Skip to content

chore(deps): update actions/setup-python action to v7 - #199

Merged
tagoro9 merged 1 commit into
mainfrom
c/renovate_actions-setup-python-7.x
Jul 31, 2026
Merged

chore(deps): update actions/setup-python action to v7#199
tagoro9 merged 1 commit into
mainfrom
c/renovate_actions-setup-python-7.x

Conversation

@open-turo-bot

@open-turo-bot open-turo-bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/setup-python action major v6v7

Release Notes

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

What's Changed
Enhancements
Bug Fix
Dependency Upgrade
New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v7

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@github-actions

Copy link
Copy Markdown

Release notes preview

No new release will be created.

If you are expecting a release, you will need to either fix a bug or add a feature.
Chores, CI, docs, refactoring, style and other changes will not trigger a release.

@open-turo-bot
open-turo-bot force-pushed the c/renovate_actions-setup-python-7.x branch from 213fc0b to 8f93593 Compare July 22, 2026 02:00
Comment thread .github/workflows/ci.yaml
fetch-depth: 0
- name: Setup python
uses: actions/setup-python@v6
uses: actions/setup-python@v7

@semgrep-app semgrep-app Bot Jul 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

actions/setup-python@v7 is not pinned to a specific commit SHA. This poses a supply chain risk if the action were to be compromised and replaced with a malicious version.

🌟 Removed in commit 48db053 🌟

@open-turo-bot
open-turo-bot force-pushed the c/renovate_actions-setup-python-7.x branch from 8f93593 to 48db053 Compare July 27, 2026 02:14

@tagoro9 tagoro9 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved via gh-tui.

@tagoro9
tagoro9 merged commit 2d520d0 into main Jul 31, 2026
11 checks passed
@tagoro9
tagoro9 deleted the c/renovate_actions-setup-python-7.x branch July 31, 2026 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants