This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-python](https://github.com/actions/setup-python) | action | minor | `v6` → `v6.2.0` |
---
### Release Notes
<details>
<summary>actions/setup-python (actions/setup-python)</summary>
### [`v6.2.0`](https://github.com/actions/setup-python/releases/tag/v6.2.0)
[Compare Source](https://github.com/actions/setup-python/compare/v6.1.0...v6.2.0)
#### What's Changed
##### Dependency Upgrades
- Upgrade dependencies to Node 24 compatible versions by [@​salmanmkc](https://github.com/salmanmkc) in [#​1259](https://github.com/actions/setup-python/pull/1259)
- Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [@​dependabot](https://github.com/dependabot) in [#​1253](https://github.com/actions/setup-python/pull/1253) and [#​1264](https://github.com/actions/setup-python/pull/1264)
**Full Changelog**: <https://github.com/actions/setup-python/compare/v6...v6.2.0>
### [`v6.1.0`](https://github.com/actions/setup-python/releases/tag/v6.1.0)
[Compare Source](https://github.com/actions/setup-python/compare/v6...v6.1.0)
#### What's Changed
##### Enhancements:
- Add support for `pip-install` input by [@​gowridurgad](https://github.com/gowridurgad) in [#​1201](https://github.com/actions/setup-python/pull/1201)
- Add graalpy early-access and windows builds by [@​timfel](https://github.com/timfel) in [#​880](https://github.com/actions/setup-python/pull/880)
##### Dependency and Documentation updates:
- Enhanced wording and updated example usage for `allow-prereleases` by [@​yarikoptic](https://github.com/yarikoptic) in [#​979](https://github.com/actions/setup-python/pull/979)
- Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@​dependabot](https://github.com/dependabot) in [#​1139](https://github.com/actions/setup-python/pull/1139)
- Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@​dependabot](https://github.com/dependabot) in [#​1094](https://github.com/actions/setup-python/pull/1094)
- Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@​dependabot](https://github.com/dependabot) in [#​1199](https://github.com/actions/setup-python/pull/1199)
- Upgrade requests from 2.32.2 to 2.32.4 by [@​dependabot](https://github.com/dependabot) in [#​1130](https://github.com/actions/setup-python/pull/1130)
- Upgrade prettier from 3.5.3 to 3.6.2 by [@​dependabot](https://github.com/dependabot) in [#​1234](https://github.com/actions/setup-python/pull/1234)
- Upgrade [@​types/node](https://github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@​dependabot](https://github.com/dependabot) in [#​1235](https://github.com/actions/setup-python/pull/1235)
#### New Contributors
- [@​yarikoptic](https://github.com/yarikoptic) made their first contribution in [#​979](https://github.com/actions/setup-python/pull/979)
**Full Changelog**: <https://github.com/actions/setup-python/compare/v6...v6.1.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "on monday,on friday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xODUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhdXRvbWF0aW9uIiwiZ2l0aHViLWFjdGlvbnMiXX0=-->
Critical: The commit SHA a309ff8b426b58ec0e2a45f0f869d46889d02405 actually corresponds to the v5.0.0 release of actions/setup-python, not v6.2.0 or even v6. Applying this change creates a version mismatch between the pinned SHA and the human-readable comment.
Testing: None.
Improvement: None.
Nitpick: None.
**Summary**
* **Critical:** The commit SHA `a309ff8b426b58ec0e2a45f0f869d46889d02405` actually corresponds to the `v5.0.0` release of `actions/setup-python`, not `v6.2.0` or even `v6`. Applying this change creates a version mismatch between the pinned SHA and the human-readable comment.
* **Testing:** None.
* **Improvement:** None.
* **Nitpick:** None.
The pinned SHA a309ff8b426b58ec0e2a45f0f869d46889d02405 is for version v5.0.0. If the intent is to upgrade to v6.2.0, the SHA should be updated to 0b92565e3e2883017a57b326fb520857793b5168. Currently, the comment and the pinned SHA are out of sync.
The pinned SHA `a309ff8b426b58ec0e2a45f0f869d46889d02405` is for version `v5.0.0`. If the intent is to upgrade to `v6.2.0`, the SHA should be updated to `0b92565e3e2883017a57b326fb520857793b5168`. Currently, the comment and the pinned SHA are out of sync.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v6→v6.2.0Release Notes
actions/setup-python (actions/setup-python)
v6.2.0Compare Source
What's Changed
Dependency Upgrades
/__tests__/databy @dependabot in #1253 and #1264Full Changelog: https://github.com/actions/setup-python/compare/v6...v6.2.0
v6.1.0Compare Source
What's Changed
Enhancements:
pip-installinput by @gowridurgad in #1201Dependency and Documentation updates:
allow-prereleasesby @yarikoptic in #979New Contributors
Full Changelog: https://github.com/actions/setup-python/compare/v6...v6.1.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
Summary
a309ff8b426b58ec0e2a45f0f869d46889d02405actually corresponds to thev5.0.0release ofactions/setup-python, notv6.2.0or evenv6. Applying this change creates a version mismatch between the pinned SHA and the human-readable comment.@@ -11,3 +11,3 @@steps:- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0The pinned SHA
a309ff8b426b58ec0e2a45f0f869d46889d02405is for versionv5.0.0. If the intent is to upgrade tov6.2.0, the SHA should be updated to0b92565e3e2883017a57b326fb520857793b5168. Currently, the comment and the pinned SHA are out of sync.