dependabot[bot] opened a new pull request, #18:
URL: https://github.com/apache/datasketches-cuda/pull/18

   Bumps the actions-dependencies group with 5 updates:
   
   | Package | From | To |
   | --- | --- | --- |
   | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
   | [actions/cache](https://github.com/actions/cache) | `4` | `6` |
   | [actions/upload-artifact](https://github.com/actions/upload-artifact) | 
`4` | `7` |
   | [actions/download-artifact](https://github.com/actions/download-artifact) 
| `4` | `8` |
   | [actions/setup-python](https://github.com/actions/setup-python) | `5` | 
`6` |
   
   Updates `actions/checkout` from 4 to 7
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/checkout/releases";>actions/checkout's 
releases</a>.</em></p>
   <blockquote>
   <h2>v7.0.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>block checking out fork pr for pull_request_target and workflow_run by 
<a href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li>
   <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the 
minor-actions-dependencies group across 1 directory by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li>
   <li>Bump flatted from 3.3.1 to 3.4.2 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li>
   <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li>
   <li>Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> 
and Remove uuid by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li>
   <li>upgrade module to esm and update dependencies by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li>
   <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates 
by <a href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] 
in <a 
href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li>
   <li>getting ready for checkout v7 release by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2464";>actions/checkout#2464</a></li>
   <li>update error wording by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2467";>actions/checkout#2467</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0";>https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p>
   <h2>v6.1.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li><strong>[BREAKING]</strong> backport 
<code>allow-unsafe-pr-checkout</code> to v6 by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2500";>actions/checkout#2500</a></li>
   <li>backport fixes to releases-v6 by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2527";>actions/checkout#2527</a></li>
   </ul>
   <p><a 
href="https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/";>https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/</a>
 for more details about this breaking change</p>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/checkout/compare/v6.0.3...v6.1.0";>https://github.com/actions/checkout/compare/v6.0.3...v6.1.0</a></p>
   <h2>v6.0.3</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Update changelog by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2357";>actions/checkout#2357</a></li>
   <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a 
href="https://github.com/yaananth";><code>@​yaananth</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li>
   <li>Fix checkout init for SHA-256 repositories by <a 
href="https://github.com/yaananth";><code>@​yaananth</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li>
   <li>Update changelog for v6.0.3 by <a 
href="https://github.com/yaananth";><code>@​yaananth</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2446";>actions/checkout#2446</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/yaananth";><code>@​yaananth</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/checkout/compare/v6...v6.0.3";>https://github.com/actions/checkout/compare/v6...v6.0.3</a></p>
   <h2>v6.0.2</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is 
set by <a 
href="https://github.com/TingluoHuang";><code>@​TingluoHuang</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2355";>actions/checkout#2355</a></li>
   <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2";>https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p>
   <h2>v6.0.1</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Update all references from v5 and v4 to v6 by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2314";>actions/checkout#2314</a></li>
   <li>Add worktree support for persist-credentials includeIf by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li>
   <li>Clarify v6 README by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2328";>actions/checkout#2328</a></li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md";>actions/checkout's
 changelog</a>.</em></p>
   <blockquote>
   <h1>Changelog</h1>
   <h2>v7.0.1</h2>
   <ul>
   <li>Skip running unsafe pr check if input is default by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2518";>actions/checkout#2518</a></li>
   <li>Trim only ascii whitespace for branch by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2521";>actions/checkout#2521</a></li>
   <li>Escape values passed to --unset by <a 
href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2530";>actions/checkout#2530</a></li>
   <li>Various dependency updates</li>
   </ul>
   <h2>v7.0.0</h2>
   <ul>
   <li>Block checking out fork PR for pull_request_target and workflow_run by 
<a href="https://github.com/aiqiaoy";><code>@​aiqiaoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li>
   <li>Various dependency updates</li>
   </ul>
   <h2>v6.0.3</h2>
   <ul>
   <li>Fix checkout init for SHA-256 repositories by <a 
href="https://github.com/yaananth";><code>@​yaananth</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li>
   <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a 
href="https://github.com/yaananth";><code>@​yaananth</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li>
   </ul>
   <h2>v6.0.2</h2>
   <ul>
   <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li>
   </ul>
   <h2>v6.0.1</h2>
   <ul>
   <li>Add worktree support for persist-credentials includeIf by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li>
   </ul>
   <h2>v6.0.0</h2>
   <ul>
   <li>Persist creds to a separate file by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2286";>actions/checkout#2286</a></li>
   <li>Update README to include Node.js 24 support details and requirements by 
<a href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2248";>actions/checkout#2248</a></li>
   </ul>
   <h2>v5.0.1</h2>
   <ul>
   <li>Port v6 cleanup to v5 by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2301";>actions/checkout#2301</a></li>
   </ul>
   <h2>v5.0.0</h2>
   <ul>
   <li>Update actions checkout to use node 24 by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2226";>actions/checkout#2226</a></li>
   </ul>
   <h2>v4.3.1</h2>
   <ul>
   <li>Port v6 cleanup to v4 by <a 
href="https://github.com/ericsciple";><code>@​ericsciple</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2305";>actions/checkout#2305</a></li>
   </ul>
   <h2>v4.3.0</h2>
   <ul>
   <li>docs: update README.md by <a 
href="https://github.com/motss";><code>@​motss</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/1971";>actions/checkout#1971</a></li>
   <li>Add internal repos for checking out multiple repositories by <a 
href="https://github.com/mouismail";><code>@​mouismail</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/1977";>actions/checkout#1977</a></li>
   <li>Documentation update - add recommended permissions to Readme by <a 
href="https://github.com/benwells";><code>@​benwells</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2043";>actions/checkout#2043</a></li>
   <li>Adjust positioning of user email note and permissions heading by <a 
href="https://github.com/joshmgross";><code>@​joshmgross</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2044";>actions/checkout#2044</a></li>
   <li>Update README.md by <a 
href="https://github.com/nebuk89";><code>@​nebuk89</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2194";>actions/checkout#2194</a></li>
   <li>Update CODEOWNERS for actions by <a 
href="https://github.com/TingluoHuang";><code>@​TingluoHuang</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2224";>actions/checkout#2224</a></li>
   <li>Update package dependencies by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/2236";>actions/checkout#2236</a></li>
   </ul>
   <h2>v4.2.2</h2>
   <ul>
   <li><code>url-helper.ts</code> now leverages well-known environment 
variables by <a href="https://github.com/jww3";><code>@​jww3</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/1941";>actions/checkout#1941</a></li>
   <li>Expand unit test coverage for <code>isGhes</code> by <a 
href="https://github.com/jww3";><code>@​jww3</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/1946";>actions/checkout#1946</a></li>
   </ul>
   <h2>v4.2.1</h2>
   <ul>
   <li>Check out other refs/* by commit if provided, fall back to ref by <a 
href="https://github.com/orhantoy";><code>@​orhantoy</code></a> in <a 
href="https://redirect.github.com/actions/checkout/pull/1924";>actions/checkout#1924</a></li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1";><code>3d3c42e</code></a>
 prep v7.0.1 release (<a 
href="https://redirect.github.com/actions/checkout/issues/2531";>#2531</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07";><code>2880268</code></a>
 escape values passed to --unset (<a 
href="https://redirect.github.com/actions/checkout/issues/2530";>#2530</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1";><code>12cd223</code></a>
 trim only ascii whitespace for branch (<a 
href="https://redirect.github.com/actions/checkout/issues/2521";>#2521</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541";><code>62661c4</code></a>
 skip running unsafe pr check if input is default (<a 
href="https://redirect.github.com/actions/checkout/issues/2518";>#2518</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f";><code>e8d4307</code></a>
 Bump the minor-actions-dependencies group with 2 updates (<a 
href="https://redirect.github.com/actions/checkout/issues/2499";>#2499</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87";><code>631c942</code></a>
 eslint 9 (<a 
href="https://redirect.github.com/actions/checkout/issues/2474";>#2474</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e";><code>4f1f4ae</code></a>
 Bump actions/upload-artifact from 4 to 7 (<a 
href="https://redirect.github.com/actions/checkout/issues/2476";>#2476</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92";><code>ba09753</code></a>
 Bump actions/checkout from 6 to 7 (<a 
href="https://redirect.github.com/actions/checkout/issues/2488";>#2488</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22";><code>b9e0990</code></a>
 Bump docker/login-action from 3.3.0 to 4.2.0 (<a 
href="https://redirect.github.com/actions/checkout/issues/2479";>#2479</a>)</li>
   <li><a 
href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2";><code>e8cb398</code></a>
 Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a 
href="https://redirect.github.com/actions/checkout/issues/2478";>#2478</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/actions/checkout/compare/v4...v7";>compare view</a></li>
   </ul>
   </details>
   <br />
   
   Updates `actions/cache` from 4 to 6
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/cache/releases";>actions/cache's 
releases</a>.</em></p>
   <blockquote>
   <h2>v6.0.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Update packages, migrate to ESM by <a 
href="https://github.com/Samirat";><code>@​Samirat</code></a> in <a 
href="https://redirect.github.com/actions/cache/pull/1760";>actions/cache#1760</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/cache/compare/v5...v6.0.0";>https://github.com/actions/cache/compare/v5...v6.0.0</a></p>
   <h2>v5.1.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Bump <code>@​actions/cache</code> to v5.1.0 - handle read-only cache 
access by <a href="https://github.com/jasongin";><code>@​jasongin</code></a> in 
<a 
href="https://redirect.github.com/actions/cache/pull/1775";>actions/cache#1775</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/cache/compare/v5...v5.1.0";>https://github.com/actions/cache/compare/v5...v5.1.0</a></p>
   <h2>v5.0.5</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Update ts-http-runtime dependency by <a 
href="https://github.com/yacaovsnc";><code>@​yacaovsnc</code></a> in <a 
href="https://redirect.github.com/actions/cache/pull/1747";>actions/cache#1747</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/cache/compare/v5...v5.0.5";>https://github.com/actions/cache/compare/v5...v5.0.5</a></p>
   <h2>v5.0.4</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Add release instructions and update maintainer docs by <a 
href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/cache/pull/1696";>actions/cache#1696</a></li>
   <li>Potential fix for code scanning alert no. 52: Workflow does not contain 
permissions by <a href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/cache/pull/1697";>actions/cache#1697</a></li>
   <li>Fix workflow permissions and cleanup workflow names / formatting by <a 
href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/cache/pull/1699";>actions/cache#1699</a></li>
   <li>docs: Update examples to use the latest version by <a 
href="https://github.com/XZTDean";><code>@​XZTDean</code></a> in <a 
href="https://redirect.github.com/actions/cache/pull/1690";>actions/cache#1690</a></li>
   <li>Fix proxy integration tests by <a 
href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/cache/pull/1701";>actions/cache#1701</a></li>
   <li>Fix cache key in examples.md for bun.lock by <a 
href="https://github.com/RyPeck";><code>@​RyPeck</code></a> in <a 
href="https://redirect.github.com/actions/cache/pull/1722";>actions/cache#1722</a></li>
   <li>Update dependencies &amp; patch security vulnerabilities by <a 
href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/cache/pull/1738";>actions/cache#1738</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/XZTDean";><code>@​XZTDean</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/cache/pull/1690";>actions/cache#1690</a></li>
   <li><a href="https://github.com/RyPeck";><code>@​RyPeck</code></a> made their 
first contribution in <a 
href="https://redirect.github.com/actions/cache/pull/1722";>actions/cache#1722</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/cache/compare/v5...v5.0.4";>https://github.com/actions/cache/compare/v5...v5.0.4</a></p>
   <h2>v5.0.3</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a 
href="https://github.com/actions/cache/security/dependabot/33";>https://github.com/actions/cache/security/dependabot/33</a>)</li>
   <li>Bump <code>@actions/core</code> to v2.0.3</li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/cache/compare/v5...v5.0.3";>https://github.com/actions/cache/compare/v5...v5.0.3</a></p>
   <h2>v.5.0.2</h2>
   <h1>v5.0.2</h1>
   <h2>What's Changed</h2>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/cache/blob/main/RELEASES.md";>actions/cache's 
changelog</a>.</em></p>
   <blockquote>
   <h1>Releases</h1>
   <h2>How to prepare a release</h2>
   <blockquote>
   <p>[!NOTE]
   Relevant for maintainers with write access only.</p>
   </blockquote>
   <ol>
   <li>Switch to a new branch from <code>main</code>.</li>
   <li>Run <code>npm test</code> to ensure all tests are passing.</li>
   <li>Update the version in <a 
href="https://github.com/actions/cache/blob/main/package.json";><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li>
   <li>Run <code>npm run build</code> to update the compiled files.</li>
   <li>Update this <a 
href="https://github.com/actions/cache/blob/main/RELEASES.md";><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a>
 with the new version and changes in the <code>## Changelog</code> section.</li>
   <li>Run <code>licensed cache</code> to update the license report.</li>
   <li>Run <code>licensed status</code> and resolve any warnings by updating 
the <a 
href="https://github.com/actions/cache/blob/main/.licensed.yml";><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a>
 file with the exceptions.</li>
   <li>Commit your changes and push your branch upstream.</li>
   <li>Open a pull request against <code>main</code> and get it reviewed and 
merged.</li>
   <li>Draft a new release <a 
href="https://github.com/actions/cache/releases";>https://github.com/actions/cache/releases</a>
 use the same version number used in <code>package.json</code>
   <ol>
   <li>Create a new tag with the version number.</li>
   <li>Auto generate release notes and update them to match the changes you 
made in <code>RELEASES.md</code>.</li>
   <li>Toggle the set as the latest release option.</li>
   <li>Publish the release.</li>
   </ol>
   </li>
   <li>Navigate to <a 
href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml";>https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a>
   <ol>
   <li>There should be a workflow run queued with the same version number.</li>
   <li>Approve the run to publish the new version and update the major tags for 
this action.</li>
   </ol>
   </li>
   </ol>
   <h2>Changelog</h2>
   <h3>6.1.0</h3>
   <ul>
   <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a 
href="https://redirect.github.com/actions/toolkit/pull/2435";>actions/toolkit#2435
 Handle cache write error due to read-only token</a></li>
   <li>Switch redundant &quot;Cache save failed&quot; warning to debug log in 
save-only</li>
   </ul>
   <h3>6.0.0</h3>
   <ul>
   <li>Updated <code>@actions/cache</code> to ^6.0.1, 
<code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to ^3.0.0, 
<code>@actions/io</code> to ^3.0.2</li>
   <li>Migrated to ESM module system</li>
   <li>Upgraded Jest to v30 and test infrastructure to be ESM compatible</li>
   </ul>
   <h3>5.0.4</h3>
   <ul>
   <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar 
patterns)</li>
   <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb 
protection, header validation fixes)</li>
   <li>Bump <code>fast-xml-parser</code> to v5.5.6</li>
   </ul>
   <h3>5.0.3</h3>
   <ul>
   <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a 
href="https://github.com/actions/cache/security/dependabot/33";>https://github.com/actions/cache/security/dependabot/33</a>)</li>
   <li>Bump <code>@actions/core</code> to v2.0.3</li>
   </ul>
   <h3>5.0.2</h3>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9";><code>55cc834</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/cache/issues/1768";>#1768</a> from 
jasongin/readonly-cache</li>
   <li><a 
href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337";><code>d8cd72f</code></a>
 Bump <code>@​actions/cache</code> to v6.1.0 - handle cache write error due to 
RO token</li>
   <li><a 
href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8";><code>2c8a9bd</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/cache/issues/1760";>#1760</a> from 
actions/samirat/esm_migration_and_package_update</li>
   <li><a 
href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023";><code>e9b91fd</code></a>
 Prettier fixes</li>
   <li><a 
href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb";><code>e4884b8</code></a>
 Rebuild dist</li>
   <li><a 
href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f";><code>10baf01</code></a>
 Fixed licenses</li>
   <li><a 
href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37";><code>e39b386</code></a>
 Fix test mock return order</li>
   <li><a 
href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06";><code>b692820</code></a>
 PR feedback</li>
   <li><a 
href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1";><code>6074912</code></a>
 Rebuild dist bundles as ESM to match type:module</li>
   <li><a 
href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e";><code>5a912e8</code></a>
 Fix lint and jest issues</li>
   <li>Additional commits viewable in <a 
href="https://github.com/actions/cache/compare/v4...v6";>compare view</a></li>
   </ul>
   </details>
   <br />
   
   Updates `actions/upload-artifact` from 4 to 7
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's
 releases</a>.</em></p>
   <blockquote>
   <h2>v7.0.0</h2>
   <h2>v7 What's new</h2>
   <h3>Direct Uploads</h3>
   <p>Adds support for uploading single files directly (unzipped). Callers can 
set the new <code>archive</code> parameter to <code>false</code> to skip 
zipping the file during upload. Right now, we only support single files. The 
action will fail if the glob passed resolves to multiple files. The 
<code>name</code> parameter is also ignored with this setting. Instead, the 
name of the artifact will be the name of the uploaded file.</p>
   <h3>ESM</h3>
   <p>To support new versions of the <code>@actions/*</code> packages, we've 
upgraded the package to ESM.</p>
   <h2>What's Changed</h2>
   <ul>
   <li>Add proxy integration test by <a 
href="https://github.com/Link";><code>@​Link</code></a>- in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li>
   <li>Upgrade the module to ESM and bump dependencies by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/762";>actions/upload-artifact#762</a></li>
   <li>Support direct file uploads by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/764";>actions/upload-artifact#764</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/Link";><code>@​Link</code></a>- made their 
first contribution in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0";>https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p>
   <h2>v6.0.0</h2>
   <h2>v6 - What's new</h2>
   <blockquote>
   <p>[!IMPORTANT]
   actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: 
node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you 
are using self-hosted runners, ensure they are updated before upgrading.</p>
   </blockquote>
   <h3>Node.js 24</h3>
   <p>This release updates the runtime to Node.js 24. v5 had preliminary 
support for Node.js 24, however this action was by default still running on 
Node.js 20. Now this action by default will run on Node.js 24.</p>
   <h2>What's Changed</h2>
   <ul>
   <li>Upload Artifact Node 24 support by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/719";>actions/upload-artifact#719</a></li>
   <li>fix: update <code>@​actions/artifact</code> for Node.js 24 punycode 
deprecation by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/744";>actions/upload-artifact#744</a></li>
   <li>prepare release v6.0.0 for Node.js 24 support by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/745";>actions/upload-artifact#745</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0";>https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p>
   <h2>v5.0.0</h2>
   <h2>What's Changed</h2>
   <p><strong>BREAKING CHANGE:</strong> this update supports Node 
<code>v24.x</code>. This is not a breaking change per-se but we're treating it 
as such.</p>
   <ul>
   <li>Update README.md by <a 
href="https://github.com/GhadimiR";><code>@​GhadimiR</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/681";>actions/upload-artifact#681</a></li>
   <li>Update README.md by <a 
href="https://github.com/nebuk89";><code>@​nebuk89</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/712";>actions/upload-artifact#712</a></li>
   <li>Readme: spell out the first use of GHES by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/727";>actions/upload-artifact#727</a></li>
   <li>Update GHES guidance to include reference to Node 20 version by <a 
href="https://github.com/patrikpolyak";><code>@​patrikpolyak</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/725";>actions/upload-artifact#725</a></li>
   <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li>
   <li>Prepare <code>v5.0.0</code> by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/upload-artifact/pull/734";>actions/upload-artifact#734</a></li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9";><code>cf430e0</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/upload-artifact/issues/822";>#822</a> 
from actions/tunc-d-prepare-upload-v7-0-2</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469";><code>c2acded</code></a>
 chore: prepare v7.0.2 release</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a";><code>4687c1b</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/upload-artifact/issues/821";>#821</a> 
from actions/tunc-d-upload-artifact-package-bump</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719";><code>8cbe1be</code></a>
 Bump <code>@​actions/artifact</code> to 6.3.1</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a";><code>043fb46</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/upload-artifact/issues/797";>#797</a> 
from actions/yacaovsnc/update-dependency</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94";><code>634250c</code></a>
 Include changes in typespec/ts-http-runtime 0.3.5</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8";><code>e454baa</code></a>
 Readme: bump all the example versions to v7 (<a 
href="https://redirect.github.com/actions/upload-artifact/issues/796";>#796</a>)</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e";><code>74fad66</code></a>
 Update the readme with direct upload details (<a 
href="https://redirect.github.com/actions/upload-artifact/issues/795";>#795</a>)</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f";><code>bbbca2d</code></a>
 Support direct file uploads (<a 
href="https://redirect.github.com/actions/upload-artifact/issues/764";>#764</a>)</li>
   <li><a 
href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296";><code>589182c</code></a>
 Upgrade the module to ESM and bump dependencies (<a 
href="https://redirect.github.com/actions/upload-artifact/issues/762";>#762</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/actions/upload-artifact/compare/v4...v7";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   Updates `actions/download-artifact` from 4 to 8
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/download-artifact/releases";>actions/download-artifact's
 releases</a>.</em></p>
   <blockquote>
   <h2>v8.0.0</h2>
   <h2>v8 - What's new</h2>
   <blockquote>
   <p>[!IMPORTANT]
   actions/download-artifact@v8 has been migrated to an ESM module. This should 
