Skip to content

chore(deps-ci): bump the github-actions group across 1 directory with 11 updates - #89

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2d4777cd08
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-2d4777cd08

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 11 updates in the / directory:

Package From To
actions/checkout 5.0.0 7.0.0
actions/setup-python 6.0.0 6.3.0
codecov/codecov-action 5.5.1 7.0.0
CodSpeedHQ/action 4.0.1 4.18.1
python-semantic-release/python-semantic-release 10.4.1 10.5.3
pypa/gh-action-pypi-publish 1.13.0 1.14.0
docker/setup-qemu-action 3.6.0 4.2.0
pypa/cibuildwheel 3.2.0 4.1.0
actions/upload-artifact 4.6.2 7.0.1
actions/download-artifact 5.0.0 8.0.1
tiangolo/issue-manager 0.6.0 0.8.0

Updates actions/checkout from 5.0.0 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-python from 6.0.0 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Full Changelog: actions/setup-python@v6...v6.2.0

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

Full Changelog: actions/setup-python@v6...v6.1.0

Commits

Updates codecov/codecov-action from 5.5.1 to 7.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v7.0.0

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v6.0.2

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.5

This release only contains the keybase.io change as described here.

Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates CodSpeedHQ/action from 4.0.1 to 4.18.1

Release notes

Sourced from CodSpeedHQ/action's releases.

v4.18.1

Release Notes

🚀 Features

Install codspeed-runner 4.18.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.1

File Platform Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

v4.18.0

Release Notes

🚀 Features

🐛 Bug Fixes

Install codspeed-runner 4.18.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.0

| File | Platform | Checksum |

... (truncated)

Commits
  • a4a36bb Release v4.18.1 🚀
  • 455581e chore: bump runner version to 4.18.1 (#218)
  • 7e596f2 Release v4.18.0 🚀
  • 64bf93a chore: bump runner version to 4.18.0 (#217)
  • 63f3e98 Release v4.17.6 🚀
  • 481045a chore: bump runner version to 4.17.6
  • 3ab7a45 feat: skip hash check error when installing pre-release
  • c145068 Release v4.17.5 🚀
  • 0cb911b chore: bump runner version to 4.17.5
  • 1fc8046 chore: bump runner version to 4.17.4
  • Additional commits viewable in compare view

Updates python-semantic-release/python-semantic-release from 10.4.1 to 10.5.3

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v10.5.3 (2025-12-14)

This release is published under the MIT License.

🪲 Bug Fixes

  • cmd-version: Resolve unauthenticated git repo issues for upstream verification (PR#1388, e164f68)

  • github-action: Fix failed signing issue when ssh was missing from action environment (PR#1389, 18b7eda)

  • parser-conventional-monorepo: Fix parser opts validator for outside dir path matches (PR#1382, a51eadd)

✅ Resolved Issues

  • #1373: verify_upstream_unchanged fails on github actions when git repo is unauthenticated

  • #1376: ssh-agent & ssh-add is missing from python-semantic-release github action

  • #1380: Monorepo path_filters fails to reference paths outside the current package subtree


Detailed Changes: v10.5.2...v10.5.3


Installable artifacts are available from:

v10.5.2

[!WARNING] 2025-11-11: Release fails git repo is unauthenticated (See #1373) & if you use SSH commit & tag signing (See #1376) - Resolved in v10.5.3

v10.5.2 (2025-11-10)

This release is published under the MIT License.

🪲 Bug Fixes

  • cmd-version: Toggle verify upstream off when no version commit is made (PR#1370, e0b3b70)

Detailed Changes: v10.5.1...v10.5.2


... (truncated)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

.. _changelog:

========= CHANGELOG

.. _changelog-v10.5.3:

v10.5.3 (2025-12-14)

🪲 Bug Fixes

  • cmd-version: Resolve unauthenticated git repo issues for upstream verification, closes [#1373](https://github.com/python-semantic-release/python-semantic-release/issues/1373)_ (PR#1388, e164f68)

  • github-action: Fix failed signing issue when ssh was missing from action environment, closes [#1376](https://github.com/python-semantic-release/python-semantic-release/issues/1376)_ (PR#1389, 18b7eda)

  • parser-conventional-monorepo: Fix parser opts validator for outside dir path matches, closes [#1380](https://github.com/python-semantic-release/python-semantic-release/issues/1380)_ (PR#1382, a51eadd)

.. _#1373: python-semantic-release/python-semantic-release#1373 .. _#1376: python-semantic-release/python-semantic-release#1376 .. _#1380: python-semantic-release/python-semantic-release#1380 .. _18b7eda: python-semantic-release/python-semantic-release@18b7eda .. _a51eadd: python-semantic-release/python-semantic-release@a51eadd .. _e164f68: python-semantic-release/python-semantic-release@e164f68 .. _PR#1382: python-semantic-release/python-semantic-release#1382 .. _PR#1388: python-semantic-release/python-semantic-release#1388 .. _PR#1389: python-semantic-release/python-semantic-release#1389

.. _changelog-v10.5.2:

v10.5.2 (2025-11-10)

🪲 Bug Fixes

  • cmd-version: Toggle verify upstream off when no version commit is made (PR#1370, e0b3b70)

.. _e0b3b70: python-semantic-release/python-semantic-release@e0b3b70 .. _PR#1370: python-semantic-release/python-semantic-release#1370

.. _changelog-v10.5.1:

... (truncated)

Commits
  • 350c48f chore: release v10.5.3
  • a51eadd fix(parser-conventional-monorepo): fix parser opts validator for outside dir ...
  • 427af48 test(fixtures): upgrade monorepos to monitor external package files
  • 27a006c test(fixtures): upgrade commit simulation to modify specific files
  • e164f68 fix(cmd-version): resolve unauthenticated git repo issues for upstream verifi...
  • 18b7eda fix(github-action): fix failed signing issue when ssh was missing from action...
  • 779af88 ci(deps): bump tj-actions/changed-files@v47.0.0 action to v47.0.1 (#1394)
  • edf0229 ci(deps): bump actions/stale@v10.1.0 to v10.1.1 (#1394)
  • e0927e3 ci(deps): bump actions/setup-python@v6.0.0 to v6.1.0 (#1394)
  • b984f41 ci(deps): bump actions/upload-artifact@v5.0.0 to v6.0.0 (#1394)
  • Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.0

✨ What's Changed

The main change in this release is that verbose and print-hash inputs are now on by default. This was contributed by @​whitequark💰 in #397.

📝 Docs

@​woodruffw💰 updated the mentions of PEP 740 to stop implying that it might be experimental (it hasn't been for quite a while!) in #388 and @​him2him2💰 brushed up some grammar in the README and SECURITY docs via #395.

🛠️ Internal Updates

@​woodruffw💰 bumped sigstore and pypi-attestations in the lock file (#391) and @​webknjaz💰 added infra for using type annotations in the project (#381).

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.13.0...v1.14.0

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​facutuesca💰 and @​woodruffw💰 for helping maintain this project when I can't!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

Commits
  • cef2210 Merge pull request #397 from whitequark/patch-1
  • b4595e2 Enable verbose and print-hash by default.
  • e2bab26 Merge pull request #395 from him2him2/docs/fix-typos-and-grammar
  • 7495c38 docs: fix typos and grammar in README and SECURITY
  • 03f86fe Merge pull request #388 from woodruffw-forks/ww/rm-experimental
  • 4c78f1c Merge branch 'unstable/v1' into ww/rm-experimental
  • b5a6e8b deps: bump sigstore and pypi-attestations
  • a48a03e remove another experimental mention
  • 8087a88 action: remove a lingering mention of PEP 740 being experimental
  • 3317ede 🧪 Integrate actionlint via pre-commit framework
  • Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.6.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

… 11 updates

Bumps the github-actions group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `7.0.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.0.0` | `6.3.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.1` | `7.0.0` |
| [CodSpeedHQ/action](https://github.com/codspeedhq/action) | `4.0.1` | `4.18.1` |
| [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `10.4.1` | `10.5.3` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.13.0` | `1.14.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.6.0` | `4.2.0` |
| [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `3.2.0` | `4.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `8.0.1` |
| [tiangolo/issue-manager](https://github.com/tiangolo/issue-manager) | `0.6.0` | `0.8.0` |



Updates `actions/checkout` from 5.0.0 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...9c091bb)

Updates `actions/setup-python` from 6.0.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@e797f83...ece7cb0)

Updates `codecov/codecov-action` from 5.5.1 to 7.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...fb8b358)

Updates `CodSpeedHQ/action` from 4.0.1 to 4.18.1
- [Release notes](https://github.com/codspeedhq/action/releases)
- [Changelog](https://github.com/CodSpeedHQ/action/blob/main/CHANGELOG.md)
- [Commits](CodSpeedHQ/action@653fdc3...a4a36bb)

Updates `python-semantic-release/python-semantic-release` from 10.4.1 to 10.5.3
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst)
- [Commits](python-semantic-release/python-semantic-release@4d4cb0a...350c48f)

Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@ed0c539...cef2210)

Updates `docker/setup-qemu-action` from 3.6.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@2910929...96fe6ef)

Updates `pypa/cibuildwheel` from 3.2.0 to 4.1.0
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@7c619ef...2947353)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...043fb46)

Updates `actions/download-artifact` from 5.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...3e5f45b)

Updates `tiangolo/issue-manager` from 0.6.0 to 0.8.0
- [Release notes](https://github.com/tiangolo/issue-manager/releases)
- [Changelog](https://github.com/tiangolo/issue-manager/blob/master/release-notes.md)
- [Commits](tiangolo/issue-manager@0.6.0...0.8.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: CodSpeedHQ/action
  dependency-version: 4.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: python-semantic-release/python-semantic-release
  dependency-version: 10.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: pypa/cibuildwheel
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tiangolo/issue-manager
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 1, 2026
@codecov

codecov Bot commented Jul 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (1c1227f) to head (6b97ec2).

Additional details and impacted files
@@            Coverage Diff            @@
##              main       #89   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           21        21           
  Branches         6         6           
=========================================
  Hits            21        21           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed

codspeed Bot commented Jul 1, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 5 untouched benchmarks


Comparing dependabot/github_actions/github-actions-2d4777cd08 (6b97ec2) with main (1c1227f)

Open in CodSpeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants