Skip to content

build(deps): bump actions/setup-python from 5 to 6#1240

Merged
ErikBjare merged 1 commit intomasterfrom
dependabot/github_actions/actions/setup-python-6
Apr 1, 2026
Merged

build(deps): bump actions/setup-python from 5 to 6#1240
ErikBjare merged 1 commit intomasterfrom
dependabot/github_actions/actions/setup-python-6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps actions/setup-python from 5 to 6.

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v6.0.0

v5.6.0

What's Changed

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

What's Changed

Enhancements:

Bug fixes:

... (truncated)

Commits
  • a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
  • bfe8cc5 Upgrade @​actions dependencies to Node 24 compatible versions (#1259)
  • 4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
  • 83679a8 Bump @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...
  • bfc4944 Bump prettier from 3.5.3 to 3.6.2 (#1234)
  • 97aeb3e Bump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)
  • 443da59 Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...
  • cfd55ca graalpy: add graalpy early-access and windows builds (#880)
  • bba65e5 Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)
  • 18566f8 Improve wording and "fix example" (remove 3.13) on testing against pre-releas...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 1, 2026
@greptile-apps
Copy link
Copy Markdown

greptile-apps bot commented Apr 1, 2026

Greptile Summary

This is a routine Dependabot-generated bump of actions/setup-python from v5 to v6 across both CI workflow files. All four occurrences are updated consistently, and the change aligns with the existing pattern in these files (both already use actions/checkout@v6 and actions/setup-node@v6).

Key points:

  • The only breaking change in v6 is the upgrade of the action's internal Node runtime to Node 24, which requires GitHub Actions runner v2.327.1 or later. GitHub-hosted runners (e.g. ubuntu-24.04, windows-latest, macos-latest) are automatically updated by GitHub and are expected to satisfy this requirement.
  • No workflow logic, inputs, or configuration is altered — this is a pure version pin update.
  • The update also picks up several enhancements (e.g. pip-version input, .python-version / Pipfile reading) and security-related dependency fixes bundled in the v6 release.

Confidence Score: 5/5

Safe to merge — a straightforward, fully consistent dependency bump with no logic changes.

All four setup-python references are updated uniformly, the workflows already use other v6 actions confirming runner compatibility, and there are no code-logic changes to review.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/build-tauri.yml Bumps actions/setup-python from v5 to v6 at two call sites (build matrix step and release-notes step); no other logic changes.
.github/workflows/build.yml Bumps actions/setup-python from v5 to v6 at two call sites (build matrix step and release-notes step); no other logic changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Trigger: push / PR / tag] --> B{Workflow}
    B --> C[build.yml]
    B --> D[build-tauri.yml]

    C --> E[checkout v6]
    E --> F["setup-python v6 (bumped from v5)"]
    F --> G[setup-node v6]
    G --> H[Build and Test and Package]

    D --> I[checkout v6]
    I --> J["setup-python v6 (bumped from v5)"]
    J --> K[setup-node v6]
    K --> L[Build and Test and Package Tauri]
Loading

Reviews (1): Last reviewed commit: "build(deps): bump actions/setup-python f..." | Re-trigger Greptile

@ErikBjare ErikBjare merged commit 90d07ef into master Apr 1, 2026
15 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/actions/setup-python-6 branch April 1, 2026 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant