chore(deps): regularly update dependencies

.github/dependabot.yml

@@ -5,8 +5,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -16,8 +16,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -27,8 +27,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -38,8 +38,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -54,8 +54,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -70,8 +70,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -86,8 +86,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -97,8 +97,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -108,8 +108,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(deps):"
       include: "scope"
@@ -119,8 +119,8 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 5
-    target-branch: "dev"
-    base-branch: "main"
+    target-branch: "deps"
+    base-branch: "dev"
     commit-message:
       prefix: "chore(ci):"
       include: "scope"

.github/workflows/api-release.yaml

@@ -62,7 +62,7 @@ jobs:
           echo "Published to https://github.com/memodb-io/Acontext/pkgs/container/acontext-api" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt
 

.github/workflows/api-test.yaml

@@ -35,7 +35,7 @@ jobs:
         run: go test -v -timeout 30m -coverprofile=coverage.out -covermode=atomic ./...
       - name: Upload coverage artifact
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: go-api-coverage
           path: src/server/api/go/coverage.out

.github/workflows/cli-release.yaml

@@ -32,7 +32,7 @@ jobs:
           echo "Binary artifacts are available in this release." >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release with Notes
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt
 

.github/workflows/cli-test.yaml

@@ -58,7 +58,7 @@ jobs:
         run: go test -v -race -coverprofile=coverage.out ./...
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           file: ./coverage.out
           flags: unittests
@@ -141,7 +141,7 @@ jobs:
           fi
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: acontext-cli-${{ matrix.os }}
           path: |

.github/workflows/client-release-py.yaml

@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 
@@ -51,6 +51,6 @@ jobs:
           echo "Published to https://pypi.org/project/acontext/${{ steps.version.outputs.version }}/" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt

.github/workflows/client-release-ts.yaml

@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org'
@@ -129,6 +129,6 @@ jobs:
           echo "Published to npm as @acontext/acontext@${{ steps.version.outputs.version }}" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt

.github/workflows/client-test-ts.yaml

@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "20"
           cache: "npm"

.github/workflows/core-release.yaml

@@ -62,7 +62,7 @@ jobs:
           echo "Published to https://github.com/memodb-io/Acontext/pkgs/container/acontext-core" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt
 

.github/workflows/core-test.yaml

@@ -61,7 +61,7 @@ jobs:
           uv run -m pytest --junit-xml=junit/test-results-${{ matrix.python-version }}.xml --cov=. --cov-report=xml:coverage-${{ matrix.python-version }}.xml tests/ -s -v
 
       - name: Upload pytest test results and coverage
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: pytest-results-${{ matrix.python-version }}
           path: |

.github/workflows/package-release-sandbox-cloudflare.yaml

@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
           registry-url: 'https://registry.npmjs.org'
@@ -114,6 +114,6 @@ jobs:
           echo "\`\`\`" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt

.github/workflows/security-reusable.yaml

@@ -37,7 +37,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@v7
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.12'
       - name: Install pip-audit
@@ -60,7 +60,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: '20'
       - name: Setup pnpm

.github/workflows/ui-release.yaml

@@ -62,7 +62,7 @@ jobs:
           echo "Published to https://github.com/memodb-io/Acontext/pkgs/container/acontext-ui" >> ${{ github.workspace }}-CHANGELOG.txt
 
       - name: Create Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           body_path: ${{ github.workspace }}-CHANGELOG.txt