Bump the actions group across 1 directory with 5 updates #4

dependabot · 2024-05-13T17:12:04Z

Bumps the actions group with 5 updates in the / directory:

Package	From	To
conda-incubator/setup-miniconda	`3.0.0`	`3.0.4`
actions/setup-python	`4`	`5`
actions/upload-artifact	`3`	`4`
pypa/cibuildwheel	`2.16`	`2.18`
actions/download-artifact	`3`	`4`

Updates conda-incubator/setup-miniconda from 3.0.0 to 3.0.4

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 3.0.4

Fixes

#345 Fix running on macOS 13 on Intel since the runners no longer provide miniconda by default.

Tasks and Maintenance

#337 Bump conda-incubator/setup-miniconda from 3.0.2 to 3.0.3 (#337)

#338 Bump normalize-url from 8.0.0 to 8.0.1

#340 Bump undici from 5.27.4 to 5.28.5

#337: conda-incubator/setup-miniconda#337 #338: conda-incubator/setup-miniconda#338 #340: conda-incubator/setup-miniconda#340 #345: conda-incubator/setup-miniconda#345

Full Changelog: conda-incubator/setup-miniconda@v3.0.3...v3.0.4

Version 3.0.3

Fixes

#336 Fall back to miniconda3 latest when no bundled version + empty with params

Tasks and Maintenance

#335 Bump conda-incubator/setup-miniconda from 3.0.1 to 3.0.2

#335: conda-incubator/setup-miniconda#335 #336: conda-incubator/setup-miniconda#336

Full Changelog: conda-incubator/setup-miniconda@v3...v3.0.3

Version 3.0.2

Fixes

#312 Enable ARM64 on macOS for Miniforge and Mambaforge including automatic architecture detection.

Tasks and Maintenance

#327 Bump conda-incubator/setup-miniconda from 3.0.0 to 3.0.1

#330 Bump actions/cache from 3 to 4

#334 Bump undici from 5.27.2 to 5.28.3

#312: conda-incubator/setup-miniconda#312 #327: conda-incubator/setup-miniconda#327

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v3.0.4 (2024-04-25)

Fixes

#345 Fix running on macOS 13 on Intel since the runners no longer provide miniconda by default.

Tasks and Maintenance

#337 Bump conda-incubator/setup-miniconda from 3.0.2 to 3.0.3 (#337)

#338 Bump normalize-url from 8.0.0 to 8.0.1

#340 Bump undici from 5.27.4 to 5.28.5

#337: conda-incubator/setup-miniconda#337 #338: conda-incubator/setup-miniconda#338 #340: conda-incubator/setup-miniconda#340 #345: conda-incubator/setup-miniconda#345

v3.0.3 (2024-02-27)

Fixes

#336 Fall back to miniconda3 latest when no bundled version + empty with params

Tasks and Maintenance

#335 Bump conda-incubator/setup-miniconda from 3.0.1 to 3.0.2

#335: conda-incubator/setup-miniconda#335 #336: conda-incubator/setup-miniconda#336

v3.0.2 (2024-02-22)

Fixes

#312 Enable ARM64 on macOS for Miniforge and Mambaforge including automatic architecture detection.

Tasks and Maintenance

#327 Bump conda-incubator/setup-miniconda from 3.0.0 to 3.0.1

#330 Bump actions/cache from 3 to 4

#334 Bump undici from 5.27.2 to 5.28.3

#312: conda-incubator/setup-miniconda#312 #327: conda-incubator/setup-miniconda#327

... (truncated)

Commits

a426040 Update changelog. (#347)
333e129 Merge pull request #345 from conda-incubator/debug-no-conda
8cd84f7 npm audit fix, format, check, build
4494701 skip this one
a587dba redist
dceb88d use bundled only if is defined and non-empty
36b8cc8 add one more test
35d9406 add one more test for macos 13/14
3ec85ce Bump undici from 5.28.3 to 5.28.4 (#340)
a8b0ce9 Bump normalize-url from 8.0.0 to 8.0.1 (#338)
Additional commits viewable in compare view

Updates actions/setup-python from 4 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py
Besides, the release contains such changes as:

Trim python version when reading from file by @FerranPares in actions/setup-python#628

Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724

Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723

Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743

advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729

Examples now use checkout@v4 by @simonw in actions/setup-python#738

Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761

New Contributors

@FerranPares made their first contribution in actions/setup-python#628

@timfel made their first contribution in actions/setup-python#694

@jeffwidman made their first contribution in actions/setup-python#724

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in actions/setup-python#702

Add range validation for toml files by @dmitry-shibanov in actions/setup-python#726

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).
      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits

82c7e63 Documentation changes for avoiding rate limit issues on GHES (#835)
10aa35a feat: fallback to raw endpoint for manifest when rate limit is reached (#766)
9a7ac94 Bump undici from 5.27.2 to 5.28.3 (#817)
871daa9 Fix the "Specifying multiple Python/PyPy versions" link (#782)
2f07895 Fix broken README.md link (#793)
e9d6f99 Replace setup-python@v4 by setup-python@v5 in README (#776)
0a5c615 Update action to node20 (#772)
0ae5836 Add example of GraalPy to docs (#773)
b64ffca update actions/checkout to v4 (#761)
8d28961 Examples now use checkout@v4 (#738)
Additional commits viewable in compare view

Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@vmjoseph made their first contribution in actions/upload-artifact#464

Full Changelog: actions/upload-artifact@v3...v4.0.0

v3.1.3

What's Changed

chore(github): remove trailing whitespaces by @ljmf00 in actions/upload-artifact#313

Bump @actions/artifact version to v1.1.2 by @bethanyj28 in actions/upload-artifact#436

Full Changelog: actions/upload-artifact@v3...v3.1.3

v3.1.2

Update all @actions/* NPM packages to their latest versions- #374

Update all dev dependencies to their most recent versions - #375

v3.1.1

Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Bump @actions/artifact to v1.1.0 (actions/upload-artifact#327)

Adds checksum headers on artifact upload (actions/toolkit#1095) (actions/toolkit#1063)

Commits

6546280 updating package version
c004fb4 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
90aba49 updating toolkit artifact dependency to 2.1.6
b06cde3 Merge pull request #563 from actions/eggyhead/release-4.3.2
1746f4a Revert "updating to release 4.3.2"
31685d0 updating to release 4.3.2
18bf333 Merge pull request #562 from actions/eggyhead/update-artifact-v215
dac413b update package lock version
bb3b4a3 updating package version
3e3da83 updating artifact and core dependencies
Additional commits viewable in compare view

Updates pypa/cibuildwheel from 2.16 to 2.18

Release notes

Sourced from pypa/cibuildwheel's releases.

v2.18.0

✨ Adds CPython 3.13 support, under the prerelease flag CIBW_PRERELEASE_PYTHONS. This version of cibuildwheel uses 3.13.0b1. Free-threading mode is not available yet, waiting on official binaries (planned for beta 2) and pip support. While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.13 will be available in cibuildwheel without the flag. (#1816)

✨ Musllinux now defaults to musllinux_1_2. You can set the older musllinux_1_1 via config if needed. (#1817)

🛠 No longer pre-seed setuptools/wheel in virtual environments (#1819)

🛠 Respect the constraints file when building with pip, matching build (#1818)

🛠 Use uv to compile our pinned dependencies, 10x faster and doesn't require special setup (#1778)

🐛 Fix an issue with the schema (#1788)

📚 Document the new delocate error checking macOS versions (#1766)

📚 Document Rust builds (#1816)

📚 Speed up our readthedocs builds with uv, 26 seconds -> 6 seconds to install dependencies (#1816)

v2.17.0

🌟 Adds the ability to inherit configuration in TOML overrides. This makes certain configurations much simpler. If you're overriding an option like before-build or environment, and you just want to add an extra command or environment variable, you can just append (or prepend) to the previous config. See the docs for more information. (#1730)

🌟 Adds official support for native arm64 macOS GitHub runners. To use them, just specify macos-14 as an os of your job in your workflow file. You can also keep macos-13 in your build matrix to build x86_64. Check out the new GitHub Actions example config.

✨ You no longer need to specify --platform to run cibuildwheel locally! Instead it will detect your platform automatically. This was a safety feature, no longer necessary. (#1727)

🛠 Removed setuptools and wheel pinned versions. This only affects old-style projects without a pyproject.toml, projects with pyproject.toml are already getting fresh versions of their build-system.requires installed into an isolated environment. (#1725)

🛠 Improve how the GitHub Action passes arguments (#1757)

🛠 Remove a system-wide install of pipx in the GitHub Action (#1745)

🐛 No longer will cibuildwheel override the PIP_CONSTRAINT environment variable when using the build frontend. Instead it will be extended. (#1675)

🐛 Fix a bug where building and testing both x86_86 and arm64 wheels on the same runner caused the wrong architectures in the test environment (#1750)

🐛 Fix a bug that prevented testing a CPython 3.8 wheel targeting macOS 11+ on x86_64 (#1768)

📚 Moved the docs onto the official PyPA domain - they're now available at https://cibuildwheel.pypa.io . (#1775)

📚 Docs and examples improvements (#1762, #1734)

v2.16.5

🐛 Fix an incompatibility with the GitHub Action and new GitHub Runner images for Windows that bundle Powershell 7.3+ (#1741)

🛠 Preliminary support for new macos-14 arm64 runners (#1743)

v2.16.4

🛠 Update manylinux pins to upgrade from a problematic PyPy version. (#1737)

v2.16.3

🐛 Fix a bug when building from sdist, where relative paths to files in the package didn't work because the working directory was wrong (#1687)

🛠 Adds the ability to disable mounting the host filesystem in containers to /host, through the disable_host_mount suboption on CIBW_CONTAINER_ENGINE.

📚 A lot of docs improvements! (#1708, #1705, #1686, #1679, #1667, #1665)

v2.16.2

🛠 Updates CPython 3.12 version to 3.12.0, final release (#1635)

✨ Adds a debug option CIBW_DEBUG_KEEP_CONTAINER to stop cibuildwheel deleting build containers after the build finishes. (#1620)

📚 Adds support for [tool.cibuildwheel] checking by adding a schema compatible with the validate-pyproject tool (#1622, #1628, #1629)

🐛 Fix parsing of CIBW_CONTAINER_ENGINE and CIBW_BUILD_FRONTEND options to not break arguments on : characters (#1621)

🐛 Fix the evaluation order of CIBW_ENVIRONMENT and CIBW_ENVIRONMENT_PASS so that CIBW_ENVIRONMENT assignments can reference environment variables passed through from the host machine. (#1617)

🛠 Supports manylinux images' deferred installation of interpreters through the manylinux-interpreters tool (#1630)

v2.16.1

🛠 Updates the prerelease CPython 3.12 version to 3.12.0rc3 (#1625)

🛠 Only calls linux32 in containers when necessary (#1599)

Changelog

Sourced from pypa/cibuildwheel's changelog.

title: Changelog

Changelog

v2.18.0

12 May 2024

✨ Adds CPython 3.13 support, under the prerelease flag CIBW_PRERELEASE_PYTHONS. This version of cibuildwheel uses 3.13.0b1. Free-threading mode is not available yet, waiting on official binaries (planned for beta 2) and pip support.

While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.13 will be available in cibuildwheel without the flag. (#1816)

✨ Musllinux now defaults to musllinux_1_2. You can set the older manylinux_1_1 via config if needed. (#1817)

🛠 No longer pre-seed setuptools/wheel in virtual environments (#1819)

🛠 Respect the constraints file when building with pip, matching build (#1818)

🛠 Use uv to compile our pinned dependencies, 10x faster and doesn't require special setup (#1778)

🐛 Fix an issue with the schema (#1788)

📚 Document the new delocate error checking macOS versions (#1766)

📚 Document Rust builds (#1816)

📚 Speed up our readthedocs builds with uv, 26 seconds -> 6 seconds to install dependencies (#1816)

v2.17.0

11 March 2024

🌟 Adds the ability to inherit configuration in TOML overrides. This makes certain configurations much simpler. If you're overriding an option like before-build or environment, and you just want to add an extra command or environment variable, you can just append (or prepend) to the previous config. See the docs for more information. (#1730)

🌟 Adds official support for native arm64 macOS GitHub runners. To use them, just specify macos-14 as an os of your job in your workflow file. You can also keep macos-13 in your build matrix to build x86_64. Check out the new GitHub Actions example config.

✨ You no longer need to specify --platform to run cibuildwheel locally! Instead it will detect your platform automatically. This was a safety feature, no longer necessary. (#1727)

🛠 Removed setuptools and wheel pinned versions. This only affects old-style projects without a pyproject.toml, projects with pyproject.toml are already getting fresh versions of their build-system.requires installed into an isolated environment. (#1725)

🛠 Improve how the GitHub Action passes arguments (#1757)

🛠 Remove a system-wide install of pipx in the GitHub Action (#1745)

🐛 No longer will cibuildwheel override the PIP_CONSTRAINT environment variable when using the build frontend. Instead it will be extended. (#1675)

🐛 Fix a bug where building and testing both x86_86 and arm64 wheels on the same runner caused the wrong architectures in the test environment (#1750)

🐛 Fix a bug that prevented testing a CPython 3.8 wheel targeting macOS 11+ on x86_64 (#1768)

📚 Moved the docs onto the official PyPA domain - they're now available at https://cibuildwheel.pypa.io . (#1775)

📚 Docs and examples improvements (#1762, #1734)

v2.16.5

30 January 2024

🐛 Fix an incompatibility with the GitHub Action and new GitHub Runner images for Windows that bundle Powershell 7.3+ (#1741)

🛠 Preliminary support for new macos-14 arm64 runners (#1743)

v2.16.4

... (truncated)

Commits

711a3d0 Bump version: v2.18.0
3873a1e chore: update bump_version script
6dd4f15 docs: rust (#1816)
44c4742 feat: add Python 3.13 beta 1 (#1815)
c021744 feat: move default musllinux build to musllinux_1_2 (#1817)
cf18014 fix: do not pre-seed setuptools / wheel in virtual environment (#1819)
3ea0a6c fix: respect constraints when building with pip (#1818)
30a0dec [Bot] Update dependencies (#1812)
988d512 [pre-commit.ci] pre-commit autoupdate (#1813)
98d57d9 Merge pull request #1766 from Czaki/delocate_info
Additional commits viewable in compare view

Updates actions/download-artifact from 3 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@bflad made their first contribution in actions/download-artifact#194

Full Changelog: actions/download-artifact@v3...v4.0.0

v3.0.2

Bump @actions/artifact to v1.1.1 - actions/download-artifact#195

Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet Migrate dev environment and workflows to node16 actions/toolkit#1278

v3.0.1

Bump @actions/core to 1.10.0

Commits

65a9edc Merge pull request #325 from bethanyj28/main
fdd1595 licensed
c13dba1 update @actions/artifact dependency
0daa75e Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.6
9c19ed7 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
3d3ea87 updating license
89af5db updating artifact package v2.1.6
b4aefff Merge pull request #323 from actions/eggyhead/update-artifact-v215
8caf195 package lock update
d7a2ec4 updating package version
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) | `3.0.0` | `3.0.4` | | [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3` | `4` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.16` | `2.18` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `3` | `4` | Updates `conda-incubator/setup-miniconda` from 3.0.0 to 3.0.4 - [Release notes](https://github.com/conda-incubator/setup-miniconda/releases) - [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md) - [Commits](conda-incubator/setup-miniconda@v3.0.0...v3.0.4) Updates `actions/setup-python` from 4 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) Updates `actions/upload-artifact` from 3 to 4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3...v4) Updates `pypa/cibuildwheel` from 2.16 to 2.18 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@v2.16...v2.18) Updates `actions/download-artifact` from 3 to 4 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3...v4) --- updated-dependencies: - dependency-name: conda-incubator/setup-miniconda dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-06-10T17:37:01Z

Superseded by #5.

dependabot bot added the dependencies Pull requests that update a dependency file label May 13, 2024

dependabot bot mentioned this pull request May 13, 2024

Bump the actions group with 5 updates #3

Closed

dependabot bot closed this Jun 10, 2024

dependabot bot deleted the dependabot/github_actions/actions-8cbd2d0b2c branch June 10, 2024 17:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the actions group across 1 directory with 5 updates #4

Bump the actions group across 1 directory with 5 updates #4

Uh oh!

dependabot bot commented on behalf of github May 13, 2024 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jun 10, 2024

Uh oh!

Uh oh!

Bump the actions group across 1 directory with 5 updates #4

Bump the actions group across 1 directory with 5 updates #4

Uh oh!

Conversation

dependabot bot commented on behalf of github May 13, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 3.0.4

Fixes

Tasks and Maintenance

Version 3.0.3

Fixes

Tasks and Maintenance

Version 3.0.2

Fixes

Tasks and Maintenance

v3.0.4 (2024-04-25)

Fixes

Tasks and Maintenance

v3.0.3 (2024-02-27)

Fixes

Tasks and Maintenance

v3.0.2 (2024-02-22)

Fixes

Tasks and Maintenance

v5.0.0

What's Changed

v4.8.0

What's Changed

New Contributors

v4.7.1

What's Changed

v4.7.0

v4.0.0

What's Changed

New Contributors

v3.1.3

What's Changed

v3.1.2

v3.1.1

v3.1.0

What's Changed

v2.18.0

v2.17.0

v2.16.5

v2.16.4

v2.16.3

v2.16.2

v2.16.1

title: Changelog

Changelog

v2.18.0

v2.17.0

v2.16.5

v2.16.4

v4.0.0

What's Changed

New Contributors

v3.0.2

v3.0.1

Uh oh!

dependabot bot commented on behalf of github Jun 10, 2024

Uh oh!

Uh oh!

dependabot bot commented on behalf of github May 13, 2024 •

edited

Loading