Bump actions/setup-python from 6.2.0 to 6.3.0 by dependabot[bot] · Pull Request #511 · senzing-garage/sz-sdk-python-grpc

dependabot · 2026-07-14T09:54:17Z

Bumps actions/setup-python from 6.2.0 to 6.3.0.

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
d2b357a Update dependency versions and test workflow configuration (#1322)
8f639b1 Merge pull request #1324 from jasongin/update-actions-cache-5.1.0
6731c2b Resolve high-severity audit issues
0cb1a84 Add RHEL support and include Linux distro in cache keys (#1323)
dc6eab6 Update dist
6f4b74b Strict equality
fa8bde1 Bump @actions/cache to 5.1.0, log cache write denied
c8813ba Upgrade @actions dependencies and update licenses (#1303)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6.2.0...v6.3.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T09:55:38Z

🤖 Claude Code Review

All 15 references are updated consistently, no strays left at v6.2.0. Review complete.

PR Review: Bump `actions/setup-python` from 6.2.0 to 6.3.0

This is a Dependabot-generated dependency bump touching only .github/workflows/*.yaml files (14 files, one-line version pin change each, 15 total occurrences). No application/SDK source code is touched.

Code Quality

✅ Style conventions: Consistent — every occurrence follows the same uses: actions/setup-python@vX.Y.Z pin format.
✅ No commented-out code
✅ Meaningful names: N/A (no code/variables introduced)
✅ DRY: N/A — GitHub Actions workflows require the pinned version to be repeated per file; this is normal for CI config, not a DRY violation.
✅ Defects: None. Verified all 15 references across the 14 changed files were updated to v6.3.0 consistently (no stragglers left at v6.2.0, checked via grep).
✅ CLAUDE.md consideration: Not applicable — this PR doesn't touch .claude/CLAUDE.md, and the file's content isn't affected by this change.

Testing

✅ N/A — no new functions/endpoints. Correctness is validated by the CI workflows themselves running green with the new action version.

Documentation

✅ README/API docs: N/A, no user-facing changes.
✅ CHANGELOG.md: Not updated, but this matches established project convention — I checked prior identical Dependabot bumps of this same action (6398db0 "Bump actions/setup-python from 6 to 6.2.0", e8a8559 "5 to 6") and neither touched CHANGELOG.md either. No inconsistency introduced.
✅ N/A inline comments — no logic changed.

Security

✅ No hardcoded credentials
✅ No input validation needed (CI config only)
✅ No error handling changes
✅ No sensitive data
✅ No .lic files or AQAAAD-prefixed license strings in this diff (note: unrelated untracked scratch files in the working tree contain such strings but are not part of this PR's diff, so out of scope)

Verdict

No issues found. This is a clean, mechanical, low-risk dependency version bump consistent with the repository's established conventions for prior `actions/setup-python` bumps. Safe to merge pending CI passing.

Automated code review analyzing defects and coding standards

github-actions · 2026-07-14T09:55:59Z

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing_grpc
szabstractfactory.py
Project Total

_{This report was generated by python-coverage-comment-action}

github-actions · 2026-07-14T09:56:26Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

…on-6.3.0

github-actions · 2026-07-14T11:58:05Z

🤖 Claude Code Review

Code Review

Summary: Dependabot-style version bump of actions/setup-python from v6.2.0 → v6.3.0 across 13 GitHub Actions workflow files. No source code, test, or documentation changes.

Code Quality

✅ Style conventions: Consistent, mechanical version bump applied identically across all 13 workflow files.
✅ No commented-out code: None introduced.
✅ Meaningful variable names: N/A — no variables/code changed.
✅ DRY principle: N/A — this is a repeated action reference; each workflow file requires the pin independently, so no violation.
✅ Defects/bugs/security: No logic changes. Pinning to a specific patch version (rather than a floating tag) is the safer pattern and matches existing convention in this repo. No issues found.
✅ CLAUDE.md consideration: .claude/CLAUDE.md is unchanged by this PR and remains general-purpose (no local-dev-specific content introduced).

Testing

N/A — no functional code changed; this only affects CI runner setup. Existing CI workflows (pytest-linux, pytest-darwin, pytest-windows, TLS variants) will implicitly validate the new action version when they run.
⚠️ Minor note: pytest-linux-tls-mutual.yaml and pytest-linux-tls-server-side.yaml (lines 72 and 69 respectively, pre-change) each still contain their own actions/setup-python step separate from the others — confirmed both were updated correctly in the diff.

Documentation

✅ No README/API doc changes needed for this type of change.
❌ CHANGELOG.md not updated — repo convention (per recent commit history, e.g. "Bump coverage from 7.14.2 to 7.14.3 (Bump coverage from 7.14.2 to 7.14.3 #510)") appears to treat dependency bumps as PR-title-documented rather than requiring CHANGELOG entries, so this is likely fine, but flagging since the checklist explicitly asks for it.
N/A Markdown/CommonMark formatting — no .md files touched in this diff.

Security

✅ No hardcoded credentials.
✅ No input validation concerns.
✅ No error handling changes.
✅ No sensitive data in logs.
✅ No .lic license files present in this diff (checked all changed files — all are .yaml workflow files).

Overall

This is a clean, low-risk, mechanical dependency-version bump (likely Dependabot-generated). All 13 changed files consistently update the same pin from `v6.2.0` to `v6.3.0`. No defects found. Approve.

Automated code review analyzing defects and coding standards

github-actions · 2026-07-14T11:59:43Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

dependabot Bot assigned kernelsam Jul 14, 2026

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 14, 2026

dependabot Bot requested a review from a team as a code owner July 14, 2026 09:54

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 14, 2026

docktermj approved these changes Jul 14, 2026

View reviewed changes

docktermj enabled auto-merge (squash) July 14, 2026 11:57

Merge branch 'main' into dependabot/github_actions/actions/setup-pyth…

f8aac1e

…on-6.3.0

docktermj self-assigned this Jul 14, 2026

docktermj merged commit 15a2ef2 into main Jul 14, 2026
57 checks passed

docktermj deleted the dependabot/github_actions/actions/setup-python-6.3.0 branch July 14, 2026 11:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump actions/setup-python from 6.2.0 to 6.3.0#511

Bump actions/setup-python from 6.2.0 to 6.3.0#511
docktermj merged 2 commits into
mainfrom
dependabot/github_actions/actions/setup-python-6.3.0

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

PR Review: Bump actions/setup-python from 6.2.0 to 6.3.0

Code Quality

Testing

Documentation

Security

Verdict

No issues found. This is a clean, mechanical, low-risk dependency version bump consistent with the repository's established conventions for prior actions/setup-python bumps. Safe to merge pending CI passing.

Uh oh!

github-actions Bot commented Jul 14, 2026

Coverage report

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

Code Review

Code Quality

Testing

Documentation

Security

Overall

This is a clean, low-risk, mechanical dependency-version bump (likely Dependabot-generated). All 13 changed files consistently update the same pin from v6.2.0 to v6.3.0. No defects found. Approve.

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

PR Review: Bump `actions/setup-python` from 6.2.0 to 6.3.0

No issues found. This is a clean, mechanical, low-risk dependency version bump consistent with the repository's established conventions for prior `actions/setup-python` bumps. Safe to merge pending CI passing.

This is a clean, low-risk, mechanical dependency-version bump (likely Dependabot-generated). All 13 changed files consistently update the same pin from `v6.2.0` to `v6.3.0`. No defects found. Approve.