chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 - #111
chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0#111dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@ece7cb0...5fda3b9) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Triage: the cheapest of the open bumps — one gate, no payload cycleUnlike #33 and #110, this PR touches only unmanaged workflows ( The single failure is the reviewed-pin allowlist in the "actions/setup-python": ("ece7cb06caefa5fff74198d8649806c4678c61a1", "v6"),That gate is intentional — external action pins are reviewed before they move, and Dependabot moves them without the review. Updating the tuple to the new SHA with a Before blessing the pin setup-python v6 → v7 is a major bump. Worth confirming against its changelog that default Python resolution and caching are unchanged for this repo's usage, since Left open deliberately, but flagging that this one is independently mergeable once the pin is reviewed — it does not need to wait on the payload version cycle that #33, #110, and #125 share. Automated triage; no code changed. |
1 participant
Bumps actions/setup-python from 6.3.0 to 7.0.0.
Release notes
Sourced from actions/setup-python's releases.
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)