Repository navigation
Bump the github group across 1 directory with 3 updates - #343
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
changed the title
7b6cd4d to
df065e7
Compare
🟡 Waiting for changesLast updated: 2026-10-08 00:02 UTC |
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #343 is stale: the branch was last updated 2026-08-01. I didn't do a full review. Please run @dependabot rebase.
Packages (GitHub Actions, CI-only):
actions/checkout6.0.3 → 7.0.1 (major)actions/cache5.0.5 → 6.1.0 (major)actions/setup-python6.2.0 → 7.0.0 (major)
Breaking changes:
- checkout v7 blocks checking out fork PRs under
pull_request_target/workflow_run. - That doesn't affect us. Our five workflows trigger only on
push,pull_requestorrelease. - I haven't checked the other changelogs yet. I'll do that after the rebase.
Security fixes / peer deps: none noted.
CI: passing, apart from automation.yml. It fails with the known shared-automation app-token error, unrelated to this bump.
[blocking] Rebase first. The CI results and resolved versions are two months old. They may not match current upstream releases.
Written by rtibblesbot, an LLM-based coding agent.
|
@dependabot rebase |
Bumps the github group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [actions/setup-python](https://github.com/actions/setup-python). Updates `actions/checkout` from 6.0.3 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6.0.3...v7.0.1) Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v5.0.5...v6.1.0) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6.2.0...v7.0.0) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github ... Signed-off-by: dependabot[bot] <support@github.com>
df065e7 to
c64a3fa
Compare
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
PR #343: safe to merge; 1 of 1 prior findings resolved.
CI-only GitHub Actions bumps, all major:
actions/checkoutv6.0.3 → v7.0.1actions/cachev5.0.5 → v6.1.0actions/setup-pythonv6.2.0 → v7.0.0
Breaking changes don't affect the changed workflows:
- checkout v7 blocks fork-PR checkout under
pull_request_target/workflow_run. The changed workflows trigger only onpush/pull_request/release. - setup-python v7 removes the unused
pip-installinput. - setup-python v7 drops EOL Pythons. The Windows 3.8 job still passes.
- All three migrate to ESM internally, with no input changes.
Security fixes / peer deps: none.
CI passes on c64a3fa, including buster containers and SQLite migrations. check-docs.yml and python-publish.yml didn't run. They use the same checkout inputs other jobs exercise.
Prior-finding status
RESOLVED — (PR-level) — Rebase first; stale CI and versions
Written by rtibblesbot, an LLM-based coding agent.
|
Quick check on rtibblesbot's review of this PR: react 👍 helpful · 😕 mixed · 👎 not helpful. Reply with anything specific. |
3 participants
Bumps the github group with 3 updates in the / directory: actions/checkout, actions/cache and actions/setup-python.
Updates
actions/checkoutfrom 6.0.3 to 7.0.1Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/cachefrom 5.0.5 to 6.1.0Release notes
Sourced from actions/cache's releases.
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
55cc834Merge pull request #1768 from jasongin/readonly-cached8cd72fBump@actions/cacheto v6.1.0 - handle cache write error due to RO token2c8a9bdMerge pull request #1760 from actions/samirat/esm_migration_and_package_updatee9b91fdPrettier fixese4884b8Rebuild dist10baf01Fixed licensese39b386Fix test mock return orderb692820PR feedback6074912Rebuild dist bundles as ESM to match type:module5a912e8Fix lint and jest issuesUpdates
actions/setup-pythonfrom 6.2.0 to 7.0.0Release notes
Sourced from actions/setup-python's releases.
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)ece7cb0Fix pip cache error handling on Windows. (#1040)1d18d7aUpdate advanced-usage.md (#811)