Skip to content

Updates docker/setup-qemu-action from 4.2.0 to 4.4.0, pypa/cibuildwheel from 4.2.0 to 4.2.1, astral-sh/setup-uv from 10.0.1 to 10.2.0, pyvista/setup-headless-display-action from 5.0.0 to 5.1.0, and codecov/codecov-action from 7.0.0 to 7.1.1 - #425

Merged
Cadair merged 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions-de662ba33c
Oct 1, 2026
Merged

Updates docker/setup-qemu-action from 4.2.0 to 4.4.0, pypa/cibuildwheel from 4.2.0 to 4.2.1, astral-sh/setup-uv from 10.0.1 to 10.2.0, pyvista/setup-headless-display-action from 5.0.0 to 5.1.0, and codecov/codecov-action from 7.0.0 to 7.1.1#425
Cadair merged 1 commit into
mainfrom
dependabot/github_actions/dot-github/workflows/actions-de662ba33c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group in /.github/workflows with 5 updates:

Package From To
docker/setup-qemu-action 4.2.0 4.4.0
pypa/cibuildwheel 4.2.0 4.2.1
astral-sh/setup-uv 10.0.1 10.2.0
pyvista/setup-headless-display-action 5.0.0 5.1.0
codecov/codecov-action 7.0.0 7.1.1

Updates docker/setup-qemu-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.4.0

Full Changelog: docker/setup-qemu-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

Commits
  • 9901266 Merge pull request #342 from docker/dependabot/npm_and_yarn/js-yaml-4.3.2
  • 9364d8b Merge pull request #340 from docker/dependabot/npm_and_yarn/humanfs/node-0.16.8
  • 95c3240 Merge pull request #337 from docker/dependabot/npm_and_yarn/postcss-selector-...
  • c24671a Merge pull request #338 from docker/dependabot/github_actions/codeql-actions-...
  • fa83965 Merge pull request #345 from crazy-max/shared-error-helpers
  • f396a65 build(deps): bump the codeql-actions group across 1 directory with 2 updates
  • a63df2f chore: update generated content
  • 3e4165f use the shared error helper for Docker commands
  • 18c52d9 Merge pull request #344 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 896cbed [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 4.2.0 to 4.2.1

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.2.1

  • 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
  • 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
  • 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
  • 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)
Changelog

Sourced from pypa/cibuildwheel's changelog.

title: Changelog ref: changelog

Changelog

v4.2.1

5 September 2026

  • 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
  • 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
  • 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
  • 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

v4.2.0

4 August 2026

  • 🌟 CPython 3.15 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.15.0rc1, which is guaranteed to be ABI compatible with the final release. (#2944)
  • ✨ Adds Pyodide 3.15 support with the cp315-pyodide_wasm32 build identifier, using Pyodide 315.0.0a2. These are also stable wrt. the final release. (#2958)
  • 🐛 Retries a failed download six times with exponential backoff, so short network outages no longer stop a build. A 4xx response is still reported at once. (#2953)
  • 🐛 Accepts default as a build-frontend value on Pyodide, and accepts pyodide-build in the top-level table and in overrides (#2951)
  • 🛠 Holds pip back on GraalPy, where newer pip breaks the build (#2955)
  • 🛠 Updates Pyodide to 314.0.4 (#2949, #2952)
  • 🛠 Updates dependencies and container pins (#2952, #2960)
  • 💼 Updates CI action pins (#2948, #2954)
  • 🧪 Uses pp311 for the abi3 test, and deletes test_overridden_pip_constraint, which is not necessary since #2583 (#2956, #2957)

v4.1.1

24 July 2026

  • ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
  • 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
  • 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
  • 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
  • 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
  • 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
  • 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
  • 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
  • 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
  • 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
  • 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
  • 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
  • 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
  • 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
  • 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
  • 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)

... (truncated)

Commits
  • e090b81 Bump version: v4.2.1
  • 59501f4 Respect configured NuGet package sources (#2966)
  • 885ead0 [Bot] Update dependencies (#2985)
  • 3d9e8c5 docs: refresh CircleCI and CPython platform links (#2977)
  • 7d5ec95 [Bot] Update dependencies (#2981)
  • a007eed [Bot] Update dependencies (#2976)
  • fdda545 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the actions grou...
  • 8832cf6 chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the ...
  • a35209b [Bot] Update dependencies (#2970)
  • 148ea70 chore: faster and stricter mypy (#2968)
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.0.1 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

Updates pyvista/setup-headless-display-action from 5.0.0 to 5.1.0

Release notes

Sourced from pyvista/setup-headless-display-action's releases.

v5.1.0

What's Changed

New Contributors

Full Changelog: pyvista/setup-headless-display-action@v5.0.0...v5.1.0

Commits
  • c103a2f Set LP_NUM_THREADS=0 with the Windows off-screen renderer (#55)
  • fd3f0c7 Bump pyvista/setup-headless-display-action from 4 to 5 in the actions group (...
  • See full diff in compare view

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the actions group in /.github/workflows with 5 updates
216a75e 
Bumps the actions group in /.github/workflows with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.2.0` | `4.4.0` |
| [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `4.2.0` | `4.2.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.0.1` | `10.2.0` |
| [pyvista/setup-headless-display-action](https://github.com/pyvista/setup-headless-display-action) | `5.0.0` | `5.1.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` |


Updates `docker/setup-qemu-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@96fe6ef...9901266)

Updates `pypa/cibuildwheel` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@1828c10...e090b81)

Updates `astral-sh/setup-uv` from 10.0.1 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...c18668a)

Updates `pyvista/setup-headless-display-action` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/pyvista/setup-headless-display-action/releases)
- [Commits](pyvista/setup-headless-display-action@b0bf9f5...c103a2f)

Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@fb8b358...303a32d)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: pypa/cibuildwheel
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: pyvista/setup-headless-display-action
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026
@Cadair Cadair changed the title Bump the actions group in /.github/workflows with 5 updates Updates docker/setup-qemu-action from 4.2.0 to 4.4.0, pypa/cibuildwheel from 4.2.0 to 4.2.1, astral-sh/setup-uv from 10.0.1 to 10.2.0, pyvista/setup-headless-display-action from 5.0.0 to 5.1.0, and codecov/codecov-action from 7.0.0 to 7.1.1 Oct 1, 2026
@Cadair
Cadair merged commit 6b7dd1c into main Oct 1, 2026
232 of 234 checks passed
@Cadair
Cadair deleted the dependabot/github_actions/dot-github/workflows/actions-de662ba33c branch October 1, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Cadair