chore(deps): update actions/setup-python action to v7 by renovate[bot] · Pull Request #21 · wave-av/api-spec

renovate · 2026-07-21T16:35:26Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	major	`v5.6.0` → `v7.0.0`

Release Notes

actions/setup-python (actions/setup-python)

`v7.0.0`

Compare Source

`v6.3.0`

Compare Source

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in #1323
Fix pip cache error handling on Windows by @priyagupta108 in #1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in #1281
Upgrade actions dependencies by @gowridurgad with @Copilot in #1303
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #1324
Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in #1322

Documentation

Update advanced-usage.md by @Dunky-Z in #811

New Contributors

@gowridurgad with @Copilot made their first contribution in #1303
@jasongin made their first contribution in #1324
@Dunky-Z made their first contribution in #811

Full Changelog: actions/setup-python@v6...v6.3.0

`v6.2.0`

Compare Source

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in #1259
Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in #1253 and #1264

Full Changelog: actions/setup-python@v6...v6.2.0

`v6.1.0`

Compare Source

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in #1201
Add graalpy early-access and windows builds by @timfel in #880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in #979
Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in #1139
Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in #1094
Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in #1199
Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in #1130
Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in #1234
Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in #1235

New Contributors

@yarikoptic made their first contribution in #979

Full Changelog: actions/setup-python@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Add support for pip-version by @priyagupta108 in #1129
Enhance reading from .python-version by @krystof-k in #787
Add version parsing from Pipfile by @aradkdj in #1067

Bug fixes:

Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @aparnajyothi-y in #1183
Change missing cache directory error to warning by @aparnajyothi-y in #1182
Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @aparnajyothi-y in #1122
Include python version in PyPy python-version output by @cdce8p in #1110
Update docs: clarification on pip authentication with setup-python by @priya-kinthali in #1156

Dependency updates:

Upgrade idna from 2.9 to 3.7 in /tests/data by @dependabot[bot] in #843
Upgrade form-data to fix critical vulnerabilities #182 & #183 by @aparnajyothi-y in #1163
Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @aparnajyothi-y in #1165
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #1181
Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in #1095

New Contributors

@krystof-k made their first contribution in #787
@cdce8p made their first contribution in #1110
@aradkdj made their first contribution in #1067

Full Changelog: actions/setup-python@v5...v6.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-07-21T16:35:31Z

⚠️ No Changeset found

Latest commit: 6829ec9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

cursor

Risk: low. Cursor Bugbot was not present on this PR; CI gates (Analyze, CodeQL, secrets, Socket, repo checks) passed. Approved: single SHA-pinned bump of actions/setup-python in CI only; no reviewers assigned.

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

greptile-apps · 2026-08-11T16:35:35Z

PR author is in the excluded authors list.

devin-ai-integration

Devin Review found 1 potential issue.

devin-ai-integration · 2026-08-11T16:36:02Z

        with:
          persist-credentials: false
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0


🔍 Shared reusable workflow bump only affects this repo's copy

This file is described in its header as the reusable cross-project gate sourced from wave-foundation (.github/workflows/_checks.yml:3-6) and the skill-validate job comments note it mirrors wave-foundation/scripts/validate-skills.py and must be kept in sync (.github/workflows/_checks.yml:48-50). Bumping actions/setup-python here only in api-spec introduces drift from the upstream source of truth that the comments explicitly warn about; worth confirming the same bump lands upstream.

Was this helpful? React with 👍 or 👎 to provide feedback.

macroscopeapp · 2026-08-11T16:36:51Z

Approvability

Verdict: Needs human review

This dependency update bumps actions/setup-python to v7.0.0 in a workflow file owned by wave-av/core-team (not the author). An unresolved comment notes this file is sourced from wave-foundation and the bump may introduce drift from upstream - worth human confirmation on sync.

No code changes detected at 455442a. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}

wave-bugbot · 2026-08-12T19:04:58Z

🟢 WAVE BugBot — clear

No confident findings on the changed lines.

_{Local review · $0 inference · wave-dispatch}

codeant-ai · 2026-08-26T18:10:27Z

Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.

cursor Bot approved these changes Jul 21, 2026

View reviewed changes

renovate Bot force-pushed the renovate/actions-setup-python-7.x branch 2 times, most recently from e96a3df to 6829ec9 Compare July 31, 2026 21:23

renovate Bot force-pushed the renovate/actions-setup-python-7.x branch from 6829ec9 to 8f34720 Compare August 11, 2026 16:35

devin-ai-integration Bot reviewed Aug 11, 2026

View reviewed changes

renovate Bot force-pushed the renovate/actions-setup-python-7.x branch from 8f34720 to 33eb506 Compare August 14, 2026 16:42

chore(deps): update actions/setup-python action to v7

455442a

renovate Bot force-pushed the renovate/actions-setup-python-7.x branch from 33eb506 to 455442a Compare August 26, 2026 18:10

Navigation Menu

Uh oh!

chore(deps): update actions/setup-python action to v7 - #21

chore(deps): update actions/setup-python action to v7#21
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/actions-setup-python-7.x

renovate Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

greptile-apps Bot commented Aug 11, 2026

Uh oh!

devin-ai-integration Bot left a comment

Uh oh!

devin-ai-integration Bot Aug 11, 2026

Uh oh!

macroscopeapp Bot commented Aug 11, 2026 •

edited

Loading

Uh oh!

wave-bugbot Bot commented Aug 12, 2026

Uh oh!

codeant-ai Bot commented Aug 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

v6.0.0

What's Changed

Breaking Changes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Configuration

Uh oh!

changeset-bot Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

greptile-apps Bot commented Aug 11, 2026

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

Uh oh!

devin-ai-integration Bot Aug 11, 2026

Choose a reason for hiding this comment

Uh oh!

macroscopeapp Bot commented Aug 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Approvability

Uh oh!

wave-bugbot Bot commented Aug 12, 2026

🟢 WAVE BugBot — clear

Uh oh!

codeant-ai Bot commented Aug 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jul 21, 2026 •

edited

Loading

`v7.0.0`

`v6.3.0`

`v6.2.0`

`v6.1.0`

`v6.0.0`

changeset-bot Bot commented Jul 21, 2026 •

edited

Loading

macroscopeapp Bot commented Aug 11, 2026 •

edited

Loading