Skip to content

Update GitHub Actions dependencies - #814

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-dependencies
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions-dependencies

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/setup-python action minor v7.0.0 → v7.1.0
astral-sh/setup-uv action patch v10.3.0 → v10.3.2 v10.3.3
astral-sh/uv patch 0.13.5 → 0.13.6 0.13.7
pypa/gh-action-pypi-publish action patch v1.14.2 → v1.14.3

Release Notes

actions/setup-python

v7.1.0

Compare Source

What's Changed

Enhancements
Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

astral-sh/setup-uv

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates
astral-sh/uv

v0.13.6

Compare Source

Released on 2026-10-26.

Enhancements
  • Accept an empty UV_RUN_RECURSION_DEPTH as zero and report invalid values consistently (#​22814)
  • Explain how to add project metadata when uv init finds a pyproject.toml without a [project] table (#​22916)
Python
  • Add CPython 3.11.18, 3.12.16, 3.13.18, 3.14.10, and 3.15.2 (#​22938)
Preview features
  • Detect NVIDIA GPU capabilities when selecting compatible wheel variants with wheel-variants (#​22690)
  • Nest each module's owners in an object in uv workspace metadata output (#​22638)
  • Report the unsupported properties required by an incompatible wheel variant (#​22719)
Performance
Bug fixes
  • Prevent uv run --active --script and uv sync --active --script from deleting non-virtual-environment directories (#​21464)
  • Use AMD64 for platform_machine when resolving for x86-64 Windows (#​22935)
  • Preserve free-threaded and other non-default variants in uv python upgrade (#​22836)
  • Allow uv init --no-package and uv init --script when UV_INIT_BUILD_BACKEND is set (#​22907)
  • Prevent panics when rendering containment markers with local versions (#​22815)
Documentation
  • Update the Docker guide and reproduction examples to use uv 0.13.5 (#​22867)
pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov

codecov Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.22%. Comparing base (cfde842) to head (b119bfe).

@@            Coverage Diff             @@
##             main     #814      +/-   ##
==========================================
- Coverage   97.26%   97.22%   -0.04%     
==========================================
  Files           3        3              
  Lines        7859     7859              
==========================================
- Hits         7644     7641       -3     
- Misses        215      218       +3     
Flag Coverage Δ
3.10 88.85% <ø> (ø)
3.10.4 ?
3.11 88.02% <ø> (ø)
3.11.0 ?
3.12 87.96% <ø> (ø)
3.12.0 ?
3.13 83.39% <ø> (ø)
3.13.0 ?
3.14 79.53% <ø> (ø)
3.9 ?
3.9.12 ?
pypy3.10 88.68% <ø> (ø)
pypy3.11 87.88% <ø> (ø)
pypy3.9 89.37% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/github-actions-dependencies branch from cd59c07 to b119bfe Compare November 3, 2026 03:39

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants