Skip to content

Bump the actions group in /.github/workflows with 2 updates#720

Merged
pllim merged 2 commits into
mainfrom
dependabot/github_actions/dot-github/workflows/actions-c2a8cd3cc1
Jun 29, 2026
Merged

Bump the actions group in /.github/workflows with 2 updates#720
pllim merged 2 commits into
mainfrom
dependabot/github_actions/dot-github/workflows/actions-c2a8cd3cc1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group in /.github/workflows with 2 updates: actions/setup-python and OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml.

Updates actions/setup-python from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6...v6.3.0

Commits

Updates OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml from 2 to 3

Release notes

Sourced from OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml's releases.

v3.0.0

Breaking Changes

  • If a value is provided for coverage uploading (coverage: codecov, coverage: codecov-oidc, or coverage: github), tests must end with a .coverage file at the workspace root. Use the COVERAGE_FILE environment variable; for instance, you can set it explicitly in tox.ini. See the relevant section of the docs for more information.
    set_env =
      COVERAGE_FILE={toxinidir}/.coverage
  • The fill:, fill_platforms:, and fill_factors: inputs are now removed in favor of using version glob syntax py3* directly in envs:. For example, to produce the following set of envs:
        envs: |
           - linux: pep8
             pytest: false
           - linux: py311-xdist
           - linux: py312-xdist
           - linux: py313-xdist
           - linux: py314-xdist
           - macos: py311-xdist
           - macos: py312-xdist
           - macos: py313-xdist
           - macos: py314-xdist
    on OpenAstronomy/github-actions-workflows@v2 you would have used fill:, fill_platforms:, and fill_factors::
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v2
       with:
         envs: |
           - linux: pep8
             pytest: false
         fill: true
         fill_platforms: linux,macos
         fill_factors: xdist
    but now with OpenAstronomy/github-actions-workflows@v3 you use a py* version glob instead:
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v3
       with:
         envs: |
           - linux: pep8
             pytest: false
           - linux: py3*-xdist
           - macos: py3*-xdist

What's Changed

... (truncated)

Commits
  • e5af21e fix bug in passing workflow repo to supported-pythons (#405)
  • 6ae6691 replace fill: parameter with logic to expand py3* glob syntax in envs
  • 8b63a9c DEP: upgrade Github Action dependencies (#398)
  • 8449fec DEP: upgrade cibuildwheel to 4.0.0 (#393)
  • 5d99eb3 Disable codecov comments (#401)
  • a7a7c50 Better Reporting of Coverage Reporting Errors (#399)
  • ade42af Update codecov/codecov-action to 7.0 to fix signature error
  • e113052 Coverage reporting refactor and cleanup (#397)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group in /.github/workflows with 2 updates: [actions/setup-python](https://github.com/actions/setup-python) and [OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml](https://github.com/openastronomy/github-actions-workflows).


Updates `actions/setup-python` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a309ff8...ece7cb0)

Updates `OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml` from 2 to 3
- [Release notes](https://github.com/openastronomy/github-actions-workflows/releases)
- [Commits](OpenAstronomy/github-actions-workflows@v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@pllim pllim merged commit 8035e82 into main Jun 29, 2026
6 of 7 checks passed
@dependabot dependabot Bot deleted the dependabot/github_actions/dot-github/workflows/actions-c2a8cd3cc1 branch June 29, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant