From 96e3ae31fe418e36bc888b61a4424938ec7b73cb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 May 2026 13:26:41 +0000 Subject: [PATCH] chore(actions)(deps): Bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [actions/setup-node](https://github.com/actions/setup-node), [actions/setup-python](https://github.com/actions/setup-python) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action). Updates `actions/setup-node` from 5 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v5...v6) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v6) Updates `actions/dependency-review-action` from 4 to 5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release-mcp.yml | 4 ++-- .github/workflows/security.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release-mcp.yml b/.github/workflows/release-mcp.yml index b7f208b..a61ec6c 100644 --- a/.github/workflows/release-mcp.yml +++ b/.github/workflows/release-mcp.yml @@ -80,12 +80,12 @@ jobs: # instead of setup-uv so we don't pull in a project venv resolution we # don't use. - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: "3.14" - name: Install Node.js (for mcpb CLI) - uses: actions/setup-node@v5 + uses: actions/setup-node@v6 with: node-version: "20" diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 9712b8a..4fc387f 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -60,4 +60,4 @@ jobs: if: github.event_name == 'pull_request' steps: - name: Dependency Review - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5