From d048e3f86a6d2be13d26b0359968f4d3d1542b4b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 15:58:18 +0200 Subject: [PATCH] Update zizmor (#181494) Co-authored-by: Ariel Ebersberger --- .../actions/restore-or-build-venv/action.yml | 4 +- .github/workflows/builder.yml | 4 +- .github/workflows/ci.yaml | 46 +++++++++---------- .pre-commit-config.yaml | 2 +- requirements_test_pre_commit.txt | 2 +- 5 files changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/actions/restore-or-build-venv/action.yml b/.github/actions/restore-or-build-venv/action.yml index e9955c5a2cd7..969bfbcf54bf 100644 --- a/.github/actions/restore-or-build-venv/action.yml +++ b/.github/actions/restore-or-build-venv/action.yml @@ -36,7 +36,7 @@ runs: steps: - name: Set up uv and managed Python id: python - uses: ./.github/actions/setup-uv-python + uses: $/.github/actions/setup-uv-python with: uv-version: ${{ inputs.uv-version }} python-version: ${{ inputs.python-version }} @@ -73,7 +73,7 @@ runs: # timeout instead of a per-step cap. - name: Install additional OS dependencies if: steps.cache-venv.outputs.cache-hit != 'true' - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml index 80918cc490cc..2f522c6a73f5 100644 --- a/.github/workflows/builder.yml +++ b/.github/workflows/builder.yml @@ -278,7 +278,7 @@ jobs: name: Run E2E tests on base images if: github.repository_owner == 'home-assistant' needs: ["init", "build_base"] - uses: ./.github/workflows/e2e-tests.yml + uses: $/.github/workflows/e2e-tests.yml with: version: ${{ needs.init.outputs.version }} image_prefixes: ${{ needs.init.outputs.architectures }} @@ -287,7 +287,7 @@ jobs: name: Run E2E tests on machine images if: github.repository_owner == 'home-assistant' needs: ["init", "build_machine"] - uses: ./.github/workflows/e2e-tests.yml + uses: $/.github/workflows/e2e-tests.yml with: version: ${{ needs.init.outputs.version }} image_prefixes: ${{ needs.init.outputs.machines }} diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 377cc23f6cc4..e8b5781f18bc 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -373,7 +373,7 @@ jobs: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} and build venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -417,13 +417,13 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: libturbojpeg version: ${{ env.APT_CACHE_VERSION }} - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -454,7 +454,7 @@ jobs: persist-credentials: false - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -484,7 +484,7 @@ jobs: persist-credentials: false - name: Set up Python id: python - uses: ./.github/actions/setup-uv-python + uses: $/.github/actions/setup-uv-python with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -510,7 +510,7 @@ jobs: persist-credentials: false - name: Set up Python id: python - uses: ./.github/actions/setup-uv-python + uses: $/.github/actions/setup-uv-python with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -565,7 +565,7 @@ jobs: persist-credentials: false - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -610,7 +610,7 @@ jobs: persist-credentials: false - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -657,7 +657,7 @@ jobs: persist-credentials: false - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -708,7 +708,7 @@ jobs: echo "key=mypy-${MYPY_CACHE_VERSION}-${mypy_version}-${HA_SHORT_VERSION}-$(date -u '+%Y-%m-%dT%H:%M:%s')" >> $GITHUB_OUTPUT - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -763,7 +763,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -773,7 +773,7 @@ jobs: execute_install_scripts: true - name: Set up Python and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ needs.info.outputs.default_python }} @@ -858,7 +858,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -869,7 +869,7 @@ jobs: execute_install_scripts: true - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -991,7 +991,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -1003,7 +1003,7 @@ jobs: execute_install_scripts: true - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -1132,7 +1132,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -1145,13 +1145,13 @@ jobs: run: sudo /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -y - name: Cache PostgreSQL development headers timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: postgresql-server-dev-14 version: ${{ env.APT_CACHE_VERSION }} - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -1266,7 +1266,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -1277,7 +1277,7 @@ jobs: execute_install_scripts: true - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} @@ -1409,7 +1409,7 @@ jobs: persist-credentials: false - name: Install additional OS dependencies timeout-minutes: 10 - uses: ./.github/actions/cache-apt-packages + uses: $/.github/actions/cache-apt-packages with: packages: >- bluez @@ -1420,7 +1420,7 @@ jobs: execute_install_scripts: true - name: Set up Python ${{ matrix.python-version }} and restore venv id: python - uses: ./.github/actions/restore-or-build-venv + uses: $/.github/actions/restore-or-build-venv with: uv-version: ${{ needs.info.outputs.uv_version }} python-version: ${{ matrix.python-version }} diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 4d6bfac215d2..b54d5e287cf2 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -18,7 +18,7 @@ repos: exclude_types: [csv, json, html] exclude: ^tests/fixtures/|homeassistant/generated/|tests/components/.*/snapshots/ - repo: https://github.com/zizmorcore/zizmor-pre-commit - rev: v1.29.0 + rev: v1.30.0 hooks: - id: zizmor args: diff --git a/requirements_test_pre_commit.txt b/requirements_test_pre_commit.txt index dd2c429e2960..09f7f2ec9ed3 100644 --- a/requirements_test_pre_commit.txt +++ b/requirements_test_pre_commit.txt @@ -3,4 +3,4 @@ codespell==2.4.3 ruff==0.16.5 yamllint==1.38.0 -zizmor==1.29.0 +zizmor==1.30.0