From e55eb6c66f0a06dd0aeb6fdf3e8d0746d2698a72 Mon Sep 17 00:00:00 2001
From: Martin Reuter <reuter@mit.edu>
Date: Fri, 29 May 2026 15:36:44 +0200
Subject: [PATCH 1/3] update versions of actions

---
 .github/actions/build-docker/action.yml   | 4 ++--
 .github/actions/run-fastsurfer/action.yml | 2 +-
 .github/actions/run-tests/action.yml      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/actions/build-docker/action.yml b/.github/actions/build-docker/action.yml
index 86041c535..d60fc2bce 100644
--- a/.github/actions/build-docker/action.yml
+++ b/.github/actions/build-docker/action.yml
@@ -34,7 +34,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@v3
+      uses: docker/setup-buildx-action@v4
     - name: Recover freesurfer build image
       if: ${{ contains( inputs.freesurfer-build-image, 'fastsurfer-build:freesurfer') }}
       uses: Deep-MI/FastSurfer/.github/actions/load-docker@dev
@@ -68,7 +68,7 @@ runs:
         # Export image
         docker save "$image_name" -o /tmp/docker-image.tar
     - name: Save docker image
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: fastsurfer-${{ github.sha }}-${{ inputs.target }}
         path: |
diff --git a/.github/actions/run-fastsurfer/action.yml b/.github/actions/run-fastsurfer/action.yml
index d79ec0bb5..0434221ef 100644
--- a/.github/actions/run-fastsurfer/action.yml
+++ b/.github/actions/run-fastsurfer/action.yml
@@ -115,7 +115,7 @@ runs:
         tar cfz "$DATA_DIR/${{ inputs.subject-id }}.tar.gz" -C "$DATA_DIR" "${{ inputs.subject-id }}"
     - name: Save processed data
       if: ${{ always() && (steps.prep.outputs.IMAGE_LOADED != 0 || steps.load-docker.outcome == 'success') }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: fastsurfer-${{ github.sha }}-${{ inputs.subject-id }}
         path: ${{ env.DATA_DIR }}/${{ inputs.subject-id }}
diff --git a/.github/actions/run-tests/action.yml b/.github/actions/run-tests/action.yml
index c8ae350d6..4c0433ec6 100644
--- a/.github/actions/run-tests/action.yml
+++ b/.github/actions/run-tests/action.yml
@@ -72,7 +72,7 @@ runs:
         uv run --extra quicktest python -m pytest "${flags[@]}" test/quicktest
         echo "::endgroup::"
     - name: Upload the the JUnit XML file as an artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: fastsurfer-${{ github.sha }}-junit-${{ inputs.subject-id }}
         path: ${{ inputs.junit-file }}

From 601dd41829f0560173f105fbcdafda84d837e952 Mon Sep 17 00:00:00 2001
From: Martin Reuter <reuter@mit.edu>
Date: Fri, 29 May 2026 16:09:20 +0200
Subject: [PATCH 2/3] dependabot also check actions

---
 .github/dependabot.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5ace4600a..31e6ae35b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,8 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/.github/actions/*"
     schedule:
       interval: "weekly"

From 2a3c16c84d5fc2b65a117518975a412c98ef7fc7 Mon Sep 17 00:00:00 2001
From: Martin Reuter <reuter@mit.edu>
Date: Fri, 29 May 2026 16:34:21 +0200
Subject: [PATCH 3/3] bump more versions

---
 .github/actions/load-docker/action.yml    | 2 +-
 .github/actions/load-processed/action.yml | 2 +-
 .github/actions/run-tests/action.yml      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/actions/load-docker/action.yml b/.github/actions/load-docker/action.yml
index 524670f8f..2284ed8ec 100644
--- a/.github/actions/load-docker/action.yml
+++ b/.github/actions/load-docker/action.yml
@@ -20,7 +20,7 @@ runs:
   steps:
     - name: Restore docker image from an artifact
       if: inputs.docker-image == 'build-cached'
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: fastsurfer-${{ github.sha }}-${{ inputs.target }}
         path: /tmp
diff --git a/.github/actions/load-processed/action.yml b/.github/actions/load-processed/action.yml
index 81d020f7f..c92999f7f 100644
--- a/.github/actions/load-processed/action.yml
+++ b/.github/actions/load-processed/action.yml
@@ -25,7 +25,7 @@ runs:
           exit 1
         fi
     - name: Recover processed files
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: fastsurfer-${{ github.sha }}-${{ inputs.subject-id }}
         path: ${{ inputs.subjects-dir }}/${{ inputs.subject-id }}
diff --git a/.github/actions/run-tests/action.yml b/.github/actions/run-tests/action.yml
index 4c0433ec6..8ab595f68 100644
--- a/.github/actions/run-tests/action.yml
+++ b/.github/actions/run-tests/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     - uses: actions/checkout@v4
     - name: Setup uv and Python 3.10
-      uses: astral-sh/setup-uv@v5
+      uses: astral-sh/setup-uv@v8.1.0
       with:
         python-version: '3.10'
     - name: Download and unpack reference data