Skip to content

chore(deps): bump the actions group with 4 updates - #58

Merged
jourdain merged 1 commit into
masterfrom
dependabot/github_actions/actions-ae2d57a3dd
Sep 15, 2026
Merged

jourdain merged 1 commit into
masterfrom
dependabot/github_actions/actions-ae2d57a3dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates: actions/checkout, actions/setup-python, actions/setup-node and relekang/python-semantic-release.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-python from 5 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates relekang/python-semantic-release from 9.15.2 to 10.6.2

Release notes

Sourced from relekang/python-semantic-release's releases.

v10.6.2 (2026-08-28)

This release is published under the MIT License.

🪲 Bug Fixes

  • cmd-changelog: Fix reading of TOML when file was created on Windows (9a56ace)

  • config: Validate commit author in config internally (PR#1477, 10afa8e)

⚙️ Build System

  • deps: Adjust importlib use to maintain 3.8 support (59fea4f)

  • deps: Bump rich requirement from v14.0+ to v15.0+ (PR#1464, abd942d)

  • deps: Bump tomlkit requirement to ~=0.15.0 (PR#1463, 429588d)

✅ Resolved Issues

  • #1476: Bug: GitPython v3.1.60 removed Actor.name_email_regex, breaking every config load

Detailed Changes: v10.6.1...v10.6.2


Installable artifacts are available from:

v10.6.1 (2026-07-06)

This release is published under the MIT License.

🪲 Bug Fixes

  • changelog: Fix handling of whitespace commit bodies in changelog template filter (PR#1457, d95e46e)

  • cmd-version: Fix non-styled error msg when strict & no new version (PR#1437, 5e8f94c)

  • config: Eliminate .git/ in parent dir warnings for monorepos configured with .. (PR#1444, 7a1f822)

📖 Documentation

  • CHANGELOG: Add v9.21.2 changelog details for website (a4115cf)

... (truncated)

Changelog

Sourced from relekang/python-semantic-release's changelog.

v10.6.2 (2026-08-28)

🪲 Bug Fixes

  • cmd-changelog: Fix reading of TOML when file was created on Windows (9a56ace_)

  • config: Validate commit author in config internally, closes [#1476](https://github.com/relekang/python-semantic-release/issues/1476)_ (PR#1477, 10afa8e)

⚙️ Build System

  • deps: Adjust importlib use to maintain 3.8 support (59fea4f_)

  • deps: Bump rich requirement from v14.0+ to v15.0+ (PR#1464, abd942d)

  • deps: Bump tomlkit requirement to ~=0.15.0 (PR#1463, 429588d)

.. _#1476: python-semantic-release/python-semantic-release#1476 .. _10afa8e: python-semantic-release/python-semantic-release@10afa8e .. _429588d: python-semantic-release/python-semantic-release@429588d .. _59fea4f: python-semantic-release/python-semantic-release@59fea4f .. _9a56ace: python-semantic-release/python-semantic-release@9a56ace .. _abd942d: python-semantic-release/python-semantic-release@abd942d .. _PR#1463: python-semantic-release/python-semantic-release#1463 .. _PR#1464: python-semantic-release/python-semantic-release#1464 .. _PR#1477: python-semantic-release/python-semantic-release#1477

.. _changelog-v10.6.1:

v10.6.1 (2026-07-06)

🪲 Bug Fixes

  • changelog: Fix handling of whitespace commit bodies in changelog template filter (PR#1457, d95e46e)

  • cmd-version: Fix non-styled error msg when strict & no new version, closes [#1423](https://github.com/relekang/python-semantic-release/issues/1423)_ (PR#1437, 5e8f94c)

  • config: Eliminate .git/ in parent dir warnings for monorepos configured with .., closes [#1418](https://github.com/relekang/python-semantic-release/issues/1418)_ (PR#1444, 7a1f822)

📖 Documentation

... (truncated)

Commits
  • 9a026e9 chore: release v10.6.2
  • 10afa8e fix(config): validate commit author in config internally (#1477)
  • 414e8fb ci(validate): improve Windows e2e test reliability
  • 9a56ace fix(cmd-changelog): fix reading of TOML when file was created on Windows
  • 7df3d73 test(util): add additional clarity for e2e test failure
  • c74aa3b refactor(deps): adjust dependency paradigm to maximize compatibility (#1466)
  • abd942d build(deps): bump rich requirement from v14.0+ to v15.0+ (#1464)
  • de32322 refactor(cmd-changelog): adjust import to chosing appropriate importlib when ...
  • df34b89 test: refactor for chosing correct importlib when needed
  • 59fea4f build(deps): adjust importlib use to maintain 3.8 support
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-node](https://github.com/actions/setup-node) and [relekang/python-semantic-release](https://github.com/relekang/python-semantic-release).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/setup-python` from 5 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `relekang/python-semantic-release` from 9.15.2 to 10.6.2
- [Release notes](https://github.com/relekang/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@v9.15.2...v10.6.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: relekang/python-semantic-release
  dependency-version: 10.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 15, 2026
@jourdain
jourdain merged commit 50908b4 into master Sep 15, 2026
7 checks passed
@jourdain
jourdain deleted the dependabot/github_actions/actions-ae2d57a3dd branch September 15, 2026 15:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant