Pin SHA commits and update docs with latest versions - #1338
Merged
Conversation
Contributor
There was a problem hiding this comment.
Pull request overview
This pull request updates GitHub Actions workflow dependencies to use immutable commit-SHA pins (notably actions/checkout v7.0.0) and refreshes documentation snippets to reference the latest major versions for actions/checkout and actions/setup-python.
Changes:
- Pin
actions/checkoutto the v7.0.0 commit SHA across CI/e2e workflows. - Pin
actions/publish-immutable-actionto the v0.0.4 commit SHA in the release publishing workflow. - Update README and advanced usage docs examples to use
@v7foractions/checkoutandactions/setup-python.
Reviewed changes
Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| README.md | Updates usage snippets to reference actions/checkout@v7 and actions/setup-python@v7. |
| docs/advanced-usage.md | Updates all example workflows to reference actions/checkout@v7 and actions/setup-python@v7. |
| .github/workflows/test-python.yml | Pins actions/checkout to the v7.0.0 commit SHA in Python e2e validation jobs. |
| .github/workflows/test-python-freethreaded.yml | Pins actions/checkout to the v7.0.0 commit SHA in free-threaded Python e2e jobs. |
| .github/workflows/test-pypy.yml | Pins actions/checkout to the v7.0.0 commit SHA in PyPy e2e jobs. |
| .github/workflows/test-graalpy.yml | Pins actions/checkout to the v7.0.0 commit SHA in GraalPy e2e jobs. |
| .github/workflows/publish-immutable-actions.yml | Pins actions/checkout (v7.0.0) and actions/publish-immutable-action (v0.0.4) to commit SHAs. |
| .github/workflows/e2e-tests.yml | Pins actions/checkout to the v7.0.0 commit SHA for e2e tests. |
| .github/workflows/e2e-cache.yml | Pins actions/checkout to the v7.0.0 commit SHA for cache e2e jobs. |
| .github/workflows/e2e-cache-freethreaded.yml | Pins actions/checkout to the v7.0.0 commit SHA for free-threaded cache e2e jobs. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
v-priya-kinthali
previously approved these changes
Jul 16, 2026
v-jitenderpalsingh
previously approved these changes
Jul 16, 2026
v-HarithaVattikuti
dismissed stale reviews from v-jitenderpalsingh and v-priya-kinthali
via
July 16, 2026 15:47
e022812
v-priya-kinthali
approved these changes
Jul 17, 2026
v-jitenderpalsingh
approved these changes
Jul 17, 2026
luketainton
pushed a commit
to luketainton/actions_gha-workflows
that referenced
this pull request
Jul 20, 2026
![renovate[bot]](https://github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://github.com/actions/setup-python/releases/tag/v7.0.0) [Compare Source](actions/setup-python@v7.0.0...v7.0.0) #### What's Changed ##### Enhancements - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1330](actions/setup-python#1330) - Pin SHA commits and update docs with latest versions by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1338](actions/setup-python#1338) - Remove the pip-install input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1336](actions/setup-python#1336) ##### Bug Fix - Fix to Classify stderr warning messages as warnings instead of errors in annotations by [@​lmvysakh](https://github.com/lmvysakh) in [#​1335](actions/setup-python#1335) - Validate and retry manifest fetch to prevent silent failures by [@​priyagupta108](https://github.com/priyagupta108) in [#​1332](actions/setup-python#1332) ##### Dependency Upgrade - Bump certifi from 2020.6.20 to 2024.7.4 in /**tests**/data by [@​dependabot](https://github.com/dependabot) in [#​1328](actions/setup-python#1328) - Remove EOL Python versions and Bumps numpy text fixture by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1333](actions/setup-python#1333) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1337](actions/setup-python#1337) #### New Contributors - [@​lmvysakh](https://github.com/lmvysakh) made their first contribution in [#​1335](actions/setup-python#1335) - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1337](actions/setup-python#1337) **Full Changelog**: <actions/setup-python@v6...v7.0.0> ### [`v7`](actions/setup-python@v6.3.0...v7.0.0) [Compare Source](actions/setup-python@v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/85 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/repos_webexmemebot
that referenced
this pull request
Jul 20, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://github.com/actions/setup-python/releases/tag/v7.0.0) [Compare Source](actions/setup-python@v7.0.0...v7.0.0) #### What's Changed ##### Enhancements - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1330](actions/setup-python#1330) - Pin SHA commits and update docs with latest versions by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1338](actions/setup-python#1338) - Remove the pip-install input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1336](actions/setup-python#1336) ##### Bug Fix - Fix to Classify stderr warning messages as warnings instead of errors in annotations by [@​lmvysakh](https://github.com/lmvysakh) in [#​1335](actions/setup-python#1335) - Validate and retry manifest fetch to prevent silent failures by [@​priyagupta108](https://github.com/priyagupta108) in [#​1332](actions/setup-python#1332) ##### Dependency Upgrade - Bump certifi from 2020.6.20 to 2024.7.4 in /**tests**/data by [@​dependabot](https://github.com/dependabot) in [#​1328](actions/setup-python#1328) - Remove EOL Python versions and Bumps numpy text fixture by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1333](actions/setup-python#1333) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1337](actions/setup-python#1337) #### New Contributors - [@​lmvysakh](https://github.com/lmvysakh) made their first contribution in [#​1335](actions/setup-python#1335) - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1337](actions/setup-python#1337) **Full Changelog**: <actions/setup-python@v6...v7.0.0> ### [`v7`](actions/setup-python@v6.3.0...v7.0.0) [Compare Source](actions/setup-python@v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->Reviewed-on: https://git.tainton.uk/repos/webexmemebot/pulls/602 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/repos_roboluke
that referenced
this pull request
Jul 20, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v6` → `v7` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v7.0.0`](https://github.com/actions/setup-python/releases/tag/v7.0.0) [Compare Source](actions/setup-python@v7.0.0...v7.0.0) #### What's Changed ##### Enhancements - Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1330](actions/setup-python#1330) - Pin SHA commits and update docs with latest versions by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1338](actions/setup-python#1338) - Remove the pip-install input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1336](actions/setup-python#1336) ##### Bug Fix - Fix to Classify stderr warning messages as warnings instead of errors in annotations by [@​lmvysakh](https://github.com/lmvysakh) in [#​1335](actions/setup-python#1335) - Validate and retry manifest fetch to prevent silent failures by [@​priyagupta108](https://github.com/priyagupta108) in [#​1332](actions/setup-python#1332) ##### Dependency Upgrade - Bump certifi from 2020.6.20 to 2024.7.4 in /**tests**/data by [@​dependabot](https://github.com/dependabot) in [#​1328](actions/setup-python#1328) - Remove EOL Python versions and Bumps numpy text fixture by [@​priya-kinthali](https://github.com/priya-kinthali) in [#​1333](actions/setup-python#1333) - Upgrade [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1337](actions/setup-python#1337) #### New Contributors - [@​lmvysakh](https://github.com/lmvysakh) made their first contribution in [#​1335](actions/setup-python#1335) - [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1337](actions/setup-python#1337) **Full Changelog**: <actions/setup-python@v6...v7.0.0> ### [`v7`](actions/setup-python@v6.3.0...v7.0.0) [Compare Source](actions/setup-python@v6.3.0...v7.0.0) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzIuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->Reviewed-on: https://git.tainton.uk/repos/roboluke/pulls/467 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/repos_pypilot
that referenced
this pull request
Jul 20, 2026
Description:
Related issue:
Add link to the related issue.
Check list: