chore(deps): bump actions/setup-python from 5 to 7 by dependabot[bot] · Pull Request #225 · KooshaPari/PhenoDevOps

dependabot · 2026-07-22T00:51:28Z

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-python#1330

Pin SHA commits and update docs with latest versions by @HarithaVattikuti in actions/setup-python#1338

Remove the pip-install input by @gowridurgad in actions/setup-python#1336

Bug Fix

Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in actions/setup-python#1335

Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in actions/setup-python#1332

Dependency Upgrade

Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in actions/setup-python#1328

Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in actions/setup-python#1333

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-python#1337

New Contributors

@lmvysakh made their first contribution in actions/setup-python#1335

@philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

... (truncated)

Commits

5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
0f3a009 Remove the pip-install input (#1336)
f8cf429 Migrate to ESM and upgrade dependencies (#1330)
54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
c709277 Annotation code fix (#1335)
6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
Additional commits viewable in compare view

dependabot · 2026-07-22T00:51:29Z

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

codeant-ai · 2026-07-22T00:51:33Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

github-actions · 2026-07-22T01:00:08Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-07-22T01:00:25Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

kilo-code-bot · 2026-07-22T07:44:57Z

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)

.github/workflows/ci.yml - SHA bump at lines 276 and 296
.github/workflows/security.yml - SHA bump at line 95
.github/workflows/spec-validation.yml - SHA bump at line 37

_{Reviewed by step-3.7-flash · Input: 42.4K · Output: 8.5K · Cached: 161K}

github-actions · 2026-07-29T12:42:18Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-07-29T12:42:32Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-advanced-security · 2026-07-29T12:57:35Z

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

github-actions · 2026-08-01T12:04:56Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-08-01T12:05:05Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-08-02T01:30:39Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-08-02T01:32:45Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 5fda3b95a4ea91299a34e894583c3862153e4b97 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-08-02T03:09:12Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2026-08-02T04:07:12Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

github-actions · 2026-08-02T04:07:13Z

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

dependabot Bot added the dependencies Pull requests updating dependencies label Jul 22, 2026

dependabot Bot requested a review from KooshaPari as a code owner July 22, 2026 00:51

dependabot Bot added the dependencies Pull requests updating dependencies label Jul 22, 2026

dependabot Bot mentioned this pull request Jul 22, 2026

chore(deps): bump actions/setup-python from c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 to 0cb1a84326b90186fcd211036c65b42819794c87 #222

Closed

dependabot Bot changed the title ~~chore(deps): bump actions/setup-python from c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 to 5fda3b95a4ea91299a34e894583c3862153e4b97~~ chore(deps): bump actions/setup-python from 5 to 7 Jul 29, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-5fda3b95a4ea91299a34e894583c3862153e4b97 branch from c6ce235 to 742dbb2 Compare July 29, 2026 11:45

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-5fda3b95a4ea91299a34e894583c3862153e4b97 branch from 742dbb2 to 99dd94c Compare August 1, 2026 11:38

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-5fda3b95a4ea91299a34e894583c3862153e4b97 branch from 99dd94c to d69880b Compare August 2, 2026 00:17

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-5fda3b95a4ea91299a34e894583c3862153e4b97 branch from d69880b to ab46988 Compare August 2, 2026 03:08

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026

Labels

Uh oh!

codeant-ai Bot commented Jul 22, 2026

Uh oh!

github-actions Bot commented Jul 22, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Jul 22, 2026

🔒 Snyk Security Scan Results

Uh oh!

kilo-code-bot Bot commented Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Uh oh!

github-actions Bot commented Jul 29, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Jul 29, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-advanced-security AI commented Jul 29, 2026

What Enabling Code Scanning Means:

Uh oh!

github-actions Bot commented Aug 1, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Aug 1, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Aug 2, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Aug 2, 2026

🔒 Snyk Security Scan Results

Uh oh!

sonarqubecloud Bot commented Aug 2, 2026

Quality Gate passed

Uh oh!

github-actions Bot commented Aug 2, 2026

🔒 Snyk Security Scan Results

Uh oh!

github-actions Bot commented Aug 2, 2026

🔒 Snyk Security Scan Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 22, 2026 •

edited

Loading

kilo-code-bot Bot commented Jul 22, 2026 •

edited

Loading