Bumps the actions group with 6 updates in the / directory:
Updatespypa/cibuildwheel from 3.1.4 to 3.2.0
Release notes
Sourced frompypa/cibuildwheel's releases.
v3.2.0
- ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
- 🛠 Update to CPython 3.14.0rc3 (#2602)
- 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568,#2591)
- 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
- ⚠️ PyPy 3.10 was moved to
pypy-eol in theenable option, as it is now end-of-life. (#2521) - 📚 Docs improvements (#2574,#2601,#2598)
Changelog
Sourced frompypa/cibuildwheel's changelog.
title: Changelog
Changelog
v3.2.0
22 September 2025
- ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
- 🛠 Update to CPython 3.14.0rc3 (#2602)
- 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568,#2591)
- 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
- ⚠️ PyPy 3.10 was moved to
pypy-eol in theenable option, as it is now end-of-life. (#2521) - 📚 Docs improvements (#2574,#2601,#2598)
v3.1.4
19 August 2025
- ✨ Add a
--clean-cache command to clean up our cache (#2489) - 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542,#2556)
- 🛠 Update Pyodide to 0.28.2 (#2562,#2558)
- 🐛 Fix resolution with
pyodide-build whendependency-versions is set (#2548) - 🐛 Set
CMAKE_FIND_ROOT_PATH_MODE_PACKAGE toBOTH on Android (#2547) - 🐛 Add
patchelf dependency for platforms that can build Android wheels (#2552) - 🐛 Ignore empty values for
CIBW_ARCHS like most other environment variables (#2541) - 💼 The
color andsuggest_on_error argparse options are now default in 3.14rc1+ (#2554) - 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
- 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
- 🧪 Split out platforms iOS and Android in our tests (#2519)
- 🧪 Fix and enable doctests (#2546)
- 📚 Improve our docs on free-threading (#2549)
v3.1.3
1 August 2025
- 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
- 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527,#2539)
- 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)
v3.1.2
29 July 2025
- ⚠️ Add an error if
CIBW_FREE_THREADING_SUPPORT is set; you are likely missing 3.13t wheels, please use theenable/CIBW_ENABLE (#2520)
... (truncated)
Commits
Updatesscientific-python/circleci-artifacts-redirector-action from 1.2.0 to 1.3.1
Release notes
Sourced fromscientific-python/circleci-artifacts-redirector-action's releases.
v1.3.1
What's Changed
New Contributors
Full Changelog:scientific-python/circleci-artifacts-redirector-action@v1...v1.3.1
v1.3.0
What's Changed
New Contributors
Full Changelog:scientific-python/circleci-artifacts-redirector-action@v1.2.0...v1.3.0
Commits
5d358ff Removed the headers argument passed to 'fetch' in step one (#85)c98f1f5 MAINT: Trim release notes (#84)7a4636c Build(deps): Bump actions/checkout from 4 to 5 in /.github/workflows in the a...2849f4c Fix artifacts url parsing (#66)1225cf6 DOC: add the 'domain' option to the docs (#80)17a9d98 Build(deps): Bump tmp and eslint (#81)- See full diff incompare view
Updatesgithub/codeql-action from 3.30.3 to 3.30.6
Release notes
Sourced fromgithub/codeql-action's releases.
v3.30.6
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
3.30.6 - 02 Oct 2025
- Update default CodeQL bundle version to 2.23.2.#3168
See the fullCHANGELOG.md for more information.
v3.30.5
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
3.30.5 - 26 Sep 2025
- We fixed a bug that was introduced in
3.30.4 withupload-sarif which resulted in files without a.sarif extension not getting uploaded.#3160
See the fullCHANGELOG.md for more information.
v3.30.4
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
3.30.4 - 25 Sep 2025
- We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the
codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of thecodeql-action/init step.#3099 and#3100 - We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time.#3107
- You can now run the latest CodeQL nightly bundle by passing
tools: nightly to theinit action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff.#3130 - Update default CodeQL bundle version to 2.23.1.#3118
See the fullCHANGELOG.md for more information.
Changelog
Sourced fromgithub/codeql-action's changelog.
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
[UNRELEASED]
- [v4+ only] The CodeQL Action now runs on Node.js v24.#3169
3.30.6 - 02 Oct 2025
- Update default CodeQL bundle version to 2.23.2.#3168
3.30.5 - 26 Sep 2025
- We fixed a bug that was introduced in
3.30.4 withupload-sarif which resulted in files without a.sarif extension not getting uploaded.#3160
3.30.4 - 25 Sep 2025
- We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the
codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of thecodeql-action/init step.#3099 and#3100 - We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time.#3107
- You can now run the latest CodeQL nightly bundle by passing
tools: nightly to theinit action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff.#3130 - Update default CodeQL bundle version to 2.23.1.#3118
3.30.3 - 10 Sep 2025
No user facing changes.
3.30.2 - 09 Sep 2025
- Fixed a bug which could cause language autodetection to fail.#3084
- Experimental: The
quality-queries input that was added in3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a newanalysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time.#3064
3.30.1 - 05 Sep 2025
- Update default CodeQL bundle version to 2.23.0.#3077
3.30.0 - 01 Sep 2025
- Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds.#3054
3.29.11 - 21 Aug 2025
- Update default CodeQL bundle version to 2.22.4.#3044
3.29.10 - 18 Aug 2025
No user facing changes.
3.29.9 - 12 Aug 2025
... (truncated)
Commits
64d10c1 Merge pull request#3172 from github/update-v3.30.6-10feb5d2a909610e Update changelog for v3.30.610feb5d Merge pull request#3167 from github/mbg/upload-sarif/find-then-filter4182ea3 Merge pull request#3168 from github/update-bundle/codeql-bundle-v2.23.234afe5b Merge pull request#3171 from github/mbg/start-proxy/telemetry096fe67 Merge branch 'main' into update-bundle/codeql-bundle-v2.23.2b496401 Merge pull request#3170 from github/mbg/start-proxy/remove-update-workflowd573787 Report registry types that are configured for CodeQL instart-proxy telemetry1591680 Send a basic status report instart-proxy Action if it succeedscb5a284 Send status report whenstart-proxy fails- Additional commits viewable incompare view
Updatesactions/cache from 4.2.4 to 4.3.0
Release notes
Sourced fromactions/cache's releases.
v4.3.0
What's Changed
New Contributors
Full Changelog:actions/cache@v4...v4.3.0
Changelog
Sourced fromactions/cache's changelog.
Releases
4.3.0
4.2.4
- Bump
@actions/cache to v4.0.5
4.2.3
- Bump
@actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)
4.2.2
- Bump
@actions/cache to v4.0.2
4.2.1
- Bump
@actions/cache to v4.0.1
4.2.0
TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability.actions/cache now integrates with the new cache service (v2) APIs.
The new service will gradually roll out as ofFebruary 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release arefully backward compatible.
We are deprecating some versions of this action. We recommend upgrading to versionv4 orv3 as soon as possible beforeFebruary 1st, 2025. (Upgrade instructions below).
If you are using pinned SHAs, please use the SHAs of versionsv4.2.0 orv3.4.0
If you do not upgrade, all workflow runs using any of the deprecatedactions/cache will fail.
Upgrading to the recommended versions will not break your workflows.
4.1.2
- Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices -#1474
- Security fix: Bump braces from 3.0.2 to 3.0.3 -#1475
4.1.1
- Restore original behavior of
cache-hit output -#1467
4.1.0
- Ensure
cache-hit output is set when a cache is missed -#1404 - Deprecate
save-always input -#1452
... (truncated)
Commits
Updatespeter-evans/create-or-update-comment from 4.0.0 to 5.0.0
Release notes
Sourced frompeter-evans/create-or-update-comment's releases.
Create or Update Comment v5.0.0
⚙️ RequiresActions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.
What's Changed
... (truncated)
Commits
e8674b0 feat: v5 (#439)fffe59e build(deps-dev): bump@types/node from 18.19.127 to 18.19.129 (#438)076d572 build(deps-dev): bump@types/node from 18.19.126 to 18.19.127 (#437)86a2645 build(deps-dev): bump@vercel/ncc from 0.38.3 to 0.38.4 (#436)be17e0c build(deps-dev): bump@types/node from 18.19.124 to 18.19.126 (#435)ef75eae build(deps-dev): bump@types/node from 18.19.123 to 18.19.124 (#433)82a7ad0 build(deps): bump actions/setup-node from 4 to 5 (#432)f7c845d build(deps-dev): bump@types/node from 18.19.122 to 18.19.123 (#430)5da8e07 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)2de7f66 build(deps-dev): bump@types/node from 18.19.121 to 18.19.122 (#427)- Additional commits viewable incompare view
Updatesactions/stale from 10.0.0 to 10.1.0
Release notes
Sourced fromactions/stale's releases.
v10.1.0
What's Changed
New Contributors
Full Changelog:actions/stale@v10...v10.1.0
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Bumps the actions group with 6 updates in the / directory:
3.1.43.2.01.2.01.3.13.30.33.30.64.2.44.3.04.0.05.0.010.0.010.1.0Updates
pypa/cibuildwheelfrom 3.1.4 to 3.2.0Release notes
Sourced frompypa/cibuildwheel's releases.
Changelog
Sourced frompypa/cibuildwheel's changelog.
... (truncated)
Commits
7c619efBump version: v3.2.0bbebb68[Bot] Update dependencies (#2603)5bbeaf8[pre-commit.ci] pre-commit autoupdate (#2604)7a67c6bAdd GraalPy 25 and remove workarounds for that version. (#2597)b8a4fbcImprove information about configuration overriding (#2598)70de033Replace themacos-13images with themacos-15-intelimages (GHA) (#2601)ce4c16f[Bot] Update dependencies (#2602)66490f0Add CMAKE_CROSSCOMPILING_EMULATOR to Android CMake toolchain (#2591)77b9e35[pre-commit.ci] pre-commit autoupdate (#2594)39e9da0[Bot] Update dependencies (#2593)Updates
scientific-python/circleci-artifacts-redirector-actionfrom 1.2.0 to 1.3.1Release notes
Sourced fromscientific-python/circleci-artifacts-redirector-action's releases.
Commits
5d358ffRemoved the headers argument passed to 'fetch' in step one (#85)c98f1f5MAINT: Trim release notes (#84)7a4636cBuild(deps): Bump actions/checkout from 4 to 5 in /.github/workflows in the a...2849f4cFix artifacts url parsing (#66)1225cf6DOC: add the 'domain' option to the docs (#80)17a9d98Build(deps): Bump tmp and eslint (#81)Updates
github/codeql-actionfrom 3.30.3 to 3.30.6Release notes
Sourced fromgithub/codeql-action's releases.
Changelog
Sourced fromgithub/codeql-action's changelog.
... (truncated)
Commits
64d10c1Merge pull request#3172 from github/update-v3.30.6-10feb5d2a909610eUpdate changelog for v3.30.610feb5dMerge pull request#3167 from github/mbg/upload-sarif/find-then-filter4182ea3Merge pull request#3168 from github/update-bundle/codeql-bundle-v2.23.234afe5bMerge pull request#3171 from github/mbg/start-proxy/telemetry096fe67Merge branch 'main' into update-bundle/codeql-bundle-v2.23.2b496401Merge pull request#3170 from github/mbg/start-proxy/remove-update-workflowd573787Report registry types that are configured for CodeQL instart-proxytelemetry1591680Send a basic status report instart-proxyAction if it succeedscb5a284Send status report whenstart-proxyfailsUpdates
actions/cachefrom 4.2.4 to 4.3.0Release notes
Sourced fromactions/cache's releases.
Changelog
Sourced fromactions/cache's changelog.
... (truncated)
Commits
0057852Merge pull request#1655 from actions/Link-/prepare-4.3.04f5ea67Update licensed cache9fcad95Upgrade actions/cache to 4.1.0 and prepare 4.3.0 release638ed79Merge pull request#1642 from actions/GhadimiR-patch-13862dccAdd note on runner versionsUpdates
peter-evans/create-or-update-commentfrom 4.0.0 to 5.0.0Release notes
Sourced frompeter-evans/create-or-update-comment's releases.
... (truncated)
Commits
e8674b0feat: v5 (#439)fffe59ebuild(deps-dev): bump@types/nodefrom 18.19.127 to 18.19.129 (#438)076d572build(deps-dev): bump@types/nodefrom 18.19.126 to 18.19.127 (#437)86a2645build(deps-dev): bump@vercel/nccfrom 0.38.3 to 0.38.4 (#436)be17e0cbuild(deps-dev): bump@types/nodefrom 18.19.124 to 18.19.126 (#435)ef75eaebuild(deps-dev): bump@types/nodefrom 18.19.123 to 18.19.124 (#433)82a7ad0build(deps): bump actions/setup-node from 4 to 5 (#432)f7c845dbuild(deps-dev): bump@types/nodefrom 18.19.122 to 18.19.123 (#430)5da8e07build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)2de7f66build(deps-dev): bump@types/nodefrom 18.19.121 to 18.19.122 (#427)Updates
actions/stalefrom 10.0.0 to 10.1.0Release notes
Sourced fromactions/stale's releases.
Commits
5f858e3Addonly-issue-typesoption to filter issues by type (#1255)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions