Skip to content

build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-6.3.0
Closed

build(deps): bump actions/setup-python from 5.6.0 to 7.0.0#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-python from 5.6.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from sumitake as a code owner July 12, 2026 00:07
@sumitake

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@sumitake

Copy link
Copy Markdown
Owner

@dependabot recreate

@dependabot dependabot Bot changed the title Bump actions/setup-python from 5.6.0 to 6.3.0 build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 Aug 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-6.3.0 branch from 4b44f38 to 5d9a8e2 Compare August 28, 2026 07:09
@sumitake

Copy link
Copy Markdown
Owner

@dependabot recreate

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.6.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a26af69...5fda3b9)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-6.3.0 branch from 5d9a8e2 to e1dc8a3 Compare August 28, 2026 07:13
@sumitake

Copy link
Copy Markdown
Owner

Superseded by #20, which applies this bump together with the other remaining GitHub Action pins. #20 also pins CodeQL init and analyze to the same v4.37.8 SHA (Dependabot #2 only updated init, which fails at analyze time).

@sumitake sumitake closed this Aug 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/setup-python-6.3.0 branch August 28, 2026 07:16
sumitake added a commit that referenced this pull request Aug 28, 2026
#20)

Supersedes Dependabot PRs #7, #6, #5, #3, and #2.

CodeQL init and analyze are pinned together to v4.37.8. Dependabot
only bumped init, which fails with a version mismatch at analyze time.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant