Skip to content

chore(deps-ci): bump the github-actions group with 7 updates#59

Merged
bdraco merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-2a7939b606
Oct 4, 2025
Merged

chore(deps-ci): bump the github-actions group with 7 updates#59
bdraco merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-2a7939b606

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2025

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 7 updates:

Package From To
actions/checkout 4 5
actions/setup-python 5 6
python-semantic-release/python-semantic-release 9.21.0 10.4.1
pypa/cibuildwheel 2.23.0 3.2.0
actions/download-artifact 4 5
browniebroke/hacktoberfest-labeler-action 2.3.0 2.4.2
tiangolo/issue-manager 0.4.0 0.6.0

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/setup-python from 5 to 6

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v6.0.0

v5.6.0

What's Changed

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

What's Changed

Enhancements:

Bug fixes:

... (truncated)

Commits
  • e797f83 Upgrade to node 24 (#1164)
  • 3d1e2d2 Revert "Enhance cache-dependency-path handling to support files outside the w...
  • 65b0712 Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...
  • 5b668cf Bump actions/checkout from 4 to 5 (#1181)
  • f62a0e2 Change missing cache directory error to warning (#1182)
  • 9322b3c Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...
  • fbeb884 Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)
  • 03bb615 Bump idna from 2.9 to 3.7 in /tests/data (#843)
  • 36da51d Add version parsing from Pipfile (#1067)
  • 3c6f142 update documentation (#1156)
  • Additional commits viewable in compare view

Updates python-semantic-release/python-semantic-release from 9.21.0 to 10.4.1

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v10.4.1 (2025-09-13)

This release is published under the MIT License.

🪲 Bug Fixes

  • cmd-version: Fix error where --no-tag is not respected (PR#1329, b090fa2)

📖 Documentation

  • CHANGELOG: Update hyperlink in v10.4.0's additional info paragraph (PR#1323, 98ef722)

  • getting-started-guide: Remove notice about lack of monorepo support (PR#1327, 3f21f3f)

  • github-actions: Fix recommended upstream detection script's upstream name parsing (PR#1328, ccc91c0)

✅ Resolved Issues

  • #1304: Bug: --no-tag is not working as expected with version command

  • #1326: Monorepo support warning on Getting Started page no longer required

Detailed Changes: v10.4.0...v10.4.1

Installable artifacts are available from:

v10.4.0 (2025-09-08)

This release is published under the MIT License.

✨ Features

  • config: Add conventional-monorepo as valid commit_parser type (PR#1143, e18f866)

  • parser: Add new conventional-commits standard parser for monorepos (PR#1143, e18f866)

📖 Documentation

  • Add configuration guide for monorepo use with PSR (PR#1143, e18f866)

  • commit-parsers: Introduce conventional commit monorepo parser options & features (PR#1143, e18f866)

... (truncated)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

v10.4.1 (2025-09-13)

🪲 Bug Fixes

  • cmd-version: Fix error where --no-tag is not respected, closes [#1304](https://github.com/python-semantic-release/python-semantic-release/issues/1304)_ (PR#1329, b090fa2)

📖 Documentation

  • CHANGELOG: Update hyperlink in v10.4.0's additional info paragraph (PR#1323, 98ef722)

  • getting-started-guide: Remove notice about lack of monorepo support, closes [#1326](https://github.com/python-semantic-release/python-semantic-release/issues/1326)_ (PR#1327, 3f21f3f)

  • github-actions: Fix recommended upstream detection script's upstream name parsing (PR#1328, ccc91c0)

.. _#1304: python-semantic-release/python-semantic-release#1304 .. _#1326: python-semantic-release/python-semantic-release#1326 .. _3f21f3f: python-semantic-release/python-semantic-release@3f21f3f .. _98ef722: python-semantic-release/python-semantic-release@98ef722 .. _b090fa2: python-semantic-release/python-semantic-release@b090fa2 .. _ccc91c0: python-semantic-release/python-semantic-release@ccc91c0 .. _PR#1323: python-semantic-release/python-semantic-release#1323 .. _PR#1327: python-semantic-release/python-semantic-release#1327 .. _PR#1328: python-semantic-release/python-semantic-release#1328 .. _PR#1329: python-semantic-release/python-semantic-release#1329

.. _changelog-v10.4.0:

v10.4.0 (2025-09-08)

✨ Features

  • config: Add conventional-monorepo as valid commit_parser type (PR#1143, e18f866)

  • parser: Add new conventional-commits standard parser for monorepos, closes [#614](https://github.com/python-semantic-release/python-semantic-release/issues/614)_ (PR#1143, e18f866)

📖 Documentation

  • Add configuration guide for monorepo use with PSR (PR#1143, e18f866)

... (truncated)

Commits
  • 4d4cb0a 10.4.1
  • b090fa2 fix(cmd-version): fix error where --no-tag is not respected (#1329)
  • ccc91c0 docs(github-actions): fix recommended upstream detection script's upstream na...
  • 3f21f3f docs(getting-started-guide): remove notice about lack of monorepo support (#1...
  • f77c598 ci(deps): bump actions/setup-python@v5.6.0 to v6.0.0
  • 8fdbc3e ci(deps): bump actions/stale@v9.1.0 to v10.0.0
  • a7d0195 ci(deps): bump python-semantic-release/publish-action@v10.3.2 to v10.4.0
  • ee2617c ci(deps): bump python-semantic-release@v10.3.2 action to v10.4.0
  • 98ef722 docs(CHANGELOG): update hyperlink in v10.4.0's additional info paragraph (#1323)
  • 6df5e87 10.4.0
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 2.23.0 to 3.2.0

Release notes

Sourced from pypa/cibuildwheel's releases.

v3.2.0

  • ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
  • 🛠 Update to CPython 3.14.0rc3 (#2602)
  • 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
  • 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
  • ⚠️ PyPy 3.10 was moved to pypy-eol in the enable option, as it is now end-of-life. (#2521)
  • 📚 Docs improvements (#2574, #2601, #2598)

v3.1.4

  • ✨ Add a --clean-cache command to clean up our cache (#2489)
  • 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
  • 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
  • 🐛 Fix resolution with pyodide-build when dependency-versions is set (#2548)
  • 🐛 Set CMAKE_FIND_ROOT_PATH_MODE_PACKAGE to BOTH on Android (#2547)
  • 🐛 Add patchelf dependency for platforms that can build Android wheels (#2552)
  • 🐛 Ignore empty values for CIBW_ARCHS like most other environment variables (#2541)
  • 💼 The color and suggest_on_error argparse options are now default in 3.14rc1+ (#2554)
  • 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
  • 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
  • 🧪 Split out platforms iOS and Android in our tests (#2519)
  • 🧪 Fix and enable doctests (#2546)
  • 📚 Improve our docs on free-threading (#2549)

v3.1.3

  • 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
  • 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527, #2539)
  • 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)

v3.1.2

  • ⚠️ Add an error if CIBW_FREE_THREADING_SUPPORT is set; you are likely missing 3.13t wheels, please use the enable/CIBW_ENABLE (#2520)
  • 🛠 riscv64 now enabled if you target that architecture, it's now supported on PyPI (#2509)
  • 🛠 Add warning when using cpython-experimental-riscv64 (no longer needed) (#2526, #2528)
  • 🛠 iOS versions bumped, fixing issues with 3.14 (now RC 1) (#2530)
  • 🐛 Fix bug in Android running wheel from our GitHub Action (#2517)
  • 🐛 Fix warning when using test-skip of "*-macosx_universal2:arm64" (#2522)
  • 🐛 Fix incorrect number of wheels reported in logs, again (#2517)
  • 📚 We welcome our Android platform maintainer (#2516)

v3.1.1

  • 🐛 Fix a bug showing an incorrect wheel count at the end of execution, and misrepresenting test-only runs in the GitHub Action summary (#2512)
  • 📚 Docs fix (#2510)

v3.1.0

  • 🌟 CPython 3.14 wheels are now built by default - without the "cpython-prerelease" enable set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.14.0rc1, which is guaranteed to be ABI compatible with the final release. (#2507) Free-threading is no longer experimental in 3.14, so you have to skip it explicitly with 'cp31?t-*' if you don't support it yet. (#2503)
  • 🌟 Adds the ability to build wheels for Android! Set the platform option to android on Linux or macOS to try it out! (#2349)
  • 🌟 Adds Pyodide 0.28, which builds 3.13 wheels (#2487)
  • ✨ Support for 32-bit manylinux_2_28 (now a consistent default) and manylinux_2_34 added (#2500)
  • 🛠 Improved summary, will also use markdown summary output on GHA (#2469)
  • 🛠 The riscv64 images now have a working default (as they are now part of pypy/manylinux), but are still experimental (and behind an enable) since you can't push them to PyPI yet (#2506)
  • 🛠 Fixed a typo in the 3.9 MUSL riscv64 identifier (cp39-musllinux_ricv64 -> cp39-musllinux_riscv64) (#2490)

... (truncated)

Changelog

Sourced from pypa/cibuildwheel's changelog.

v3.2.0

22 September 2025

  • ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
  • 🛠 Update to CPython 3.14.0rc3 (#2602)
  • 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
  • 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
  • ⚠️ PyPy 3.10 was moved to pypy-eol in the enable option, as it is now end-of-life. (#2521)
  • 📚 Docs improvements (#2574, #2601, #2598)

v3.1.4

19 August 2025

  • ✨ Add a --clean-cache command to clean up our cache (#2489)
  • 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
  • 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
  • 🐛 Fix resolution with pyodide-build when dependency-versions is set (#2548)
  • 🐛 Set CMAKE_FIND_ROOT_PATH_MODE_PACKAGE to BOTH on Android (#2547)
  • 🐛 Add patchelf dependency for platforms that can build Android wheels (#2552)
  • 🐛 Ignore empty values for CIBW_ARCHS like most other environment variables (#2541)
  • 💼 The color and suggest_on_error argparse options are now default in 3.14rc1+ (#2554)
  • 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
  • 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
  • 🧪 Split out platforms iOS and Android in our tests (#2519)
  • 🧪 Fix and enable doctests (#2546)
  • 📚 Improve our docs on free-threading (#2549)

v3.1.3

1 August 2025

  • 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
  • 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527, #2539)
  • 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)

v3.1.2

29 July 2025

  • ⚠️ Add an error if CIBW_FREE_THREADING_SUPPORT is set; you are likely missing 3.13t wheels, please use the enable/CIBW_ENABLE (#2520)
  • 🛠 riscv64 now enabled if you target that architecture, it's now supported on PyPI (#2509)
  • 🛠 Add warning when using cpython-experimental-riscv64 (no longer needed) (#2526, #2528)
  • 🛠 iOS versions bumped, fixing issues with 3.14 (now RC 1) (#2530)
  • 🐛 Fix bug in Android running wheel from our GitHub Action (#2517)
  • 🐛 Fix warning when using test-skip of "*-macosx_universal2:arm64" (#2522)
  • 🐛 Fix incorrect number of wheels reported in logs, again (#2517)

... (truncated)

Commits

Updates actions/download-artifact from 4 to 5

Release notes

Sourced from actions/download-artifact's releases.

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist
# Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

</tr></table>

... (truncated)

Commits
  • 634f93c Merge pull request #416 from actions/single-artifact-id-download-path
  • b19ff43 refactor: resolve download path correctly in artifact download tests (mainly ...
  • e262cbe bundle dist
  • bff23f9 update docs
  • fff8c14 fix download path logic when downloading a single artifact by id
  • 448e3f8 Merge pull request #407 from actions/nebuk89-patch-1
  • 47225c4 Update README.md
  • See full diff in compare view

Updates browniebroke/hacktoberfest-labeler-action from 2.3.0 to 2.4.2

Release notes

Sourced from browniebroke/hacktoberfest-labeler-action's releases.

v2.4.2 (2025-10-03)

This release is published under the MIT License.

Bug Fixes

  • release: Fix updating of git tags (a82d64c)

Detailed Changes: v2.4.1...v2.4.2

v2.4.1 (2025-10-03)

This release is published under the MIT License.

Bug Fixes

  • Force update major tag during release (791ebe5)

  • deps: Update how deps are specified (1e7e741)

Detailed Changes: v2.4.0...v2.4.1

v2.4.0 (2025-10-01)

This release is published under the MIT License.

Bug Fixes

  • Use SPDX expression for license (#829, d501963)

  • deps: Update dependency environs to v10 (#486, 359b39d)

  • deps: Update dependency environs to v10.1.0 (6f8323b)

  • deps: Update dependency environs to v10.2.0 (a97426f)

  • deps: Update dependency environs to v10.3.0 (b8a0651)

  • deps: Update dependency environs to v11 (#526, b4f40bd)

  • deps: Update dependency environs to v11.1.0 (#658, 14a010c)

  • deps: Update dependency environs to v11.2.0 (#659, 06eacb1)

  • deps: Update dependency environs to v11.2.1 (#662, ed172d8)

... (truncated)

Changelog

Sourced from browniebroke/hacktoberfest-labeler-action's changelog.

v2.4.2 (2025-10-03)

Bug fixes

  • Fix updating of git tags (a82d64c)

v2.4.1 (2025-10-03)

Bug fixes

  • Update how deps are specified (1e7e741)
  • Force update major tag during release (791ebe5)

v2.4.0 (2025-10-01)

Bug fixes

  • Update dependency environs to v14 (ac817d7)
  • Use spdx expression for license (d501963)
  • Update dependency environs to v12 (1a6d3e7)
  • Update dependency environs to v11.2.1 (ed172d8)
  • Update dependency environs to v11.2.0 (06eacb1)
  • Update dependency environs to v11.1.0 (14a010c)
  • Update dependency pygithub to v2.5.0 (f2413a5)
  • Update dependency pygithub to v2.4.0 (1a426c0)
  • Update dependency pygithub to v2.3.0 (2668f70)
  • Update dependency environs to v11 (b4f40bd)
  • Update dependency pygithub to v2.2.0 (e92cdcc)
  • Update dependency environs to v10.3.0 (b8a0651)
  • Update dependency environs to v10.2.0 (a97426f)
  • Update dependency environs to v10.1.0 (6f8323b)
  • Update dependency environs to v10 (359b39d)
  • Update dependency pygithub to v2 (5bc7f9a)
  • Update dependency pygithub to v1.59.1 (abc42a0)
  • Update dependency pygithub to v1.59.0 (3538785)
  • Update dependency pygithub to v1.58.2 (174c928)
  • Update dependency pygithub to v1.58.1 (84f09dc)

Features

@dependabot
chore(deps-ci): bump the github-actions group with 7 updates
c2f40bf 
Bumps the github-actions group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `5` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` |
| [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `9.21.0` | `10.4.1` |
| [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.23.0` | `3.2.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `5` |
| [browniebroke/hacktoberfest-labeler-action](https://github.com/browniebroke/hacktoberfest-labeler-action) | `2.3.0` | `2.4.2` |
| [tiangolo/issue-manager](https://github.com/tiangolo/issue-manager) | `0.4.0` | `0.6.0` |


Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

Updates `python-semantic-release/python-semantic-release` from 9.21.0 to 10.4.1
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@v9.21.0...v10.4.1)

Updates `pypa/cibuildwheel` from 2.23.0 to 3.2.0
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v2.23.0...v3.2.0)

Updates `actions/download-artifact` from 4 to 5
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

Updates `browniebroke/hacktoberfest-labeler-action` from 2.3.0 to 2.4.2
- [Release notes](https://github.com/browniebroke/hacktoberfest-labeler-action/releases)
- [Changelog](https://github.com/browniebroke/hacktoberfest-labeler-action/blob/main/CHANGELOG.md)
- [Commits](browniebroke/hacktoberfest-labeler-action@v2.3.0...v2.4.2)

Updates `tiangolo/issue-manager` from 0.4.0 to 0.6.0
- [Release notes](https://github.com/tiangolo/issue-manager/releases)
- [Commits](tiangolo/issue-manager@0.4.0...0.6.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: python-semantic-release/python-semantic-release
  dependency-version: 10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: pypa/cibuildwheel
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: browniebroke/hacktoberfest-labeler-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: tiangolo/issue-manager
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 4, 2025
bdraco
bdraco reviewed Oct 4, 2025
View reviewed changes
Comment thread .github/workflows/ci.yml Outdated
@bdraco bdraco merged commit a4c6556 into main Oct 4, 2025
29 of 30 checks passed
@bdraco bdraco deleted the dependabot/github_actions/github-actions-2a7939b606 branch October 4, 2025 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bdraco bdraco bdraco approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bdraco