[llvm] Update [Github] Update GHA Dependencies (PR #170057)

via llvm-commits llvm-commits at lists.llvm.org
Sun Nov 30 16:08:26 PST 2025 

llvmbot wrote:


<!--LLVM PR SUMMARY COMMENT-->

@llvm/pr-subscribers-github-workflow

Author: Mend Renovate (renovate-bot)

<details>
<summary>Changes</summary>

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | minor | `v6.0.0` -> `v6.1.0` |
| [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.31.4` -> `v4.31.5` |
| [hendrikmuhs/ccache-action](https://redirect.github.com/hendrikmuhs/ccache-action) | action | patch | `v1.2.19` -> `v1.2.20` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/setup-python (actions/setup-python)</summary>

### [`v6.1.0`](https://redirect.github.com/actions/setup-python/releases/tag/v6.1.0)

[Compare Source](https://redirect.github.com/actions/setup-python/compare/v6.0.0...v6.1.0)

##### What's Changed

##### Enhancements:

- Add support for `pip-install` input by [@&#<!-- -->8203;gowridurgad](https://redirect.github.com/gowridurgad) in [#&#<!-- -->8203;1201](https://redirect.github.com/actions/setup-python/pull/1201)
- Add graalpy early-access and windows builds by [@&#<!-- -->8203;timfel](https://redirect.github.com/timfel) in [#&#<!-- -->8203;880](https://redirect.github.com/actions/setup-python/pull/880)

##### Dependency and Documentation updates:

- Enhanced wording and updated example usage for `allow-prereleases` by [@&#<!-- -->8203;yarikoptic](https://redirect.github.com/yarikoptic) in [#&#<!-- -->8203;979](https://redirect.github.com/actions/setup-python/pull/979)
- Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1139](https://redirect.github.com/actions/setup-python/pull/1139)
- Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1094](https://redirect.github.com/actions/setup-python/pull/1094)
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1199](https://redirect.github.com/actions/setup-python/pull/1199)
- Upgrade requests from 2.32.2 to 2.32.4 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1130](https://redirect.github.com/actions/setup-python/pull/1130)
- Upgrade prettier from 3.5.3 to 3.6.2 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1234](https://redirect.github.com/actions/setup-python/pull/1234)
- Upgrade [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot) in [#&#<!-- -->8203;1235](https://redirect.github.com/actions/setup-python/pull/1235)

##### New Contributors

- [@&#<!-- -->8203;yarikoptic](https://redirect.github.com/yarikoptic) made their first contribution in [#&#<!-- -->8203;979](https://redirect.github.com/actions/setup-python/pull/979)

**Full Changelog**: <https://github.com/actions/setup-python/compare/v6...v6.1.0>

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

### [`v4.31.5`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.5)

[Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.4...v4.31.5)

##### CodeQL Action Changelog

See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.

##### 4.31.5 - 24 Nov 2025

- Update default CodeQL bundle version to 2.23.6. [#&#<!-- -->8203;3321](https://redirect.github.com/github/codeql-action/pull/3321)

See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.5/CHANGELOG.md) for more information.

</details>

<details>
<summary>hendrikmuhs/ccache-action (hendrikmuhs/ccache-action)</summary>

### [`v1.2.20`](https://redirect.github.com/hendrikmuhs/ccache-action/releases/tag/v1.2.20)

[Compare Source](https://redirect.github.com/hendrikmuhs/ccache-action/compare/v1.2.19...v1.2.20)

#### What's Changed

- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.3.1 to 24.5.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;368](https://redirect.github.com/hendrikmuhs/ccache-action/pull/368)
- Bump ts-jest from 29.4.1 to 29.4.2 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;367](https://redirect.github.com/hendrikmuhs/ccache-action/pull/367)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.5.0 to 24.5.2 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;371](https://redirect.github.com/hendrikmuhs/ccache-action/pull/371)
- Bump ts-jest from 29.4.2 to 29.4.4 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;373](https://redirect.github.com/hendrikmuhs/ccache-action/pull/373)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.5.2 to 24.6.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;377](https://redirect.github.com/hendrikmuhs/ccache-action/pull/377)
- Bump jest from 30.1.3 to 30.2.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;376](https://redirect.github.com/hendrikmuhs/ccache-action/pull/376)
- Bump [@&#<!-- -->8203;vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.3 to 0.38.4 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;372](https://redirect.github.com/hendrikmuhs/ccache-action/pull/372)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.6.0 to 24.6.2 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;380](https://redirect.github.com/hendrikmuhs/ccache-action/pull/380)
- Bump [@&#<!-- -->8203;actions/cache](https://redirect.github.com/actions/cache) from 4.0.5 to 4.1.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;375](https://redirect.github.com/hendrikmuhs/ccache-action/pull/375)
- Bump typescript from 5.9.2 to 5.9.3 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;379](https://redirect.github.com/hendrikmuhs/ccache-action/pull/379)
- restore.ts - fix typo by [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) in [#&#<!-- -->8203;381](https://redirect.github.com/hendrikmuhs/ccache-action/pull/381)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.6.2 to 24.7.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;384](https://redirect.github.com/hendrikmuhs/ccache-action/pull/384)
- Support 'dnf' for installing ccache on Red Hat by [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) in [#&#<!-- -->8203;383](https://redirect.github.com/hendrikmuhs/ccache-action/pull/383)
- Use 'MB' in max-size default instead of 'M' by [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) in [#&#<!-- -->8203;382](https://redirect.github.com/hendrikmuhs/ccache-action/pull/382)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.7.0 to 24.8.1 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;385](https://redirect.github.com/hendrikmuhs/ccache-action/pull/385)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.8.1 to 24.9.1 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;389](https://redirect.github.com/hendrikmuhs/ccache-action/pull/389)
- Bump [@&#<!-- -->8203;types/node](https://redirect.github.com/types/node) from 24.9.1 to 24.10.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;390](https://redirect.github.com/hendrikmuhs/ccache-action/pull/390)
- Fix windows cache misses due to updating cl mtime [#&#<!-- -->8203;387](https://redirect.github.com/hendrikmuhs/ccache-action/issues/387) by [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) in [#&#<!-- -->8203;388](https://redirect.github.com/hendrikmuhs/ccache-action/pull/388)
- Bump js-yaml from 3.14.1 to 3.14.2 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;392](https://redirect.github.com/hendrikmuhs/ccache-action/pull/392)
- restore.ts - `update-package-index` option by [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) in [#&#<!-- -->8203;386](https://redirect.github.com/hendrikmuhs/ccache-action/pull/386)
- Bump glob from 10.4.5 to 10.5.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;393](https://redirect.github.com/hendrikmuhs/ccache-action/pull/393)
- Bump [@&#<!-- -->8203;actions/io](https://redirect.github.com/actions/io) from 1.1.3 to 2.0.0 by [@&#<!-- -->8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#<!-- -->8203;391](https://redirect.github.com/hendrikmuhs/ccache-action/pull/391)

#### New Contributors

- [@&#<!-- -->8203;Andrej730](https://redirect.github.com/Andrej730) made their first contribution in [#&#<!-- -->8203;381](https://redirect.github.com/hendrikmuhs/ccache-action/pull/381)

**Full Changelog**: <https://github.com/hendrikmuhs/ccache-action/compare/v1.2.19...v1.2.20>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on Monday ( * 0 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/llvm/llvm-project).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4xOS45IiwidXBkYXRlZEluVmVyIjoiNDIuMTkuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->


---
Full diff: https://github.com/llvm/llvm-project/pull/170057.diff


15 Files Affected:

- (modified) .github/workflows/check-ci.yml (+1-1) 
- (modified) .github/workflows/ci-post-commit-analyzer.yml (+1-1) 
- (modified) .github/workflows/docs.yml (+1-1) 
- (modified) .github/workflows/gha-codeql.yml (+2-2) 
- (modified) .github/workflows/libc-fullbuild-tests.yml (+1-1) 
- (modified) .github/workflows/libc-overlay-tests.yml (+1-1) 
- (modified) .github/workflows/libclang-python-tests.yml (+2-2) 
- (modified) .github/workflows/libcxx-run-benchmarks.yml (+1-1) 
- (modified) .github/workflows/mlir-spirv-tests.yml (+1-1) 
- (modified) .github/workflows/premerge.yaml (+1-1) 
- (modified) .github/workflows/release-binaries.yml (+1-1) 
- (modified) .github/workflows/release-documentation.yml (+1-1) 
- (modified) .github/workflows/release-doxygen.yml (+1-1) 
- (modified) .github/workflows/scorecard.yml (+1-1) 
- (modified) .github/workflows/spirv-tests.yml (+1-1) 


``````````diff
diff --git a/.github/workflows/check-ci.yml b/.github/workflows/check-ci.yml
index 914ead803181e..9f63b4ce22a28 100644
--- a/.github/workflows/check-ci.yml
+++ b/.github/workflows/check-ci.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           sparse-checkout: .ci
       - name: Setup Python
-        uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: 3.14
           cache: 'pip'
diff --git a/.github/workflows/ci-post-commit-analyzer.yml b/.github/workflows/ci-post-commit-analyzer.yml
index abd64809f9dc9..a823dadb5979f 100644
--- a/.github/workflows/ci-post-commit-analyzer.yml
+++ b/.github/workflows/ci-post-commit-analyzer.yml
@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+        uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
         with:
           # A full build of llvm, clang, lld, and lldb takes about 250MB
           # of ccache space. There's not much reason to have more than this,
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ef1b727dc00a8..f621bb1d64086 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -95,7 +95,7 @@ jobs:
             workflow:
               - '.github/workflows/docs.yml'
       - name: Setup Python env
-        uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: '3.14'
           cache: 'pip'
diff --git a/.github/workflows/gha-codeql.yml b/.github/workflows/gha-codeql.yml
index a94c064757d29..7baaa6ce0cf08 100644
--- a/.github/workflows/gha-codeql.yml
+++ b/.github/workflows/gha-codeql.yml
@@ -29,9 +29,9 @@ jobs:
           sparse-checkout: |
             .github/
       - name: Initialize CodeQL
-        uses: github/codeql-action/init at e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/init at fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
         with:
           languages: actions
           queries: security-extended
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze at e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/analyze at fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
diff --git a/.github/workflows/libc-fullbuild-tests.yml b/.github/workflows/libc-fullbuild-tests.yml
index 13c0c2b82ab42..3c7dc5d4fcd75 100644
--- a/.github/workflows/libc-fullbuild-tests.yml
+++ b/.github/workflows/libc-fullbuild-tests.yml
@@ -97,7 +97,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+      uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
       with:
         max-size: 1G
         key: libc_fullbuild_${{ matrix.c_compiler }}
diff --git a/.github/workflows/libc-overlay-tests.yml b/.github/workflows/libc-overlay-tests.yml
index 29bcd0f600490..ca6e9ad92ab1b 100644
--- a/.github/workflows/libc-overlay-tests.yml
+++ b/.github/workflows/libc-overlay-tests.yml
@@ -51,7 +51,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+      uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
       with:
         max-size: 1G
         key: libc_overlay_build_${{ matrix.os }}_${{ matrix.compiler.c_compiler }}
diff --git a/.github/workflows/libclang-python-tests.yml b/.github/workflows/libclang-python-tests.yml
index 69d281b65b5fb..27ad0aa512c03 100644
--- a/.github/workflows/libclang-python-tests.yml
+++ b/.github/workflows/libclang-python-tests.yml
@@ -34,11 +34,11 @@ jobs:
     steps:
       - uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - name: Setup Python
-        uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+        uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
         with:
           max-size: 2G
           key: spirv-ubuntu-24.04
diff --git a/.github/workflows/libcxx-run-benchmarks.yml b/.github/workflows/libcxx-run-benchmarks.yml
index 64a902482f9a3..9f4cd257704e4 100644
--- a/.github/workflows/libcxx-run-benchmarks.yml
+++ b/.github/workflows/libcxx-run-benchmarks.yml
@@ -33,7 +33,7 @@ jobs:
 
     runs-on: llvm-premerge-libcxx-next-runners # TODO: This should run on a dedicated set of machines
     steps:
-      - uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+      - uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           python-version: '3.14'
 
diff --git a/.github/workflows/mlir-spirv-tests.yml b/.github/workflows/mlir-spirv-tests.yml
index e9b0cddb391be..ee565aaf5c5a2 100644
--- a/.github/workflows/mlir-spirv-tests.yml
+++ b/.github/workflows/mlir-spirv-tests.yml
@@ -30,7 +30,7 @@ jobs:
     steps:
       - uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+        uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
         with:
           max-size: 2G
           key: spirv-mlir-ubuntu-24.04
diff --git a/.github/workflows/premerge.yaml b/.github/workflows/premerge.yaml
index 252d7fbe8e67f..a23b865f5c0f8 100644
--- a/.github/workflows/premerge.yaml
+++ b/.github/workflows/premerge.yaml
@@ -200,7 +200,7 @@ jobs:
         with:
           fetch-depth: 2
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+        uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
         with:
           max-size: "2000M"
       - name: Install Ninja
diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml
index 104d37db8a28d..a8bae830fc609 100644
--- a/.github/workflows/release-binaries.yml
+++ b/.github/workflows/release-binaries.yml
@@ -66,7 +66,7 @@ jobs:
     steps:
     # It's good practice to use setup-python, but this is also required on macos-14
     # due to https://github.com/actions/runner-images/issues/10385
-    - uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+    - uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
       with:
         python-version: '3.14'
 
diff --git a/.github/workflows/release-documentation.yml b/.github/workflows/release-documentation.yml
index 23bc0aed4a546..043a3f1ed9e08 100644
--- a/.github/workflows/release-documentation.yml
+++ b/.github/workflows/release-documentation.yml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Setup Python env
-        uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           cache: 'pip'
           cache-dependency-path: './llvm/docs/requirements.txt'
diff --git a/.github/workflows/release-doxygen.yml b/.github/workflows/release-doxygen.yml
index 6e6ea883ef1d0..4cf1b9b14ccd6 100644
--- a/.github/workflows/release-doxygen.yml
+++ b/.github/workflows/release-doxygen.yml
@@ -43,7 +43,7 @@ jobs:
         uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
 
       - name: Setup Python env
-        uses: actions/setup-python at e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
+        uses: actions/setup-python at 83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0
         with:
           cache: 'pip'
           cache-dependency-path: './llvm/docs/requirements.txt'
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 1ec56d2447df4..95aa8b59413cc 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,6 +57,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif at e12f0178983d466f2f6028f5cc7a6d786fd97f4b # v4.31.4
+        uses: github/codeql-action/upload-sarif at fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/spirv-tests.yml b/.github/workflows/spirv-tests.yml
index 5ede9df3b006d..c33c6b3e5650c 100644
--- a/.github/workflows/spirv-tests.yml
+++ b/.github/workflows/spirv-tests.yml
@@ -26,7 +26,7 @@ jobs:
     steps:
       - uses: actions/checkout at 1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action at bfa03e1de4d7f7c3e80ad9109feedd05c4f5a716 # v1.2.19
+        uses: hendrikmuhs/ccache-action at 5ebbd400eff9e74630f759d94ddd7b6c26299639 # v1.2.20
         with:
           max-size: 2G
           key: spirv-ubuntu-24.04

``````````

</details>


https://github.com/llvm/llvm-project/pull/170057

More information about the llvm-commits mailing list