Skip to content

chore(ci): Bump actions/setup-python from 7.0.0 to 7.1.0 - #563

Merged
wz-gsa merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-7.1.0
Nov 3, 2026
Merged

wz-gsa merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-7.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/setup-python from 7.0.0 to 7.1.0.

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits
  • 6d4fd22 Cache upgrade to 6.3.0 (#1370)
  • ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
  • ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
  • 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
  • 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
  • 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
  • e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
  • 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
  • af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
  • 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@wz-gsa

wz-gsa commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@5fda3b9...6d4fd22)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-7.1.0 branch from 4eba781 to d130df0 Compare November 3, 2026 16:27

@wz-gsa wz-gsa left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed-head review of d130df09ce31226907c1eec91802d08c69d5bad3. Full two-workflow diff and surrounding configuration inspected: four setup-python pins updated consistently to upstream v7.1.0 commit6d4fd22. Upstream release/tag and runtime previously verified; Python3.12/3.13 inputs and caching unchanged, contents:read and persist-credentials:false preserved. No custom mirror inputs enabled. All eight current-head checks passed. No blocking findings; frontend workflow was statically inspected but not triggered by these paths. AI-assisted static dependency review; no reviewed code executed on the host. This is not a complete audit of upstream bundled dependencies.

@wz-gsa
wz-gsa added this pull request to the merge queue Nov 3, 2026
Merged via the queue into main with commit fc020c3 Nov 3, 2026
8 checks passed
@wz-gsa
wz-gsa deleted the dependabot/github_actions/actions/setup-python-7.1.0 branch November 3, 2026 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant