Merge remote-tracking branch 'origin/master' into worktree/replayable-gate-plans-20260727

.github/dependabot.yml

@@ -9,9 +9,8 @@ updates:
       # This independently locked pnpm workspace has its own update entry below.
       - "native/landlock-run/**"
     schedule:
-      interval: "weekly"
-      day: "friday"
-      time: "00:01"
+      interval: "cron"
+      cronjob: "0 4 * * *"
       timezone: "Asia/Shanghai"
     cooldown:
       default-days: 30
@@ -22,9 +21,8 @@ updates:
   - package-ecosystem: "npm"
     directory: "/native/landlock-run"
     schedule:
-      interval: "weekly"
-      day: "friday"
-      time: "00:01"
+      interval: "cron"
+      cronjob: "0 4 * * *"
       timezone: "Asia/Shanghai"
     cooldown:
       default-days: 30
@@ -35,9 +33,8 @@ updates:
   - package-ecosystem: "uv"
     directory: "/python/sdk"
     schedule:
-      interval: "weekly"
-      day: "friday"
-      time: "00:01"
+      interval: "cron"
+      cronjob: "0 4 * * *"
       timezone: "Asia/Shanghai"
     cooldown:
       default-days: 30
@@ -48,9 +45,8 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
-      day: "friday"
-      time: "00:01"
+      interval: "cron"
+      cronjob: "0 4 * * *"
       timezone: "Asia/Shanghai"
     cooldown:
       default-days: 30

.github/workflows/build-exe-for-python-sdk.yml

@@ -93,7 +93,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
 
@@ -106,7 +106,7 @@ jobs:
           --package sdk
           --output-dir dist-python
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: deepseek_harness-${{ needs.plan.outputs.version }}-py3-none-any.whl
           path: dist-python/deepseek_harness-${{ needs.plan.outputs.version }}-py3-none-any.whl
@@ -133,7 +133,7 @@ jobs:
           node-version: 24
           cache: pnpm
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
 
@@ -237,7 +237,7 @@ jobs:
             /tmp/dsh-sdk/bin/python /work/scripts/smoke-python-runtime.py --scenario sdk-default
           '
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: ${{ steps.runtime.outputs.wheel }}
           path: dist-python/${{ steps.runtime.outputs.wheel }}

.github/workflows/ci.yml

@@ -96,7 +96,7 @@ jobs:
           tar -czf "$RUNNER_TEMP/node-24-built-tree.tar.gz"
           apps/*/lib packages/*/*/lib vendor/*/lib
 
-      - uses: actions/upload-artifact@v6
+      - uses: actions/upload-artifact@v7
         with:
           name: node-24-built-tree
           path: ${{ runner.temp }}/node-24-built-tree.tar.gz
@@ -286,7 +286,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v6.3.0
         with:
           python-version: '3.10'
           cache: pip

.github/workflows/docs-pages.yml

@@ -45,7 +45,7 @@ jobs:
 
       - name: Configure Pages
         id: pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Verify and build documentation
         env:
@@ -53,7 +53,7 @@ jobs:
         run: pnpm run doc-sync
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: website/.dist
 
@@ -69,4 +69,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5