chore(deps): consolidate dependabot updates (#1552)

* ci(deps): bump actions/setup-node from 4 to 6

Dependabot couldn't find the original pull request head commit, 8af5b3cc1d307d4efd5752d0dcd43d24301d64be.

* ci(deps): bump actions/download-artifact from 4 to 7

Dependabot couldn't find the original pull request head commit, 98a1ea1d75fdeae387d752c54b348da2039e92d2.

* ci(deps): bump actions/cache from 4 to 5

Dependabot couldn't find the original pull request head commit, 275f68f405afd62d0da941c3bab7f4b325028a32.

* ci(deps): bump actions/github-script from 7 to 8

Dependabot couldn't find the original pull request head commit, 9a58bb35f88eb53f94d347c8d6bcbf3fae875925.

* ci(deps): bump actions/setup-python from 5 to 6

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump @types/uuid from 10.0.0 to 11.0.0 in /apps/frontend

Bumps [@types/uuid](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/uuid) from 10.0.0 to 11.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/uuid)

---
updated-dependencies:
- dependency-name: "@types/uuid"
  dependency-version: 11.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump dotenv from 16.6.1 to 17.2.3 in /apps/frontend

Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.6.1 to 17.2.3.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v16.6.1...v17.2.3)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump electron from 39.2.7 to 40.0.0 in /apps/frontend

Bumps [electron](https://github.com/electron/electron) from 39.2.7 to 40.0.0.
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](https://github.com/electron/electron/compare/v39.2.7...v40.0.0)

---
updated-dependencies:
- dependency-name: electron
  dependency-version: 40.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump @types/minimatch from 5.1.2 to 6.0.0 in /apps/frontend

Bumps [@types/minimatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/minimatch) from 5.1.2 to 6.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/minimatch)

---
updated-dependencies:
- dependency-name: "@types/minimatch"
  dependency-version: 6.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: regenerate package-lock.json for updated dependencies

Sync lockfile with updated package versions:
- @types/minimatch 5.1.2 → 6.0.0
- @types/uuid 10.0.0 → 11.0.0
- dotenv 16.6.1 → 17.2.3
- electron 39.2.7 → 40.0.0

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: update Electron version in prebuilds workflow and suppress dotenv v17 logs

- Update build-prebuilds.yml ELECTRON_VERSION from 39.2.6 to 40.0.0 to
  match the Electron version in package.json
- Add quiet: true to dotenv config to suppress redundant v17 runtime
  log messages

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <[email protected]>
This commit is contained in:
Andy
2026-01-27 15:45:25 +01:00
committed by GitHub
co-authored by dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Claude Opus 4.5
parent 4243530e9e
commit fe616f78f6
10 changed files with 89 additions and 253 deletions
+16 -16
View File
@@ -75,7 +75,7 @@ jobs:
ref: ${{ github.event.inputs.dry_run == 'true' && 'develop' || format('v{0}', needs.create-tag.outputs.version) }}
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -86,7 +86,7 @@ jobs:
uses: dtolnay/rust-toolchain@stable
- name: Cache pip wheel cache (for compiled packages like real_ladybug)
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/Library/Caches/pip
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -94,7 +94,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-rust-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -151,7 +151,7 @@ jobs:
ref: ${{ github.event.inputs.dry_run == 'true' && 'develop' || format('v{0}', needs.create-tag.outputs.version) }}
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -159,7 +159,7 @@ jobs:
uses: ./.github/actions/setup-node-frontend
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/Library/Caches/pip
key: pip-wheel-${{ runner.os }}-arm64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -167,7 +167,7 @@ jobs:
pip-wheel-${{ runner.os }}-arm64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-arm64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -226,7 +226,7 @@ jobs:
ref: ${{ github.event.inputs.dry_run == 'true' && 'develop' || format('v{0}', needs.create-tag.outputs.version) }}
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -234,7 +234,7 @@ jobs:
uses: ./.github/actions/setup-node-frontend
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~\AppData\Local\pip\Cache
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -242,7 +242,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -398,7 +398,7 @@ jobs:
ref: ${{ github.event.inputs.dry_run == 'true' && 'develop' || format('v{0}', needs.create-tag.outputs.version) }}
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -415,7 +415,7 @@ jobs:
flatpak install -y --user flathub org.electronjs.Electron2.BaseApp//25.08
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/.cache/pip
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -423,7 +423,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -465,13 +465,13 @@ jobs:
- uses: actions/checkout@v4
- name: Download Intel DMG
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
name: macos-intel-builds
path: intel
- name: Download ARM64 DMG
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
name: macos-arm64-builds
path: arm64
@@ -512,7 +512,7 @@ jobs:
fetch-depth: 0
- name: Download all artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
path: dist
@@ -661,7 +661,7 @@ jobs:
- uses: actions/checkout@v4
- name: Download all artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
path: dist
+4 -4
View File
@@ -10,11 +10,11 @@ on:
electron_version:
description: 'Electron version to build for'
required: false
default: '39.2.6'
default: '40.0.0'
env:
# Default Electron version - update when upgrading Electron in package.json
ELECTRON_VERSION: ${{ github.event.inputs.electron_version || '39.2.6' }}
ELECTRON_VERSION: ${{ github.event.inputs.electron_version || '40.0.0' }}
jobs:
build-windows:
@@ -30,7 +30,7 @@ jobs:
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v6
with:
node-version: '24'
@@ -110,7 +110,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Download all artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
path: artifacts
+1 -1
View File
@@ -11,7 +11,7 @@ jobs:
issues: write
steps:
- name: Add area label from form
uses: actions/github-script@v7
uses: actions/github-script@v8
with:
script: |
const issue = context.payload.issue;
+1 -1
View File
@@ -34,7 +34,7 @@ jobs:
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.12'
+1 -1
View File
@@ -22,7 +22,7 @@ jobs:
steps:
- name: Label PR
uses: actions/github-script@v7
uses: actions/github-script@v8
with:
retries: 3
retry-exempt-status-codes: 400,401,403,404,422
+3 -3
View File
@@ -70,7 +70,7 @@ jobs:
uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.12'
@@ -89,7 +89,7 @@ jobs:
echo "::endgroup::"
- name: Analyze Bandit results
uses: actions/github-script@v7
uses: actions/github-script@v8
with:
script: |
const fs = require('fs');
@@ -149,7 +149,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Check security results
uses: actions/github-script@v7
uses: actions/github-script@v8
with:
script: |
const codeql = '${{ needs.codeql.result }}';
+15 -15
View File
@@ -30,7 +30,7 @@ jobs:
- uses: actions/checkout@v4
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -41,7 +41,7 @@ jobs:
uses: dtolnay/rust-toolchain@stable
- name: Cache pip wheel cache (for compiled packages like real_ladybug)
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/Library/Caches/pip
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -49,7 +49,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-rust-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -101,7 +101,7 @@ jobs:
- uses: actions/checkout@v4
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -109,7 +109,7 @@ jobs:
uses: ./.github/actions/setup-node-frontend
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/Library/Caches/pip
key: pip-wheel-${{ runner.os }}-arm64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -117,7 +117,7 @@ jobs:
pip-wheel-${{ runner.os }}-arm64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-arm64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -171,7 +171,7 @@ jobs:
- uses: actions/checkout@v4
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -179,7 +179,7 @@ jobs:
uses: ./.github/actions/setup-node-frontend
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~\AppData\Local\pip\Cache
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -187,7 +187,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -337,7 +337,7 @@ jobs:
- uses: actions/checkout@v4
- name: Setup Python
uses: actions/setup-python@v5
uses: actions/setup-python@v6
with:
python-version: '3.11'
@@ -353,7 +353,7 @@ jobs:
flatpak install -y --user flathub org.electronjs.Electron2.BaseApp//25.08
- name: Cache pip wheel cache
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: ~/.cache/pip
key: pip-wheel-${{ runner.os }}-x64-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -361,7 +361,7 @@ jobs:
pip-wheel-${{ runner.os }}-x64-
- name: Cache bundled Python
uses: actions/cache@v4
uses: actions/cache@v5
with:
path: apps/frontend/python-runtime
key: python-bundle-${{ runner.os }}-x64-3.12.8-${{ hashFiles('apps/backend/requirements.txt') }}
@@ -402,13 +402,13 @@ jobs:
- uses: actions/checkout@v4
- name: Download Intel DMG
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
name: macos-intel-builds
path: intel
- name: Download ARM64 DMG
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
name: macos-arm64-builds
path: arm64
@@ -447,7 +447,7 @@ jobs:
fetch-depth: 0
- name: Download all artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v7
with:
path: dist