be transparent to the caller but forks might need to make significant 
changes.</p>
   </blockquote>
   <blockquote>
   <p>[!IMPORTANT]
   Hash mismatches will now error by default. Users can override this behavior 
with a setting change (see below).</p>
   </blockquote>
   <h3>Direct downloads</h3>
   <p>To support direct uploads in <code>actions/upload-artifact</code>, the 
action will no longer attempt to unzip all downloaded files. Instead, the 
action checks the <code>Content-Type</code> header ahead of unzipping and skips 
non-zipped files. Callers wishing to download a zipped file as-is can also set 
the new <code>skip-decompress</code> parameter to <code>true</code>.</p>
   <h3>Enforced checks (breaking)</h3>
   <p>A previous release introduced digest checks on the download. If a 
download hash didn't match the expected hash from the server, the action would 
log a warning. Callers can now configure the behavior on mismatch with the 
<code>digest-mismatch</code> parameter. To be secure by default, we are now 
defaulting the behavior to <code>error</code> which will fail the workflow 
run.</p>
   <h3>ESM</h3>
   <p>To support new versions of the @actions/* packages, we've upgraded the 
package to ESM.</p>
   <h2>What's Changed</h2>
   <ul>
   <li>Don't attempt to un-zip non-zipped downloads by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/460";>actions/download-artifact#460</a></li>
   <li>Add a setting to specify what to do on hash mismatch and default it to 
<code>error</code> by <a 
href="https://github.com/danwkennedy";><code>@​danwkennedy</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/461";>actions/download-artifact#461</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/download-artifact/compare/v7...v8.0.0";>https://github.com/actions/download-artifact/compare/v7...v8.0.0</a></p>
   <h2>v7.0.0</h2>
   <h2>v7 - What's new</h2>
   <blockquote>
   <p>[!IMPORTANT]
   actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using: 
node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you 
are using self-hosted runners, ensure they are updated before upgrading.</p>
   </blockquote>
   <h3>Node.js 24</h3>
   <p>This release updates the runtime to Node.js 24. v6 had preliminary 
support for Node 24, however this action was by default still running on 
Node.js 20. Now this action by default will run on Node.js 24.</p>
   <h2>What's Changed</h2>
   <ul>
   <li>Update GHES guidance to include reference to Node 20 version by <a 
href="https://github.com/patrikpolyak";><code>@​patrikpolyak</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/440";>actions/download-artifact#440</a></li>
   <li>Download Artifact Node24 support by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/415";>actions/download-artifact#415</a></li>
   <li>fix: update <code>@​actions/artifact</code> to fix Node.js 24 punycode 
deprecation by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/451";>actions/download-artifact#451</a></li>
   <li>prepare release v7.0.0 for Node.js 24 support by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/download-artifact/pull/452";>actions/download-artifact#452</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a 
href="https://github.com/patrikpolyak";><code>@​patrikpolyak</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/download-artifact/pull/440";>actions/download-artifact#440</a></li>
   <li><a href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/download-artifact/pull/415";>actions/download-artifact#415</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0";>https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p>
   <h2>v6.0.0</h2>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/actions/download-artifact/commit/9000827ccba6bdab643e8b6fd33ac0654aef8333";><code>9000827</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/download-artifact/issues/493";>#493</a>
 from actions/tunc-d-prepare-download-v8-0-2</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/e455989ae00f5bdd4054f05d3e972c6bf8a62dc5";><code>e455989</code></a>
 Prepare download-artifact v8.0.2</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/a00b90c4a2f01d73a8c89552caabca6ea3b43137";><code>a00b90c</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/download-artifact/issues/492";>#492</a>
 from actions/tunc-d-download-artifact-package-bump</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/29bb7ce6af5345aeab5bb4774ce7249ee3ccc27f";><code>29bb7ce</code></a>
 Update <code>@​actions/artifact</code> to 6.3.1</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/484a0b528fb4d7bd804637ccb632e47a0e638317";><code>484a0b5</code></a>
 Update the readme (<a 
href="https://redirect.github.com/actions/download-artifact/issues/473";>#473</a>)</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c";><code>3e5f45b</code></a>
 Add regression tests for CJK characters (<a 
href="https://redirect.github.com/actions/download-artifact/issues/471";>#471</a>)</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/e6d03f67377d4412c7aa56a8e2e4988e6ec479dd";><code>e6d03f6</code></a>
 Add a regression test for artifact name + content-type mismatches (<a 
href="https://redirect.github.com/actions/download-artifact/issues/472";>#472</a>)</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3";><code>70fc10c</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/download-artifact/issues/461";>#461</a>
 from actions/danwkennedy/digest-mismatch-behavior</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/f258da9a506b755b84a09a531814700b86ccfc62";><code>f258da9</code></a>
 Add change docs</li>
   <li><a 
href="https://github.com/actions/download-artifact/commit/ccc058e5fbb0bb2352213eaec3491e117cbc4a5c";><code>ccc058e</code></a>
 Fix linting issues</li>
   <li>Additional commits viewable in <a 
href="https://github.com/actions/download-artifact/compare/v4...v8";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   Updates `actions/setup-python` from 5 to 6
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/actions/setup-python/releases";>actions/setup-python's 
releases</a>.</em></p>
   <blockquote>
   <h2>v6.0.0</h2>
   <h2>What's Changed</h2>
   <h3>Breaking Changes</h3>
   <ul>
   <li>Upgrade to node 24 by <a 
href="https://github.com/salmanmkc";><code>@​salmanmkc</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1164";>actions/setup-python#1164</a></li>
   </ul>
   <p>Make sure your runner is on version v2.327.1 or later to ensure 
compatibility with this release. <a 
href="https://github.com/actions/runner/releases/tag/v2.327.1";>See Release 
Notes</a></p>
   <h3>Enhancements:</h3>
   <ul>
   <li>Add support for <code>pip-version</code>  by <a 
href="https://github.com/priyagupta108";><code>@​priyagupta108</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1129";>actions/setup-python#1129</a></li>
   <li>Enhance reading from .python-version by <a 
href="https://github.com/krystof-k";><code>@​krystof-k</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/787";>actions/setup-python#787</a></li>
   <li>Add version parsing from Pipfile by <a 
href="https://github.com/aradkdj";><code>@​aradkdj</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1067";>actions/setup-python#1067</a></li>
   </ul>
   <h3>Bug fixes:</h3>
   <ul>
   <li>Clarify pythonLocation behaviour for PyPy and GraalPy in environment 
variables by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1183";>actions/setup-python#1183</a></li>
   <li>Change missing cache directory error to warning  by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1182";>actions/setup-python#1182</a></li>
   <li>Add Architecture-Specific PATH Management for Python with --user Flag on 
Windows by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1122";>actions/setup-python#1122</a></li>
   <li>Include python version in PyPy python-version output by <a 
href="https://github.com/cdce8p";><code>@​cdce8p</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1110";>actions/setup-python#1110</a></li>
   <li>Update docs: clarification on pip authentication with setup-python by <a 
href="https://github.com/priya-kinthali";><code>@​priya-kinthali</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1156";>actions/setup-python#1156</a></li>
   </ul>
   <h3>Dependency updates:</h3>
   <ul>
   <li>Upgrade idna from 2.9 to 3.7 in /<strong>tests</strong>/data by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/setup-python/pull/843";>actions/setup-python#843</a></li>
   <li>Upgrade form-data to fix critical vulnerabilities <a 
href="https://redirect.github.com/actions/setup-python/issues/182";>#182</a> 
&amp; <a 
href="https://redirect.github.com/actions/setup-python/issues/183";>#183</a> by 
<a href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> 
in <a 
href="https://redirect.github.com/actions/setup-python/pull/1163";>actions/setup-python#1163</a></li>
   <li>Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in 
PackageIndex.download by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1165";>actions/setup-python#1165</a></li>
   <li>Upgrade actions/checkout from 4 to 5 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/setup-python/pull/1181";>actions/setup-python#1181</a></li>
   <li>Upgrade <code>@​actions/tool-cache</code> from 2.0.1 to 2.0.2 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a>[bot] in <a 
href="https://redirect.github.com/actions/setup-python/pull/1095";>actions/setup-python#1095</a></li>
   </ul>
   <h2>New Contributors</h2>
   <ul>
   <li><a href="https://github.com/krystof-k";><code>@​krystof-k</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/setup-python/pull/787";>actions/setup-python#787</a></li>
   <li><a href="https://github.com/cdce8p";><code>@​cdce8p</code></a> made their 
first contribution in <a 
href="https://redirect.github.com/actions/setup-python/pull/1110";>actions/setup-python#1110</a></li>
   <li><a href="https://github.com/aradkdj";><code>@​aradkdj</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/actions/setup-python/pull/1067";>actions/setup-python#1067</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/setup-python/compare/v5...v6.0.0";>https://github.com/actions/setup-python/compare/v5...v6.0.0</a></p>
   <h2>v5.6.0</h2>
   <h2>What's Changed</h2>
   <ul>
   <li>Workflow updates related to Ubuntu 20.04 by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1065";>actions/setup-python#1065</a></li>
   <li>Fix for Candidate Not Iterable Error by <a 
href="https://github.com/aparnajyothi-y";><code>@​aparnajyothi-y</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1082";>actions/setup-python#1082</a></li>
   <li>Upgrade semver and <code>@​types/semver</code> by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1091";>actions/setup-python#1091</a></li>
   <li>Upgrade prettier from 2.8.8 to 3.5.3 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1046";>actions/setup-python#1046</a></li>
   <li>Upgrade ts-jest from 29.1.2 to 29.3.2 by <a 
href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1081";>actions/setup-python#1081</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/actions/setup-python/compare/v5...v5.6.0";>https://github.com/actions/setup-python/compare/v5...v5.6.0</a></p>
   <h2>v5.5.0</h2>
   <h2>What's Changed</h2>
   <h3>Enhancements:</h3>
   <ul>
   <li>Support free threaded Python versions like '3.13t' by <a 
href="https://github.com/colesbury";><code>@​colesbury</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/973";>actions/setup-python#973</a></li>
   <li>Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free 
threaded and Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.3 by <a 
href="https://github.com/priya-kinthali";><code>@​priya-kinthali</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1056";>actions/setup-python#1056</a></li>
   <li>Add support for .tool-versions file in setup-python by <a 
href="https://github.com/mahabaleshwars";><code>@​mahabaleshwars</code></a> in 
<a 
href="https://redirect.github.com/actions/setup-python/pull/1043";>actions/setup-python#1043</a></li>
   </ul>
   <h3>Bug fixes:</h3>
   <ul>
   <li>Fix architecture for pypy on Linux ARM64 by <a 
href="https://github.com/mayeut";><code>@​mayeut</code></a> in <a 
href="https://redirect.github.com/actions/setup-python/pull/1011";>actions/setup-python#1011</a>
   This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/actions/setup-python/commit/ece7cb06caefa5fff74198d8649806c4678c61a1";><code>ece7cb0</code></a>
 Fix pip cache error handling on Windows. (<a 
href="https://redirect.github.com/actions/setup-python/issues/1040";>#1040</a>)</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/1d18d7af5f767c1259ede05a0a5bcc30f3dcf1cf";><code>1d18d7a</code></a>
 Update advanced-usage.md (<a 
href="https://redirect.github.com/actions/setup-python/issues/811";>#811</a>)</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/d2b357a6a3a3687dd6781a416c0d24fcfd68660e";><code>d2b357a</code></a>
 Update dependency versions and test workflow configuration (<a 
href="https://redirect.github.com/actions/setup-python/issues/1322";>#1322</a>)</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/8f639b1e75c1048640734b2bb46e22cecf136982";><code>8f639b1</code></a>
 Merge pull request <a 
href="https://redirect.github.com/actions/setup-python/issues/1324";>#1324</a> 
from jasongin/update-actions-cache-5.1.0</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/6731c2ba87f530c26324d128c8fdd53499a4d4b0";><code>6731c2b</code></a>
 Resolve high-severity audit issues</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/0cb1a84326b90186fcd211036c65b42819794c87";><code>0cb1a84</code></a>
 Add RHEL support and include Linux distro in cache keys (<a 
href="https://redirect.github.com/actions/setup-python/issues/1323";>#1323</a>)</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/dc6eab6194394e0119523369788b507096f923e2";><code>dc6eab6</code></a>
 Update dist</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/6f4b74bfa2f520a380a620de3615c0dac427f4d3";><code>6f4b74b</code></a>
 Strict equality</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/fa8bde1a9cc6347d06948d66bcd68c598b79eaea";><code>fa8bde1</code></a>
 Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
   <li><a 
href="https://github.com/actions/setup-python/commit/c8813ba1bc76ebf779b911ad8ffccbf2e449cb48";><code>c8813ba</code></a>
 Upgrade <a href="https://github.com/actions";><code>@​actions</code></a> 
dependencies and update licenses (<a 
href="https://redirect.github.com/actions/setup-python/issues/1303";>#1303</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/actions/setup-python/compare/v5...v6";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore <dependency name> major version` will close this group 
update PR and stop Dependabot creating any more for the specific dependency's 
major version (unless you unignore this specific dependency's major version or 
upgrade to it yourself)
   - `@dependabot ignore <dependency name> minor version` will close this group 
update PR and stop Dependabot creating any more for the specific dependency's 
minor version (unless you unignore this specific dependency's minor version or 
upgrade to it yourself)
   - `@dependabot ignore <dependency name>` will close this group update PR and 
stop Dependabot creating any more for the specific dependency (unless you 
unignore this specific dependency or upgrade to it yourself)
   - `@dependabot unignore <dependency name>` will remove all of the ignore 
conditions of the specified dependency
   - `@dependabot unignore <dependency name> <ignore condition>` will remove 
the ignore condition of the specified dependency and ignore conditions
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to