chore(ci): bump actions/setup-python from 6 to 7 - #14
Conversation
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependabot
AI AnalysisTechnical Summary: This pull request updates the GitHub Actions dependency Technical Requirements and Constraints
This summary was automatically generated by AI to help with triage and may not be 100% accurate. Suggested Labels: bug enhancement test |
github-actions
Bot
added
bug
karlspace
left a comment
karlspace
left a comment
There was a problem hiding this comment.
The v7 release does carry one removal, so I checked our exposure before approving.
Breaking change: actions/setup-python#1336 removes the pip-install input. We do not use it — a repo-wide grep over .github/workflows/ returns nothing. Our three call sites pass python-version, cache: pip and cache-dependency-path, all of which are unchanged in v7.
Also in the release: EOL Python versions dropped (we pin 3.14, unaffected), @actions/cache upgraded to 6.2.0 internally — which lines up nicely with #13 moving the standalone cache action to v6 — plus two genuine fixes: stderr warnings are no longer mis-annotated as errors, and manifest fetches are validated and retried instead of failing silently.
Scope: .github/workflows/build.yml and .github/workflows/pages.yml, three call sites.
CI: GitGuardian and AI summary green; 📦 Build Image does not run on workflow-only changes, so this is validated by a dispatched build on main right after the merge.
Related: completes the set with #12 (checkout v7) and #13 (cache v6), both merged.
1 participant
Bumps actions/setup-python from 6 to 7.
Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)