chore(ci): bump the github-actions group across 1 directory with 8 updates #1621
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…dates Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.0.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.4.2` | `5.5.1` | | [CodSpeedHQ/action](https://github.com/codspeedhq/action) | `3.5.0` | `4.0.1` | | [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `9.21.0` | `10.4.1` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.12.4` | `1.13.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.23.3` | `3.2.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `5.0.0` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `actions/setup-python` from 5.6.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a26af69...e797f83) Updates `codecov/codecov-action` from 5.4.2 to 5.5.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@ad3126e...5a10915) Updates `CodSpeedHQ/action` from 3.5.0 to 4.0.1 - [Release notes](https://github.com/codspeedhq/action/releases) - [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md) - [Commits](CodSpeedHQ/action@0010eb0...653fdc3) Updates `python-semantic-release/python-semantic-release` from 9.21.0 to 10.4.1 - [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases) - [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst) - [Commits](python-semantic-release/python-semantic-release@26bb37c...4d4cb0a) Updates `pypa/gh-action-pypi-publish` from 1.12.4 to 1.13.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@76f52bc...ed0c539) Updates `pypa/cibuildwheel` from 2.23.3 to 3.2.0 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@faf86a6...7c619ef) Updates `actions/download-artifact` from 4.3.0 to 5.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...634f93c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: CodSpeedHQ/action dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: python-semantic-release/python-semantic-release dependency-version: 10.4.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/cibuildwheel dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #1621 +/- ##
=======================================
Coverage 99.76% 99.76%
=======================================
Files 33 33
Lines 3401 3401
Branches 461 461
=======================================
Hits 3393 3393
Misses 5 5
Partials 3 3 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
bdraco
approved these changes
Oct 4, 2025
CodSpeed Performance ReportMerging #1621 will not alter performanceComparing Summary
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 8 updates in the / directory:
4.2.25.0.05.6.06.0.05.4.25.5.13.5.04.0.19.21.010.4.11.12.41.13.02.23.33.2.04.3.05.0.0Updates
actions/checkoutfrom 4.2.2 to 5.0.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)08eba0bPrepare release v4.3.0 (#2237)631c7dcUpdate package dependencies (#2236)8edcb1bUpdate CODEOWNERS for actions (#2224)09d2acaUpdate README.md (#2194)85e6279Adjust positioning of user email note and permissions heading (#2044)009b9aeDocumentation update - add recommended permissions to Readme (#2043)cbb7224Update README.md (#1977)3b9b8c8docs: update README.md (#1971)Updates
actions/setup-pythonfrom 5.6.0 to 6.0.0Release notes
Sourced from actions/setup-python's releases.
Commits
e797f83Upgrade to node 24 (#1164)3d1e2d2Revert "Enhance cache-dependency-path handling to support files outside the w...65b0712Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...5b668cfBump actions/checkout from 4 to 5 (#1181)f62a0e2Change missing cache directory error to warning (#1182)9322b3cUpgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...fbeb884Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)03bb615Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51dAdd version parsing from Pipfile (#1067)3c6f142update documentation (#1156)Updates
codecov/codecov-actionfrom 5.4.2 to 5.5.1Release notes
Sourced from codecov/codecov-action's releases.
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
5a10915chore(release): 5.5.1 (#1873)3e0ce21fix: overwrite pr number on fork (#1871)c4741c8build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1868)17370e8build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 (#1867)18fdacffix: update to use local app/ dir (#1872)206148cdocs: fix typo in README (#1866)3cb13a1Document acodecov-cliversion reference example (#1774)a4803c1build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 (#1861)3139621build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#1833)fdcc847chore(release): 5.5.0 (#1865)Updates
CodSpeedHQ/actionfrom 3.5.0 to 4.0.1Release notes
Sourced from CodSpeedHQ/action's releases.
... (truncated)
Commits
653fdc3Release v4.0.1 🚀4da7be1chore: bump runner version to 4.0.1172d6c5chore: make the comment about input validation more discreted15e1cechore: improve the release script6eeb021Release v4.0.0 🚀74312dachore: improve the release script8a17a35ci: add modes to the matrix8e3f02afeat: make the mode argument required97c7a6fchore: bump runner version to 4.0.08a4caddchore: point the changelog to the runnerUpdates
python-semantic-release/python-semantic-releasefrom 9.21.0 to 10.4.1Release notes
Sourced from python-semantic-release/python-semantic-release's releases.
... (truncated)
Changelog
Sourced from python-semantic-release/python-semantic-release's changelog.
... (truncated)
Commits
4d4cb0a10.4.1b090fa2fix(cmd-version): fix error where--no-tagis not respected (#1329)ccc91c0docs(github-actions): fix recommended upstream detection script's upstream na...3f21f3fdocs(getting-started-guide): remove notice about lack of monorepo support (#1...f77c598ci(deps): bumpactions/setup-python@v5.6.0tov6.0.08fdbc3eci(deps): bumpactions/stale@v9.1.0tov10.0.0a7d0195ci(deps): bumppython-semantic-release/publish-action@v10.3.2tov10.4.0ee2617cci(deps): bumppython-semantic-release@v10.3.2action tov10.4.098ef722docs(CHANGELOG): update hyperlink in v10.4.0's additional info paragraph (#1323)6df5e8710.4.0Updates
pypa/gh-action-pypi-publishfrom 1.12.4 to 1.13.0Release notes
Sourced from pypa/gh-action-pypi-publish's releases.
Commits
ed0c539📦📌 Bump the pinned dependency tree77db1b7Merge branch PR #306, GHSA-vxmw-7h4f-hqxh fix and PR #378 into unstable/v1280b3a1Aliastyping as tin importse380240Useobjectin place oftyping.Anyin annotationse50bff6Deduplicate claim ref lookupdecbc9aHint people to subscribe to #166 for notifications8208ad3Ask not to report bugs with reusable workflowff0fef5🧪 Scope WPS202 suppression to specific files1293b8cUse yamllint disable line length linted01280Linter (different rule)Updates
pypa/cibuildwheelfrom 2.23.3 to 3.2.0Release notes
Sourced from pypa/cibuildwheel's releases.