From 211c07574b3adf31e80f1acd9e5051ea311081b0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Mar 2026 17:32:26 +0000 Subject: [PATCH 1/7] Bump actions/upload-artifact from 6 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index b31c073..2b8736f 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -89,7 +89,7 @@ jobs: # fail_ci_if_error: true files: .coverage.${{ steps.pyenv.outputs.value }}.xml - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@v7 if: matrix.python-version == '2.7' || matrix.python-version == '3.8' with: name: dist-${{ matrix.python-version }} From f7f0e017b7cc6b2617fe3e61d93bc7299c0d55ac Mon Sep 17 00:00:00 2001 From: Natty Linden Date: Thu, 23 Jul 2026 20:21:06 +0000 Subject: [PATCH 2/7] Use a newer setuptools-scm where available that's compatible with setuptools 82+ setuptools 82.0.0 no longer comes with pkg_resources. Don't pin setuptools-scm so that, when we get setuptools 82+, we have a shot at getting a compatible version of setuptools-scm that doesn't require pkg_resources. Before Python 3.9 we still need an old setuptools-scm that doesn't refer to the distutils.cmd `ignore_egg_info_in_manifest` attribute that's not defined in Python 3.8's version of distutils. --- setup.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/setup.py b/setup.py index a393a21..a6a300a 100644 --- a/setup.py +++ b/setup.py @@ -20,7 +20,10 @@ extras_require={ "dev": ["pytest", "mock", "pytest-cov<3"], }, - setup_requires=["setuptools_scm<6"], + setup_requires=[ + "setuptools_scm<6;python_version<'3.9'", + "setuptools_scm;python_version>'3.8'", + ], use_scm_version={ 'local_scheme': 'no-local-version', # disable local-version to allow uploads to test.pypi.org }, @@ -35,4 +38,4 @@ 'Operating System :: Microsoft :: Windows', 'Operating System :: Unix', ], -) \ No newline at end of file +) From feee75a03717d44828b7454a750fd3fcd0ac0bec Mon Sep 17 00:00:00 2001 From: Natty Linden Date: Thu, 23 Jul 2026 20:23:41 +0000 Subject: [PATCH 3/7] Add explicit permissions for the build job --- .github/workflows/ci.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 2b8736f..3817d05 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -15,6 +15,8 @@ jobs: image: ${{ matrix.container-image }} env: PYTHON: ${{ matrix.python-version }} + permissions: + contents: read runs-on: [ubuntu-latest] strategy: # Finish the other builds even if one fails. From 0b15646e6da5e3820059fb29bbca98720c8a3b9d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:34:42 -0700 Subject: [PATCH 4/7] Bump actions/download-artifact from 7 to 8 (#19) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 3817d05..2bb4e35 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -105,7 +105,7 @@ jobs: id-token: write if: github.event_name != 'pull_request' steps: - - uses: actions/download-artifact@v7 + - uses: actions/download-artifact@v8 - name: Organize files for upload run: | From d9e4affd45016a55dc235e6e8b01aa9344ca776c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:45:23 -0700 Subject: [PATCH 5/7] Bump codecov/codecov-action from 5 to 7 (#22) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v5...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 2bb4e35..1eb5973 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -83,7 +83,7 @@ jobs: run: python -m build - name: Upload coverage - uses: codecov/codecov-action@v5 + uses: codecov/codecov-action@v7 if: matrix.python-version == '3.8' with: env_vars: PYTHON From 18546bfb4a6849d78b7a5ceff867d7f9f2c7a029 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:46:00 -0700 Subject: [PATCH 6/7] Bump actions/checkout from 6 to 7 (#23) Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 1eb5973..681a042 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -29,7 +29,7 @@ jobs: - python-version: '3.7' container-image: python:3.7 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # Fetch all the history so setuptools_scm can version relative to the # most recent version tag. From 0ad4117241f240e5c030c2b1bd853ef155971da8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 13:47:59 -0700 Subject: [PATCH 7/7] Bump actions/setup-python from 6 to 7 (#25) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 681a042..91ed062 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -35,7 +35,7 @@ jobs: # most recent version tag. fetch-depth: 0 - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 # Only set up Python if we're running directly on an agent. If we're in # a container, the image should already provide the intended Python. if: '! matrix.container-image'