Bump the github-actions group with 6 updates #832

dependabot · 2026-01-01T00:04:58Z

Bumps the github-actions group with 6 updates:

Package	From	To
actions/checkout	`5`	`6`
pypa/cibuildwheel	`3.2.1`	`3.3.0`
scientific-python/upload-nightly-action	`0.6.2`	`0.6.3`
actions/upload-artifact	`5.0.0`	`6.0.0`
actions/download-artifact	`6.0.0`	`7.0.0`
softprops/action-gh-release	`2.4.1`	`2.5.0`

Updates actions/checkout from 5 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

update readme/changelog for v6 by @ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

Commits

8e8c483 Clarify v6 README (#2328)
033fa0d Add worktree support for persist-credentials includeIf (#2327)
c2d88d3 Update all references from v5 and v4 to v6 (#2314)
1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
See full diff in compare view

Updates pypa/cibuildwheel from 3.2.1 to 3.3.0

Release notes

Sourced from pypa/cibuildwheel's releases.

v3.3.0

🐛 Fix an incompatibility with Docker v29 (#2660)

✨ Adds test-runtime option, to customise how tests on simulated/emulated environments are run (#2636)

✨ Adds support for new manylinux_2_35 images on 32-bit ARM armv7l, offering better C++20 compatibility (#2656)

✨ build[uv] is now supported on Android (#2587)

✨ You can now install extras (such as uv) with a simple option on the GitHub Action (#2630)

✨ {project} and {package} placeholders are now supported in repair-wheel-command (#2589)

🛠 The versions set with dependency-versions no longer constrain packages specified by your build-system.requires. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)

🛠 Improve the handling of test-command on Android, enabling more options to be passed (#2590)

📚 Docs improvements (#2618)

Changelog

Sourced from pypa/cibuildwheel's changelog.

title: Changelog

Changelog

v3.3.0

12 November 2025

🐛 Fix an incompatibility with Docker v29 (#2660)

✨ Adds test-runtime option, to customise how tests on simulated/emulated environments are run (#2636)

✨ Adds support for new manylinux_2_35 images on 32-bit ARM armv7l, offering better C++20 compatibility (#2656)

✨ build[uv] is now supported on Android (#2587)

✨ You can now install extras (such as uv) with a simple option on the GitHub Action (#2630)

✨ {project} and {package} placeholders are now supported in repair-wheel-command (#2589)

🛠 The versions set with dependency-versions no longer constrain packages specified by your build-system.requires. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)

🛠 Improve the handling of test-command on Android, enabling more options to be passed (#2590)

📚 Docs improvements (#2618)

v3.2.1

12 October 2025

🛠 Update to CPython 3.14.0 final (#2614)

🐛 Fix the default MACOSX_DEPLOYMENT_TARGET on Python 3.14 (#2613)

📚 Docs improvements (#2617)

v3.2.0

22 September 2025

✨ Adds GraalPy v25 (Python 3.12) support (#2597)

🛠 Update to CPython 3.14.0rc3 (#2602)

🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)

🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)

⚠️ PyPy 3.10 was moved to pypy-eol in the enable option, as it is now end-of-life. (#2521)

📚 Docs improvements (#2574, #2601, #2598)

v3.1.4

19 August 2025

✨ Add a --clean-cache command to clean up our cache (#2489)

🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)

🛠 Update Pyodide to 0.28.2 (#2562, #2558)

🐛 Fix resolution with pyodide-build when dependency-versions is set (#2548)

🐛 Set CMAKE_FIND_ROOT_PATH_MODE_PACKAGE to BOTH on Android (#2547)

🐛 Add patchelf dependency for platforms that can build Android wheels (#2552)

🐛 Ignore empty values for CIBW_ARCHS like most other environment variables (#2541)

... (truncated)

Commits

63fd63b Bump version: v3.3.0
f4fe311 fix: support Docker 29 (#2660)
f6c8108 feat: make the {project} placeholder available to repair-wheel-command (#...
ccbae30 feat: support uv with Android (#2587)
1337e50 chore: pytest log_level is better than log_cli_level (#2657)
720f8e2 feat: add manylinux_2_35 (#2656)
4c7f369 [pre-commit.ci] pre-commit autoupdate (#2658)
e1baa60 chore: enable more Ruff checks (#2654)
1f2f8b2 fix: don't constrain build-system.requires with our dependency-versions (...
8c5b02f [pre-commit.ci] pre-commit autoupdate (#2648)
Additional commits viewable in compare view

Updates scientific-python/upload-nightly-action from 0.6.2 to 0.6.3

Release notes

Sourced from scientific-python/upload-nightly-action's releases.

0.6.3

What's Changed

FIX: remove unused permissions in actions by @kratsg in scientific-python/upload-nightly-action#148

ENH: Add aarch64 Linux and x86 Windows support by @mroeschke in scientific-python/upload-nightly-action#151

MNT: Update to anaconda-client v1.13.1 and project version v0.6.3 by @matthewfeickert in scientific-python/upload-nightly-action#152

New Contributors

@kratsg made their first contribution in scientific-python/upload-nightly-action#148

@mroeschke made their first contribution in scientific-python/upload-nightly-action#151

Full Changelog: scientific-python/upload-nightly-action@0.6.2...0.6.3

Commits

5748273 MNT: Update to anaconda-client v1.13.1 and project version v0.6.3 (#152)
8db798e ENH: Add aarch64 Linux and x86 Windows support (#151)
64b7bfd Build(deps): Bump the actions group with 4 updates (#149)
b38e3f5 remove unused permissions in actions, permissions are for tokens in jobs, not...
0ff01d2 Build(deps): Bump the actions group with 2 updates (#145)
816cde5 Build(deps): Bump the actions group with 5 updates (#144)
50aa237 Build(deps): Bump the actions group with 2 updates (#138)
83ecb5a Build(deps): Bump the actions group with 3 updates (#137)
49b3323 Build(deps): Bump astral-sh/setup-uv in the actions group (#136)
9bbfbda Build(deps): Bump the actions group with 3 updates (#129)
Additional commits viewable in compare view

Updates actions/upload-artifact from 5.0.0 to 6.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in actions/upload-artifact#719

fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in actions/upload-artifact#744

prepare release v6.0.0 for Node.js 24 support by @salmanmkc in actions/upload-artifact#745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

Commits

b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
e516bc8 docs: correct description of Node.js 24 support in README
ddc45ed docs: update README to correct action name for Node.js 24 support
615b319 chore: release v6.0.0 for Node.js 24 support
017748b Merge pull request #744 from actions/fix-storage-blob
38d4c79 chore: rebuild dist
7d27270 chore: add missing license cache files for @actions/core, @actions/io, and mi...
5f643d3 chore: update license files for @actions/artifact@5.0.1 dependencies
1df1684 chore: update package-lock.json with @actions/artifact@5.0.1
b5b1a91 fix: update @actions/artifact to ^5.0.0 for Node.js 24 punycode fix
Additional commits viewable in compare view

Updates actions/download-artifact from 6.0.0 to 7.0.0

Release notes

Sourced from actions/download-artifact's releases.

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Update GHES guidance to include reference to Node 20 version by @patrikpolyak in actions/download-artifact#440

Download Artifact Node24 support by @salmanmkc in actions/download-artifact#415

fix: update @actions/artifact to fix Node.js 24 punycode deprecation by @salmanmkc in actions/download-artifact#451

prepare release v7.0.0 for Node.js 24 support by @salmanmkc in actions/download-artifact#452

New Contributors

@patrikpolyak made their first contribution in actions/download-artifact#440

@salmanmkc made their first contribution in actions/download-artifact#415

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

Commits

37930b1 Merge pull request #452 from actions/download-artifact-v7-release
72582b9 doc: update readme
0d2ec9d chore: release v7.0.0 for Node.js 24 support
fd7ae8f Merge pull request #451 from actions/fix-storage-blob
d484700 chore: restore minimatch.dep.yml license file
03a8080 chore: remove obsolete dependency license files
56fe6d9 chore: update @actions/artifact license file to 5.0.1
8e3ebc4 chore: update package-lock.json with @actions/artifact@5.0.1
1e3c4b4 fix: update @actions/artifact to ^5.0.0 for Node.js 24 punycode fix
458627d chore: use local @actions/artifact package for Node.js 24 testing
Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.4.1 to 2.5.0

Release notes

Sourced from softprops/action-gh-release's releases.

v2.5.0

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in softprops/action-gh-release#692

Other Changes 🔄

chore(deps): bump the npm group across 1 directory with 5 updates by @dependabot[bot] in softprops/action-gh-release#697

chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 in the github-actions group by @dependabot[bot] in softprops/action-gh-release#689

New Contributors

@dumbmoron made their first contribution in softprops/action-gh-release#692

Full Changelog: softprops/action-gh-release@v2.4.2...v2.5.0

v2.4.2

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in softprops/action-gh-release#684

Other Changes 🔄

dependency updates

New Contributors

@BeryJu made their first contribution in softprops/action-gh-release#684

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

Changelog

Sourced from softprops/action-gh-release's changelog.

2.5.0

What's Changed

Exciting New Features 🎉

feat: mark release as draft until all artifacts are uploaded by @dumbmoron in softprops/action-gh-release#692

Other Changes 🔄

dependency updates

2.4.2

What's Changed

Exciting New Features 🎉

feat: Ensure generated release notes cannot be over 125000 characters by @BeryJu in softprops/action-gh-release#684

Other Changes 🔄

dependency updates

2.4.1

What's Changed

Other Changes 🔄

fix(util): support brace expansion globs containing commas in parseInputFiles by @Copilot in softprops/action-gh-release#672

fix: gracefully fallback to body when body_path cannot be read by @Copilot in softprops/action-gh-release#671

2.4.0

What's Changed

Exciting New Features 🎉

feat(action): respect working_directory for files globs by @stephenway in softprops/action-gh-release#667

2.3.4

What's Changed

Bug fixes 🐛

fix(action): handle 422 already_exists race condition by @stephenway in softprops/action-gh-release#665

Other Changes 🔄

... (truncated)

Commits

a06a81a release 2.5.0
7da8983 feat: mark release as draft until all artifacts are uploaded (#692)
8797328 chore(deps): bump actions/checkout in the github-actions group (#689)
1bfc62a chore(deps): bump the npm group across 1 directory with 5 updates (#697)
5be0e66 release 2.4.2
af658b4 feat: Ensure generated release notes cannot be over 125000 characters (#684)
237aacc chore: bump node to 24.11.0
00362be chore(deps): bump the npm group with 5 updates (#687)
0adea5a chore(deps): bump the npm group with 3 updates (#686)
aa05f9d chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 in the github-action...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5` | `6` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `3.2.1` | `3.3.0` | | [scientific-python/upload-nightly-action](https://github.com/scientific-python/upload-nightly-action) | `0.6.2` | `0.6.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5.0.0` | `6.0.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `6.0.0` | `7.0.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.4.1` | `2.5.0` | Updates `actions/checkout` from 5 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v5...v6) Updates `pypa/cibuildwheel` from 3.2.1 to 3.3.0 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@9c00cb4...63fd63b) Updates `scientific-python/upload-nightly-action` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/scientific-python/upload-nightly-action/releases) - [Commits](scientific-python/upload-nightly-action@b36e8c0...5748273) Updates `actions/upload-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@330a01c...b7c566a) Updates `actions/download-artifact` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@018cc2c...37930b1) Updates `softprops/action-gh-release` from 2.4.1 to 2.5.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@6da8fa9...a06a81a) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: pypa/cibuildwheel dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: scientific-python/upload-nightly-action dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 1, 2026

rgommers force-pushed the dependabot/github_actions/github-actions-53d9e923fb branch from a051294 to 202303d Compare January 1, 2026 15:05

rgommers merged commit e5528c7 into main Jan 1, 2026
16 of 17 checks passed

rgommers deleted the dependabot/github_actions/github-actions-53d9e923fb branch January 1, 2026 15:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the github-actions group with 6 updates #832

Bump the github-actions group with 6 updates #832

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the github-actions group with 6 updates #832

Bump the github-actions group with 6 updates #832

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

v6.0.0

What's Changed

v6-beta

What's Changed

v5.0.1

What's Changed

v3.3.0

title: Changelog

Changelog

v3.3.0

v3.2.1

v3.2.0

v3.1.4

0.6.3

What's Changed

New Contributors

v6.0.0

v6 - What's new

Node.js 24

What's Changed

v7.0.0

v7 - What's new

Node.js 24

What's Changed

New Contributors

v2.5.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

v2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

2.5.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.4.1

What's Changed

Other Changes 🔄

2.4.0

What's Changed

Exciting New Features 🎉

2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants