From 1ef136b41e9e7ad8926be591d1a6fc3f7000cd99 Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:48 +0000 Subject: [PATCH 1/6] chore: update .github/workflows/lint.yml via github-maintenance --- .github/workflows/lint.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 4838c54..11ab559 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -10,14 +10,14 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone the code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup Go - uses: actions/setup-go@v5 + uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 with: go-version-file: go.mod - name: Run linter - uses: golangci/golangci-lint-action@v8 + uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8 with: version: v2.5.0 From 7b64748f2ac4946140a1b1b980d3d8e5a1c81370 Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:49 +0000 Subject: [PATCH 2/6] chore: update .github/workflows/plugin-test.yml via github-maintenance --- .github/workflows/plugin-test.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/plugin-test.yml b/.github/workflows/plugin-test.yml index 02307d7..1779fa7 100644 --- a/.github/workflows/plugin-test.yml +++ b/.github/workflows/plugin-test.yml @@ -16,15 +16,15 @@ jobs: python-version: ['3.10', '3.11', '3.12'] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 with: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@v4 + uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4 - name: Install dependencies run: | From acdc1d27ec72da981e39b87eff4ce392d3c3aaa2 Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:49 +0000 Subject: [PATCH 3/6] chore: update .github/workflows/publish-plugin.yml via github-maintenance --- .github/workflows/publish-plugin.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/publish-plugin.yml b/.github/workflows/publish-plugin.yml index 52efb61..f4f87c6 100644 --- a/.github/workflows/publish-plugin.yml +++ b/.github/workflows/publish-plugin.yml @@ -14,10 +14,10 @@ jobs: id-token: write # For trusted publishing steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 with: python-version: '3.12' @@ -30,13 +30,13 @@ jobs: python -m build - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1 with: packages-dir: plugin/dist/ - name: Notify release result if: always() - uses: marimo-team/internal-gh-actions/release-notification@main + uses: marimo-team/internal-gh-actions/release-notification@ba06d4db1f3c5c9b86983ce409e57196f8376777 # main with: status: ${{ job.status }} slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL_RELEASES }} From a1ef98fdf57db27e0eb44c30f20072f156bf36f5 Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:50 +0000 Subject: [PATCH 4/6] chore: update .github/workflows/publish.yml via github-maintenance --- .github/workflows/publish.yml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 7649a89..10fd09b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -18,16 +18,16 @@ jobs: packages: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 - name: Log in to Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -35,7 +35,7 @@ jobs: - name: Extract metadata id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} tags: | @@ -45,7 +45,7 @@ jobs: type=raw,value=latest,enable={{is_default_branch}} - name: Build and push operator - uses: docker/build-push-action@v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5 with: context: . platforms: linux/amd64,linux/arm64 @@ -55,7 +55,7 @@ jobs: - name: Extract s3fs metadata id: s3fs-meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/s3fs tags: | @@ -64,7 +64,7 @@ jobs: type=sha,prefix= - name: Build and push s3fs - uses: docker/build-push-action@v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5 with: context: docker/s3fs platforms: linux/amd64,linux/arm64 @@ -74,7 +74,7 @@ jobs: - name: Extract tensorrt metadata id: tensorrt-meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/tensorrt tags: | @@ -83,7 +83,7 @@ jobs: type=sha,prefix= - name: Build and push tensorrt - uses: docker/build-push-action@v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5 with: context: examples/tensorrt platforms: linux/amd64 @@ -93,7 +93,7 @@ jobs: - name: Notify release result if: always() && startsWith(github.ref, 'refs/tags/v') - uses: marimo-team/internal-gh-actions/release-notification@main + uses: marimo-team/internal-gh-actions/release-notification@ba06d4db1f3c5c9b86983ce409e57196f8376777 # main with: status: ${{ job.status }} slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL_RELEASES }} From 5588985242c9039fe162fd20ee1c381e023d26af Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:50 +0000 Subject: [PATCH 5/6] chore: update .github/workflows/test-e2e.yml via github-maintenance --- .github/workflows/test-e2e.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml index 4cdfb30..d0580a7 100644 --- a/.github/workflows/test-e2e.yml +++ b/.github/workflows/test-e2e.yml @@ -10,10 +10,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone the code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup Go - uses: actions/setup-go@v5 + uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 with: go-version-file: go.mod From e4bf839ba5daed6b50ffa592b724a66d2c47757d Mon Sep 17 00:00:00 2001 From: "marimo-github-maintenance-bot[bot]" <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com> Date: Mon, 6 Apr 2026 09:32:51 +0000 Subject: [PATCH 6/6] chore: update .github/workflows/test.yml via github-maintenance --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index fc2e80d..6506875 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -10,10 +10,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Clone the code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup Go - uses: actions/setup-go@v5 + uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5 with: go-version-file: go.mod