Bump actions/setup-python from 6.2.0 to 6.3.0 by dependabot[bot] · Pull Request #519 · senzing-garage/sz-sdk-python-core

dependabot · 2026-07-14T01:44:12Z

Bumps actions/setup-python from 6.2.0 to 6.3.0.

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
d2b357a Update dependency versions and test workflow configuration (#1322)
8f639b1 Merge pull request #1324 from jasongin/update-actions-cache-5.1.0
6731c2b Resolve high-severity audit issues
0cb1a84 Add RHEL support and include Linux distro in cache keys (#1323)
dc6eab6 Update dist
6f4b74b Strict equality
fa8bde1 Bump @actions/cache to 5.1.0, log cache write denied
c8813ba Upgrade @actions dependencies and update licenses (#1303)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6.2.0...v6.3.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T01:47:13Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-07-14T01:48:08Z

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing_core
_helpers.py
Project Total

_{This report was generated by python-coverage-comment-action}

github-actions · 2026-07-14T03:46:40Z

🤖 Claude Code Review

All 13 workflow files consistently updated, and no stray v6.2.0 references remain. This is a routine Dependabot version bump for actions/setup-python.

Review Summary

Code Quality

✅ Style conventions — YAML formatting unchanged, only the version pin was edited. Consistent across all 13 files.
✅ No commented-out code
✅ Meaningful variable names — N/A (no code, just a version string)
✅ DRY principle — N/A; each workflow file independently pins the action version, which is standard/expected for GitHub Actions (no shared config mechanism for this)
✅ Defects — No logic changes. Verified with grep that all references to actions/setup-python across .github/workflows/ were bumped to v6.3.0 with none left stale.
✅ CLAUDE.md — Not touched by this PR; no changes needed.

Testing

✅ N/A — This is a CI dependency bump with no functional code change. No new tests required. The workflows themselves (pytest-linux, pytest-darwin, pytest-windows, etc.) will validate the updated action still works when they run.

Documentation

✅ N/A — No README, API docs, or CHANGELOG entries needed for a CI tooling version bump.

Security

✅ No hardcoded credentials
✅ No input validation concerns (static YAML config)
✅ No error handling concerns
✅ No sensitive data
✅ No .lic files in this diff — verified the diff contains only .github/workflows/*.yaml changes.

Verdict

✅ Approve. This is a clean, mechanical Dependabot-style bump of `actions/setup-python` from v6.2.0 → v6.3.0, applied consistently across all 13 workflow files with no stragglers. No issues found.

Automated code review analyzing defects and coding standards

…on-6.3.0

github-actions · 2026-07-14T03:47:21Z

🤖 Claude Code Review

All 13 workflow files consistently reference v6.3.0 now — no strays left behind. Here's the review.

Code Quality

✅ Style/consistency: All changes follow identical patterns — a single-line version bump (v6.2.0 → v6.3.0) repeated across 13 workflow files. Consistent formatting maintained throughout.
✅ No commented-out code
✅ Naming: N/A, no new identifiers introduced.
✅ DRY: N/A for this change type — each workflow file independently pins the action version, which is standard GitHub Actions practice (no shared "DRY" mechanism exists across workflow files natively).
✅ Defects: None found. Verified via grep that all 13 occurrences of actions/setup-python@v6.x.x in .github/workflows/ are now uniformly v6.3.0 — no file was missed, and no stray old version remains.
✅ CLAUDE.md considered: This PR does not touch .claude/CLAUDE.md; existing project instructions remain general-purpose and unaffected by this change.

Testing

✅ N/A — this is a CI action version bump with no new functions, endpoints, or logic. No new tests required. Existing pytest/lint workflows will implicitly validate the bump (the CI jobs themselves run using the new action version).

Documentation

❌ CHANGELOG.md not updated: CHANGELOG.md has an [Unreleased] section (line 8) but this dependency bump isn't recorded there. The repo's own convention (see 1.0.3 - Updated dependencies at line 10-14) treats dependency bumps as changelog-worthy. Minor/optional for a routine Dependabot-style CI bump, but flagging per checklist.
✅ No README or API doc changes needed — this is CI-only infra.
✅ N/A inline comments — no complex logic introduced.

Security

✅ No hardcoded credentials.
✅ N/A input validation — CI config only.
✅ N/A error handling — no code logic changed.
✅ No sensitive data in logs.
✅ No .lic files present in this diff — checked explicitly, none found, no AQAAAD-prefixed strings.

Summary

This is a clean, low-risk, mechanical CI dependency bump (`actions/setup-python` v6.2.0 → v6.3.0) applied uniformly across all 13 workflow files. No defects found. The only gap is the missing `CHANGELOG.md` entry, which is optional/minor for this kind of routine automated bump (likely from Dependabot based on the git history showing `dependabot/github_actions/actions/setup-python-6.3.0`).

Automated code review analyzing defects and coding standards

github-actions · 2026-07-14T03:48:54Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

dependabot Bot assigned kernelsam Jul 14, 2026

dependabot Bot requested a review from a team as a code owner July 14, 2026 01:44

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 14, 2026

docktermj self-assigned this Jul 14, 2026

docktermj approved these changes Jul 14, 2026

View reviewed changes

Merge branch 'main' into dependabot/github_actions/actions/setup-pyth…

cdfbfd8

…on-6.3.0

docktermj enabled auto-merge (squash) July 14, 2026 03:46

docktermj merged commit b5ef145 into main Jul 14, 2026
86 checks passed

docktermj deleted the dependabot/github_actions/actions/setup-python-6.3.0 branch July 14, 2026 03:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump actions/setup-python from 6.2.0 to 6.3.0#519

Bump actions/setup-python from 6.2.0 to 6.3.0#519
docktermj merged 2 commits into
mainfrom
dependabot/github_actions/actions/setup-python-6.3.0

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Coverage report

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

Review Summary

Code Quality

Testing

Documentation

Security

Verdict

✅ Approve. This is a clean, mechanical Dependabot-style bump of actions/setup-python from v6.2.0 → v6.3.0, applied consistently across all 13 workflow files with no stragglers. No issues found.

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

Code Quality

Testing

Documentation

Security

Summary

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Jul 14, 2026 •

edited

Loading

✅ Approve. This is a clean, mechanical Dependabot-style bump of `actions/setup-python` from v6.2.0 → v6.3.0, applied consistently across all 13 workflow files with no stragglers. No issues found.