Skip to content

Bump BrianPugh/install-micropython from 2 to 3 - #59

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/BrianPugh/install-micropython-3
Open

Bump BrianPugh/install-micropython from 2 to 3#59
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/BrianPugh/install-micropython-3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps BrianPugh/install-micropython from 2 to 3.

Release notes

Sourced from BrianPugh/install-micropython's releases.

v3.0.0

Breaking changes

  • The action now runs on the node24 runtime. GitHub-hosted runners are unaffected; self-hosted runners must be v2.327.1 or newer.
  • The cflags input now applies only to the micropython Unix port build, not to mpy-cross. mpy-cross's fixed feature configuration fails to compile with many otherwise-valid MicroPython feature flags; its meaningful options (target architecture, emitter, optimization level) are runtime CLI flags and are unaffected. CFLAGS_EXTRA is still exported to all subsequent steps of the job.
  • The MicroPython repository is cloned to os.homedir()/micropython instead of a hardcoded /home/runner/micropython. This is unchanged on GitHub-hosted runners; on self-hosted runners, use the MPY_DIR environment variable rather than a hardcoded path.

New features

  • New outputs: cache-hit ('true'/'false') and sha (the resolved MicroPython commit SHA), useful for keying your own caches off the exact MicroPython version.
  • New submodules input (default true): submodules are now initialized even on cache hits, so MPY_DIR works for natmod-style builds on warm runs (previously these passed on the first run and failed on cached re-runs). Set to false to make cached runs ~30 seconds faster if you only need the micropython/mpy-cross binaries.
  • Tag references are fetched with a fast shallow clone; branches and commit SHAs use a full clone so the built interpreter reports an accurate git describe-based version string.

Fixes

  • Git commands are invoked with argument arrays, preventing argument injection via the repository/reference inputs.
  • A cache-save race between concurrent jobs building the same configuration no longer fails an otherwise-successful build.
  • Build parallelism comes from os.cpus() instead of nproc, for self-hosted portability.

Full Changelog: BrianPugh/install-micropython@v2...v3.0.0

v2.4.0

Maintenance release — no runtime or input changes. Workflows on @v2 need no updates. Upgraded the GitHub Actions toolkit (@actions/cache 6.1.0, @actions/core 3.0.1, @actions/exec/@actions/io 2.0.0) and@vercel/ncc 0.44.0; migrated to ESM (#43).

Full Changelog: BrianPugh/install-micropython@v2...v2.4.0

v2.3.0

What's Changed

  • Bump @​vercel/ncc from 0.38.1 to 0.38.3
  • Bump @​actions/core from 1.10.1 to 1.11.1
  • Bump @​actions/cache from 3.2.4 to 4.0.0

Full Changelog: BrianPugh/install-micropython@v2...v2.3.0

v2.2.0

What's Changed

Full Changelog: BrianPugh/install-micropython@v2...v2.2.0

v2.1.0

Features

  • Add ${MPY_DIR}/mpy-cross/build/mpy-cross to the cache paths; some tools (somewhat) inappropriately hardcode this location for the mpy-cross executable.

Full Changelog: BrianPugh/install-micropython@v2.0.0...v2.1.0

Commits
  • 2edec0d Prepare v3.0.0: point README at @​v3, bump package version
  • e891801 Merge pull request #51 from BrianPugh/action-improvements
  • 97319fb Don't apply user cflags to the mpy-cross build
  • cb0f6a2 Declare node globals in eslint config
  • 86faf93 Use MICROPY_PY_SYS_TRACEBACKLIMIT as the cflags test flag
  • 582029f Bump actions/checkout and actions/setup-node to v5
  • e5a7e7b Fix cflags test: MICROPY_MEM_STATS needs MICROPY_MALLOC_USES_ALLOCATED_SIZE
  • 1f7edfc Document CFLAGS_EXTRA export scope in README
  • fb4253e Update CLAUDE.md for current architecture
  • 02663a6 Expand test coverage: branch refs, cache restores, cflags, submodules
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [BrianPugh/install-micropython](https://github.com/brianpugh/install-micropython) from 2 to 3.
- [Release notes](https://github.com/brianpugh/install-micropython/releases)
- [Commits](BrianPugh/install-micropython@v2...v3)

---
updated-dependencies:
- dependency-name: BrianPugh/install-micropython
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants