Skip to content

chore: bump actions/setup-python from 5 to 7 - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-7
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown

Bumps actions/setup-python from 5 to 7.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits
  • 6d4fd22 Cache upgrade to 6.3.0 (#1370)
  • ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
  • ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
  • 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
  • 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
  • 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
  • e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
  • 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
  • af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
  • 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from paulmann as a code owner October 24, 2026 18:41
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 24, 2026
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-7 branch from bd575e7 to b4cb48b Compare October 30, 2026 19:05
paulmann pushed a commit that referenced this pull request Oct 30, 2026
Dependabot opened #1 (actions/checkout 4 -> 7) and #2 (actions/setup-python
5 -> 7) against the previous ci.yml. That file has since been rewritten with a
package and a container job, so merging either PR would conflict and neither
could be reviewed against the current pipeline.

The bump is applied here in one reviewed change instead: every workflow, the
composite action, the PACKAGING guide, the six READMEs, the examples and the
wiki install pages now pin actions/checkout@v7 and actions/setup-python@v7.
The upload/download-artifact steps stay on v4: Dependabot did not propose them,
and they are not part of this change. CI on this commit is the proof that the
majors work together; the two Dependabot pull requests are closed as superseded.
@paulmann

Copy link
Copy Markdown
Owner

Closing as superseded by the reviewed bump in commit 302001c.

ci.yml was rewritten in this release cycle (a package job and a container job were added),
so neither Dependabot branch could be merged without conflicts, and neither could be reviewed
against the current pipeline. The bump is applied in one change instead:

  • actions/checkout: v4 -> v7 (all workflows, action.yml, examples, docs, wiki)
  • actions/setup-python: v5 -> v7 (same set)
  • actions/upload-artifact / download-artifact stay on v4: not part of these two PRs.

Evidence that the majors work together: CI run 41117734551 on 302001c — 5/5 jobs green,
including the container build and the clean-venv package install.

@paulmann paulmann closed this Oct 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant