chore: bump the actions group across 1 directory with 2 updates by dependabot[bot] · Pull Request #215 · pybind/python_example
Bumps the actions group with 2 updates in the / directory: actions/setup-python and pypa/cibuildwheel.
Updates actions/setup-python from 5 to 6
Release notes
Sourced from actions/setup-python's releases.
v6.0.0
What's Changed
Breaking Changes
- Upgrade to node 24 by
@salmanmkcin actions/setup-python#1164Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Enhancements:
- Add support for
pip-versionby@priyagupta108in actions/setup-python#1129- Enhance reading from .python-version by
@krystof-kin actions/setup-python#787- Add version parsing from Pipfile by
@aradkdjin actions/setup-python#1067Bug fixes:
- Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by
@aparnajyothi-yin actions/setup-python#1183- Change missing cache directory error to warning by
@aparnajyothi-yin actions/setup-python#1182- Add Architecture-Specific PATH Management for Python with --user Flag on Windows by
@aparnajyothi-yin actions/setup-python#1122- Include python version in PyPy python-version output by
@cdce8pin actions/setup-python#1110- Update docs: clarification on pip authentication with setup-python by
@priya-kinthaliin actions/setup-python#1156Dependency updates:
- Upgrade idna from 2.9 to 3.7 in /tests/data by
@dependabot[bot] in actions/setup-python#843- Upgrade form-data to fix critical vulnerabilities #182 & #183 by
@aparnajyothi-yin actions/setup-python#1163- Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by
@aparnajyothi-yin actions/setup-python#1165- Upgrade actions/checkout from 4 to 5 by
@dependabot[bot] in actions/setup-python#1181- Upgrade
@actions/tool-cachefrom 2.0.1 to 2.0.2 by@dependabot[bot] in actions/setup-python#1095New Contributors
@krystof-kmade their first contribution in actions/setup-python#787@cdce8pmade their first contribution in actions/setup-python#1110@aradkdjmade their first contribution in actions/setup-python#1067Full Changelog: actions/setup-python@v5...v6.0.0
v5.6.0
What's Changed
- Workflow updates related to Ubuntu 20.04 by
@aparnajyothi-yin actions/setup-python#1065- Fix for Candidate Not Iterable Error by
@aparnajyothi-yin actions/setup-python#1082- Upgrade semver and
@types/semverby@dependabotin actions/setup-python#1091- Upgrade prettier from 2.8.8 to 3.5.3 by
@dependabotin actions/setup-python#1046- Upgrade ts-jest from 29.1.2 to 29.3.2 by
@dependabotin actions/setup-python#1081Full Changelog: actions/setup-python@v5...v5.6.0
v5.5.0
What's Changed
Enhancements:
- Support free threaded Python versions like '3.13t' by
@colesburyin actions/setup-python#973- Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade
@action/cachefrom 4.0.0 to 4.0.3 by@priya-kinthaliin actions/setup-python#1056- Add support for .tool-versions file in setup-python by
@mahabaleshwarsin actions/setup-python#1043Bug fixes:
- Fix architecture for pypy on Linux ARM64 by
@mayeutin actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.
... (truncated)
Commits
e797f83Upgrade to node 24 (#1164)3d1e2d2Revert "Enhance cache-dependency-path handling to support files outside the w...65b0712Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...5b668cfBump actions/checkout from 4 to 5 (#1181)f62a0e2Change missing cache directory error to warning (#1182)9322b3cUpgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...fbeb884Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)03bb615Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51dAdd version parsing from Pipfile (#1067)3c6f142update documentation (#1156)- Additional commits viewable in compare view
Updates pypa/cibuildwheel from 3.1 to 3.2
Release notes
Sourced from pypa/cibuildwheel's releases.
v3.2.0
- ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
- 🛠 Update to CPython 3.14.0rc3 (#2602)
- 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
- 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
⚠️ PyPy 3.10 was moved topypy-eolin theenableoption, as it is now end-of-life. (#2521)- 📚 Docs improvements (#2574, #2601, #2598)
v3.1.4
- ✨ Add a
--clean-cachecommand to clean up our cache (#2489)- 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
- 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
- 🐛 Fix resolution with
pyodide-buildwhendependency-versionsis set (#2548)- 🐛 Set
CMAKE_FIND_ROOT_PATH_MODE_PACKAGEtoBOTHon Android (#2547)- 🐛 Add
patchelfdependency for platforms that can build Android wheels (#2552)- 🐛 Ignore empty values for
CIBW_ARCHSlike most other environment variables (#2541)- 💼 The
colorandsuggest_on_errorargparse options are now default in 3.14rc1+ (#2554)- 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
- 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
- 🧪 Split out platforms iOS and Android in our tests (#2519)
- 🧪 Fix and enable doctests (#2546)
- 📚 Improve our docs on free-threading (#2549)
v3.1.3
- 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
- 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527, #2539)
- 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)
v3.1.2
⚠️ Add an error ifCIBW_FREE_THREADING_SUPPORTis set; you are likely missing 3.13t wheels, please use theenable/CIBW_ENABLE(#2520)- 🛠
riscv64now enabled if you target that architecture, it's now supported on PyPI (#2509)- 🛠 Add warning when using
cpython-experimental-riscv64(no longer needed) (#2526, #2528)- 🛠 iOS versions bumped, fixing issues with 3.14 (now RC 1) (#2530)
- 🐛 Fix bug in Android running wheel from our GitHub Action (#2517)
- 🐛 Fix warning when using
test-skipof"*-macosx_universal2:arm64"(#2522)- 🐛 Fix incorrect number of wheels reported in logs, again (#2517)
- 📚 We welcome our Android platform maintainer (#2516)
v3.1.1
Changelog
Sourced from pypa/cibuildwheel's changelog.
v2.23.2
24 March 2025
- 🐛 Workaround an issue with pyodide builds when running cibuildwheel with a Python that was installed via UV (#2328 via #2331)
- 🛠 Dependency updates, including a manylinux update that fixes an 'undefined symbol' error in gcc-toolset (#2334)
Commits
7c619efBump version: v3.2.0bbebb68[Bot] Update dependencies (#2603)5bbeaf8[pre-commit.ci] pre-commit autoupdate (#2604)7a67c6bAdd GraalPy 25 and remove workarounds for that version. (#2597)b8a4fbcImprove information about configuration overriding (#2598)70de033Replace themacos-13images with themacos-15-intelimages (GHA) (#2601)ce4c16f[Bot] Update dependencies (#2602)66490f0Add CMAKE_CROSSCOMPILING_EMULATOR to Android CMake toolchain (#2591)77b9e35[pre-commit.ci] pre-commit autoupdate (#2594)39e9da0[Bot] Update dependencies (#2593)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions