Skip to content

Update github-actions - #217

Merged
hugovk merged 1 commit into
mainfrom
renovate/github-actions
Nov 1, 2026
Merged

hugovk merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/download-artifact action patch v8.0.1 → v8.0.2
actions/setup-python action minor v7.0.0 → v7.1.0
astral-sh/setup-uv action minor v10.2.0 → v10.3.2 v10.3.3
hynek/build-and-inspect-python-package action patch v3.0.1 → v3.0.2
j178/prek-action action minor v3.0.0 → v3.1.0
pypa/gh-action-pypi-publish action patch v1.14.2 → v1.14.3
release-drafter/release-drafter action minor v7.7.0 → v7.10.0

Release Notes

actions/download-artifact

v8.0.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/setup-python

v7.1.0

Compare Source

What's Changed

Enhancements
Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

astral-sh/setup-uv

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes
🧰 Maintenance
📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

hynek/build-and-inspect-python-package

v3.0.2

Compare Source

This is a pure security dependency update brought to you by the number 4.

j178/prek-action

v3.1.0

Compare Source

What's Changed

Full Changelog: j178/prek-action@v3.0.2...v3.1.0

v3.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: j178/prek-action@v3.0.1...v3.0.2

v3.0.1

Compare Source

What's Changed

Full Changelog: j178/prek-action@v3.0.0...v3.0.1

pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

release-drafter/release-drafter

v7.10.0

Compare Source

What's Changed

New

Dependency Updates

11 changes

Maintenance

Documentation

New Contributors

  • No new contributors

Full Changelog: release-drafter/release-drafter@v7.9.0...v7.10.0

v7.9.0

Compare Source

What's Changed

New

Dependency Updates

Bug Fixes

Maintenance

New Contributors

  • No new contributors

Full Changelog: release-drafter/release-drafter@v7.8.0...v7.9.0

v7.8.0

Compare Source

What's Changed

Token authentication change

The token action input now takes precedence over env.GITHUB_TOKEN and defaults to ${{ github.token }}. Pass a PAT or GitHub App token through with.token, especially when publishing releases that should trigger downstream workflows:

with:
  token: ${{ secrets.PAT }}
  publish: true

New

Dependency Updates

36 changes

Bug Fixes

Maintenance

Documentation

New Contributors

Full Changelog: release-drafter/release-drafter@v7.7.0...v7.8.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added changelog: skip Exclude PR from release draft dependencies For dependencies labels Nov 1, 2026
@codecov

codecov Bot commented Nov 1, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.96%. Comparing base (5ecba47) to head (012f907).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #217   +/-   ##
=======================================
  Coverage   92.96%   92.96%           
=======================================
  Files           3        3           
  Lines         128      128           
=======================================
  Hits          119      119           
  Misses          9        9           
Flag Coverage Δ
macos-latest 91.40% <ø> (ø)
ubuntu-latest 91.40% <ø> (ø)
windows-latest 91.40% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@hugovk
hugovk merged commit c434eb2 into main Nov 1, 2026
56 checks passed
@hugovk
hugovk deleted the renovate/github-actions branch November 1, 2026 05:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

changelog: skip Exclude PR from release draft dependencies For dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant