|
| 1 | +# 6.3.0 - 2026-04-15 |
| 2 | + |
| 3 | +## Summary |
| 4 | + |
| 5 | +This release includes an update of `action/upload-pages-artifact` from v4 to v5.0.0. With this |
| 6 | +change, now all actions used in the PTB run with Node.js 24. This is important as support |
| 7 | +for Node.js 20 reaches it end-of-life in April 2026 and support for it in GitHub will end in |
| 8 | +September 2026; for more details, see GitHub's [deprecation notice](https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/). |
| 9 | + |
| 10 | +The `report.yml` is also called after the `checks.yml` completes. This allows users |
| 11 | +to get linting, security, and unit test coverage before running the `slow-checks.yml`, |
| 12 | +as described in the [Pull Request description](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#pull-request). |
| 13 | + |
| 14 | +This release also adds a `vulnerabilities:resolved` Nox session, which reports GitHub security issues resolved since the last release. |
| 15 | + |
| 16 | +This release fixes a vulnerability by updating the `poetry.lock` file. |
| 17 | + |
| 18 | +| Name | Version | ID | Fix Versions | Updated to | |
| 19 | +|--------|---------|----------------|--------------|------------| |
| 20 | +| pytest | 9.0.2 | CVE-2025-71176 | 9.0.3 | 9.0.3 | |
| 21 | + |
| 22 | +To ensure usage of secure packages, it is up to the user to similarly relock their dependencies. |
| 23 | + |
| 24 | +## Features |
| 25 | + |
| 26 | +* #402: Created nox session `vulnerabilities:resolved` to report resolved GitHub security issues |
| 27 | +* #733: Adjusted structlog and log level for workflow generation |
| 28 | + |
| 29 | +## Refactoring |
| 30 | + |
| 31 | +* #764: Updated `action/upload-pages-artifact` from v4 to [v5](https://github.com/actions/upload-pages-artifact/releases/tag/v5.0.0) |
| 32 | +* #768: Updated `merge-gate.yml` to execute the `report.yml` after the `checks.yml` completes |
| 33 | + |
| 34 | +## Bugfix |
| 35 | + |
| 36 | +* #766: Fixed `action/upload-pages-artifact` from v5 to v5.0.0 |
| 37 | + |
| 38 | +## Security |
| 39 | + |
| 40 | +* #774: Fixed vulnerability by re-locking `pytest` in the `poetry.lock` |
| 41 | + |
| 42 | +## Dependency Updates |
| 43 | + |
| 44 | +### `main` |
| 45 | + |
| 46 | +* Updated dependency `pytest:9.0.2` to `9.0.3` |
0 commit comments