Release version 2.2.1

ci: cancel the runs of a branch that is closed
The concurrency group only deduplicates live work on a branch; a run that was queued or still building kept its runner after the branch was deleted or its pull request closed. A delete and a pull_request closed trigger now cancel everything of that branch that has not completed, minus the cancelling run itself, which shares the head branch on a pull request event. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-23 19:03:18 +00:00 · 2026-09-23 01:00:06 +02:00 · 2026-09-23 00:59:08 +02:00 · 2026-09-23 00:54:03 +02:00 · 2026-09-23 00:50:07 +02:00 · 2026-09-23 00:49:51 +02:00
10 changed files with 128 additions and 37 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -0,0 +1,47 @@
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "00:00"
+    labels:
+      - "dependencies"
+      - "ci"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "00:00"
+    labels:
+      - "dependencies"
+      - "docker"
+
+  - package-ecosystem: "docker-compose"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "00:00"
+    labels:
+      - "dependencies"
+      - "docker"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "daily"
+      time: "00:00"
+    labels:
+      - "dependencies"
+      - "python"
+
+  - package-ecosystem: "npm"
+    directory: "/app"
+    schedule:
+      interval: "daily"
+      time: "00:00"
+    labels:
+      - "dependencies"
+      - "javascript"
--- a/.github/workflows/cancel.yml
+++ b/.github/workflows/cancel.yml
@@ -0,0 +1,30 @@
+name: Cancel runs
+
+on:
+  delete:
+  pull_request:
+    types:
+      - closed
+
+permissions:
+  actions: write
+
+jobs:
+  cancel:
+    name: Cancel the runs of a closed branch
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request' || github.event.ref_type == 'branch'
+
+    steps:
+      - name: Cancel every queued or running workflow of the branch
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_REPO: ${{ github.repository }}
+          BRANCH: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.ref || github.event.ref }}
+        run: |
+          set -euo pipefail
+          gh run list --branch "${BRANCH}" --limit 100 \
+            --json databaseId,status \
+            --jq '.[] | select(.status != "completed") | .databaseId' \
+            | sed "/^${GITHUB_RUN_ID}$/d" \
+            | xargs -r -n1 gh run cancel
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,10 @@ on:
    tags-ignore:
      - "**"

+concurrency:
+  group: ci-${{ github.repository }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
 permissions:
  contents: read

@@ -48,7 +52,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
        with:
          fetch-depth: 0

@@ -89,10 +93,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

      - name: Login to GHCR
        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
@@ -102,7 +106,7 @@ jobs:
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and publish image
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
        with:
          context: .
          file: ./Dockerfile
@@ -122,7 +126,7 @@ jobs:

    steps:
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1

      - name: Login to GHCR
        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -14,7 +14,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Run actionlint
        run: docker run --rm -v "$PWD:/repo" -w /repo rhysd/actionlint:latest
@@ -25,10 +25,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -46,7 +46,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Node.js
        uses: actions/setup-node@v4
@@ -69,7 +69,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Run shellcheck
        run: docker run --rm -v "$PWD:/mnt" -w /mnt koalaman/shellcheck:stable scripts/*.sh
@@ -80,10 +80,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -107,12 +107,12 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Run hadolint
        id: hadolint
        continue-on-error: true
-        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5
+        uses: hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387
        with:
          dockerfile: ./Dockerfile
          format: sarif
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -27,7 +27,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v4
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -14,10 +14,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -35,10 +35,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -56,10 +56,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -77,10 +77,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -104,10 +104,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -135,10 +135,10 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7

      - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
        with:
          python-version: "3.12"

@@ -190,7 +190,7 @@ jobs:
            xvfb

      - name: Run Cypress tests
-        uses: cypress-io/github-action@f790eee7a50d9505912f50c2095510be7de06aa7 # v6.10.9
+        uses: cypress-io/github-action@01e3b659a495b41649cdd0aa82e1d1624e26520b # v7.4.4
        with:
          working-directory: app
          install: false
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog

+## [2.2.1] - 2026-09-23
+
+* Images: releases ship arm64 next to amd64, for ARM servers and Apple Silicon
+* CI: each architecture builds on its own native runner, no QEMU emulation
+* CI: one run per branch, so two pushes stop racing through the same jobs
+* CI: closing a pull request or deleting a branch cancels its pending runs
+* Dependencies: Dependabot watches actions, images, compose, pip and npm daily
+* Runtime: Python 3.14 and Node 25 base images
+* Frontend: Bootstrap 5.3.8, jQuery 4, Font Awesome 7, marked 18, Cypress 16
+
 ## [2.2.0] - 2026-09-23

 * Images: releases ship arm64 next to amd64, for ARM servers and Apple Silicon
--- a/4
+++ b/4
@@ -1,11 +1,11 @@
-FROM node:22-slim AS assets
+FROM node:25-slim AS assets

 WORKDIR /app
 COPY app/package.json ./
 COPY app/scripts ./scripts
 RUN npm install --omit=dev --no-audit --no-fund

-FROM python:3.12-slim AS base
+FROM python:3.14-slim AS base

 ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
--- a/app/package.json
+++ b/app/package.json
@@ -1,14 +1,14 @@
 {
  "dependencies": {
-    "@fortawesome/fontawesome-free": "^6.7.2",
-    "bootstrap": "5.2.2",
-    "bootstrap-icons": "1.9.1",
-    "jquery": "3.6.0",
-    "marked": "^4.3.0"
+    "bootstrap": "5.3.8",
+    "@fortawesome/fontawesome-free": "^7.3.1",
+    "bootstrap-icons": "1.13.1",
+    "jquery": "4.0.0",
+    "marked": "^18.0.13"
  },
  "devDependencies": {
    "@eslint/js": "^10.0.1",
-    "cypress": "^14.5.1",
+    "cypress": "^16.1.0",
    "eslint": "^10.9.0",
    "globals": "^17.11.0"
  },
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"

 [project]
 name = "portfolio-ui"
-version = "2.2.0"
+version = "2.2.1"
 description = "A lightweight YAML-driven portfolio and landing-page generator."
 readme = "README.md"
 requires-python = ">=3.12"
Author	SHA1	Message	Date
Kevin Veen-Birkenbach	4eb57011ba	Release version 2.2.1	2026-09-23 01:00:06 +02:00
Kevin Veen-Birkenbach	70d5871e94	ci: cancel the runs of a branch that is closed The concurrency group only deduplicates live work on a branch; a run that was queued or still building kept its runner after the branch was deleted or its pull request closed. A delete and a pull_request closed trigger now cancel everything of that branch that has not completed, minus the cancelling run itself, which shares the head branch on a pull request event. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-23 00:59:08 +02:00
Kevin Veen-Birkenbach	10ea289563	ci: run one CI run per branch at a time Every push started its own run, so two pushes to the same branch raced through the same jobs and burned runner minutes twice. One concurrency group per ref now covers all six jobs, including the reusable workflows. Pull request runs cancel their predecessor; branch pushes queue instead, so a release push is never cancelled between the per-architecture push and the manifest merge. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-23 00:54:03 +02:00
Kevin Veen-Birkenbach	62a2aa5827	Merge pull request #14 from kevinveenbirkenbach/dependabot/github_actions/docker/setup-buildx-action-4.4.1 build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.4.1	2026-09-23 00:50:07 +02:00
Kevin Veen-Birkenbach	b0c8316b0d	Merge pull request #7 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/jquery-4.0.0 build(deps): bump jquery from 3.6.0 to 4.0.0 in /app	2026-09-23 00:49:51 +02:00
dependabot[bot]	d5104f5680	build(deps): bump jquery from 3.6.0 to 4.0.0 in /app Bumps [jquery](https://github.com/jquery/jquery) from 3.6.0 to 4.0.0. - [Release notes](https://github.com/jquery/jquery/releases) - [Changelog](https://github.com/jquery/jquery/blob/main/changelog.md) - [Commits](https://github.com/jquery/jquery/compare/3.6.0...4.0.0) --- updated-dependencies: - dependency-name: jquery dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:49:42 +00:00
Kevin Veen-Birkenbach	fc646d8826	Merge pull request #6 from kevinveenbirkenbach/dependabot/docker/python-3.14-slim build(deps): bump python from 3.12-slim to 3.14-slim	2026-09-23 00:48:49 +02:00
Kevin Veen-Birkenbach	1bff38ed64	Merge pull request #5 from kevinveenbirkenbach/dependabot/github_actions/cypress-io/github-action-7.4.4 build(deps): bump cypress-io/github-action from 6.10.9 to 7.4.4	2026-09-23 00:48:37 +02:00
Kevin Veen-Birkenbach	dd0454274b	Merge pull request #4 from kevinveenbirkenbach/dependabot/docker/node-25-slim build(deps): bump node from 22-slim to 25-slim	2026-09-23 00:47:49 +02:00
Kevin Veen-Birkenbach	fd4d1e77c8	Merge pull request #3 from kevinveenbirkenbach/dependabot/github_actions/hadolint/hadolint-action-3.5.0 build(deps): bump hadolint/hadolint-action from 3.3.0 to 3.5.0	2026-09-23 00:47:33 +02:00
Kevin Veen-Birkenbach	d1043c4cb0	Merge pull request #2 from kevinveenbirkenbach/dependabot/github_actions/actions/setup-python-7 build(deps): bump actions/setup-python from 6 to 7	2026-09-23 00:47:08 +02:00
dependabot[bot]	62a6a8cb66	build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.4.1 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.4.1. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](`8d2750c68a...f87e5991a6`) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:46:28 +00:00
Kevin Veen-Birkenbach	4d1092fe5e	Merge pull request #8 from kevinveenbirkenbach/dependabot/github_actions/docker/build-push-action-7.4.0 build(deps): bump docker/build-push-action from 6.19.2 to 7.4.0	2026-09-23 00:45:06 +02:00
Kevin Veen-Birkenbach	2ed4164dc3	Merge pull request #13 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/marked-18.0.13 build(deps): bump marked from 4.3.0 to 18.0.13 in /app	2026-09-23 00:44:31 +02:00
Kevin Veen-Birkenbach	85e1f437e0	Merge pull request #9 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/bootstrap-5.3.8 build(deps): bump bootstrap from 5.2.2 to 5.3.8 in /app	2026-09-23 00:43:47 +02:00
dependabot[bot]	0733af88ba	build(deps): bump marked from 4.3.0 to 18.0.13 in /app Bumps [marked](https://github.com/markedjs/marked) from 4.3.0 to 18.0.13. - [Release notes](https://github.com/markedjs/marked/releases) - [Commits](https://github.com/markedjs/marked/compare/v4.3.0...v18.0.13) --- updated-dependencies: - dependency-name: marked dependency-version: 18.0.13 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:43:38 +00:00
Kevin Veen-Birkenbach	31bed38478	Merge branch 'main' into dependabot/npm_and_yarn/app/bootstrap-5.3.8	2026-09-23 00:43:29 +02:00
Kevin Veen-Birkenbach	3f75ebd327	Merge pull request #10 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/cypress-16.1.0 build(deps-dev): bump cypress from 14.5.4 to 16.1.0 in /app	2026-09-23 00:42:20 +02:00
Kevin Veen-Birkenbach	169891fcf0	Merge pull request #12 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/fortawesome/fontawesome-free-7.3.1 build(deps): bump @fortawesome/fontawesome-free from 6.7.2 to 7.3.1 in /app	2026-09-23 00:42:05 +02:00
dependabot[bot]	578d84de0c	build(deps): bump @fortawesome/fontawesome-free in /app Bumps [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) from 6.7.2 to 7.3.1. - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/7.x/CHANGELOG.md) - [Commits](https://github.com/FortAwesome/Font-Awesome/compare/6.7.2...7.3.1) --- updated-dependencies: - dependency-name: "@fortawesome/fontawesome-free" dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:41:39 +00:00
Kevin Veen-Birkenbach	20b36e518d	Merge pull request #11 from kevinveenbirkenbach/dependabot/npm_and_yarn/app/bootstrap-icons-1.13.1 build(deps): bump bootstrap-icons from 1.9.1 to 1.13.1 in /app	2026-09-23 00:41:34 +02:00
Kevin Veen-Birkenbach	d3a37f2268	Merge pull request #1 from kevinveenbirkenbach/dependabot/github_actions/actions/checkout-7 build(deps): bump actions/checkout from 6 to 7	2026-09-23 00:40:56 +02:00
dependabot[bot]	fe6c2a0f11	build(deps): bump bootstrap-icons from 1.9.1 to 1.13.1 in /app Bumps [bootstrap-icons](https://github.com/twbs/icons) from 1.9.1 to 1.13.1. - [Release notes](https://github.com/twbs/icons/releases) - [Commits](https://github.com/twbs/icons/compare/v1.9.1...v1.13.1) --- updated-dependencies: - dependency-name: bootstrap-icons dependency-version: 1.13.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:27 +00:00
dependabot[bot]	21f24a3c0d	build(deps-dev): bump cypress from 14.5.4 to 16.1.0 in /app Bumps [cypress](https://github.com/cypress-io/cypress) from 14.5.4 to 16.1.0. - [Release notes](https://github.com/cypress-io/cypress/releases) - [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md) - [Commits](https://github.com/cypress-io/cypress/compare/v14.5.4...v16.1.0) --- updated-dependencies: - dependency-name: cypress dependency-version: 16.1.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:20 +00:00
dependabot[bot]	20566ca0c4	build(deps): bump bootstrap from 5.2.2 to 5.3.8 in /app Bumps [bootstrap](https://github.com/twbs/bootstrap) from 5.2.2 to 5.3.8. - [Release notes](https://github.com/twbs/bootstrap/releases) - [Commits](https://github.com/twbs/bootstrap/compare/v5.2.2...v5.3.8) --- updated-dependencies: - dependency-name: bootstrap dependency-version: 5.3.8 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:19 +00:00
dependabot[bot]	f998ceb298	build(deps): bump docker/build-push-action from 6.19.2 to 7.4.0 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.2 to 7.4.0. - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](`10e90e3645...c3c9e263c2`) --- updated-dependencies: - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:13 +00:00
dependabot[bot]	abc17e8b1e	build(deps): bump python from 3.12-slim to 3.14-slim Bumps python from 3.12-slim to 3.14-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:09 +00:00
dependabot[bot]	c188a6089d	build(deps): bump cypress-io/github-action from 6.10.9 to 7.4.4 Bumps [cypress-io/github-action](https://github.com/cypress-io/github-action) from 6.10.9 to 7.4.4. - [Release notes](https://github.com/cypress-io/github-action/releases) - [Changelog](https://github.com/cypress-io/github-action/blob/master/CHANGELOG.md) - [Commits](`f790eee7a5...01e3b659a4`) --- updated-dependencies: - dependency-name: cypress-io/github-action dependency-version: 7.4.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:06 +00:00
dependabot[bot]	b76bbba4a3	build(deps): bump node from 22-slim to 25-slim Bumps node from 22-slim to 25-slim. --- updated-dependencies: - dependency-name: node dependency-version: 25-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:03 +00:00
dependabot[bot]	362ca6f499	build(deps): bump hadolint/hadolint-action from 3.3.0 to 3.5.0 Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 3.3.0 to 3.5.0. - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](`2332a7b74a...06be81baf8`) --- updated-dependencies: - dependency-name: hadolint/hadolint-action dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:39:00 +00:00
dependabot[bot]	13e0331460	build(deps): bump actions/setup-python from 6 to 7 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:38:57 +00:00
dependabot[bot]	5d39720d54	build(deps): bump actions/checkout from 6 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-09-22 22:38:51 +00:00
Kevin Veen-Birkenbach	49a0d2fe6d	ci: let Dependabot watch the dependencies The SHA-pinned actions, the two base images, the compose file, the Python project and the npm assets had no update stream, so a pinned reference only moved when someone noticed it by hand. Adds a daily Dependabot config for all five. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-23 00:38:10 +02:00