Merge branch 'develop' into update_super_linter_2

massongit · web-flow · commit 6a2c629599b2 · 2025-09-10T09:54:40.000+09:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -36,3 +36,5 @@ updates:
     ignore:
       - dependency-name: "node-fetch"
     open-pull-requests-limit: 1
+    cooldown:
+      default-days: 3
diff --git a/.github/workflows/add-to-task-list.yml b/.github/workflows/add-to-task-list.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
           private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
-      - uses: dev-hato/actions-add-to-projects@041e8c0ad819837fd0d2adaac3c34c28d8978edd # v0.0.96
+      - uses: dev-hato/actions-add-to-projects@bf5e1af12f40d268eca4e84e8f349a8c849472a1 # v0.0.99
         with:
           github-token: ${{steps.generate_token.outputs.token}}
           project-url: https://github.com/orgs/dev-hato/projects/1
diff --git a/.github/workflows/deploy-hato-bot.yml b/.github/workflows/deploy-hato-bot.yml
@@ -175,7 +175,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           cache: npm
@@ -205,7 +205,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
       - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           cache: npm
@@ -227,7 +227,7 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
-      - uses: dev-hato/actions-update-dockle@b4f54b347939d0f759d2ff68b654fbe856cdfc3d # v0.0.117
+      - uses: dev-hato/actions-update-dockle@9f34ce1d3141342191896b88a06d731ee412b13d # v0.0.120
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
   dockle:
diff --git a/.github/workflows/format-json-yml.yml b/.github/workflows/format-json-yml.yml
@@ -33,7 +33,7 @@ jobs:
         with:
           app-id: ${{ secrets.PROJECT_AUTOMATION_APP_ID }}
           private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
-      - uses: dev-hato/actions-format-json-yml@ffc4e6988f3e4c5b5e140a2aaecf9fae888ea00f # v0.0.86
+      - uses: dev-hato/actions-format-json-yml@4a32bebc6bb57216088d757755711388ea8265d5 # v0.0.87
         with:
           github-token: ${{steps.generate_token.outputs.token}}
 concurrency:
diff --git a/.github/workflows/github-actions-cache-cleaner.yml b/.github/workflows/github-actions-cache-cleaner.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
-      - uses: dev-hato/github-actions-cache-cleaner@a2b02aab8e1418d15a8a19a9c403a3ef0878706c # v0.0.69
+      - uses: dev-hato/github-actions-cache-cleaner@d34e4b6131cc132fe752152f95ef56b67d461daf # v0.0.71
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
 concurrency:
diff --git a/.github/workflows/pr-copy-ci-hato-bot.yml b/.github/workflows/pr-copy-ci-hato-bot.yml
@@ -13,7 +13,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           cache: npm
           node-version-file: package.json
@@ -26,12 +26,12 @@ jobs:
           private-key: ${{ secrets.PROJECT_AUTOMATION_PRIVATE_KEY }}
           owner: ${{ github.repository_owner }}
           repositories: "sudden-death"
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           github-token: ${{steps.generate_token.outputs.token}}
           script: |
             const {tsImport} = require('tsx/esm/api')
-            const {script} = await tsImport(
+            const {default: {script}} = await tsImport(
               './scripts/pr_copy_ci_hato_bot/pr_copy_ci/dispatch_event.ts',
               process.env.GITHUB_WORKSPACE + '/'
             )
diff --git a/.github/workflows/pr-format.yml b/.github/workflows/pr-format.yml
@@ -32,7 +32,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@4959332f0f014c5280e7eac8b70c90cb574c9f9b # v6.6.0
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           enable-cache: true
diff --git a/.github/workflows/pr-merge-develop-hato-bot.yml b/.github/workflows/pr-merge-develop-hato-bot.yml
@@ -15,13 +15,13 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           cache: npm
           node-version-file: package.json
       - run: npm ci
       - name: Get PullRequests
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         id: get_pull_requests
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
@@ -33,7 +33,7 @@ jobs:
             )
             return await script(github, context)
       - name: Create PullRequest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         if: ${{ steps.get_pull_requests.outputs.result == 0 }}
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
diff --git a/.github/workflows/pr-release-hato-bot.yml b/.github/workflows/pr-release-hato-bot.yml
@@ -14,7 +14,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           cache: npm
           node-version-file: package.json
@@ -23,20 +23,20 @@ jobs:
         id: get_diff
         run: bash "${GITHUB_WORKSPACE}/scripts/pr_release_hato_bot/pr_release/get_diff.sh"
       - name: Get PullRequests
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         if: ${{ steps.get_diff.outputs.result != '' }}
         id: get_pull_requests
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
             const {tsImport} = require('tsx/esm/api')
-            const {script} = await tsImport(
+            const {default: {script}} = await tsImport(
               './scripts/get_pull_requests_hato_bot.ts',
               process.env.GITHUB_WORKSPACE + '/'
             )
             return await script(github, context)
       - name: Create PullRequest
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         if: ${{ steps.get_diff.outputs.result != '' && steps.get_pull_requests.outputs.result == 0 }}
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
diff --git a/.github/workflows/pr-test-hato-bot.yml b/.github/workflows/pr-test-hato-bot.yml
@@ -20,7 +20,7 @@ jobs:
           submodules: "recursive"
           persist-credentials: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@4959332f0f014c5280e7eac8b70c90cb574c9f9b # v6.6.0
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
         with:
           enable-cache: true
       - name: Install dependencies
diff --git a/.github/workflows/pr-test.yml b/.github/workflows/pr-test.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@4959332f0f014c5280e7eac8b70c90cb574c9f9b # v6.6.0
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
         with:
           enable-cache: true
       - name: Install uv
@@ -29,7 +29,7 @@ jobs:
           DEST_PATH: "/home/runner/work/_temp/_github_workflow/.venv"
         run: bash "${GITHUB_WORKSPACE}/scripts/pr_test/pr_super_lint/set_venv_path.sh"
       - name: Set up Node.js
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           cache: npm
           node-version-file: package.json
diff --git a/.github/workflows/pr-update-gitleaks.yml b/.github/workflows/pr-update-gitleaks.yml
@@ -26,15 +26,15 @@ jobs:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.head.sha }}
           persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           cache: npm
           node-version-file: package.json
       - name: Install packages
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         run: bash "${GITHUB_WORKSPACE}/scripts/npm_ci.sh"
-      - uses: dev-hato/actions-update-gitleaks@016e2b941cc6e93794fc1c2bdec968a3b3f76b27 # v0.0.90
+      - uses: dev-hato/actions-update-gitleaks@7928983238f6f56d6a1109f8056afe68a551cdfe # v0.0.92
         with:
           github-token: ${{secrets.GITHUB_TOKEN}}
 concurrency:
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/astral-sh/uv:0.8.13-python3.13-bookworm-slim@sha256:020e9eefae64e99ea2da39bcd1af1294be0a0b01e98ebad4dbedfd8b729500f7 AS base
+FROM ghcr.io/astral-sh/uv:0.8.15-python3.13-bookworm-slim@sha256:efe2350aa848bc60720f136d94f47480095d8231b17547e4369f6bc97df59701 AS base
 
 # バージョン情報に表示する commit hash を埋め込む
 FROM base AS commit-hash
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -32,7 +32,7 @@
     "textlint-rule-preset-ja-spacing": "2.4.3",
     "textlint-rule-preset-ja-technical-writing": "12.0.2",
     "textlint-rule-terminology": "5.2.15",
-    "tsx": "4.20.4"
+    "tsx": "4.20.5"
   },
   "engines": {
     "node": ">=20",
diff --git a/pyproject.toml b/pyproject.toml
@@ -8,13 +8,13 @@ dependencies = [
     "requests==2.32.5",
     "Pillow>=7.1.2",
     "opencv-python==4.12.0.88",
-    "slack-bolt==1.23.0",
+    "slack-bolt==1.24.0",
     "slack-sdk==3.36.0",
     "gitpython==3.1.45",
     "pandas==2.3.2",
-    "matplotlib==3.10.5",
-    "openai==1.101.0",
-    "discord.py==2.6.0",
+    "matplotlib==3.10.6",
+    "openai==1.107.0",
+    "discord.py==2.6.3",
     "misskey.py==4.1.0",
     "websockets==15.0.1",
     "flask==3.1.2",
@@ -23,7 +23,7 @@ dependencies = [
     "emoji==2.14.1",
     "puremagic==1.30",
     "audioop-lts==0.2.2",
-    "psycopg[binary,pool]==3.2.9",
+    "psycopg[binary,pool]==3.2.10",
     "sudden-death==0.0.1",
 ]
 
@@ -42,7 +42,7 @@ dev = [
 ]
 
 [tool.uv]
-required-version = "0.8.13"
+required-version = "0.8.15"
 [[tool.uv.index]]
 name = "pypi"
 url = "https://pypi.org/simple"
diff --git a/uv.lock b/uv.lock
