An open index of dependabot pull requests across open source projects.

chore(ci): bump the github-actions group across 1 directory with 8 updates

Merged
Number: #1621
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: October 01, 2025 at 04:10 AM UTC
(18 days ago)
Updated: October 04, 2025 at 08:05 PM UTC
(14 days ago)
Merged: October 04, 2025 at 08:05 PM UTC
(14 days ago)
by bdraco
Time to Close: 4 days
Labels:
dependencies github_actions
Description:

Bumps the github-actions group with 8 updates in the / directory:

Package From To
actions/checkout 4.2.2 5.0.0
actions/setup-python 5.6.0 6.0.0
codecov/codecov-action 5.4.2 5.5.1
CodSpeedHQ/action 3.5.0 4.0.1
python-semantic-release/python-semantic-release 9.21.0 10.4.1
pypa/gh-action-pypi-publish 1.12.4 1.13.0
pypa/cibuildwheel 2.23.3 3.2.0
actions/download-artifact 4.3.0 5.0.0

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: https://github.com/actions/checkout/compare/v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/setup-python from 5.6.0 to 6.0.0

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: https://github.com/actions/setup-python/compare/v5...v6.0.0

Commits
  • e797f83 Upgrade to node 24 (#1164)
  • 3d1e2d2 Revert "Enhance cache-dependency-path handling to support files outside the w...
  • 65b0712 Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...
  • 5b668cf Bump actions/checkout from 4 to 5 (#1181)
  • f62a0e2 Change missing cache directory error to warning (#1182)
  • 9322b3c Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...
  • fbeb884 Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)
  • 03bb615 Bump idna from 2.9 to 3.7 in /tests/data (#843)
  • 36da51d Add version parsing from Pipfile (#1067)
  • 3c6f142 update documentation (#1156)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 5.4.2 to 5.5.1

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.1

What's Changed

New Contributors

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0...v5.5.1

v5.5.0

What's Changed

New Contributors

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3...v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2...v5.4.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

... (truncated)

Commits

Updates CodSpeedHQ/action from 3.5.0 to 4.0.1

Release notes

Sourced from CodSpeedHQ/action's releases.

v4.0.1

Release Notes

🐛 Bug Fixes

Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md

v4.0.0

💥 BREAKING

It's now required to explicitly set the runner mode to instrumentation or walltime using either:

  • the mode argument
  • or the CODSPEED_RUNNER_MODE environment variable

[!TIP] Before, this variable was automatically set to instrumentation on every runner except for CodSpeed macro runners where it was set to walltime by default.

Find more details in the instruments documentation.

Details

🚀 Features

🐛 Bug Fixes

🏗️ Refactor

Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md

v3.8.1

What's Changed

🐛 Bug Fixes

🏗️ Refactor

  • Improve conditional compilation in get_pipe_open_options by @​art049 in #100

⚙️ Internals

... (truncated)

Commits
  • 653fdc3 Release v4.0.1 🚀
  • 4da7be1 chore: bump runner version to 4.0.1
  • 172d6c5 chore: make the comment about input validation more discrete
  • d15e1ce chore: improve the release script
  • 6eeb021 Release v4.0.0 🚀
  • 74312da chore: improve the release script
  • 8a17a35 ci: add modes to the matrix
  • 8e3f02a feat: make the mode argument required
  • 97c7a6f chore: bump runner version to 4.0.0
  • 8a4cadd chore: point the changelog to the runner
  • Additional commits viewable in compare view

Updates python-semantic-release/python-semantic-release from 9.21.0 to 10.4.1

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v10.4.1 (2025-09-13)

This release is published under the MIT License.

🪲 Bug Fixes

  • cmd-version: Fix error where --no-tag is not respected (PR#1329, b090fa2)

📖 Documentation

  • CHANGELOG: Update hyperlink in v10.4.0's additional info paragraph (PR#1323, 98ef722)

  • getting-started-guide: Remove notice about lack of monorepo support (PR#1327, 3f21f3f)

  • github-actions: Fix recommended upstream detection script's upstream name parsing (PR#1328, ccc91c0)

✅ Resolved Issues

  • #1304: Bug: --no-tag is not working as expected with version command

  • #1326: Monorepo support warning on Getting Started page no longer required


Detailed Changes: v10.4.0...v10.4.1


Installable artifacts are available from:

v10.4.0 (2025-09-08)

This release is published under the MIT License.

✨ Features

  • config: Add conventional-monorepo as valid commit_parser type (PR#1143, e18f866)

  • parser: Add new conventional-commits standard parser for monorepos (PR#1143, e18f866)

📖 Documentation

  • Add configuration guide for monorepo use with PSR (PR#1143, e18f866)

  • commit-parsers: Introduce conventional commit monorepo parser options & features (PR#1143, e18f866)

... (truncated)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

.. _changelog:

========= CHANGELOG

.. _changelog-v10.4.1:

v10.4.1 (2025-09-13)

🪲 Bug Fixes

  • cmd-version: Fix error where --no-tag is not respected, closes [#1304](https://github.com/python-semantic-release/python-semantic-release/issues/1304)_ (PR#1329, b090fa2)

📖 Documentation

  • CHANGELOG: Update hyperlink in v10.4.0's additional info paragraph (PR#1323, 98ef722)

  • getting-started-guide: Remove notice about lack of monorepo support, closes [#1326](https://github.com/python-semantic-release/python-semantic-release/issues/1326)_ (PR#1327, 3f21f3f)

  • github-actions: Fix recommended upstream detection script's upstream name parsing (PR#1328, ccc91c0)

.. _#1304: python-semantic-release/python-semantic-release#1304 .. _#1326: python-semantic-release/python-semantic-release#1326 .. _3f21f3f: https://github.com/python-semantic-release/python-semantic-release/commit/3f21f3fc47a0dacc11ec95feb2a23f8cf132e77b .. _98ef722: https://github.com/python-semantic-release/python-semantic-release/commit/98ef722b65bd6a37492cf7ec8b0425800f719114 .. _b090fa2: https://github.com/python-semantic-release/python-semantic-release/commit/b090fa2efc0ebfb40bdc572fea307d356af95a3f .. _ccc91c0: https://github.com/python-semantic-release/python-semantic-release/commit/ccc91c09fab45358c7e52b42e6c0607c68c9d8f3 .. _PR#1323: python-semantic-release/python-semantic-release#1323 .. _PR#1327: python-semantic-release/python-semantic-release#1327 .. _PR#1328: python-semantic-release/python-semantic-release#1328 .. _PR#1329: python-semantic-release/python-semantic-release#1329

.. _changelog-v10.4.0:

v10.4.0 (2025-09-08)

✨ Features

  • config: Add conventional-monorepo as valid commit_parser type (PR#1143, e18f866)

... (truncated)

Commits
  • 4d4cb0a 10.4.1
  • b090fa2 fix(cmd-version): fix error where --no-tag is not respected (#1329)
  • ccc91c0 docs(github-actions): fix recommended upstream detection script's upstream na...
  • 3f21f3f docs(getting-started-guide): remove notice about lack of monorepo support (#1...
  • f77c598 ci(deps): bump actions/setup-python@v5.6.0 to v6.0.0
  • 8fdbc3e ci(deps): bump actions/stale@v9.1.0 to v10.0.0
  • a7d0195 ci(deps): bump python-semantic-release/publish-action@v10.3.2 to v10.4.0
  • ee2617c ci(deps): bump python-semantic-release@v10.3.2 action to v10.4.0
  • 98ef722 docs(CHANGELOG): update hyperlink in v10.4.0's additional info paragraph (#1323)
  • 6df5e87 10.4.0
  • Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.13.0

[!important] 🚨 This release includes fixes for GHSA-vxmw-7h4f-hqxh discovered by @​woodruffw💰. We've also integrated Zizmor to catch similar issues in the future and you should too.

✨ New Stuff

@​woodruffw💰 updated the README to no longer mention the attestations feature being experimental in #347: it's been rather stable for a year already 🎉 He also added more diagnostic output which includes printing out the GitHub Environment claim via #371 and warning about the unsupported reusable workflows configurations #306, when using Trusted Publishing.

[!tip] The official support for reusable workflows is currently blocked on changes to PyPI. To get updates about progress on the action side, you may want to subscribe to #166. At PyCon US 2025 Sprints, @​facutuesca💰, @​miketheman💰, @​woodruffw💰 and I💰 spent several hours IRL brainstorming how to fix this and migrate projects that happen to rely on an obscure corner case with reusable workflows that temporarily allows them to function by accident. The result of that discussion is posted @ pypi/warehouse#11096. Note that this is a volunteer-led effort and there is no ETA. If you need this soon, make your employer sponsor the PSF and maybe they'll be able to hire somebody for this work on Warehouse.

In addition to that, @​konstin💰 sent #378 to pin actions/setup-python to a SHA hash. This makes pypi-publish compatible with new GitHub policies that allow organizations to mandate hash-pinning actions used in workflows.

🛠️ Internal Dependencies

@​webknjaz💰 made a bunch of updates to the action runtime which includes bumping it to Python 3.13 in #331 and updating the dependency tree across the board. pip-with-requires-python is no longer being installed (#332). Some related bumps were contributed by @​woodruffw💰 (#359) and @​kurtmckee💰 sent a contributor-facing PR, bumping the linting configuration via #335.

💪 New Contributors

🪞 Full Diff: https://github.com/pypa/gh-action-pypi-publish/compare/v1.12.4...v1.13.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

Commits
  • ed0c539 📦📌 Bump the pinned dependency tree
  • 77db1b7 Merge branch PR #306, GHSA-vxmw-7h4f-hqxh fix and PR #378 into unstable/v1
  • 280b3a1 Alias typing as t in imports
  • e380240 Use object in place of typing.Any in annotations
  • e50bff6 Deduplicate claim ref lookup
  • decbc9a Hint people to subscribe to #166 for notifications
  • 8208ad3 Ask not to report bugs with reusable workflow
  • ff0fef5 🧪 Scope WPS202 suppression to specific files
  • 1293b8c Use yamllint disable line length lint
  • ed01280 Linter (different rule)
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 2.23.3 to 3.2.0

Release notes

Sourced from pypa/cibuildwheel's releases.

v3.2.0

  • ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
  • 🛠 Update to CPython 3.14.0rc3 (#2602)
  • 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
  • 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
  • ⚠️ PyPy 3.10 was moved to pypy-eol in the enable option, as it is now end-of-life. (#2521)
  • 📚 Docs improvements (#2574, #2601, #2598)

v3.1.4

  • ✨ Add a --clean-cache command to clean up our cache (#2489)
  • 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
  • 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
  • 🐛 Fix resolution with pyodide-build when dependency-versions is set (#2548)
  • 🐛 Set CMAKE_FIND_ROOT_PATH_MODE_PACKAGE to BOTH on Android (#2547)
  • 🐛 Add patchelf dependency for platforms that can build Android wheels (#2552)
  • 🐛 Ignore empty values for CIBW_ARCHS like most other environment variables (#2541)
  • 💼 The color and suggest_on_error argparse options are now default in 3.14rc1+ (#2554)
  • 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
  • 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
  • 🧪 Split out platforms iOS and Android in our tests (#2519)
  • 🧪 Fix and enable doctests (#2546)
  • 📚 Improve our docs on free-threading (#2549)

v3.1.3

  • 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
  • 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527, #2539)
  • 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)

v3.1.2

  • ⚠️ ...

    Description has been truncated

Pull Request Statistics
Commits:
2
Files Changed:
1
Additions:
+37
Deletions:
-20
Package Dependencies
Ecosystem:
actions
Version Change:
4.2.2 → 5.0.0
Update Type:
Major
Ecosystem:
actions
Version Change:
4.3.0 → 5.0.0
Update Type:
Major
Ecosystem:
actions
Version Change:
5.6.0 → 6.0.0
Update Type:
Major
Ecosystem:
actions
Version Change:
5.4.2 → 5.5.1
Update Type:
Minor
Ecosystem:
actions
Version Change:
2.23.3 → 3.2.0
Update Type:
Major
Ecosystem:
actions
Version Change:
9.21.0 → 10.4.1
Update Type:
Major
Ecosystem:
actions
Version Change:
1.12.4 → 1.13.0
Update Type:
Minor
Ecosystem:
actions
Version Change:
3.5.0 → 4.0.1
Update Type:
Major
Technical Details
ID: 8927493
UUID: 2876789530
Node ID: PR_kwDOAUjOu86reFMa
Host: GitHub
Repository: python-zeroconf/python-zeroconf
Merge State: Unknown