Bump the actions group across 1 directory with 4 updates #26

dependabot · 2024-07-08T15:26:37Z

Bumps the actions group with 4 updates in the / directory: pypa/cibuildwheel, actions/attest-build-provenance, pypa/gh-action-pypi-publish and eps1lon/actions-label-merge-conflict.

Updates pypa/cibuildwheel from 2.18.0 to 2.19.2

Release notes

Sourced from pypa/cibuildwheel's releases.

Version 2.19.2

🐛 Update manylinux2014 pins to versions that support past-EoL CentOS 7 mirrors. (#1917)

🐛 Support --no-isolation with build[uv] build-frontend. (#1889)

🛠 Provide attestations for releases at https://github.com/pypa/cibuildwheel/attestations. (#1916)

🛠 Provide CPython 3.13.0b3. (#1913)

🛠 Remove some workarounds now that pip 24.1 is available. (#1891, #1892)

📚 Remove nosetest from our docs. (#1821)

📚 Document the macOS ARM workaround for 3.8 on GHA. (#1971)

📚 GitLab CI + macOS is now a supported platform with an example. (#1911)

Version 2.19.1

🐛 Don't require setup-python on GHA for Pyodide (#1868)

🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)

🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)

🛠 Fix a warning in our schema generation script. (#1866)

🛠 Cleaner output on pytest 8-8.2. (#1865)

Version 2.19.0

Release post: https://iscinumpy.dev/post/cibuildwheel-2-19-0/

🌟 Add a Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)

🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)

✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)

🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)

🐛 Better determinism for the test environment seeding. (#1835)

🛠 VIRTUAL_ENV variable now set. (#1842)

🛠 Remove a pip<21.3 workaround. (#1842)

🛠 Error handling was refactored to use exceptions. (#1719)

🛠 Hardcoded paths in tests avoided. (#1834)

🛠 Single Python tests made more generic. (#1835)

🛠 Sped up our ci by splitting up emulation tests. (#1839)

v2.18.1

🌟 Add free-threaded Linux and Windows builds for 3.13. New identifiers cp313t-*, new option CIBW_FREE_THREADED_SUPPORT/tool.cibuildwheel.free-threaded-support required to opt-in. See the docs for more information. (#1831)

✨ The container-engine is now a build (non-global) option. (#1792)

🛠 The build backend for cibuildwheel is now hatchling. (#1297)

🛠 Significant improvements and modernization to our noxfile. (#1823)

🛠 Use pylint's new GitHub Actions reporter instead of a custom matcher. (#1823)

🛠 Unpin virtualenv updates for Python 3.7+ (#1830)

🐛 Fix running linux tests from Windows or macOS ARM. (#1788)

📚 Fix our documentation build. (#1821)

Changelog

Sourced from pypa/cibuildwheel's changelog.

title: Changelog

Changelog

v2.19.2

🐛 Update manylinux2014 pins to versions that support past-EoL CentOS 7 mirrors. (#1917)

🐛 Support --no-isolation with build[uv] build-frontend. (#1889)

🛠 Provide attestations for releases at https://github.com/pypa/cibuildwheel/attestations. (#1916)

🛠 Provide CPython 3.13.0b3. (#1913)

🛠 Remove some workarounds now that pip 21.1 is available. (#1891, #1892)

📚 Remove nosetest from our docs. (#1821)

📚 Document the macOS ARM workaround for 3.8 on GHA. (#1971)

📚 GitLab CI + macOS is now a supported platform with an example. (#1911)

v2.19.1

🐛 Don't require setup-python on GHA for Pyodide (#1868)

🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)

🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)

🛠 Fix a warning in our schema generation script. (#1866)

🛠 Cleaner output on pytest 8-8.2. (#1865)

v2.19.0

See the release post for more info on new features!

🌟 Add Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)

🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)

✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)

🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)

🐛 Better determinism for the test environment seeding. (#1835)

🛠 VIRTUAL_ENV variable now set. (#1842)

🛠 Remove a pip<21.3 workaround. (#1842)

🛠 Error handling was refactored to use exceptions. (#1719)

🛠 Hardcoded paths in tests avoided. (#1834)

🛠 Single Python tests made more generic. (#1835)

🛠 Sped up our ci by splitting up emulation tests. (#1839)

v2.18.1

🌟 Add free-threaded Linux and Windows builds for 3.13. New identifiers cp313t-*, new option CIBW_FREE_THREADED_SUPPORT/tool.cibuildwheel.free-threaded-support required to opt-in. See the docs for more information. (#1831)

✨ The container-engine is now a build (non-global) option. (#1792)

🛠 The build backend for cibuildwheel is now hatchling. (#1297)

... (truncated)

Commits

7e5a838 Bump version: v2.19.2
19e1b8a chore: attestations (#1916)
73581ae [Bot] Update dependencies (#1917)
f21ff5e [pre-commit.ci] pre-commit autoupdate (#1914)
973946b fix: support --no-isolation with build[uv] (#1889)
5ea40e6 [Bot] Update dependencies (#1913)
6a36f64 feat: add macOS on GitLab (#1911)
31de15b chore: remove nosetests from tests and docs (#1898)
3179fd2 [Bot] Update dependencies (#1900)
184d4e1 fix(ci): CircleCI / Azure Pipelines / GitLab (#1899)
Additional commits viewable in compare view

Updates actions/attest-build-provenance from 1.1.2 to 1.3.2

Release notes

Sourced from actions/attest-build-provenance's releases.

v1.3.2

What's Changed

Bump actions/attest from 1.3.1 to 1.3.2 by @bdehamer in actions/attest-build-provenance#123

Increase timeout for OCI operations

Full Changelog: actions/attest-build-provenance@v1.3.1...v1.3.2

v1.3.1

What's Changed

Bump actions/attest from 1.3.0 to 1.3.1 by @bdehamer in actions/attest-build-provenance#117

Bugfix when detecting support for the referrers API with OCI registries

Full Changelog: actions/attest-build-provenance@v1.3.0...v1.3.1

v1.3.0

What's Changed

Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by @bdehamer in actions/attest-build-provenance#116

Switch to new GH provenance build type

Bump actions/attest from 1.2.0 to 1.3.0 by @bdehamer in actions/attest-build-provenance#116

Dynamic construction of GitHub API URLs based on GITHUB_SERVER_URL

Improved handling of Rekor 409 responses

Bugfix - detection of registries with support for the OCI referrers API

Full Changelog: actions/attest-build-provenance@v1.2.0...v1.3.0

v1.2.0

What's Changed

Bump actions/attest from 1.1.2 to 1.2.0 by @bdehamer in actions/attest-build-provenance#101

Batch processing w/ exponential backoff

Bugfix when pushing attestation to OCI registry

Full Changelog: actions/attest-build-provenance@v1.1.2...v1.2.0

Commits

bdd5137 bump actions/attest from 1.3.1 to 1.3.2 (#123)
cd2e38c Bump the npm-development group with 4 updates (#122)
995dfa6 add multi-subject examples to docs (#118)
534b352 bump actions/attest from 1.3.0 to 1.3.1 (#117)
3119152 bump predicate and actions/attest (#116)
52bfabd Bump braces from 3.0.2 to 3.0.3 (#115)
46e4ff8 bump @actions/attest from 1.2.1 to 1.3.0 (#114)
3161db1 Bump eslint-plugin-github from 4.10.2 to 5.0.1 (#107)
3471ca2 Bump the npm-development group with 6 updates (#106)
8f1fc17 Revert "disable github action linting (#54)" (#102)
Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.9.0

💅 Cosmetic Output Improvements

@woodruffw💰 updated the tense on password nudge in #234

@shenxianpeng💰 helped us disable the progress bar that was being produced by the twine upload command via #231

@woodruffw💰 also linked the PyPI status dashboard in the trusted publishing error message via pypa/gh-action-pypi-publish#243

🛠️ Internal Dependencies

pre-commit linters got auto-updated @ #225

some notable dependency bumps include

cryptography == 42.0.7

id == 1.4.0

idna == 3.7 via #228

requests == 2.32.0 via #240

Twine == 5.1.0

⚙️ Secret Stuff

In #241, @br3ndonland💰 added a Docker label linking the container image to this repository for GHCR to display it nicely. This is preparatory work for a big performance-focused refactoring he's working on in #230.

💪 New Contributors

@shenxianpeng made their first contribution in pypa/gh-action-pypi-publish#231

@br3ndonland made their first contribution in pypa/gh-action-pypi-publish#241

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.14...v1.9.0

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

🙏 Special Thanks to @pradyunsg💰 for promptly unblocking this release to Marketplace as GitHub started asking for yet another developer agreement signature from the organization admins.

Commits

ec4db0b Merge PR #243 into unstable/v1
e790844 oidc-exchange: link to status dashboard
87b624f 💅Update homepage @ Dockerfile to GH Marketplace
da2f9bb Merge pull request #241 from br3ndonland/ghcr-label
abbea2d Add Docker label for GHCR
2734d07 build(deps): bump requests from 2.31.0 to 2.32.0 in /requirements (#240)
a54b9b8 ---
699cd61 ⇪📦 Bump the runtime dep lockfile
8414fc2 [pre-commit.ci] pre-commit autoupdate (#225)
67a07eb Disable the progress bar when running twine upload
Additional commits viewable in compare view

Updates eps1lon/actions-label-merge-conflict from 3.0.1 to 3.0.2

Release notes

Sourced from eps1lon/actions-label-merge-conflict's releases.

v3.0.2

What's Changed

fix: Handle error when label is not available (part 2) by @kiblik in eps1lon/actions-label-merge-conflict#126

chore(deps): update dependency @types/node to v20.12.13 by @renovate in eps1lon/actions-label-merge-conflict#119

Full Changelog: eps1lon/actions-label-merge-conflict@v3.0.1...v3.0.2

Changelog

Sourced from eps1lon/actions-label-merge-conflict's changelog.

Changelog

3.0.2

Handle error when label is not available (part 2) (#126)

3.0.1

Handle error when label is not available (#123)

3.0.0

Update to node20 (#115)

2.1.0

Address set-output deprecation (#92 by @NotMyFault)

Fix CVE-2022-35954 (#92 by @NotMyFault)

2.0.1

Improve retry logic (#31 by @eps1lon)

2.0.0

Only update PRs based off of the branch in the push event Previously we checked every open PR. Since a push to a branch can only create merge conflicts with that branch we can limit the set of checked PRs. This should help repositories with lots of PRs targetting different branches with rate limiting.

Only leave comments if the dirtyLabel was added or removed

1.4.0

Allow warning only if secrets aren't available (#22 by @baywet)

Remove requirement for removeOnDirtyLabel (#21 by @baywet)

1.3.0

set PRs and their dirty state as output (#17 by @baywet)

Commits

1b1b1fc release: 3.0.2
400c5bc chore(deps): update dependency @types/node to v20.12.13 (#119)
9fd6d6d fix: Handle error when label is not available (part 2) (#126)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 4 updates in the / directory: [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance), [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) and [eps1lon/actions-label-merge-conflict](https://github.com/eps1lon/actions-label-merge-conflict). Updates `pypa/cibuildwheel` from 2.18.0 to 2.19.2 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](pypa/cibuildwheel@711a3d0...7e5a838) Updates `actions/attest-build-provenance` from 1.1.2 to 1.3.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@173725a...bdd5137) Updates `pypa/gh-action-pypi-publish` from 1.8.14 to 1.9.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@81e9d93...ec4db0b) Updates `eps1lon/actions-label-merge-conflict` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/eps1lon/actions-label-merge-conflict/releases) - [Changelog](https://github.com/eps1lon/actions-label-merge-conflict/blob/main/CHANGELOG.md) - [Commits](eps1lon/actions-label-merge-conflict@6d74047...1b1b1fc) --- updated-dependencies: - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/attest-build-provenance dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: eps1lon/actions-label-merge-conflict dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-07-15T15:29:25Z

Superseded by #27.

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 8, 2024

dependabot bot mentioned this pull request Jul 8, 2024

Bump the actions group across 1 directory with 4 updates #25

Closed

github-actions bot added the CI: Run cibuildwheel label Jul 8, 2024

dependabot bot closed this Jul 15, 2024

dependabot bot deleted the dependabot/github_actions/actions-4bfad298f6 branch July 15, 2024 15:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the actions group across 1 directory with 4 updates #26

Bump the actions group across 1 directory with 4 updates #26

Uh oh!

dependabot bot commented on behalf of github Jul 8, 2024 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jul 15, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the actions group across 1 directory with 4 updates #26

Bump the actions group across 1 directory with 4 updates #26

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 8, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 2.19.2

Version 2.19.1

Version 2.19.0

v2.18.1

title: Changelog

Changelog

v2.19.2

v2.19.1

v2.19.0

v2.18.1

v1.3.2

What's Changed

v1.3.1

What's Changed

v1.3.0

What's Changed

v1.2.0

What's Changed

v1.9.0

💅 Cosmetic Output Improvements

🛠️ Internal Dependencies

⚙️ Secret Stuff

💪 New Contributors

v3.0.2

What's Changed

Changelog

3.0.2

3.0.1

3.0.0

2.1.0

2.0.1

2.0.0

1.4.0

1.3.0

Uh oh!

dependabot bot commented on behalf of github Jul 15, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jul 8, 2024 •

edited

Loading