Skip to content

chore(deps): bump the actions group across 1 directory with 4 updates - #4370

Merged
d-v-b merged 1 commit into
mainfrom
dependabot/github_actions/actions-c9fad1f4b3
Sep 17, 2026
Merged

d-v-b merged 1 commit into
mainfrom
dependabot/github_actions/actions-c9fad1f4b3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates in the / directory: astral-sh/setup-uv, github-community-projects/issue-metrics, scientific-python/upload-nightly-action and zizmorcore/zizmor-action.

Updates astral-sh/setup-uv from 10.0.1 to 10.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Commits

Updates github-community-projects/issue-metrics from 5.0.1 to 5.0.2

Release notes

Sourced from github-community-projects/issue-metrics's releases.

v5.0.2

Changelog

🐛 Bug Fixes

🧰 Maintenance

  • chore(deps): bump python from ce40764 to cad9a2c @dependabot[bot] (#820)
  • chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#821)
  • chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 1.2.3 to 2.0.0 @dependabot[bot] (#817)
  • chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#814)
  • chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#815)
  • chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml from 1.2.3 to 2.0.0 @dependabot[bot] (#816)
  • chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml from 1.2.3 to 2.0.0 @dependabot[bot] (#818)
  • chore(deps): bump python from 3.14.6-slim to 3.14.7-slim in the dependencies group @dependabot[bot] (#810)
  • chore(deps): bump pylint from 4.0.6 to 4.0.7 in the dependencies group @dependabot[bot] (#811)

See details of all code changes since previous release

Commits
  • a7dc2fb fix: paginate discussion comments so MAX_COMMENTS_EVAL is honored (#803)
  • 20fbb81 chore(deps): bump python from ce40764 to cad9a2c (#820)
  • 20f0454 chore(deps): bump the dependencies group with 4 updates (#821)
  • 9c06e98 chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/w...
  • 8035fb2 chore(deps): bump the dependencies group with 2 updates (#814)
  • f4df5b3 chore(deps): bump the dependencies group with 2 updates (#815)
  • a844294 chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/w...
  • 7b2b5a8 chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/w...
  • 5c01f05 chore(deps): bump python in the dependencies group (#810)
  • ae55e31 chore(deps): bump pylint from 4.0.6 to 4.0.7 in the dependencies group (#811)
  • See full diff in compare view

Updates scientific-python/upload-nightly-action from 0.6.4 to 0.6.5

Release notes

Sourced from scientific-python/upload-nightly-action's releases.

0.6.5

What's Changed

New Contributors

Full Changelog: scientific-python/upload-nightly-action@0.6.4...0.6.5

Commits
  • 16fa02e MNT: Update to pixi lock spec v7 and project version v0.6.5 (#183)
  • fd44fde chore: Move requirements file under tools/ (#182)
  • 1dbb7f3 Build(deps): Bump pygithub from 2.9.1 to 2.10.0 in the python group (#180)
  • 2ca17bd Build(deps): Bump prefix-dev/setup-pixi in the actions group (#179)
  • 1a97ddf Build(deps): Bump the actions group with 3 updates (#177)
  • c88d30e Add issue-opener when wheels are almost dead (#175)
  • d770301 Build(deps): Bump the actions group with 4 updates (#174)
  • 33e7342 Add details about the consequences of not regularly uploading wheels (#173)
  • 64f2a45 Build(deps): Bump the actions group with 3 updates (#170)
  • 9aaae99 Build(deps): Bump the actions group with 4 updates (#168)
  • Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.6.3 to 0.6.4

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.4

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: zizmorcore/zizmor-action#1301

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-c9fad1f4b3 branch from 8f8372b to a5126b3 Compare September 17, 2026 08:21
@dependabot dependabot Bot changed the title chore(deps): bump the actions group with 4 updates chore(deps): bump the actions group across 1 directory with 4 updates Sep 17, 2026
Bumps the actions group with 4 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [github-community-projects/issue-metrics](https://github.com/github-community-projects/issue-metrics), [scientific-python/upload-nightly-action](https://github.com/scientific-python/upload-nightly-action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...bec219d)

Updates `github-community-projects/issue-metrics` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/github-community-projects/issue-metrics/releases)
- [Commits](github-community-projects/issue-metrics@61084fa...a7dc2fb)

Updates `scientific-python/upload-nightly-action` from 0.6.4 to 0.6.5
- [Release notes](https://github.com/scientific-python/upload-nightly-action/releases)
- [Commits](scientific-python/upload-nightly-action@e76cfec...16fa02e)

Updates `zizmorcore/zizmor-action` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@70fb788...cc914d7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github-community-projects/issue-metrics
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: scientific-python/upload-nightly-action
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-c9fad1f4b3 branch from a5126b3 to 00622c1 Compare September 17, 2026 09:32
@d-v-b
d-v-b enabled auto-merge (squash) September 17, 2026 09:34
@d-v-b
d-v-b merged commit 1187a43 into main Sep 17, 2026
55 checks passed
@d-v-b
d-v-b deleted the dependabot/github_actions/actions-c9fad1f4b3 branch September 17, 2026 09:47
d-v-b added a commit to d-v-b/zarr-python that referenced this pull request Sep 17, 2026
Conflict in .github/workflows/docs.yml: zarr-developers#4370 bumped astral-sh/setup-uv on the
line above the `uv sync --group docs` step this branch replaces with the two
`uv tool install` lines. Took the bumped pin and kept the branch's install
steps.

Assisted-by: ClaudeCode:claude-opus-5
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant