From b842b089627143772c709bc3ccf4726e228159ff Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 20:52:59 +0000
Subject: [PATCH] Update CI dependencies

---
 .github/publish.yaml           |  2 +-
 .github/publish/pyproject.toml |  2 +-
 .github/publish/uv.lock        |  8 ++++----
 .github/workflows/main.yaml    | 12 ++++++------
 .pre-commit-config.yaml        |  2 +-
 ci/requirements.txt            |  4 ++--
 6 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/publish.yaml b/.github/publish.yaml
index 423b771c..26f7b028 100644
--- a/.github/publish.yaml
+++ b/.github/publish.yaml
@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.3.1/tag_publish/schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.3.3/tag_publish/schema.json
 
 docker:
   images:
diff --git a/.github/publish/pyproject.toml b/.github/publish/pyproject.toml
index 8b78de57..01b8b99b 100644
--- a/.github/publish/pyproject.toml
+++ b/.github/publish/pyproject.toml
@@ -8,5 +8,5 @@ name = "Publish"
 version = "0.0.0"
 requires-python = ">=3.14"
 dependencies = [
-    "tag-publish[docker]==1.3.1",
+    "tag-publish[docker]==1.3.3",
 ]
diff --git a/.github/publish/uv.lock b/.github/publish/uv.lock
index e55fec7a..1c5f9079 100644
--- a/.github/publish/uv.lock
+++ b/.github/publish/uv.lock
@@ -299,7 +299,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "tag-publish", extras = ["docker"], specifier = "==1.3.1" }]
+requires-dist = [{ name = "tag-publish", extras = ["docker"], specifier = "==1.3.3" }]
 
 [[package]]
 name = "pydantic"
@@ -430,16 +430,16 @@ wheels = [
 
 [[package]]
 name = "tag-publish"
-version = "1.3.1"
+version = "1.3.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "githubkit" },
     { name = "pyyaml" },
     { name = "security-md" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/d0/a5/50a1a091172008d56402269253dc8ae19c171c288ebe20316f8f5b0d5536/tag_publish-1.3.1.tar.gz", hash = "sha256:f10e4ac42edd8ca053507a7186bf38b426e90f4144929c645fa8305dec2ef3fc", size = 31253, upload-time = "2026-10-08T11:45:54.133Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d5/98/0040918dfa41bd8baf724684536fa96315e227d42f462ce7d2ce343cca6b/tag_publish-1.3.3.tar.gz", hash = "sha256:86d216b18d803d4a416039946890d77b0aecb0b82b3ab5cd3ea5b5e8e9eea983", size = 31475, upload-time = "2026-10-30T14:13:48.246Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/71/d3/638c3e55b8ae5b9279b5d64841f32678b46cbc62a5b4a7ee6b9c350923d3/tag_publish-1.3.1-py3-none-any.whl", hash = "sha256:78d1c475dbef1ba24bc89c20a0424decde637eb9ac9bad26dad7d1811a5f975f", size = 31013, upload-time = "2026-10-08T11:45:53.187Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/49/d01c4a9f234bec2bb88cb50c171e56178897687ef1c0555e4bf9f4e4225a/tag_publish-1.3.3-py3-none-any.whl", hash = "sha256:a4a0e69876df4a1388ebf5cdf3a4466c96e9941cc6eb26bcb8ba64824cc62281", size = 31276, upload-time = "2026-10-30T14:13:47.323Z" },
 ]
 
 [package.optional-dependencies]
diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 45c87be1..8ec78471 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -40,7 +40,7 @@ jobs:
       - run: pre-commit run --all-files --color=always
       - run: git diff --exit-code --patch > /tmp/pre-commit.patch; git diff --color; git reset --hard || true
         if: failure()
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: Apply pre-commit fix.patch
           path: /tmp/pre-commit.patch
@@ -62,7 +62,7 @@ jobs:
         run: make tests
         env:
           PRIVATE_SSH_KEY: ${{secrets.PRIVATE_SSH_KEY}}
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: results
           path: results
@@ -72,7 +72,7 @@ jobs:
 
       - name: Acceptance
         run: make acceptance
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: acceptance
           path: acceptance_tests/results
@@ -88,7 +88,7 @@ jobs:
 
       # The image is given to the publishing job, which is the only one with the write permissions.
       - run: docker save --output=/tmp/images.docker camptocamp/shared_config_manager:latest
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: images.docker
           path: /tmp/images.docker
@@ -119,7 +119,7 @@ jobs:
           version: latest-known
           cache-python: true
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: images.docker
           path: /tmp/
@@ -133,7 +133,7 @@ jobs:
 
       - run: git diff --exit-code --patch > /tmp/dpkg-versions.patch; git diff --color; git reset --hard || true
         if: failure()
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: Update dpkg versions list.patch
           path: /tmp/dpkg-versions.patch
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 45f8f37a..a64c5c5c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -39,7 +39,7 @@ repos:
           - --test=utils:tests
       - id: uv-lock
         additional_dependencies:
-          - uv==0.13.4 # pypi
+          - uv==0.13.5 # pypi
         files: ^\.github/publish/pyproject\.toml$
   - repo: https://github.com/codespell-project/codespell
     rev: v2.4.3
diff --git a/ci/requirements.txt b/ci/requirements.txt
index cac3f8a4..b2992327 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -1,5 +1,5 @@
 c2cciutils==1.7.5
-pre-commit==4.6.2
-poetry-dynamic-versioning==1.10.0
+pre-commit==4.7.0
+poetry-dynamic-versioning==1.10.1
 certifi>=2026.10.19 # not directly required, pinned by Snyk to avoid a vulnerability
 filelock>=4.2.1 # not directly required, pinned by Snyk to avoid a vulnerability