,15 +86,15 @@ jobs:
         run: |
           apt-get update
           apt-get install --no-install-recommends -y git ca-certificates binutils
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
       - run: uv pip install .  # pyinstaller 5.9 does not like pyproject.toml + editable installs.
 
       - if: runner.os == 'macOS' && github.repository == 'mitmproxy/mitmproxy'
             && (startsWith(github.ref, 'refs/heads/') || startsWith(github.ref, 'refs/tags/'))
         id: keychain
-        uses: apple-actions/import-codesign-certs@65cfbc37e1464d733524cb555b724878f278b8c3
+        uses: apple-actions/import-codesign-certs@95e84a1a18f2bdbc5c6ab9b7f4429372e4b13a8b
         with:
           keychain: ${{ runner.temp }}/temp
           p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
@@ -122,7 +122,7 @@ jobs:
           path: release/dist
 
   build-wheel:
-    uses: mhils/workflows/.github/workflows/python-build.yml@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+    uses: mhils/workflows/.github/workflows/python-build.yml@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
     with:
       artifact: binaries.wheel
 
@@ -134,9 +134,9 @@ jobs:
         startsWith(github.ref, 'refs/tags/')
       )
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
       - run: uv pip install .  # pyinstaller 5.9 does not like pyproject.toml + editable installs.
       - run: python -u release/build.py installbuilder-installer msix-installer
         env:
@@ -150,7 +150,7 @@ jobs:
   test-web-ui:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
       - uses: actions/setup-node@v4
         with:
           node-version-file: .github/node-version.txt
@@ -176,8 +176,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-wheel
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: actions/download-artifact@v4
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: actions/download-artifact@v5
         with:
           name: binaries.wheel
           path: release/docker
@@ -189,9 +189,9 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
       - run: |
           wget -q https://github.com/gohugoio/hugo/releases/download/v0.139.3/hugo_extended_0.139.3_linux-amd64.deb
           echo "3e58800d1fee57269208d07d104ae1a6ab886615344099f2dca0c6ad5279bc11 hugo_extended_0.139.3_linux-amd64.deb" | sha256sum -c
@@ -223,7 +223,7 @@ jobs:
     - build-wheel
     - build-windows-installer
     - docs
-    uses: mhils/workflows/.github/workflows/alls-green.yml@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+    uses: mhils/workflows/.github/workflows/alls-green.yml@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
     with:
       jobs: ${{ toJSON(needs) }}
       allowed-skips: build-windows-installer
@@ -243,8 +243,8 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: actions/download-artifact@v4
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: actions/download-artifact@v5
         with:
           name: binaries.wheel
           path: release/docker
@@ -252,12 +252,12 @@ jobs:
       - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v1.6.0
 
       - name: Login to Docker Hub
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           username: mitmbot
           password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -321,22 +321,22 @@ jobs:
       R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
       R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
     steps:
-      - uses: mhils/workflows/checkout@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/setup-uv@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
-      - uses: mhils/workflows/uv-sync@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/checkout@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/setup-uv@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
+      - uses: mhils/workflows/uv-sync@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
         with:
           args: --only-group deploy
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           name: docs
           path: docs/public
       - if: startsWith(github.ref, 'refs/tags/')
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: docs-archive
           path: docs/archive
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v5
         with:
           pattern: binaries.*
           merge-multiple: true

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 680b04b67fa46000ac701c25a94ddd5ff23aea0d..10ba53c050ed3ca415a7ac21314878b4499c3d06 100644 (file)
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -22,13 +22,13 @@ jobs:
     environment: deploy-release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           token: ${{ secrets.GH_PUSH_TOKEN }}  # this token works to push to the protected main branch.
       - uses: actions/setup-node@v4
         with:
           node-version-file: .github/node-version.txt
-      - uses: mhils/workflows/setup-python@3b71079cc0a3992c6e595fa78c8f79bc06b6f8d0
+      - uses: mhils/workflows/setup-python@2a12a934b7c0db7fddaeacd20c542bdfcf9b2a19
       - run: ./release/release.py ${{ inputs.version }} ${{ inputs.skip-branch-status-check }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # this token works with the GraphQL API