Skip to content

Bump the actions-deps group with 4 updates - #361

Merged
skirpichev merged 1 commit into
masterfrom
dependabot/github_actions/actions-deps-27adc17e11
Aug 1, 2026
Merged

Bump the actions-deps group with 4 updates#361
skirpichev merged 1 commit into
masterfrom
dependabot/github_actions/actions-deps-27adc17e11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 4 updates: actions/setup-python, j178/prek-action, sigstore/gh-action-sigstore-python and pypa/cibuildwheel.

Updates actions/setup-python from 6 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Updates j178/prek-action from 2 to 2.0.6

Release notes

Sourced from j178/prek-action's releases.

v2.0.6

What's Changed

New Contributors

Full Changelog: j178/prek-action@v2...v2.0.6

v2.0.5

What's Changed

Full Changelog: j178/prek-action@v2...v2.0.5

v2.0.4

What's Changed

Full Changelog: j178/prek-action@v2...v2.0.4

v2.0.3

What's Changed

Full Changelog: j178/prek-action@v2...v2.0.3

v2.0.2

What's Changed

... (truncated)

Commits

Updates sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.5.0

What's Changed

  • The action now uses sigstore 4.5.0
  • Bump other dependencies

Full Changelog: sigstore/gh-action-sigstore-python@v3.4.0...v3.5.0

Commits
  • 790bc6b build(deps): bump github/codeql-action/upload-sarif in the actions group (#445)
  • 513a149 build(deps): bump platformdirs in the python-dependencies group (#446)
  • 74e0040 Bump sigstore from 4.4 to 4.5 (#444)
  • 52538fd build(deps): bump the actions group across 1 directory with 4 updates (#439)
  • cbab91d build(deps): bump the python-dependencies group across 1 directory with 9 upd...
  • 1d3524c build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 in the acti...
  • a174484 build(deps): bump sigstore from 4.3.0 to 4.4.0 in the python-dependencies gro...
  • 0b384a6 build(deps): bump the actions group with 2 updates (#429)
  • f11d8f8 build(deps): bump typing-extensions in the python-dependencies group (#430)
  • 258577b build(deps): bump the python-dependencies group with 2 updates (#428)
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 4.1.0 to 4.1.1

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.1.1

  • ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
  • 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
  • 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
  • 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
  • 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
  • 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
  • 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
  • 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
  • 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
  • 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
  • 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
  • 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
  • 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
  • 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
  • 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
  • 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
  • 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)
Changelog

Sourced from pypa/cibuildwheel's changelog.

v4.1.1

24 July 2026

  • ✨ Adds pyodide-build as a separate build-frontend, now the default frontend for Pyodide, with verbosity flags handling. Any other frontend is ignored with a warning on Pyodide. (#2609, #2945)
  • 🔐 Uses digests instead of tags for pinned container images, strengthening supply-chain security. The human-readable tags remain as comments in pinned_docker_images.cfg. (#2915)
  • 🐛 Fixes platform-specific test-runtime environment variables (e.g. CIBW_TEST_RUNTIME_ANDROID) not being honored (#2941)
  • 🐛 Fixes quoting of test-requires and audit-requires so PEP 508 specifiers containing spaces work (#2913)
  • 🐛 Makes archs parsing case-insensitive and platform-aware, so e.g. arm64 works on Windows (#2920)
  • 🐛 Uses an absolute path for the {project} placeholder in config-settings (#2934)
  • 🐛 Validates the pyodide-version option against the build identifier with a clear error (#2925)
  • 🐛 Fixes PyPy installs on macOS after PyPy switched its downloads from .tar.bz2 to .tar.gz (#2939)
  • 🐛 Makes a matching python3-config available in the build and test venvs on macOS (#2922)
  • 🛠 Updates dependencies and container pins (#2917, #2935, #2939)
  • 🛠 Updates Android tests to current Python versions and the new test repository URL (#2933)
  • 🛠 Drops the orjson dependency, no longer used by mypy 2+ (#2923)
  • 📚 Builds the docs with properdocs, a MkDocs fork (#2946)
  • 📚 Adds the missing cp314-pyodide_wasm32 entry to the build identifier table (#2947)
  • 📚 Removes outdated notes about the pip wheel build frontend and ClearLinux (#2926)
  • 💼 Adds a "CI: PyPy EoL" PR label to run PyPy EoL tests on PRs (#2930)
  • 💼 Updates CI action pins and pre-commit hooks (#2914, #2932, #2938, #2940, #2942, #2943)
Commits
  • 4726cd3 Bump version: v4.1.1
  • 1af5cd7 docs: switch from mkdocs to properdocs (#2946)
  • b21d76a docs: add missing cp314-pyodide_wasm32 to build-id table (#2947)
  • 03cbe93 fix(macos): make matching python3-config available in build/test venvs (#2922)
  • b7cac6d fix: don't error when a global build-frontend is set on pyodide (#2945)
  • 1520daf fix: support platform-specific test runtime environment variables (#2941)
  • 17b7420 [Bot] Update dependencies (#2939)
  • f8d8cca chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the actions group...
  • 265b435 chore(deps): bump the actions group with 2 updates (#2942)
  • 3f8bd1c chore(deps): bump the actions group with 3 updates (#2938)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the actions-deps group with 4 updates
866aaf5 
Bumps the actions-deps group with 4 updates: [actions/setup-python](https://github.com/actions/setup-python), [j178/prek-action](https://github.com/j178/prek-action), [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) and [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel).


Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

Updates `j178/prek-action` from 2 to 2.0.6
- [Release notes](https://github.com/j178/prek-action/releases)
- [Commits](j178/prek-action@v2...v2.0.6)

Updates `sigstore/gh-action-sigstore-python` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@v3.4.0...v3.5.0)

Updates `pypa/cibuildwheel` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: j178/prek-action
  dependency-version: 2.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: pypa/cibuildwheel
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026
@skirpichev
skirpichev merged commit 49fcc1e into master Aug 1, 2026
33 checks passed
@skirpichev
skirpichev deleted the dependabot/github_actions/actions-deps-27adc17e11 branch August 1, 2026 23:05
@skirpichev skirpichev added this to the 0.6 milestone Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

0.6

Development

Successfully merging this pull request may close these issues.

1 participant

@skirpichev