chore(ci): bump actions/setup-python from 6 to 7 - #6
Conversation
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
area: ci/cd
🤖 AI Analysis for bg-mcpcoreTechnical Summary of the Pull RequestTechnical Requirements and Constraints
Impact AssessmentThis issue/PR affects bg-mcpcore, the shared framework for BAUER GROUP Generated automatically to aid triage; it may not be 100% accurate. Suggested Labels: performance test |
karlspace
left a comment
karlspace
left a comment
There was a problem hiding this comment.
Thanks Dependabot.
Scope: actions/setup-python v6 → v7 at both call sites in .github/workflows/tests.yml (the quality matrix job and the extras validation job).
Breaking changes in v7.0.0, and why they miss us:
- The
pip-installinput was removed (actions/setup-python#1336). This is the one genuine break. Both of our call sites passpython-versionand nothing else, so there is nothing to migrate. - EOL Python versions dropped. Our matrix is 3.12 / 3.13 / 3.14 — all current.
Worth having, on the upside: manifest fetches are now validated and retried instead of failing silently (#1332), and stderr output is annotated as a warning rather than an error (#1335) — both reduce false-red runs on this gate.
We do not use setup-python's built-in cache: input; pip caching here is explicit via actions/cache (#5), so the bundled @actions/cache upgrade in this release is not on our path.
CI: green across py3.12 / 3.13 / 3.14 and all five extras. Label & Triage PR is red for a pre-existing config reason unrelated to this PR.
Related: #4 (actions/checkout v7) already landed in this file; #5 (actions/cache v6) follows.
Merging.
1 participant
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps actions/setup-python from 6 to 7.
Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
5fda3b9Pin SHA commits and update docs with latest versions (#1338)4ab7e95Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-00f3a009Remove the pip-install input (#1336)f8cf429Migrate to ESM and upgrade dependencies (#1330)54baeeaValidate and retry manifest fetch to prevent silent failures (#1332)c709277Annotation code fix (#1335)6849080remove EOL Python versions and Bumps numpy text fixture (#1333)0903b46Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)