Bump actions/setup-python from 6.2.0 to 6.3.0 by dependabot[bot] · Pull Request #539 · senzing-garage/sz-sdk-python

dependabot · 2026-07-14T01:44:05Z

Bumps actions/setup-python from 6.2.0 to 6.3.0.

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
d2b357a Update dependency versions and test workflow configuration (#1322)
8f639b1 Merge pull request #1324 from jasongin/update-actions-cache-5.1.0
6731c2b Resolve high-severity audit issues
0cb1a84 Add RHEL support and include Linux distro in cache keys (#1323)
dc6eab6 Update dist
6f4b74b Strict equality
fa8bde1 Bump @actions/cache to 5.1.0, log cache write denied
c8813ba Upgrade @actions dependencies and update licenses (#1303)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6.2.0...v6.3.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-14T01:47:05Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

github-actions · 2026-07-14T01:47:41Z

🤖 Claude Code Review

Code Review

This PR bumps actions/setup-python from v6.2.0 to v6.3.0 across 11 GitHub Actions workflow files. It's a mechanical, single-purpose version bump (likely Dependabot-generated).

Code Quality

✅ Style conventions: Consistent YAML formatting maintained across all files.
✅ No commented-out code: N/A, no code removed/commented.
✅ Meaningful names: N/A, no variables introduced.
✅ DRY: The same change is repeated identically across 11 files (.github/workflows/black.yaml:32, build-distribution.yaml:30, check-development-dependencies.yaml:32, create-sphinx-documentation.yaml:29, dependency-scan.yaml:31, flake8.yaml:32, isort.yaml:31, mypy.yaml:32, publish-to-pypi.yaml:28, pylint.yaml:31, pytest-darwin.yaml:50, pytest-linux.yaml:68, pytest-windows.yaml:49). This isn't a DRY violation in the problematic sense — GitHub Actions workflows don't support cross-file includes, so per-file pinning is standard practice, not duplicated logic.
✅ Defects: No logic errors. Version bump is applied consistently; no file was missed (I confirmed all actions/setup-python references were updated to v6.3.0).
✅ CLAUDE.md: No changes to .claude/CLAUDE.md in this diff.

Testing

N/A — this is a CI infrastructure change with no application code. No unit/integration tests apply. The workflows themselves will validate the pin on next CI run.

Documentation

✅ No README/API doc changes needed for a CI action version bump.
⚠️ CHANGELOG.md not updated — minor, consistent with how this repo appears to treat routine Dependabot-style CI bumps (not user-facing).
✅ No markdown files touched, so CommonMark formatting doesn't apply.

Security

✅ No hardcoded credentials.
✅ No input validation concerns (static workflow config).
✅ No error handling changes.
✅ No sensitive data in logs.
✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Summary

No issues found. This is a low-risk, mechanical CI dependency bump (`actions/setup-python@v6.2.0` → `v6.3.0`) applied consistently across all 11 workflow files that reference it. Safe to merge.

Automated code review analyzing defects and coding standards

github-actions · 2026-07-14T01:48:01Z

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing
szengineflags.py
szerror.py
Project Total

_{This report was generated by python-coverage-comment-action}

…on-6.3.0

github-actions · 2026-07-14T03:39:35Z

🤖 Claude Code Review

All 13 workflow files consistently reference v6.3.0 — no strays left at v6.2.0. Here's the review.

Review Summary

This is a mechanical Dependabot version bump: actions/setup-python v6.2.0 → v6.3.0 across 13 GitHub Actions workflow files. No source code changes.

Code Quality

✅ Style/consistency — All 13 occurrences updated identically; verified no stray v6.2.0 references remain anywhere in .github/workflows/.
✅ No commented-out code
✅ Naming — N/A, no code identifiers introduced.
✅ DRY — N/A, each workflow independently pins the action version per existing repo convention; not a defect.
✅ Defects — No logic changes; pure version pin bump. Low risk. actions/setup-python@v6.3.0 is a minor version bump from a trusted, first-party GitHub Action — no behavioral concerns identified from the diff itself.
✅ CLAUDE.md — Not touched by this PR; no concerns.

Testing

N/A — no application code changed. CI workflows themselves will exercise the new action version once merged.

Documentation

⚠️ CHANGELOG.md — Not updated. The [Unreleased] section (line 8-11) is currently empty with a bare - placeholder. Per this repo's own changelog convention (Keep a Changelog), CI/tooling bumps are arguably minor, but the project has historically logged even dependency bumps in some cases — check whether the maintainers consider CI-only dependency bumps changelog-worthy (this repo's recent history, e.g. 4ce1eaa Bump coverage from 7.14.2 to 7.14.3, suggests dependency bumps are typically merged without a CHANGELOG entry, so this is likely fine as-is).
✅ No README/API doc impact — none needed for this change.

Security

✅ No hardcoded credentials
✅ N/A input validation — no code paths
✅ N/A error handling
✅ No sensitive data
✅ No .lic files or AQAAAD-prefixed license strings present in this diff.

Verdict

No blocking issues. This is a clean, low-risk, auto-generated dependency version bump limited to CI workflow files. Safe to merge.

Automated code review analyzing defects and coding standards

github-actions · 2026-07-14T03:41:01Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

dependabot Bot assigned kernelsam Jul 14, 2026

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 14, 2026

dependabot Bot requested a review from a team as a code owner July 14, 2026 01:44

dependabot Bot added github_actions Pull requests that update GitHub Actions code dependencies Pull requests that update a dependency file labels Jul 14, 2026

docktermj approved these changes Jul 14, 2026

View reviewed changes

Merge branch 'main' into dependabot/github_actions/actions/setup-pyth…

9fe6348

…on-6.3.0

docktermj enabled auto-merge (squash) July 14, 2026 03:39

docktermj self-assigned this Jul 14, 2026

docktermj merged commit a03c4b4 into main Jul 14, 2026
84 checks passed

docktermj deleted the dependabot/github_actions/actions/setup-python-6.3.0 branch July 14, 2026 03:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump actions/setup-python from 6.2.0 to 6.3.0#539

Bump actions/setup-python from 6.2.0 to 6.3.0#539
docktermj merged 2 commits into
mainfrom
dependabot/github_actions/actions/setup-python-6.3.0

dependabot Bot commented on behalf of github Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

github-actions Bot commented Jul 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 14, 2026

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

Code Review

Code Quality

Testing

Documentation

Security

Summary

No issues found. This is a low-risk, mechanical CI dependency bump (actions/setup-python@v6.2.0 → v6.3.0) applied consistently across all 11 workflow files that reference it. Safe to merge.

Uh oh!

github-actions Bot commented Jul 14, 2026

Coverage report

Uh oh!

github-actions Bot commented Jul 14, 2026

🤖 Claude Code Review

Review Summary

Code Quality

Testing

Documentation

Security

Verdict

No blocking issues. This is a clean, low-risk, auto-generated dependency version bump limited to CI workflow files. Safe to merge.

Uh oh!

github-actions Bot commented Jul 14, 2026

Super-linter summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

No issues found. This is a low-risk, mechanical CI dependency bump (`actions/setup-python@v6.2.0` → `v6.3.0`) applied consistently across all 11 workflow files that reference it. Safe to merge.