Bump the actions group across 1 directory with 6 updates
Type: Pull Request
State: Closed
Association: Unknown
Comments: 1
(6 months ago)
(6 months ago)
(6 months ago)
CI: Run cibuildwheel CI: Run cygwin dependencies github_actions
Bumps the actions group with 6 updates in the / directory:
| Package | From | To |
|---|---|---|
| actions/checkout | 5.0.0 |
6.0.1 |
| actions/setup-python | 6.0.0 |
6.1.0 |
| pypa/cibuildwheel | 3.2.1 |
3.3.0 |
| reviewdog/action-setup | 1.4.0 |
1.5.0 |
| github/codeql-action | 4.31.0 |
4.31.7 |
| actions/stale | 10.1.0 |
10.1.1 |
Updates actions/checkout from 5.0.0 to 6.0.1
Release notes
Sourced from actions/checkout's releases.
v6.0.1
What's Changed
- Update all references from v5 and v4 to v6 by
@ericsciplein actions/checkout#2314- Add worktree support for persist-credentials includeIf by
@ericsciplein actions/checkout#2327- Clarify v6 README by
@ericsciplein actions/checkout#2328Full Changelog: https://github.com/actions/checkout/compare/v6...v6.0.1
v6.0.0
What's Changed
- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- v6-beta by
@ericsciplein actions/checkout#2298- update readme/changelog for v6 by
@ericsciplein actions/checkout#2311Full Changelog: https://github.com/actions/checkout/compare/v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under
$RUNNER_TEMPinstead of directly in the local git config.This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.
v5.0.1
What's Changed
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301Full Changelog: https://github.com/actions/checkout/compare/v5...v5.0.1
Changelog
Sourced from actions/checkout's changelog.
Changelog
v6.0.0
- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248v5.0.1
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301v5.0.0
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226v4.3.1
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305v4.3.0
- docs: update README.md by
@motssin actions/checkout#1971- Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977- Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043- Adjust positioning of user email note and permissions heading by
@joshmgrossin actions/checkout#2044- Update README.md by
@nebuk89in actions/checkout#2194- Update CODEOWNERS for actions by
@TingluoHuangin actions/checkout#2224- Update package dependencies by
@salmanmkcin actions/checkout#2236v4.2.2
url-helper.tsnow leverages well-known environment variables by@jww3in actions/checkout#1941- Expand unit test coverage for
isGhesby@jww3in actions/checkout#1946v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoyin actions/checkout#1924v4.2.0
- Add Ref and Commit outputs by
@lucacomein actions/checkout#1180- Dependency updates by
@dependabot- actions/checkout#1777, actions/checkout#1872v4.1.7
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by
@dependabotin actions/checkout#1739- Bump actions/checkout from 3 to 4 by
@dependabotin actions/checkout#1697- Check out other refs/* by commit by
@orhantoyin actions/checkout#1774- Pin actions/checkout's own workflows to a known, good, stable version. by
@jww3in actions/checkout#1776v4.1.6
- Check platform to set archive extension appropriately by
@cory-millerin actions/checkout#1732v4.1.5
- Update NPM dependencies by
@cory-millerin actions/checkout#1703- Bump github/codeql-action from 2 to 3 by
@dependabotin actions/checkout#1694- Bump actions/setup-node from 1 to 4 by
@dependabotin actions/checkout#1696- Bump actions/upload-artifact from 2 to 4 by
@dependabotin actions/checkout#1695
... (truncated)
Commits
8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)- See full diff in compare view
Updates actions/setup-python from 6.0.0 to 6.1.0
Release notes
Sourced from actions/setup-python's releases.
v6.1.0
What's Changed
Enhancements:
- Add support for
pip-installinput by@gowridurgadin actions/setup-python#1201- Add graalpy early-access and windows builds by
@timfelin actions/setup-python#880Dependency and Documentation updates:
- Enhanced wording and updated example usage for
allow-prereleasesby@yarikopticin actions/setup-python#979- Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by
@dependabotin actions/setup-python#1139- Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by
@dependabotin actions/setup-python#1094- Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by
@dependabotin actions/setup-python#1199- Upgrade requests from 2.32.2 to 2.32.4 by
@dependabotin actions/setup-python#1130- Upgrade prettier from 3.5.3 to 3.6.2 by
@dependabotin actions/setup-python#1234- Upgrade
@types/nodefrom 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by@dependabotin actions/setup-python#1235New Contributors
@yarikopticmade their first contribution in actions/setup-python#979Full Changelog: https://github.com/actions/setup-python/compare/v6...v6.1.0
Commits
83679a8Bump@types/nodefrom 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...bfc4944Bump prettier from 3.5.3 to 3.6.2 (#1234)97aeb3eBump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)443da59Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...cfd55cagraalpy: add graalpy early-access and windows builds (#880)bba65e5Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)18566f8Improve wording and "fix example" (remove 3.13) on testing against pre-releas...2e3e4b1Add support for pip-install input (#1201)4267e28Bump urllib3 from 1.26.19 to 2.5.0 in /tests/data and document breaking c...- See full diff in compare view
Updates pypa/cibuildwheel from 3.2.1 to 3.3.0
Release notes
Sourced from pypa/cibuildwheel's releases.
v3.3.0
- 🐛 Fix an incompatibility with Docker v29 (#2660)
- ✨ Adds
test-runtimeoption, to customise how tests on simulated/emulated environments are run (#2636)- ✨ Adds support for new
manylinux_2_35images on 32-bit ARMarmv7l, offering better C++20 compatibility (#2656)- ✨
build[uv]is now supported on Android (#2587)- ✨ You can now install extras (such as
uv) with a simple option on the GitHub Action (#2630)- ✨
{project}and{package}placeholders are now supported inrepair-wheel-command(#2589)- 🛠 The versions set with
dependency-versionsno longer constrain packages specified by yourbuild-system.requires. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)- 🛠 Improve the handling of
test-commandon Android, enabling more options to be passed (#2590)- 📚 Docs improvements (#2618)
Changelog
Sourced from pypa/cibuildwheel's changelog.
title: Changelog
Changelog
v3.3.0
12 November 2025
- 🐛 Fix an incompatibility with Docker v29 (#2660)
- ✨ Adds
test-runtimeoption, to customise how tests on simulated/emulated environments are run (#2636)- ✨ Adds support for new
manylinux_2_35images on 32-bit ARMarmv7l, offering better C++20 compatibility (#2656)- ✨
build[uv]is now supported on Android (#2587)- ✨ You can now install extras (such as
uv) with a simple option on the GitHub Action (#2630)- ✨
{project}and{package}placeholders are now supported inrepair-wheel-command(#2589)- 🛠 The versions set with
dependency-versionsno longer constrain packages specified by yourbuild-system.requires. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)- 🛠 Improve the handling of
test-commandon Android, enabling more options to be passed (#2590)- 📚 Docs improvements (#2618)
v3.2.1
12 October 2025
- 🛠 Update to CPython 3.14.0 final (#2614)
- 🐛 Fix the default MACOSX_DEPLOYMENT_TARGET on Python 3.14 (#2613)
- 📚 Docs improvements (#2617)
v3.2.0
22 September 2025
- ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
- 🛠 Update to CPython 3.14.0rc3 (#2602)
- 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
- 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
- ⚠️ PyPy 3.10 was moved to
pypy-eolin theenableoption, as it is now end-of-life. (#2521)- 📚 Docs improvements (#2574, #2601, #2598)
v3.1.4
19 August 2025
- ✨ Add a
--clean-cachecommand to clean up our cache (#2489)- 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
- 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
- 🐛 Fix resolution with
pyodide-buildwhendependency-versionsis set (#2548)- 🐛 Set
CMAKE_FIND_ROOT_PATH_MODE_PACKAGEtoBOTHon Android (#2547)- 🐛 Add
patchelfdependency for platforms that can build Android wheels (#2552)- 🐛 Ignore empty values for
CIBW_ARCHSlike most other environment variables (#2541)
... (truncated)
Commits
63fd63bBump version: v3.3.0f4fe311fix: support Docker 29 (#2660)f6c8108feat: make the{project}placeholder available torepair-wheel-command(#...ccbae30feat: support uv with Android (#2587)1337e50chore: pytest log_level is better than log_cli_level (#2657)720f8e2feat: add manylinux_2_35 (#2656)4c7f369[pre-commit.ci] pre-commit autoupdate (#2658)e1baa60chore: enable more Ruff checks (#2654)1f2f8b2fix: don't constrainbuild-system.requireswith ourdependency-versions(...8c5b02f[pre-commit.ci] pre-commit autoupdate (#2648)- Additional commits viewable in compare view
Updates reviewdog/action-setup from 1.4.0 to 1.5.0
Release notes
Sourced from reviewdog/action-setup's releases.
Release v1.5.0
What's Changed
- update hash in README by
@haya14busain reviewdog/action-setup#72- feat: Add GitHub Actions workflow permissions and signed commits by
@haya14busain reviewdog/action-setup#63- chore(deps): update actions/checkout action to v5 - autoclosed by
@renovate[bot] in reviewdog/action-setup#70- chore(deps): update haya14busa/action-update-semver action to v1.5.1 by
@renovate[bot] in reviewdog/action-setup#65- chore(deps): update actions/checkout action to v5.0.1 by
@renovate[bot] in reviewdog/action-setup#76- chore(deps): update haya14busa/action-bumpr action to v1.11.4 by
@renovate[bot] in reviewdog/action-setup#64- chore(deps): update reviewdog/action-actionlint action to v1.68.0 by
@renovate[bot] in reviewdog/action-setup#67- chore(deps): update reviewdog/action-shellcheck action to v1.32.0 by
@renovate[bot] in reviewdog/action-setup#68- chore(deps): update chainguard-dev/actions digest to 4aa3402 - autoclosed by
@renovate[bot] in reviewdog/action-setup#73- chore(deps): update reviewdog/action-misspell action to v1.27.0 by
@renovate[bot] in reviewdog/action-setup#75- chore(deps): update reviewdog to 0.21.0 by
@github-actions[bot] in reviewdog/action-setup#74Full Changelog: https://github.com/reviewdog/action-setup/compare/v1.4.0...v1.5.0
Commits
d8a7baaMerge pull request #74 from reviewdog/depup/reviewdogb041f0dMerge pull request #75 from reviewdog/renovate/reviewdog-action-misspell-1.x05dc1a3Merge pull request #73 from reviewdog/renovate/chainguard-dev-actions-digestf2ffb34Merge pull request #68 from reviewdog/renovate/reviewdog-action-shellcheck-1.x28695c5Merge pull request #67 from reviewdog/renovate/reviewdog-action-actionlint-1.x65d14e0chore(deps): update reviewdog/action-misspell action to v1.27.0f3a4e22Merge pull request #64 from reviewdog/renovate/haya14busa-action-bumpr-1.xf257542chore(deps): update reviewdog/action-actionlint action to v1.68.078083cbchore(deps): update chainguard-dev/actions digest to 4aa34020eb086bMerge pull request #76 from reviewdog/renovate/actions-checkout-5.x- Additional commits viewable in compare view
Updates github/codeql-action from 4.31.0 to 4.31.7
Release notes
Sourced from github/codeql-action's releases.
v4.31.7
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.7 - 05 Dec 2025
- Update default CodeQL bundle version to 2.23.7. #3343
See the full CHANGELOG.md for more information.
v4.31.6
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.6 - 01 Dec 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v4.31.5
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.5 - 24 Nov 2025
- Update default CodeQL bundle version to 2.23.6. #3321
See the full CHANGELOG.md for more information.
v4.31.4
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.4 - 18 Nov 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v4.31.3
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
4.31.3 - 13 Nov 2025
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
[UNRELEASED]
No user facing changes.
4.31.7 - 05 Dec 2025
- Update default CodeQL bundle version to 2.23.7. #3343
4.31.6 - 01 Dec 2025
No user facing changes.
4.31.5 - 24 Nov 2025
- Update default CodeQL bundle version to 2.23.6. #3321
4.31.4 - 18 Nov 2025
No user facing changes.
4.31.3 - 13 Nov 2025
- CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
- Update default CodeQL bundle version to 2.23.5. #3288
4.31.2 - 30 Oct 2025
No user facing changes.
4.31.1 - 30 Oct 2025
- The
add-snippetsinput has been removed from theanalyzeaction. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.4.31.0 - 24 Oct 2025
- Bump minimum CodeQL bundle version to 2.17.6. #3223
- When SARIF files are uploaded by the
analyzeorupload-sarifactions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for theupload-sarifaction. Foranalyze, this may affect Advanced Setup for CodeQL users who specify a value other thanalwaysfor theuploadinput. #32224.30.9 - 17 Oct 2025
- Update default CodeQL bundle version to 2.23.3. #3205
- Experimental: A new
setup-codeqlaction has been added which is similar toinit, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #32044.30.8 - 10 Oct 2025
No user facing changes.
... (truncated)
Commits
cf1bb45Merge pull request #3344 from github/update-v4.31.7-f5c63faddf4ebe95Update changelog for v4.31.7f5c63faMerge pull request #3343 from github/update-bundle/codeql-bundle-v2.23.7a2c01e7Add changelog noteac34c13Update default bundle to codeql-bundle-v2.23.7267c467Merge pull request #3339 from github/dependabot/npm_and_yarn/npm-minor-77d264...aeabef7Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-77d26487b078357d3Merge pull request #3341 from github/mbg/ci/update-cs-config-cli-testsd61a6faUpdate CLI config test to account for overlay db changes on PRsce27e95Rebuild- Additional commits viewable in compare view
Updates actions/stale from 10.1.0 to 10.1.1
Release notes
Sourced from actions/stale's releases.
v10.1.1
What's Changed
Bug Fix
- Add Missing Input Reading for
only-issue-typesby@Bibo-Joshiin actions/stale#1298Improvement
- Improves error handling when rate limiting is disabled on GHES. by
@chiranjib-swainin actions/stale#1300Dependency Upgrades
- Upgrade eslint-config-prettier from 8.10.0 to 10.1.8 by
@dependabotin actions/stale#1276- Upgrade
@types/nodefrom 20.10.3 to 24.2.0 and document breaking changes in v10 by@dependabotin actions/stale#1280- Upgrade actions/publish-action from 0.3.0 to 0.4.0 by
@dependabotin actions/stale#1291- Upgrade actions/checkout from 4 to 6 by
@dependabotin actions/stale#1306New Contributors
@chiranjib-swainmade their first contribution in actions/stale#1300Full Changelog: https://github.com/actions/stale/compare/v10...v10.1.1
Commits
9971854build(deps): bump actions/checkout from 4 to 6 (#1306)5611b9dbuild(deps): bump actions/publish-action from 0.3.0 to 0.4.0 (#1291)fad0de8Improves error handling when rate limiting is disabled on GHES. (#1300)39bea7dAdd Missing Input Reading foronly-issue-types(#1298)e46bbabbuild(deps-dev): bump@types/nodefrom 20.10.3 to 24.2.0 and document breakin...65d1d48build(deps-dev): bump eslint-config-prettier from 8.10.0 to 10.1.8 (#1276)- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Technical Details
| ID: | 12046082 |
| UUID: | 3707646717 |
| Node ID: | PR_kwDOABUios63v0mm |
| Host: | GitHub |
| Repository: | matplotlib/matplotlib |