Upgrade @actions dependencies to Node 24 compatible versions - #1259

salmanmkc · 2025-12-16T16:25:21Z

Summary

Upgrades the @actions dependencies to their latest major versions for Node 24 compatibility.

Package Upgrades

Package	From	To
`@actions/cache`	^4.0.3	^5.0.1
`@actions/core`	^1.10.0	^2.0.1
`@actions/exec`	^1.1.0	^2.0.0
`@actions/http-client`	^2.2.3	^3.0.0
`@actions/io`	^1.0.2	^2.0.0

License Updates

Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax)
Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other')

Additional Changes

Ran npm audit fix to resolve vulnerabilities

Testing

All 206 tests pass
licensed cache && licensed status passes with 0 errors
Build completes successfully

Upgrades the following @actions packages: - @actions/cache: ^4.0.3 → ^5.0.1 - @actions/core: ^1.10.0 → ^2.0.1 - @actions/exec: ^1.1.0 → ^2.0.0 - @actions/http-client: ^2.2.3 → ^3.0.0 - @actions/io: ^1.0.2 → ^2.0.0 License updates: - Add blueoak-1.0.0 to allowed licenses (new transitive dependency: sax) - Add @actions/http-client to reviewed licenses (MIT licensed but detected as 'other') Also ran npm audit fix to resolve vulnerabilities.

Copilot

Pull request overview

This PR upgrades five @actions packages to their latest major versions to achieve Node 24 compatibility. As a result of the dependency upgrades, several transitive dependencies are removed or updated, and license configuration files are updated accordingly.

Upgraded core GitHub Actions toolkit packages from v1/v2/v4 to v2/v3/v5
Updated license configuration to accommodate new dependencies
Resolved security vulnerabilities via npm audit fix

Reviewed changes

Copilot reviewed 67 out of 75 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updated 5 @actions packages to Node 24 compatible versions
.licensed.yml	Added blueoak-1.0.0 license and @actions/http-client to reviewed list
.licenses/npm/*.dep.yml (removed)	Removed license files for dependencies no longer in use
.licenses/npm/*.dep.yml (added)	Added license files for new transitive dependencies
.licenses/npm/*.dep.yml (modified)	Updated license files for existing dependencies with version changes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

xavier2k6 · 2026-01-17T15:31:40Z

Closes #1208.

Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `6.1.0` | `6.2.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.2` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.1.0` | `5.2.0` | | [anchore/scan-action](https://github.com/anchore/scan-action) | `7.2.3` | `7.3.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.29` | `1.0.31` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.0.0` | `8.1.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.283.0` | `1.286.0` | Updates `actions/setup-python` from 6.1.0 to 6.2.0 Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.2.0 > ------ > > What's Changed > -------------- > > ### Dependency Upgrades > > * Upgrade dependencies to Node 24 compatible versions by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1259](https://redirect.github.com/actions/setup-python/pull/1259) > * Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1253](https://redirect.github.com/actions/setup-python/pull/1253) and [actions/setup-python#1264](https://redirect.github.com/actions/setup-python/pull/1264) > > **Full Changelog**: <actions/setup-python@v6...v6.2.0> Commits * [`a309ff8`](actions/setup-python@a309ff8) Bump urllib3 from 2.6.0 to 2.6.3 in /**tests**/data ([#1264](https://redirect.github.com/actions/setup-python/issues/1264)) * [`bfe8cc5`](actions/setup-python@bfe8cc5) Upgrade [`@actions`](https://github.com/actions) dependencies to Node 24 compatible versions ([#1259](https://redirect.github.com/actions/setup-python/issues/1259)) * [`4f41a90`](actions/setup-python@4f41a90) Bump urllib3 from 2.5.0 to 2.6.0 in /**tests**/data ([#1253](https://redirect.github.com/actions/setup-python/issues/1253)) * See full diff in [compare view](actions/setup-python@83679a8...a309ff8) Updates `actions/cache` from 5.0.1 to 5.0.2 Release notes *Sourced from [actions/cache's releases](https://github.com/actions/cache/releases).* > v.5.0.2 > ------- > > v5.0.2 > ====== > > What's Changed > -------------- > > When creating cache entries, 429s returned from the cache service will not be retried. Changelog *Sourced from [actions/cache's changelog](https://github.com/actions/cache/blob/main/RELEASES.md).* > Releases > ======== > > Changelog > --------- > > ### 5.0.2 > > * Bump `@actions/cache` to v5.0.3 [#1692](https://redirect.github.com/actions/cache/pull/1692) > > ### 5.0.1 > > * Update `@azure/storage-blob` to `^12.29.1` via `@actions/cache@5.0.1` [#1685](https://redirect.github.com/actions/cache/pull/1685) > > ### 5.0.0 > > > [!IMPORTANT] > > `actions/cache@v5` runs on the Node.js 24 runtime and requires a minimum Actions Runner version of `2.327.1`. > > If you are using self-hosted runners, ensure they are updated before upgrading. > > ### 4.3.0 > > * Bump `@actions/cache` to [v4.1.0](https://redirect.github.com/actions/toolkit/pull/2132) > > ### 4.2.4 > > * Bump `@actions/cache` to v4.0.5 > > ### 4.2.3 > > * Bump `@actions/cache` to v4.0.3 (obfuscates SAS token in debug logs for cache entries) > > ### 4.2.2 > > * Bump `@actions/cache` to v4.0.2 > > ### 4.2.1 > > * Bump `@actions/cache` to v4.0.1 > > ### 4.2.0 > > TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. [actions/cache](https://github.com/actions/cache) now integrates with the new cache service (v2) APIs. > > The new service will gradually roll out as of **February 1st, 2025**. The legacy service will also be sunset on the same date. Changes in these release are **fully backward compatible**. > > **We are deprecating some versions of this action**. We recommend upgrading to version `v4` or `v3` as soon as possible before **February 1st, 2025.** (Upgrade instructions below). > > If you are using pinned SHAs, please use the SHAs of versions `v4.2.0` or `v3.4.0` > > If you do not upgrade, all workflow runs using any of the deprecated [actions/cache](https://github.com/actions/cache) will fail. ... (truncated) Commits * [`8b402f5`](actions/cache@8b402f5) Merge pull request [#1692](https://redirect.github.com/actions/cache/issues/1692) from GhadimiR/main * [`304ab5a`](actions/cache@304ab5a) license for httpclient * [`609fc19`](actions/cache@609fc19) Update licensed record for cache * [`b22231e`](actions/cache@b22231e) Build * [`93150cd`](actions/cache@93150cd) Add PR link to releases * [`9b8ca9f`](actions/cache@9b8ca9f) Bump actions/cache to 5.0.3 * See full diff in [compare view](actions/cache@9255dc7...8b402f5) Updates `actions/setup-java` from 5.1.0 to 5.2.0 Release notes *Sourced from [actions/setup-java's releases](https://github.com/actions/setup-java/releases).* > v5.2.0 > ------ > > What's Changed > -------------- > > ### Enhancement > > * Retry on HTTP 522 Connection timed out by [`@findepi`](https://github.com/findepi) in [actions/setup-java#964](https://redirect.github.com/actions/setup-java/pull/964) > > ### Documentation Changes > > * Update gradle caching by [`@priya-kinthali`](https://github.com/priya-kinthali) in [actions/setup-java#972](https://redirect.github.com/actions/setup-java/pull/972) > * Update checkout to v6 by [`@mahabaleshwars`](https://github.com/mahabaleshwars) in [actions/setup-java#973](https://redirect.github.com/actions/setup-java/pull/973) > > ### Dependency Updates > > * Upgrade `@actions/cache` to v5 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-java#968](https://redirect.github.com/actions/setup-java/pull/968) > * Upgrade actions/checkout from 5 to 6 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-java#961](https://redirect.github.com/actions/setup-java/pull/961) > > New Contributors > ---------------- > > * [`@findepi`](https://github.com/findepi) made their first contribution in [actions/setup-java#964](https://redirect.github.com/actions/setup-java/pull/964) > > **Full Changelog**: <actions/setup-java@v5...v5.2.0> Commits * [`be666c2`](actions/setup-java@be666c2) Chore: Version Update and Checkout Update to v6 ([#973](https://redirect.github.com/actions/setup-java/issues/973)) * [`f7a6fef`](actions/setup-java@f7a6fef) Bump actions/checkout from 5 to 6 ([#961](https://redirect.github.com/actions/setup-java/issues/961)) * [`d81c4e4`](actions/setup-java@d81c4e4) Upgrade `@actions/cache` to v5 ([#968](https://redirect.github.com/actions/setup-java/issues/968)) * [`1b1bbe1`](actions/setup-java@1b1bbe1) readme update ([#972](https://redirect.github.com/actions/setup-java/issues/972)) * [`5d7b214`](actions/setup-java@5d7b214) Retry on HTTP 522 Connection timed out ([#964](https://redirect.github.com/actions/setup-java/issues/964)) * See full diff in [compare view](actions/setup-java@f2beeb2...be666c2) Updates `anchore/scan-action` from 7.2.3 to 7.3.0 Release notes *Sourced from [anchore/scan-action's releases](https://github.com/anchore/scan-action/releases).* > v7.3.0 > ------ > > New in scan-action v7.3.0 > ------------------------- > > ⬆️ Dependencies > --------------- > > * chore(deps): bump `@actions/tool-cache` from 2.0.2 to 3.0.0 ([#567](https://redirect.github.com/anchore/scan-action/issues/567)) [[`@dependabot`](https://github.com/dependabot)] > * chore(deps): bump `@actions/cache` from 5.0.1 to 5.0.2 ([#568](https://redirect.github.com/anchore/scan-action/issues/568)) [[`@dependabot`](https://github.com/dependabot)] > * chore(deps): bump `@actions/core` from 2.0.1 to 2.0.2 ([#569](https://redirect.github.com/anchore/scan-action/issues/569)) [[`@dependabot`](https://github.com/dependabot)] > * chore(deps-dev): bump tar from 7.5.2 to 7.5.3 ([#574](https://redirect.github.com/anchore/scan-action/issues/574)) [[`@dependabot`](https://github.com/dependabot)] > * chore(deps): update Grype to v0.105.0 ([#572](https://redirect.github.com/anchore/scan-action/issues/572)) [[`@anchore-actions-token-generator`](https://github.com/anchore-actions-token-generator)[bot]] Commits * [`0d444ed`](anchore/scan-action@0d444ed) chore: update release drafter permissions ([#578](https://redirect.github.com/anchore/scan-action/issues/578)) * [`f9bddf7`](anchore/scan-action@f9bddf7) chore: update release drafter to include appropriate dependencies ([#577](https://redirect.github.com/anchore/scan-action/issues/577)) * [`ffeb136`](anchore/scan-action@ffeb136) chore(deps): bump `@actions/tool-cache` from 2.0.2 to 3.0.0 ([#567](https://redirect.github.com/anchore/scan-action/issues/567)) * [`32bbf28`](anchore/scan-action@32bbf28) chore(deps): bump `@actions/cache` from 5.0.1 to 5.0.2 ([#568](https://redirect.github.com/anchore/scan-action/issues/568)) * [`5f513a1`](anchore/scan-action@5f513a1) chore(deps): bump `@actions/core` from 2.0.1 to 2.0.2 ([#569](https://redirect.github.com/anchore/scan-action/issues/569)) * [`02ce04c`](anchore/scan-action@02ce04c) chore(deps-dev): bump tar from 7.5.2 to 7.5.3 ([#574](https://redirect.github.com/anchore/scan-action/issues/574)) * [`6ac601c`](anchore/scan-action@6ac601c) Chore better zizmor ([#573](https://redirect.github.com/anchore/scan-action/issues/573)) * [`e2f9cdb`](anchore/scan-action@e2f9cdb) chore(deps): update Grype to v0.105.0 ([#572](https://redirect.github.com/anchore/scan-action/issues/572)) * [`cddc16d`](anchore/scan-action@cddc16d) chore(deps): bump actions/setup-node from 6.1.0 to 6.2.0 ([#571](https://redirect.github.com/anchore/scan-action/issues/571)) * See full diff in [compare view](anchore/scan-action@62b74fb...0d444ed) Updates `anthropics/claude-code-action` from 1.0.29 to 1.0.31 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.31 > ------- > > What's Changed > -------------- > > * fix: ensure SSH signing key has trailing newline by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#834](https://redirect.github.com/anthropics/claude-code-action/pull/834) > * Consolidate CI workflows into a single entry point by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#836](https://redirect.github.com/anthropics/claude-code-action/pull/836) > * chore: bump Bun to 1.3.6 and setup-bun action to v2.1.2 by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#848](https://redirect.github.com/anthropics/claude-code-action/pull/848) > * refactor: remove CLI path, use Agent SDK exclusively by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#849](https://redirect.github.com/anthropics/claude-code-action/pull/849) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.31> > > v1.0.30 > ------- > > What's Changed > -------------- > > * fix: parse ALL --allowed-tools flags, not just the first one by [`@AlexanderBartash`](https://github.com/AlexanderBartash) in [anthropics/claude-code-action#801](https://redirect.github.com/anthropics/claude-code-action/pull/801) > * docs: clarify that Claude does not auto-create PRs by default by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#824](https://redirect.github.com/anthropics/claude-code-action/pull/824) > * fix: add checkHumanActor to agent mode by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#826](https://redirect.github.com/anthropics/claude-code-action/pull/826) > * chore: comment out release-base-action job in release workflow by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#833](https://redirect.github.com/anthropics/claude-code-action/pull/833) > > New Contributors > ---------------- > > * [`@AlexanderBartash`](https://github.com/AlexanderBartash) made their first contribution in [anthropics/claude-code-action#801](https://redirect.github.com/anthropics/claude-code-action/pull/801) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.30> Commits * [`2316a9a`](anthropics/claude-code-action@2316a9a) chore: bump Claude Code to 2.1.15 and Agent SDK to 0.2.15 * [`49cfcf8`](anthropics/claude-code-action@49cfcf8) refactor: remove CLI path, use Agent SDK exclusively ([#849](https://redirect.github.com/anthropics/claude-code-action/issues/849)) * [`e208124`](anthropics/claude-code-action@e208124) chore: bump Bun to 1.3.6 and setup-bun action to v2.1.2 ([#848](https://redirect.github.com/anthropics/claude-code-action/issues/848)) * [`ba60ef7`](anthropics/claude-code-action@ba60ef7) Consolidate CI workflows into a single entry point ([#836](https://redirect.github.com/anthropics/claude-code-action/issues/836)) * [`f3c892c`](anthropics/claude-code-action@f3c892c) chore: bump Claude Code to 2.1.11 and Agent SDK to 0.2.11 * [`6e896a0`](anthropics/claude-code-action@6e896a0) fix: ensure SSH signing key has trailing newline ([#834](https://redirect.github.com/anthropics/claude-code-action/issues/834)) * [`a017b83`](anthropics/claude-code-action@a017b83) chore: comment out release-base-action job in release workflow ([#833](https://redirect.github.com/anthropics/claude-code-action/issues/833)) * [`75f52e5`](anthropics/claude-code-action@75f52e5) chore: bump Claude Code to 2.1.9 and Agent SDK to 0.2.9 * [`1bbc9e7`](anthropics/claude-code-action@1bbc9e7) fix: add checkHumanActor to agent mode ([#826](https://redirect.github.com/anthropics/claude-code-action/issues/826)) * [`625ea15`](anthropics/claude-code-action@625ea15) docs: clarify that Claude does not auto-create PRs by default ([#824](https://redirect.github.com/anthropics/claude-code-action/issues/824)) * Additional commits viewable in [compare view](anthropics/claude-code-action@1b8ee3b...2316a9a) Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0 Release notes *Sourced from [peter-evans/create-pull-request's releases](https://github.com/peter-evans/create-pull-request/releases).* > Create Pull Request v8.1.0 > -------------------------- > > What's Changed > -------------- > > * README.md: bump given GitHub actions to their latest versions by [`@deining`](https://github.com/deining) in [peter-evans/create-pull-request#4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) > * build(deps): bump the github-actions group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4273](https://redirect.github.com/peter-evans/create-pull-request/pull/4273) > * build(deps-dev): bump the npm group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4274](https://redirect.github.com/peter-evans/create-pull-request/pull/4274) > * build(deps-dev): bump undici from 6.22.0 to 6.23.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4284](https://redirect.github.com/peter-evans/create-pull-request/pull/4284) > * Update distribution by [`@actions-bot`](https://github.com/actions-bot) in [peter-evans/create-pull-request#4289](https://redirect.github.com/peter-evans/create-pull-request/pull/4289) > * fix: Handle remote prune failures gracefully on self-hosted runners by [`@peter-evans`](https://github.com/peter-evans) in [peter-evans/create-pull-request#4295](https://redirect.github.com/peter-evans/create-pull-request/pull/4295) > * feat: add `@octokit/plugin-retry` to handle retriable server errors by [`@peter-evans`](https://github.com/peter-evans) in [peter-evans/create-pull-request#4298](https://redirect.github.com/peter-evans/create-pull-request/pull/4298) > > New Contributors > ---------------- > > * [`@deining`](https://github.com/deining) made their first contribution in [peter-evans/create-pull-request#4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) > > **Full Changelog**: <peter-evans/create-pull-request@v8.0.0...v8.1.0> Commits * [`c0f553f`](peter-evans/create-pull-request@c0f553f) feat: add `@octokit/plugin-retry` to handle retriable server errors ([#4298](https://redirect.github.com/peter-evans/create-pull-request/issues/4298)) * [`7000124`](peter-evans/create-pull-request@7000124) fix: Handle remote prune failures gracefully ([#4295](https://redirect.github.com/peter-evans/create-pull-request/issues/4295)) * [`34aa40e`](peter-evans/create-pull-request@34aa40e) build: update distribution ([#4289](https://redirect.github.com/peter-evans/create-pull-request/issues/4289)) * [`641099d`](peter-evans/create-pull-request@641099d) build(deps-dev): bump undici from 6.22.0 to 6.23.0 ([#4284](https://redirect.github.com/peter-evans/create-pull-request/issues/4284)) * [`2271f1d`](peter-evans/create-pull-request@2271f1d) build(deps-dev): bump the npm group with 2 updates ([#4274](https://redirect.github.com/peter-evans/create-pull-request/issues/4274)) * [`437c31a`](peter-evans/create-pull-request@437c31a) build(deps): bump the github-actions group with 2 updates ([#4273](https://redirect.github.com/peter-evans/create-pull-request/issues/4273)) * [`0979079`](peter-evans/create-pull-request@0979079) docs: update readme * [`5b751cd`](peter-evans/create-pull-request@5b751cd) README.md: bump given GitHub actions to their latest versions ([#4265](https://redirect.github.com/peter-evans/create-pull-request/issues/4265)) * See full diff in [compare view](peter-evans/create-pull-request@98357b1...c0f553f) Updates `ruby/setup-ruby` from 1.283.0 to 1.286.0 Release notes *Sourced from [ruby/setup-ruby's releases](https://github.com/ruby/setup-ruby/releases).* > v1.286.0 > -------- > > What's Changed > -------------- > > * Add truffleruby-33.0.1,truffleruby+graalvm-33.0.1 by [`@ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#864](https://redirect.github.com/ruby/setup-ruby/pull/864) > > **Full Changelog**: <ruby/setup-ruby@v1.285.0...v1.286.0> > > v1.285.0 > -------- > > What's Changed > -------------- > > * Convert to String earlier in generate-windows-versions.rb by [`@eregon`](https://github.com/eregon) in [ruby/setup-ruby#862](https://redirect.github.com/ruby/setup-ruby/pull/862) > * Update all dependencies to latest by [`@eregon`](https://github.com/eregon) in [ruby/setup-ruby#863](https://redirect.github.com/ruby/setup-ruby/pull/863) > > **Full Changelog**: <ruby/setup-ruby@v1.284.0...v1.285.0> > > v1.284.0 > -------- > > What's Changed > -------------- > > * Fix compatibility to ruby-3.2 by [`@larskanis`](https://github.com/larskanis) in [ruby/setup-ruby#861](https://redirect.github.com/ruby/setup-ruby/pull/861) > > **Full Changelog**: <ruby/setup-ruby@v1.283.0...v1.284.0> Commits * [`90be115`](ruby/setup-ruby@90be115) Add truffleruby-33.0.1,truffleruby+graalvm-33.0.1 * [`e69dcf3`](ruby/setup-ruby@e69dcf3) Update all dependencies to latest * [`9f55308`](ruby/setup-ruby@9f55308) Convert to String earlier in generate-windows-versions.rb * [`80740b3`](ruby/setup-ruby@80740b3) Add new RubyInstaller releases 4.0.1-1 and 3.2.10-1 * [`5fcbc91`](ruby/setup-ruby@5fcbc91) Fix compatibility to ruby-3.2 * See full diff in [compare view](ruby/setup-ruby@708024e...90be115) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.1.0 to 6.2.0. Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.2.0 > ------ > > What's Changed > -------------- > > ### Dependency Upgrades > > * Upgrade dependencies to Node 24 compatible versions by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1259](https://redirect.github.com/actions/setup-python/pull/1259) > * Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1253](https://redirect.github.com/actions/setup-python/pull/1253) and [actions/setup-python#1264](https://redirect.github.com/actions/setup-python/pull/1264) > > **Full Changelog**: <actions/setup-python@v6...v6.2.0> Commits * [`a309ff8`](actions/setup-python@a309ff8) Bump urllib3 from 2.6.0 to 2.6.3 in /**tests**/data ([#1264](https://redirect.github.com/actions/setup-python/issues/1264)) * [`bfe8cc5`](actions/setup-python@bfe8cc5) Upgrade [`@actions`](https://github.com/actions) dependencies to Node 24 compatible versions ([#1259](https://redirect.github.com/actions/setup-python/issues/1259)) * [`4f41a90`](actions/setup-python@4f41a90) Bump urllib3 from 2.5.0 to 2.6.0 in /**tests**/data ([#1253](https://redirect.github.com/actions/setup-python/issues/1253)) * See full diff in [compare view](actions/setup-python@83679a8...a309ff8) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/setup-python&package-manager=github\_actions&previous-version=6.1.0&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Dependency Upgrades Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259 Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

quanghuynh10111-png · 2026-02-11T20:47:44Z

Uploading Backlog-View1.tsv…

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.6.0 to 6.2.0. Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.2.0 > ------ > > What's Changed > -------------- > > ### Dependency Upgrades > > * Upgrade dependencies to Node 24 compatible versions by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1259](https://redirect.github.com/actions/setup-python/pull/1259) > * Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1253](https://redirect.github.com/actions/setup-python/pull/1253) and [actions/setup-python#1264](https://redirect.github.com/actions/setup-python/pull/1264) > > **Full Changelog**: <actions/setup-python@v6...v6.2.0> > > v6.1.0 > ------ > > What's Changed > -------------- > > ### Enhancements: > > * Add support for `pip-install` input by [`@gowridurgad`](https://github.com/gowridurgad) in [actions/setup-python#1201](https://redirect.github.com/actions/setup-python/pull/1201) > * Add graalpy early-access and windows builds by [`@timfel`](https://github.com/timfel) in [actions/setup-python#880](https://redirect.github.com/actions/setup-python/pull/880) > > ### Dependency and Documentation updates: > > * Enhanced wording and updated example usage for `allow-prereleases` by [`@yarikoptic`](https://github.com/yarikoptic) in [actions/setup-python#979](https://redirect.github.com/actions/setup-python/pull/979) > * Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1139](https://redirect.github.com/actions/setup-python/pull/1139) > * Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1094](https://redirect.github.com/actions/setup-python/pull/1094) > * Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1199](https://redirect.github.com/actions/setup-python/pull/1199) > * Upgrade requests from 2.32.2 to 2.32.4 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1130](https://redirect.github.com/actions/setup-python/pull/1130) > * Upgrade prettier from 3.5.3 to 3.6.2 by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1234](https://redirect.github.com/actions/setup-python/pull/1234) > * Upgrade `@types/node` from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1235](https://redirect.github.com/actions/setup-python/pull/1235) > > New Contributors > ---------------- > > * [`@yarikoptic`](https://github.com/yarikoptic) made their first contribution in [actions/setup-python#979](https://redirect.github.com/actions/setup-python/pull/979) > > **Full Changelog**: <actions/setup-python@v6...v6.1.0> > > v6.0.0 > ------ > > What's Changed > -------------- > > ### Breaking Changes > > * Upgrade to node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1164](https://redirect.github.com/actions/setup-python/pull/1164) > > Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) > > ### Enhancements: > > * Add support for `pip-version` by [`@priyagupta108`](https://github.com/priyagupta108) in [actions/setup-python#1129](https://redirect.github.com/actions/setup-python/pull/1129) > * Enhance reading from .python-version by [`@krystof-k`](https://github.com/krystof-k) in [actions/setup-python#787](https://redirect.github.com/actions/setup-python/pull/787) > * Add version parsing from Pipfile by [`@aradkdj`](https://github.com/aradkdj) in [actions/setup-python#1067](https://redirect.github.com/actions/setup-python/pull/1067) > > ### Bug fixes: > > * Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-python#1183](https://redirect.github.com/actions/setup-python/pull/1183) > * Change missing cache directory error to warning by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-python#1182](https://redirect.github.com/actions/setup-python/pull/1182) > * Add Architecture-Specific PATH Management for Python with --user Flag on Windows by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-python#1122](https://redirect.github.com/actions/setup-python/pull/1122) > * Include python version in PyPy python-version output by [`@cdce8p`](https://github.com/cdce8p) in [actions/setup-python#1110](https://redirect.github.com/actions/setup-python/pull/1110) > * Update docs: clarification on pip authentication with setup-python by [`@priya-kinthali`](https://github.com/priya-kinthali) in [actions/setup-python#1156](https://redirect.github.com/actions/setup-python/pull/1156) > > ### Dependency updates: > > * Upgrade idna from 2.9 to 3.7 in /**tests**/data by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-python#843](https://redirect.github.com/actions/setup-python/pull/843) > * Upgrade form-data to fix critical vulnerabilities [#182](https://redirect.github.com/actions/setup-python/issues/182) & [#183](https://redirect.github.com/actions/setup-python/issues/183) by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-python#1163](https://redirect.github.com/actions/setup-python/pull/1163) > * Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by [`@aparnajyothi-y`](https://github.com/aparnajyothi-y) in [actions/setup-python#1165](https://redirect.github.com/actions/setup-python/pull/1165) > * Upgrade actions/checkout from 4 to 5 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-python#1181](https://redirect.github.com/actions/setup-python/pull/1181) > * Upgrade `@actions/tool-cache` from 2.0.1 to 2.0.2 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/setup-python#1095](https://redirect.github.com/actions/setup-python/pull/1095) ... (truncated) Commits * [`a309ff8`](actions/setup-python@a309ff8) Bump urllib3 from 2.6.0 to 2.6.3 in /**tests**/data ([#1264](https://redirect.github.com/actions/setup-python/issues/1264)) * [`bfe8cc5`](actions/setup-python@bfe8cc5) Upgrade [`@actions`](https://github.com/actions) dependencies to Node 24 compatible versions ([#1259](https://redirect.github.com/actions/setup-python/issues/1259)) * [`4f41a90`](actions/setup-python@4f41a90) Bump urllib3 from 2.5.0 to 2.6.0 in /**tests**/data ([#1253](https://redirect.github.com/actions/setup-python/issues/1253)) * [`83679a8`](actions/setup-python@83679a8) Bump `@types/node` from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ... * [`bfc4944`](actions/setup-python@bfc4944) Bump prettier from 3.5.3 to 3.6.2 ([#1234](https://redirect.github.com/actions/setup-python/issues/1234)) * [`97aeb3e`](actions/setup-python@97aeb3e) Bump requests from 2.32.2 to 2.32.4 in /**tests**/data ([#1130](https://redirect.github.com/actions/setup-python/issues/1130)) * [`443da59`](actions/setup-python@443da59) Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi... * [`cfd55ca`](actions/setup-python@cfd55ca) graalpy: add graalpy early-access and windows builds ([#880](https://redirect.github.com/actions/setup-python/issues/880)) * [`bba65e5`](actions/setup-python@bba65e5) Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md ([#1094](https://redirect.github.com/actions/setup-python/issues/1094)) * [`18566f8`](actions/setup-python@18566f8) Improve wording and "fix example" (remove 3.13) on testing against pre-releas... * Additional commits viewable in [compare view](actions/setup-python@a26af69...a309ff8) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/setup-python&package-manager=github\_actions&previous-version=5.6.0&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v4` → `v6` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.2.0`](https://github.com/actions/setup-python/releases/tag/v6.2.0) [Compare Source](actions/setup-python@v6.1.0...v6.2.0) #### What's Changed ##### Dependency Upgrades - Upgrade dependencies to Node 24 compatible versions by [@salmanmkc](https://github.com/salmanmkc) in [#1259](actions/setup-python#1259) - Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [@dependabot](https://github.com/dependabot) in [#1253](actions/setup-python#1253) and [#1264](actions/setup-python#1264) **Full Changelog**: <actions/setup-python@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-python/releases/tag/v6.1.0) [Compare Source](actions/setup-python@v6.0.0...v6.1.0) #### What's Changed ##### Enhancements: - Add support for `pip-install` input by [@gowridurgad](https://github.com/gowridurgad) in [#1201](actions/setup-python#1201) - Add graalpy early-access and windows builds by [@timfel](https://github.com/timfel) in [#880](actions/setup-python#880) ##### Dependency and Documentation updates: - Enhanced wording and updated example usage for `allow-prereleases` by [@yarikoptic](https://github.com/yarikoptic) in [#979](actions/setup-python#979) - Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@dependabot](https://github.com/dependabot) in [#1139](actions/setup-python#1139) - Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@dependabot](https://github.com/dependabot) in [#1094](actions/setup-python#1094) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@dependabot](https://github.com/dependabot) in [#1199](actions/setup-python#1199) - Upgrade requests from 2.32.2 to 2.32.4 by [@dependabot](https://github.com/dependabot) in [#1130](actions/setup-python#1130) - Upgrade prettier from 3.5.3 to 3.6.2 by [@dependabot](https://github.com/dependabot) in [#1234](actions/setup-python#1234) - Upgrade [@types/node](https://github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@dependabot](https://github.com/dependabot) in [#1235](actions/setup-python#1235) #### New Contributors - [@yarikoptic](https://github.com/yarikoptic) made their first contribution in [#979](actions/setup-python#979) **Full Changelog**: <actions/setup-python@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-python/releases/tag/v6.0.0) [Compare Source](actions/setup-python@v5.6.0...v6.0.0) #### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#1164](actions/setup-python#1164) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Enhancements: - Add support for `pip-version` by [@priyagupta108](https://github.com/priyagupta108) in [#1129](actions/setup-python#1129) - Enhance reading from .python-version by [@krystof-k](https://github.com/krystof-k) in [#787](actions/setup-python#787) - Add version parsing from Pipfile by [@aradkdj](https://github.com/aradkdj) in [#1067](actions/setup-python#1067) ##### Bug fixes: - Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1183](actions/setup-python#1183) - Change missing cache directory error to warning by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1182](actions/setup-python#1182) - Add Architecture-Specific PATH Management for Python with --user Flag on Windows by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1122](actions/setup-python#1122) - Include python version in PyPy python-version output by [@cdce8p](https://github.com/cdce8p) in [#1110](actions/setup-python#1110) - Update docs: clarification on pip authentication with setup-python by [@priya-kinthali](https://github.com/priya-kinthali) in [#1156](actions/setup-python#1156) ##### Dependency updates: - Upgrade idna from 2.9 to 3.7 in /**tests**/data by [@dependabot](https://github.com/dependabot)\[bot] in [#843](actions/setup-python#843) - Upgrade form-data to fix critical vulnerabilities [#182](actions/setup-python#182) & [#183](actions/setup-python#183) by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1163](actions/setup-python#1163) - Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1165](actions/setup-python#1165) - Upgrade actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1181](actions/setup-python#1181) - Upgrade [@actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1095](actions/setup-python#1095) #### New Contributors - [@krystof-k](https://github.com/krystof-k) made their first contribution in [#787](actions/setup-python#787) - [@cdce8p](https://github.com/cdce8p) made their first contribution in [#1110](actions/setup-python#1110) - [@aradkdj](https://github.com/aradkdj) made their first contribution in [#1067](actions/setup-python#1067) **Full Changelog**: <actions/setup-python@v5...v6.0.0> ### [`v5.6.0`](https://github.com/actions/setup-python/releases/tag/v5.6.0) [Compare Source](actions/setup-python@v5.5.0...v5.6.0) #### What's Changed - Workflow updates related to Ubuntu 20.04 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1065](actions/setup-python#1065) - Fix for Candidate Not Iterable Error by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1082](actions/setup-python#1082) - Upgrade semver and [@types/semver](https://github.com/types/semver) by [@dependabot](https://github.com/dependabot) in [#1091](actions/setup-python#1091) - Upgrade prettier from 2.8.8 to 3.5.3 by [@dependabot](https://github.com/dependabot) in [#1046](actions/setup-python#1046) - Upgrade ts-jest from 29.1.2 to 29.3.2 by [@dependabot](https://github.com/dependabot) in [#1081](actions/setup-python#1081) **Full Changelog**: <actions/setup-python@v5...v5.6.0> ### [`v5.5.0`](https://github.com/actions/setup-python/releases/tag/v5.5.0) [Compare Source](actions/setup-python@v5.4.0...v5.5.0) #### What's Changed ##### Enhancements: - Support free threaded Python versions like '3.13t' by [@colesbury](https://github.com/colesbury) in [#973](actions/setup-python#973) - Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade [@action/cache](https://github.com/action/cache) from 4.0.0 to 4.0.3 by [@priya-kinthali](https://github.com/priya-kinthali) in [#1056](actions/setup-python#1056) - Add support for .tool-versions file in setup-python by [@mahabaleshwars](https://github.com/mahabaleshwars) in [#1043](actions/setup-python#1043) ##### Bug fixes: - Fix architecture for pypy on Linux ARM64 by [@mayeut](https://github.com/mayeut) in [#1011](actions/setup-python#1011) This update maps arm64 to aarch64 for Linux ARM64 PyPy installations. ##### Dependency updates: - Upgrade [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.3 by [@dependabot](https://github.com/dependabot) in [#1016](actions/setup-python#1016) - Upgrade [@actions/glob](https://github.com/actions/glob) from 0.4.0 to 0.5.0 by [@dependabot](https://github.com/dependabot) in [#1015](actions/setup-python#1015) #### New Contributors - [@colesbury](https://github.com/colesbury) made their first contribution in [#973](actions/setup-python#973) - [@mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#1043](actions/setup-python#1043) **Full Changelog**: <actions/setup-python@v5...v5.5.0> ### [`v5.4.0`](https://github.com/actions/setup-python/releases/tag/v5.4.0) [Compare Source](actions/setup-python@v5.3.0...v5.4.0) #### What's Changed ##### Enhancements: - Update cache error message by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#968](actions/setup-python#968) - Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by [@priya-kinthali](https://github.com/priya-kinthali) in [#985](actions/setup-python#985) - Configure Dependabot settings by [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#1008](actions/setup-python#1008) ##### Documentation changes: - Readme update - recommended permissions by [@benwells](https://github.com/benwells) in [#1009](actions/setup-python#1009) - Improve Advanced Usage examples by [@lrq3000](https://github.com/lrq3000) in [#645](actions/setup-python#645) ##### Dependency updates: - Upgrade `undici` from 5.28.4 to 5.28.5 by [@dependabot](https://github.com/dependabot) in [#1012](actions/setup-python#1012) - Upgrade `urllib3` from 1.25.9 to 1.26.19 in /**tests**/data by [@dependabot](https://github.com/dependabot) in [#895](actions/setup-python#895) - Upgrade `actions/publish-immutable-action` from 0.0.3 to 0.0.4 by [@dependabot](https://github.com/dependabot) in [#1014](actions/setup-python#1014) - Upgrade `@actions/http-client` from 2.2.1 to 2.2.3 by [@dependabot](https://github.com/dependabot) in [#1020](actions/setup-python#1020) - Upgrade `requests` from 2.24.0 to 2.32.2 in /**tests**/data by [@dependabot](https://github.com/dependabot) in [#1019](actions/setup-python#1019) - Upgrade `@actions/cache` to `^4.0.0` by [@priyagupta108](https://github.com/priyagupta108) in [#1007](actions/setup-python#1007) #### New Contributors - [@benwells](https://github.com/benwells) made their first contribution in [#1009](actions/setup-python#1009) - [@HarithaVattikuti](https://github.com/HarithaVattikuti) made their first contribution in [#1008](actions/setup-python#1008) - [@lrq3000](https://github.com/lrq3000) made their first contribution in [#645](actions/setup-python#645) **Full Changelog**: <actions/setup-python@v5...v5.4.0> ### [`v5.3.0`](https://github.com/actions/setup-python/releases/tag/v5.3.0) [Compare Source](actions/setup-python@v5.2.0...v5.3.0) #### What's Changed - Add workflow file for publishing releases to immutable action package by [@Jcambass](https://github.com/Jcambass) in [#941](actions/setup-python#941) - Upgrade IA publish by [@Jcambass](https://github.com/Jcambass) in [#943](actions/setup-python#943) ##### Bug Fixes: - Normalise Line Endings to Ensure Cross-Platform Consistency by [@priya-kinthali](https://github.com/priya-kinthali) in [#938](actions/setup-python#938) - Revise `isGhes` logic by [@jww3](https://github.com/jww3) in [#963](actions/setup-python#963) - Bump pillow from 7.2 to 10.2.0 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#956](actions/setup-python#956) ##### Enhancements: - Enhance workflows and documentation updates by [@priya-kinthali](https://github.com/priya-kinthali) in [#965](actions/setup-python#965) - Bump default versions to latest by [@jeffwidman](https://github.com/jeffwidman) in [#905](actions/setup-python#905) #### New Contributors - [@Jcambass](https://github.com/Jcambass) made their first contribution in [#941](actions/setup-python#941) - [@jww3](https://github.com/jww3) made their first contribution in [#963](actions/setup-python#963) **Full Changelog**: <actions/setup-python@v5...v5.3.0> ### [`v5.2.0`](https://github.com/actions/setup-python/releases/tag/v5.2.0) [Compare Source](actions/setup-python@v5.1.1...v5.2.0) #### What's Changed ##### Bug fixes: - Add `.zip` extension to Windows package downloads for `Expand-Archive` Compatibility by [@priyagupta108](https://github.com/priyagupta108) in [#916](actions/setup-python#916) This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly. - Add arch to cache key by [@Zxilly](https://github.com/Zxilly) in [#896](actions/setup-python#896) This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format. ##### Documentation changes: - Fix display of emojis in contributors doc by [@sciencewhiz](https://github.com/sciencewhiz) in [#899](actions/setup-python#899) - Documentation update for caching poetry dependencies by [@gowridurgad](https://github.com/gowridurgad) in [#908](actions/setup-python#908) ##### Dependency updates: - Bump [@iarna/toml](https://github.com/iarna/toml) version from 2.2.5 to 3.0.0 by [@priya-kinthali](https://github.com/priya-kinthali) in [#912](actions/setup-python#912) - Bump pyinstaller from 3.6 to 5.13.1 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#923](actions/setup-python#923) #### New Contributors - [@sciencewhiz](https://github.com/sciencewhiz) made their first contribution in [#899](actions/setup-python#899) - [@priyagupta108](https://github.com/priyagupta108) made their first contribution in [#916](actions/setup-python#916) - [@Zxilly](https://github.com/Zxilly) made their first contribution in [#896](actions/setup-python#896) - [@aparnajyothi-y](https://github.com/aparnajyothi-y) made their first contribution in [#923](actions/setup-python#923) **Full Changelog**: <actions/setup-python@v5...v5.2.0> ### [`v5.1.1`](https://github.com/actions/setup-python/releases/tag/v5.1.1) [Compare Source](actions/setup-python@v5.1.0...v5.1.1) #### What's Changed ##### Bug fixes: - fix(ci): update all failing workflows by [@mayeut](https://github.com/mayeut) in [#863](actions/setup-python#863) This update ensures compatibility and optimal performance of workflows on the latest macOS version. ##### Documentation changes: - Documentation update for cache by [@gowridurgad](https://github.com/gowridurgad) in [#873](actions/setup-python#873) ##### Dependency updates: - Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by [@dependabot](https://github.com/dependabot) in [#893](actions/setup-python#893) #### New Contributors - [@gowridurgad](https://github.com/gowridurgad) made their first contribution in [#873](actions/setup-python#873) **Full Changelog**: <actions/setup-python@v5...v5.1.1> ### [`v5.1.0`](https://github.com/actions/setup-python/releases/tag/v5.1.0) [Compare Source](actions/setup-python@v5.0.0...v5.1.0) #### What's Changed - Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by [@Shegox](https://github.com/Shegox) in [#766](actions/setup-python#766). - Dependency updates by [@dependabot](https://github.com/dependabot) and [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#817](actions/setup-python#817) - Documentation changes for version in README by [@basnijholt](https://github.com/basnijholt) in [#776](actions/setup-python#776) - Documentation changes for link in README by [@ukd1](https://github.com/ukd1) in [#793](actions/setup-python#793) - Documentation changes for link in Advanced Usage by [@Jamim](https://github.com/Jamim) in [#782](actions/setup-python#782) - Documentation changes for avoiding rate limit issues on GHES by [@priya-kinthali](https://github.com/priya-kinthali) in [#835](actions/setup-python#835) #### New Contributors - [@basnijholt](https://github.com/basnijholt) made their first contribution in [#776](actions/setup-python#776) - [@ukd1](https://github.com/ukd1) made their first contribution in [#793](actions/setup-python#793) - [@Jamim](https://github.com/Jamim) made their first contribution in [#782](actions/setup-python#782) - [@Shegox](https://github.com/Shegox) made their first contribution in [#766](actions/setup-python#766) - [@priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#835](actions/setup-python#835) **Full Changelog**: <actions/setup-python@v5.0.0...v5.1.0> ### [`v5.0.0`](https://github.com/actions/setup-python/releases/tag/v5.0.0) [Compare Source](actions/setup-python@v4.9.1...v5.0.0) #### What's Changed In scope of this release, we update node version runtime from node16 to node20 ([#772](actions/setup-python#772)). Besides, we update dependencies to the latest versions. **Full Changelog**: <actions/setup-python@v4.8.0...v5.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: Renovate Bot <renovate-bot@internal.local> Co-committed-by: Renovate Bot <renovate-bot@internal.local>

… ci] Bumps the github-actions group with 3 updates in the / directory: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request), [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python). Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.1 Release notes *Sourced from [peter-evans/create-pull-request's releases](https://github.com/peter-evans/create-pull-request/releases).* > Create Pull Request v8.1.1 > -------------------------- > > What's Changed > -------------- > > * build(deps-dev): bump the npm group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4305](https://redirect.github.com/peter-evans/create-pull-request/pull/4305) > * build(deps): bump minimatch by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4311](https://redirect.github.com/peter-evans/create-pull-request/pull/4311) > * build(deps): bump the github-actions group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4316](https://redirect.github.com/peter-evans/create-pull-request/pull/4316) > * build(deps): bump `@tootallnate/once` and jest-environment-jsdom by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4323](https://redirect.github.com/peter-evans/create-pull-request/pull/4323) > * build(deps-dev): bump undici from 6.23.0 to 6.24.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4328](https://redirect.github.com/peter-evans/create-pull-request/pull/4328) > * build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4334](https://redirect.github.com/peter-evans/create-pull-request/pull/4334) > * build(deps): bump picomatch by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4339](https://redirect.github.com/peter-evans/create-pull-request/pull/4339) > * build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4344](https://redirect.github.com/peter-evans/create-pull-request/pull/4344) > * build(deps-dev): bump the npm group with 3 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4349](https://redirect.github.com/peter-evans/create-pull-request/pull/4349) > * fix: retry post-creation API calls on 422 eventual consistency errors by [`@peter-evans`](https://github.com/peter-evans) in [peter-evans/create-pull-request#4356](https://redirect.github.com/peter-evans/create-pull-request/pull/4356) > > **Full Changelog**: <peter-evans/create-pull-request@v8.1.0...v8.1.1> > > Create Pull Request v8.1.0 > -------------------------- > > What's Changed > -------------- > > * README.md: bump given GitHub actions to their latest versions by [`@deining`](https://github.com/deining) in [peter-evans/create-pull-request#4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) > * build(deps): bump the github-actions group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4273](https://redirect.github.com/peter-evans/create-pull-request/pull/4273) > * build(deps-dev): bump the npm group with 2 updates by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4274](https://redirect.github.com/peter-evans/create-pull-request/pull/4274) > * build(deps-dev): bump undici from 6.22.0 to 6.23.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [peter-evans/create-pull-request#4284](https://redirect.github.com/peter-evans/create-pull-request/pull/4284) > * Update distribution by [`@actions-bot`](https://github.com/actions-bot) in [peter-evans/create-pull-request#4289](https://redirect.github.com/peter-evans/create-pull-request/pull/4289) > * fix: Handle remote prune failures gracefully on self-hosted runners by [`@peter-evans`](https://github.com/peter-evans) in [peter-evans/create-pull-request#4295](https://redirect.github.com/peter-evans/create-pull-request/pull/4295) > * feat: add `@octokit/plugin-retry` to handle retriable server errors by [`@peter-evans`](https://github.com/peter-evans) in [peter-evans/create-pull-request#4298](https://redirect.github.com/peter-evans/create-pull-request/pull/4298) > > New Contributors > ---------------- > > * [`@deining`](https://github.com/deining) made their first contribution in [peter-evans/create-pull-request#4265](https://redirect.github.com/peter-evans/create-pull-request/pull/4265) > > **Full Changelog**: <peter-evans/create-pull-request@v8.0.0...v8.1.0> Commits * [`5f6978f`](peter-evans/create-pull-request@5f6978f) fix: retry post-creation API calls on 422 eventual consistency errors ([#4356](https://redirect.github.com/peter-evans/create-pull-request/issues/4356)) * [`d32e88d`](peter-evans/create-pull-request@d32e88d) build(deps-dev): bump the npm group with 3 updates ([#4349](https://redirect.github.com/peter-evans/create-pull-request/issues/4349)) * [`8170bcc`](peter-evans/create-pull-request@8170bcc) build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 ([#4344](https://redirect.github.com/peter-evans/create-pull-request/issues/4344)) * [`0041819`](peter-evans/create-pull-request@0041819) build(deps): bump picomatch ([#4339](https://redirect.github.com/peter-evans/create-pull-request/issues/4339)) * [`b993918`](peter-evans/create-pull-request@b993918) build(deps-dev): bump flatted from 3.3.1 to 3.4.2 ([#4334](https://redirect.github.com/peter-evans/create-pull-request/issues/4334)) * [`36d7c84`](peter-evans/create-pull-request@36d7c84) build(deps-dev): bump undici from 6.23.0 to 6.24.0 ([#4328](https://redirect.github.com/peter-evans/create-pull-request/issues/4328)) * [`a45d1fb`](peter-evans/create-pull-request@a45d1fb) build(deps): bump `@tootallnate/once` and jest-environment-jsdom ([#4323](https://redirect.github.com/peter-evans/create-pull-request/issues/4323)) * [`3499eb6`](peter-evans/create-pull-request@3499eb6) build(deps): bump the github-actions group with 2 updates ([#4316](https://redirect.github.com/peter-evans/create-pull-request/issues/4316)) * [`3f3b473`](peter-evans/create-pull-request@3f3b473) build(deps): bump minimatch ([#4311](https://redirect.github.com/peter-evans/create-pull-request/issues/4311)) * [`6699836`](peter-evans/create-pull-request@6699836) build(deps-dev): bump the npm group with 2 updates ([#4305](https://redirect.github.com/peter-evans/create-pull-request/issues/4305)) * Additional commits viewable in [compare view](peter-evans/create-pull-request@98357b1...5f6978f) Updates `actions/checkout` from 6.0.1 to 6.0.2 Release notes *Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).* > v6.0.2 > ------ > > What's Changed > -------------- > > * Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2355](https://redirect.github.com/actions/checkout/pull/2355) > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > **Full Changelog**: <actions/checkout@v6.0.1...v6.0.2> Changelog *Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).* > Changelog > ========= > > v6.0.2 > ------ > > * Fix tag handling: preserve annotations and explicit fetch-tags by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356) > > v6.0.1 > ------ > > * Add worktree support for persist-credentials includeIf by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327) > > v6.0.0 > ------ > > * Persist creds to a separate file by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286) > * Update README to include Node.js 24 support details and requirements by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248) > > v5.0.1 > ------ > > * Port v6 cleanup to v5 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301) > > v5.0.0 > ------ > > * Update actions checkout to use node 24 by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226) > > v4.3.1 > ------ > > * Port v6 cleanup to v4 by [`@ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305) > > v4.3.0 > ------ > > * docs: update README.md by [`@motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971) > * Add internal repos for checking out multiple repositories by [`@mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977) > * Documentation update - add recommended permissions to Readme by [`@benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043) > * Adjust positioning of user email note and permissions heading by [`@joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044) > * Update README.md by [`@nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194) > * Update CODEOWNERS for actions by [`@TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224) > * Update package dependencies by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236) > > v4.2.2 > ------ > > * `url-helper.ts` now leverages well-known environment variables by [`@jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941) > * Expand unit test coverage for `isGhes` by [`@jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946) > > v4.2.1 > ------ > > * Check out other refs/\* by commit if provided, fall back to ref by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924) > > v4.2.0 > ------ > > * Add Ref and Commit outputs by [`@lucacome`](https://github.com/lucacome) in [actions/checkout#1180](https://redirect.github.com/actions/checkout/pull/1180) > * Dependency updates by [`@dependabot`](https://github.com/dependabot)- [actions/checkout#1777](https://redirect.github.com/actions/checkout/pull/1777), [actions/checkout#1872](https://redirect.github.com/actions/checkout/pull/1872) > > v4.1.7 > ------ > > * Bump the minor-npm-dependencies group across 1 directory with 4 updates by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1739](https://redirect.github.com/actions/checkout/pull/1739) > * Bump actions/checkout from 3 to 4 by [`@dependabot`](https://github.com/dependabot) in [actions/checkout#1697](https://redirect.github.com/actions/checkout/pull/1697) > * Check out other refs/\* by commit by [`@orhantoy`](https://github.com/orhantoy) in [actions/checkout#1774](https://redirect.github.com/actions/checkout/pull/1774) > * Pin actions/checkout's own workflows to a known, good, stable version. by [`@jww3`](https://github.com/jww3) in [actions/checkout#1776](https://redirect.github.com/actions/checkout/pull/1776) > > v4.1.6 > ------ > > * Check platform to set archive extension appropriately by [`@cory-miller`](https://github.com/cory-miller) in [actions/checkout#1732](https://redirect.github.com/actions/checkout/pull/1732) ... (truncated) Commits * [`de0fac2`](actions/checkout@de0fac2) Fix tag handling: preserve annotations and explicit fetch-tags ([#2356](https://redirect.github.com/actions/checkout/issues/2356)) * [`064fe7f`](actions/checkout@064fe7f) Add orchestration\_id to git user-agent when ACTIONS\_ORCHESTRATION\_ID is set (... * See full diff in [compare view](actions/checkout@8e8c483...de0fac2) Updates `actions/setup-python` from 6.1.0 to 6.2.0 Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.2.0 > ------ > > What's Changed > -------------- > > ### Dependency Upgrades > > * Upgrade dependencies to Node 24 compatible versions by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1259](https://redirect.github.com/actions/setup-python/pull/1259) > * Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1253](https://redirect.github.com/actions/setup-python/pull/1253) and [actions/setup-python#1264](https://redirect.github.com/actions/setup-python/pull/1264) > > **Full Changelog**: <actions/setup-python@v6...v6.2.0> Commits * [`a309ff8`](actions/setup-python@a309ff8) Bump urllib3 from 2.6.0 to 2.6.3 in /**tests**/data ([#1264](https://redirect.github.com/actions/setup-python/issues/1264)) * [`bfe8cc5`](actions/setup-python@bfe8cc5) Upgrade [`@actions`](https://github.com/actions) dependencies to Node 24 compatible versions ([#1259](https://redirect.github.com/actions/setup-python/issues/1259)) * [`4f41a90`](actions/setup-python@4f41a90) Bump urllib3 from 2.5.0 to 2.6.0 in /**tests**/data ([#1253](https://redirect.github.com/actions/setup-python/issues/1253)) * See full diff in [compare view](actions/setup-python@83679a8...a309ff8) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.1.0 to 6.2.0. Release notes *Sourced from [actions/setup-python's releases](https://github.com/actions/setup-python/releases).* > v6.2.0 > ------ > > What's Changed > -------------- > > ### Dependency Upgrades > > * Upgrade dependencies to Node 24 compatible versions by [`@salmanmkc`](https://github.com/salmanmkc) in [actions/setup-python#1259](https://redirect.github.com/actions/setup-python/pull/1259) > * Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [`@dependabot`](https://github.com/dependabot) in [actions/setup-python#1253](https://redirect.github.com/actions/setup-python/pull/1253) and [actions/setup-python#1264](https://redirect.github.com/actions/setup-python/pull/1264) > > **Full Changelog**: <actions/setup-python@v6...v6.2.0> Commits * [`a309ff8`](actions/setup-python@a309ff8) Bump urllib3 from 2.6.0 to 2.6.3 in /**tests**/data ([ArcadeData#1264](https://redirect.github.com/actions/setup-python/issues/1264)) * [`bfe8cc5`](actions/setup-python@bfe8cc5) Upgrade [`@actions`](https://github.com/actions) dependencies to Node 24 compatible versions ([ArcadeData#1259](https://redirect.github.com/actions/setup-python/issues/1259)) * [`4f41a90`](actions/setup-python@4f41a90) Bump urllib3 from 2.5.0 to 2.6.0 in /**tests**/data ([ArcadeData#1253](https://redirect.github.com/actions/setup-python/issues/1253)) * See full diff in [compare view](actions/setup-python@83679a8...a309ff8) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/setup-python&package-manager=github\_actions&previous-version=6.1.0&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v5` → `v6` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.3.0`](https://github.com/actions/setup-python/releases/tag/v6.3.0) [Compare Source](actions/setup-python@v6.2.0...v6.3.0) #### What's Changed ##### Enhancement - Add RHEL support and include Linux distro in cache keys by [@priyagupta108](https://github.com/priyagupta108) in [#1323](actions/setup-python#1323) - Fix pip cache error handling on Windows by [@priyagupta108](https://github.com/priyagupta108) in [#1040](actions/setup-python#1040) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@dependabot](https://github.com/dependabot) in [#1281](actions/setup-python#1281) - Upgrade actions dependencies by [@gowridurgad](https://github.com/gowridurgad) with [@Copilot](https://github.com/Copilot) in [#1303](actions/setup-python#1303) - Upgrade [@actions/cache](https://github.com/actions/cache) to 5.1.0, log cache write denied by [@jasongin](https://github.com/jasongin) in [#1324](actions/setup-python#1324) - Upgrade dependency versions and test workflow configuration by [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#1322](actions/setup-python#1322) ##### Documentation - Update advanced-usage.md by [@Dunky-Z](https://github.com/Dunky-Z) in [#811](actions/setup-python#811) #### New Contributors - [@gowridurgad](https://github.com/gowridurgad) with [@Copilot](https://github.com/Copilot) made their first contribution in [#1303](actions/setup-python#1303) - [@jasongin](https://github.com/jasongin) made their first contribution in [#1324](actions/setup-python#1324) - [@Dunky-Z](https://github.com/Dunky-Z) made their first contribution in [#811](actions/setup-python#811) **Full Changelog**: <actions/setup-python@v6...v6.3.0> ### [`v6.2.0`](https://github.com/actions/setup-python/releases/tag/v6.2.0) [Compare Source](actions/setup-python@v6.1.0...v6.2.0) #### What's Changed ##### Dependency Upgrades - Upgrade dependencies to Node 24 compatible versions by [@salmanmkc](https://github.com/salmanmkc) in [#1259](actions/setup-python#1259) - Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [@dependabot](https://github.com/dependabot) in [#1253](actions/setup-python#1253) and [#1264](actions/setup-python#1264) **Full Changelog**: <actions/setup-python@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-python/releases/tag/v6.1.0) [Compare Source](actions/setup-python@v6...v6.1.0) #### What's Changed ##### Enhancements: - Add support for `pip-install` input by [@gowridurgad](https://github.com/gowridurgad) in [#1201](actions/setup-python#1201) - Add graalpy early-access and windows builds by [@timfel](https://github.com/timfel) in [#880](actions/setup-python#880) ##### Dependency and Documentation updates: - Enhanced wording and updated example usage for `allow-prereleases` by [@yarikoptic](https://github.com/yarikoptic) in [#979](actions/setup-python#979) - Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@dependabot](https://github.com/dependabot) in [#1139](actions/setup-python#1139) - Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@dependabot](https://github.com/dependabot) in [#1094](actions/setup-python#1094) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@dependabot](https://github.com/dependabot) in [#1199](actions/setup-python#1199) - Upgrade requests from 2.32.2 to 2.32.4 by [@dependabot](https://github.com/dependabot) in [#1130](actions/setup-python#1130) - Upgrade prettier from 3.5.3 to 3.6.2 by [@dependabot](https://github.com/dependabot) in [#1234](actions/setup-python#1234) - Upgrade [@types/node](https://github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@dependabot](https://github.com/dependabot) in [#1235](actions/setup-python#1235) #### New Contributors - [@yarikoptic](https://github.com/yarikoptic) made their first contribution in [#979](actions/setup-python#979) **Full Changelog**: <actions/setup-python@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-python/releases/tag/v6.0.0) [Compare Source](actions/setup-python@v6...v6) #### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#1164](actions/setup-python#1164) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Enhancements: - Add support for `pip-version` by [@priyagupta108](https://github.com/priyagupta108) in [#1129](actions/setup-python#1129) - Enhance reading from .python-version by [@krystof-k](https://github.com/krystof-k) in [#787](actions/setup-python#787) - Add version parsing from Pipfile by [@aradkdj](https://github.com/aradkdj) in [#1067](actions/setup-python#1067) ##### Bug fixes: - Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1183](actions/setup-python#1183) - Change missing cache directory error to warning by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1182](actions/setup-python#1182) - Add Architecture-Specific PATH Management for Python with --user Flag on Windows by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1122](actions/setup-python#1122) - Include python version in PyPy python-version output by [@cdce8p](https://github.com/cdce8p) in [#1110](actions/setup-python#1110) - Update docs: clarification on pip authentication with setup-python by [@priya-kinthali](https://github.com/priya-kinthali) in [#1156](actions/setup-python#1156) ##### Dependency updates: - Upgrade idna from 2.9 to 3.7 in /**tests**/data by [@dependabot](https://github.com/dependabot)\[bot] in [#843](actions/setup-python#843) - Upgrade form-data to fix critical vulnerabilities [#182](actions/setup-python#182) & [#183](actions/setup-python#183) by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1163](actions/setup-python#1163) - Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1165](actions/setup-python#1165) - Upgrade actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1181](actions/setup-python#1181) - Upgrade [@actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1095](actions/setup-python#1095) #### New Contributors - [@krystof-k](https://github.com/krystof-k) made their first contribution in [#787](actions/setup-python#787) - [@cdce8p](https://github.com/cdce8p) made their first contribution in [#1110](actions/setup-python#1110) - [@aradkdj](https://github.com/aradkdj) made their first contribution in [#1067](actions/setup-python#1067) **Full Changelog**: <actions/setup-python@v5...v6.0.0> ### [`v6`](actions/setup-python@v5.6.0...v6) [Compare Source](actions/setup-python@v5.6.0...v6) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Co-authored-by: Renovate Bot <renovate-bot@git.greil.fr> Reviewed-on: https://git.greil.fr/mat/python-comwatt-client/pulls/21

Bumps the github-actions group with 7 updates: Package From To actions/checkout 4.3.1 7.0.1 actions/setup-python 5.6.0 7.0.0 actions/upload-artifact 4.6.2 7.0.1 ansible-community/ansible-test-gh-action 1.17.0 1.18.0 actions/github-script 7.1.0 9.0.0 dawidd6/action-download-artifact 16 21 SonarSource/sonarqube-scan-action 7.0.0 8.2.1 Updates actions/checkout from 4.3.1 to 7.0.1 Release notes Sourced from actions/checkout's releases. v7.0.1 What's Changed skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates Full Changelog: actions/checkout@v7...v7.0.1 v7.0.0 What's Changed block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458 Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460 Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461 Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459 upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463 Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462 getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464 update error wording by @aiqiaoy in actions/checkout#2467 New Contributors @aiqiaoy made their first contribution in actions/checkout#2454 Full Changelog: actions/checkout@v6.0.3...v7.0.0 v6.1.0 What's Changed [BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500 backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527 https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change Full Changelog: actions/checkout@v6.0.3...v6.1.0 v6.0.3 What's Changed Update changelog by @ericsciple in actions/checkout#2357 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 Update changelog for v6.0.3 by @yaananth in actions/checkout#2446 New Contributors @yaananth made their first contribution in actions/checkout#2414 Full Changelog: actions/checkout@v6...v6.0.3 v6.0.2 What's Changed Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v7.0.1 Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518 Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521 Escape values passed to --unset by @aiqiaoy in actions/checkout#2530 Various dependency updates v7.0.0 Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454 Various dependency updates v6.0.3 Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439 fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414 v6.0.2 Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356 v6.0.1 Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327 v6.0.0 Persist creds to a separate file by @ericsciple in actions/checkout#2286 Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248 v5.0.1 Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301 v5.0.0 Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226 v4.3.1 Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305 v4.3.0 docs: update README.md by @motss in actions/checkout#1971 Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977 Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043 Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044 Update README.md by @nebuk89 in actions/checkout#2194 Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224 Update package dependencies by @salmanmkc in actions/checkout#2236 v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 ... (truncated) Commits 3d3c42e prep v7.0.1 release (#2531) 2880268 escape values passed to --unset (#2530) 12cd223 trim only ascii whitespace for branch (#2521) 62661c4 skip running unsafe pr check if input is default (#2518) e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499) 631c942 eslint 9 (#2474) 4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476) ba09753 Bump actions/checkout from 6 to 7 (#2488) b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479) e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478) Additional commits viewable in compare view Updates actions/setup-python from 5.6.0 to 7.0.0 Release notes Sourced from actions/setup-python's releases. v7.0.0 What's Changed Enhancements Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-python#1330 Pin SHA commits and update docs with latest versions by @HarithaVattikuti in actions/setup-python#1338 Remove the pip-install input by @gowridurgad in actions/setup-python#1336 Bug Fix Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in actions/setup-python#1335 Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in actions/setup-python#1332 Dependency Upgrade Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in actions/setup-python#1328 Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in actions/setup-python#1333 Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-python#1337 New Contributors @lmvysakh made their first contribution in actions/setup-python#1335 @philip-gai made their first contribution in actions/setup-python#1337 Full Changelog: actions/setup-python@v6...v7.0.0 v6.3.0 What's Changed Enhancement Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323 Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040 Dependency update Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281 Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303 Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324 Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322 Documentation Update advanced-usage.md by @Dunky-Z in actions/setup-python#811 New Contributors @gowridurgad with @Copilot made their first contribution in actions/setup-python#1303 @jasongin made their first contribution in actions/setup-python#1324 @Dunky-Z made their first contribution in actions/setup-python#811 Full Changelog: actions/setup-python@v6.2.0...v6.3.0 v6.2.0 What's Changed Dependency Upgrades Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259 ... (truncated) Commits 5fda3b9 Pin SHA commits and update docs with latest versions (#1338) 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0 0f3a009 Remove the pip-install input (#1336) f8cf429 Migrate to ESM and upgrade dependencies (#1330) 54baeea Validate and retry manifest fetch to prevent silent failures (#1332) c709277 Annotation code fix (#1335) 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333) 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328) ece7cb0 Fix pip cache error handling on Windows. (#1040) 1d18d7a Update advanced-usage.md (#811) Additional commits viewable in compare view Updates actions/upload-artifact from 4.6.2 to 7.0.1 Release notes Sourced from actions/upload-artifact's releases. v7.0.1 What's Changed Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795 Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796 Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797 Full Changelog: actions/upload-artifact@v7...v7.0.1 v7.0.0 v7 What's new Direct Uploads Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file. ESM To support new versions of the @actions/* packages, we've upgraded the package to ESM. What's Changed Add proxy integration test by @Link- in actions/upload-artifact#754 Upgrade the module to ESM and bump dependencies by @danwkennedy in actions/upload-artifact#762 Support direct file uploads by @danwkennedy in actions/upload-artifact#764 New Contributors @Link- made their first contribution in actions/upload-artifact#754 Full Changelog: actions/upload-artifact@v6...v7.0.0 v6.0.0 v6 - What's new [!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading. Node.js 24 This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24. What's Changed Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719 fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744 prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745 Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0 v5.0.0 What's Changed ... (truncated) Commits 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency 634250c Include changes in typespec/ts-http-runtime 0.3.5 e454baa Readme: bump all the example versions to v7 (#796) 74fad66 Update the readme with direct upload details (#795) bbbca2d Support direct file uploads (#764) 589182c Upgrade the module to ESM and bump dependencies (#762) 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests 02a8460 Add proxy integration test b7c566a Merge pull request #745 from actions/upload-artifact-v6-release e516bc8 docs: correct description of Node.js 24 support in README Additional commits viewable in compare view Updates ansible-community/ansible-test-gh-action from 1.17.0 to 1.18.0 Release notes Sourced from ansible-community/ansible-test-gh-action's releases. v1.18.0 What's Changed Project Changes Support ansible-core 2.20 and 2.21, bump default ansible-core version to 2.21 by @felixfontein in ansible-community/ansible-test-gh-action#125 Dependencies Bump codecov/codecov-action from 4.5.0 to 5.4.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#101 Bump actions/checkout from 4 to 5 by @dependabot[bot] in ansible-community/ansible-test-gh-action#104 Bump codecov/codecov-action from 5.4.3 to 5.5.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#105 Bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#107 Bump actions/setup-python from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#108 Bump actions/checkout from 5 to 6 by @dependabot[bot] in ansible-community/ansible-test-gh-action#110 Bump codecov/codecov-action from 5.5.1 to 5.5.2 by @dependabot[bot] in ansible-community/ansible-test-gh-action#111 Bump codecov/codecov-action from 5.5.2 to 5.5.3 by @dependabot[bot] in ansible-community/ansible-test-gh-action#114 Bump codecov/codecov-action from 5.5.3 to 6.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#115 Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in ansible-community/ansible-test-gh-action#119 Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in ansible-community/ansible-test-gh-action#122 Bump actions/checkout from 6 to 7 by @dependabot[bot] in ansible-community/ansible-test-gh-action#126 Full Changelog: ansible-community/ansible-test-gh-action@v1.17.0...v1.18.0 Commits 6ded727 Merge pull request #126 from ansible-community/dependabot/github_actions/acti... e0d4c98 Bump actions/checkout from 6 to 7 6c86f3f Merge pull request #125 from felixfontein/ansible-core 48b041f Merge pull request #122 from ansible-community/dependabot/github_actions/code... 3272591 Merge pull request #124 from felixfontein/fix-pre-commit c0626df Bump default ansible-core to 2.21 7dfd27a Support ansible-core 2.20 and 2.21 c8e46ea Bump pre-commit flake8 additional deps 13e4993 Bump codecov/codecov-action from 6.0.1 to 7.0.0 8b1ac34 Merge pull request #119 from ansible-community/dependabot/github_actions/code... Additional commits viewable in compare view Updates actions/github-script from 7.1.0 to 9.0.0 Release notes Sourced from actions/github-script's releases. v9.0.0 New features: getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples. Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing. Breaking changes: require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed. getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it. If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility. What's Changed Add ACTIONS_ORCHESTRATION_ID to user-agent string by @Copilot in actions/github-script#695 ci: use deployment: false for integration test environments by @salmanmkc in actions/github-script#712 feat!: add getOctokit to script context, upgrade @actions/github v9, @octokit/core v7, and related packages by @salmanmkc in actions/github-script#700 New Contributors @Copilot made their first contribution in actions/github-script#695 Full Changelog: actions/github-script@v8.0.0...v9.0.0 v8.0.0 What's Changed Update Node.js version support to 24.x by @salmanmkc in actions/github-script#637 README for updating actions/github-script from v7 to v8 by @sneha-krip in actions/github-script#653 ⚠️ Minimum Compatible Runner Version v2.327.1 Release Notes Make sure your runner is updated to this version or newer to use this release. New Contributors @salmanmkc made their first contribution in actions/github-script#637 @sneha-krip made their first contribution in actions/github-script#653 Full Changelog: actions/github-script@v7.1.0...v8.0.0 Commits 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re... ca10bbd fix: use @octokit/core/types import for v7 compatibility 86e48e2 merge: incorporate main branch changes c108472 chore: rebuild dist for v9 upgrade and getOctokit factory afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag... ff8117e ci: fix user-agent test to handle orchestration ID 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests 3953caf docs: update README examples from @v8 to @v9, add getOctokit docs and v9 brea... c17d55b ci: add getOctokit integration test job a047196 test: add getOctokit integration tests via callAsyncFunction Additional commits viewable in compare view Updates dawidd6/action-download-artifact from 16 to 21 Release notes Sourced from dawidd6/action-download-artifact's releases. v21 What's Changed build(deps): bump @actions/github from 9.0.0 to 9.1.0 by @dependabot[bot] in dawidd6/action-download-artifact#396 build(deps): bump filesize from 11.0.15 to 11.0.16 by @dependabot[bot] in dawidd6/action-download-artifact#399 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 by @dependabot[bot] in dawidd6/action-download-artifact#402 build(deps): bump @actions/github from 9.1.0 to 9.1.1 by @dependabot[bot] in dawidd6/action-download-artifact#400 build(deps): bump @actions/core from 3.0.0 to 3.0.1 by @dependabot[bot] in dawidd6/action-download-artifact#401 build(deps): bump filesize from 11.0.16 to 11.0.17 by @dependabot[bot] in dawidd6/action-download-artifact#404 Download artifacts in creation order by @matejdro in dawidd6/action-download-artifact#398 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#405 New Contributors @matejdro made their first contribution in dawidd6/action-download-artifact#398 Full Changelog: dawidd6/action-download-artifact@v20...v21 v20 What's Changed build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @dependabot[bot] in dawidd6/action-download-artifact#387 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#388 build(deps): bump filesize from 11.0.13 to 11.0.14 by @dependabot[bot] in dawidd6/action-download-artifact#389 build(deps): bump brace-expansion by @dependabot[bot] in dawidd6/action-download-artifact#390 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#391 build(deps): bump filesize from 11.0.14 to 11.0.15 by @dependabot[bot] in dawidd6/action-download-artifact#392 build(deps): bump adm-zip from 0.5.16 to 0.5.17 by @dependabot[bot] in dawidd6/action-download-artifact#393 build(deps): bump lodash from 4.17.23 to 4.18.1 by @dependabot[bot] in dawidd6/action-download-artifact#394 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#395 Full Changelog: dawidd6/action-download-artifact@v19...v20 v19 What's Changed build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @dependabot[bot] in dawidd6/action-download-artifact#385 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#386 Full Changelog: dawidd6/action-download-artifact@v18...v19 v18 What's Changed build(deps): bump @actions/artifact from 6.2.0 to 6.2.1 by @dependabot[bot] in dawidd6/action-download-artifact#381 build(deps): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in dawidd6/action-download-artifact#382 node_modules: update by @dawidd6 in dawidd6/action-download-artifact#383 Full Changelog: dawidd6/action-download-artifact@v17...v18 v17 What's Changed ... (truncated) Commits b6e2e70 node_modules: update (#405) 1708cb3 Download artifacts in creation order (#398) 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404) 0414c42 build(deps): bump @actions/core from 3.0.0 to 3.0.1 (#401) c802aad build(deps): bump @actions/github from 9.1.0 to 9.1.1 (#400) ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402) 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399) 09d0677 build(deps): bump @actions/github from 9.0.0 to 9.1.0 (#396) 8305c0f node_modules: update (#395) 542af03 build(deps): bump lodash from 4.17.23 to 4.18.1 (#394) Additional commits viewable in compare view Updates SonarSource/sonarqube-scan-action from 7.0.0 to 8.2.1 Release notes Sourced from SonarSource/sonarqube-scan-action's releases. v8.2.1 What's Changed Bug fix SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1 v8.2.0 What's Changed SQSCANGHA-149 Add scannerBinariesAuthHeader input by @henryju in SonarSource/sonarqube-scan-action#246 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @henryju in SonarSource/sonarqube-scan-action#249 SQSCANGHA-84 Remove outdated wget/curl references by @henryju in SonarSource/sonarqube-scan-action#248 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @henryju in SonarSource/sonarqube-scan-action#250 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @henryju in SonarSource/sonarqube-scan-action#251 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0 v8.1.0 What's Changed SQSCANGHA-146 Add proxy support for GPG keyserver access by @henryju in SonarSource/sonarqube-scan-action#244 SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @github-actions[bot] in SonarSource/sonarqube-scan-action#232 Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0 v8.0.0 What's Changed Breaking change SQSCANGHA-145 Set skipSignatureVerification default value to false by @antoine-vinot-sonarsource in SonarSource/sonarqube-scan-action#241 Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0 v7.2.1 What's Changed SQSCANGHA-140 Set skipSignatureVerification default value to true to avoid breaking change by @gmmcal in SonarSource/sonarqube-scan-action#240 Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1 v7.2.0 What's Changed SQSCANGHA-133 Upgrade the Node version used in UTs + contribution guide by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#226 SC-45750 Migrate to dateless license headers by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#229 SQSCANGHA-134 Upgrade the libraries to latest version by @claire-villard-sonarsource in SonarSource/sonarqube-scan-action#227 ... (truncated) Commits 2291811 SQSCANGHA-156 GPG signature verification fails when temporary directory path ... 7cdc154 SQSCANGHA-153 NO-JIRA Bump actions/checkout from 6.0.2 to 7.0.0 (#255) 45f2736 SQSCANGHA-151 Change Code Owners (#254) 7138816 SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows (#251) 3581139 SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4... c9d327c SQSCANGHA-84 Remove outdated wget/curl references b243e51 SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support 375c3f5 SQSCANGHA-149 Add scannerBinariesAuthHeader input for authenticated binary do... 9c78323 SQSCANGHA-144 Add gate jobs to QA workflows for branch protection 7006c44 Update SonarScanner CLI to 8.1.0.6389 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore con... Description has been truncated Reviewed-by: Mark Chappell

salmanmkc requested a review from a team as a code owner December 16, 2025 16:25

Copilot AI review requested due to automatic review settings December 16, 2025 16:25

Copilot AI reviewed Dec 16, 2025

View reviewed changes

salmanmkc and others added 6 commits December 16, 2025 16:26

update patch version

f4bb54c

upgrade actions/checkout from v5 to v6

f294155

check failures fix

de6d8e7

revert the pinned pipenv version

935b42e

check failure fix

a6b2215

npm run build

b0e882a

gowridurgad mentioned this pull request Jan 7, 2026

docs (marketplace) still references checkout@v5 #1263

Closed

aparnajyothi-y approved these changes Jan 19, 2026

View reviewed changes

priya-kinthali approved these changes Jan 20, 2026

View reviewed changes

HarithaVattikuti approved these changes Jan 20, 2026

View reviewed changes

HarithaVattikuti merged commit bfe8cc5 into actions:main Jan 20, 2026
1410 checks passed

This was referenced Jan 21, 2026

README: update checkout to v6 #1266

Closed

Bump actions/checkout from 5 to 6 #1247

Closed

Action emits [DEP0040] DeprecationWarning: The punycode module is deprecated. Please use a userland alternative instead. #1208

Closed

aparnajyothi-y mentioned this pull request Jan 30, 2026

Docs: mention latest released version v6 of checkout action #1254

Closed

marcinpsk mentioned this pull request Jan 30, 2026

Bump actions/setup-python from 5 to 6 netbox-community/devicetype-library#3604

Merged

quanghuynh10111-png mentioned this pull request Feb 11, 2026

[Uploading Backlog-View1.tsv…]() actions/actions-runner-controller#4378

Closed

This was referenced Mar 11, 2026

Upgrade GitHub Actions for Node 24 compatibility google/civics_cdf_validator#522

Open

Upgrade GitHub Actions for Node 24 compatibility google/keep-sorted#120

Open

coderabbitai Bot mentioned this pull request Jun 9, 2026

ci: update GitHub Actions to Node 24-compatible versions espressif/idf-eclipse-plugin#1476

Open

5 tasks

wallentx mentioned this pull request Jun 24, 2026

Bump GitHub Actions dependencies FarmGPU/netbox-agent#4

Closed

coderabbitai Bot mentioned this pull request Jul 18, 2026

CI hardening: real gates (shellcheck, gitleaks) + fix all shellcheck findings ImmortalDemonGod/money-agent#27

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Upgrade @actions dependencies to Node 24 compatible versions - #1259