chore(deps): update github actions by renovate[bot] · Pull Request #714 · aignostics/python-sdk

renovate · 2026-08-19T22:56:19Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	`v1.0.183` → `v1.0.223`	`v1.0.235` (+11)
astral-sh/setup-uv	action	major	`v9.0.0` → `v10.1.0`	`v10.2.0`
docker/setup-buildx-action	action	minor	`v4.2.0` → `v4.3.0`	`v4.4.1` (+1)
docker/setup-qemu-action	action	minor	`v4.2.0` → `v4.3.0`	`v4.4.0`
github/codeql-action	action	minor	`v4.37.5` → `v4.38.0`	`v4.38.2` (+1)
orhun/git-cliff-action	action	minor	`v4.8.0` → `v4.9.0`	`v4.9.1`
pyvista/setup-headless-display-action	action	major	`v4.3` → `v5.1`

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

What's Changed

fix: neutralize the checkout credential under actions/checkout v6+ include layout (#1510) by @TemRevil in #1526

New Contributors

@TemRevil made their first contribution in #1526

Full Changelog: anthropics/claude-code-action@v1.0.196...v1.0.197

`v1.0.196`

Compare Source

What's Changed

fix(security): unify secret redaction in public comment outputs by @Juwan-Hwang in #1693
fix: strip unused ALL_INPUTS environment variable from Claude subprocess env by @Juwan-Hwang in #1692
fix(github): match bot actors in comment filters using GraphQL __typename by @Neal006 in #1616

New Contributors

@Juwan-Hwang made their first contribution in #1693

Full Changelog: anthropics/claude-code-action@v1.0.195...v1.0.196

`v1.0.195`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.194...v1.0.195

`v1.0.194`

Compare Source

What's Changed

Harden delete_files MCP tool: validate paths within repo root (consistency with commit_files) by @GabrielOnRails in #1636
Only limit fetch depth when the checkout is already shallow by @winklemad in #1647
fix(base-action): add ~/.local/bin to $GITHUB_PATH after auto-install by @anishesg in #1643
feat(context): include diffHunk in PR review comment context by @rishavnaskar in #1584
ci: skip Claude-backed test jobs on fork PRs by @ashwin-ant in #1655
fix: bump shell-quote to 1.8.4 to remediate CVE-2026-9277 by @doshidhaval in #1557
fix(images): bound attachment downloads by @abhinavkr26104 in #1625

New Contributors

@GabrielOnRails made their first contribution in #1636
@winklemad made their first contribution in #1647
@doshidhaval made their first contribution in #1557

Full Changelog: anthropics/claude-code-action@v1.0.193...v1.0.194

`v1.0.193`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.192...v1.0.193

`v1.0.192`

Compare Source

What's Changed

fix(mcp): paginate GitHub Actions results by @abhinavkr26104 in #1629
fix(summary): keep every text block in structured tool results by @Neal006 in #1619
fix(mcp): detect binary files by content instead of extension allowlist by @henriquepe in #1633

New Contributors

@abhinavkr26104 made their first contribution in #1629
@Neal006 made their first contribution in #1619
@henriquepe made their first contribution in #1633

Full Changelog: anthropics/claude-code-action@v1.0.191...v1.0.192

`v1.0.191`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.190...v1.0.191

`v1.0.190`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.190

`v1.0.189`

Compare Source

`v1.0.188`

Compare Source

`v1.0.187`

Compare Source

What's Changed

Redact common credential patterns from published run output by @ashwin-ant in #1595
Scope the config snapshot to files inside the working tree by @ashwin-ant in #1596
Run checkout auth cleanup when API commit signing is enabled by @ashwin-ant in #1597

Full Changelog: anthropics/claude-code-action@v1...v1.0.187

`v1.0.186`

Compare Source

`v1.0.185`

Compare Source

What's Changed

Derive trigger timestamps for issues and pull_request events by @ashwin-ant in #1592
Pin bun config for MCP server processes by @ashwin-ant in #1589
Match downloaded images to their source URLs by asset identifier by @ashwin-ant in #1588
Check collaborator permissions for workflow_run events by @ashwin-ant in #1590

Full Changelog: anthropics/claude-code-action@v1...v1.0.185

`v1.0.184`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.184

astral-sh/setup-uv (astral-sh/setup-uv)

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output `python-runtime-id`

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

fix: respect no proxy directive @mj0nez (#1037)
Use JSON + a typed wrapper instead of TS codegen @woodruffw (#1025)

🚀 Enhancements

Expose a Python "identity" output @woodruffw (#1036)
Verify downloads with astral-sh/versions checksums @zaniebot (#1033)

🧰 Maintenance

chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)
chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)
chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)
chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)
chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)
chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)
Use self-repo syntax for all in-repo actions/reusable workflows @woodruffw (#1024)
Pin one-shot tools @woodruffw (#1022)
ci: remove obsolete direct push attempts @eifinger (#1019)

📚 Documentation

docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

chore(deps-dev): roll up Dependabot updates @eifinger (#1043)
Harden npm install defaults @zaniebot (#1026)
Add dependency cooldowns @woodruffw (#1021)

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @arguile- for making this action more resilient.

🐛 Bug fixes

Tolerate transient manifest timeouts @arguile- (#1016)

🧰 Maintenance

chore: update known checksums for 0.12.4 @github-actions[bot] (#1017)

📚 Documentation

docs: update version references to v10.0.0 @github-actions[bot] (#1014)

`v10.0.0`: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

pull_request_target
workflow_run
release

You can read the full reasoning in #984

`version: latest-known`

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from `.tool-versions`

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes

Disable automatic caching for sensitive events @eifinger (#992)

🐛 Bug fixes

Reject paths in .tool-versions @eifinger (#1007)

🚀 Enhancements

Read Python version from .tool-versions @eifinger (#996)
Add latest-known version selector @eifinger (#993)

🧰 Maintenance

Require pull requests for Dependabot rollups @eifinger (#1005)
ci: pin Alpine container image @eifinger (#995)
chore: update known checksums for 0.12.3 @github-actions[bot] (#991)
chore: update known checksums for 0.12.2 @github-actions[bot] (#985)
chore: update known checksums for 0.12.1 @github-actions[bot] (#982)
chore: update known checksums for 0.12.0 @github-actions[bot] (#981)
chore: update known checksums for 0.11.31/0.11.32 @github-actions[bot] (#972)

📚 Documentation

docs: update version references to v9.0.0 @github-actions[bot] (#971)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1013)
chore(deps): roll up Dependabot updates @eifinger (#1004)
chore(deps): roll up Dependabot updates @eifinger (#994)
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 @dependabot[bot] (#976)
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#980)

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in #595
Bump brace-expansion from 1.1.13 to 1.1.18 in #600
Bump js-yaml from 5.2.0 to 5.3.0 in #585
Bump postcss from 8.5.10 to 8.5.25 in #598
Bump undici from 6.27.0 to 6.28.0 in #601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v4.3.0`

Compare Source

Bump @docker/actions-toolkit from 0.92.0 to 0.96.0 in #336
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #316
Bump brace-expansion from 1.1.15 to 1.1.18 in #332
Bump js-yaml from 4.2.0 to 4.3.1 in #334
Bump postcss from 8.5.10 to 8.5.25 in #331
Bump sigstore from 4.1.0 to 4.1.1 in #317
Bump undici from 6.27.0 to 6.28.0 in #333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

github/codeql-action (github/codeql-action)

`v4.38.0`

Compare Source

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
Update default CodeQL bundle version to 2.27.0. #4129

`v4.37.9`

Compare Source

Update default CodeQL bundle version to 2.26.4. #4106

`v4.37.8`

Compare Source

No user facing changes.

`v4.37.7`

Compare Source

Update default CodeQL bundle version to 2.26.3. #4085

`v4.37.6`

Compare Source

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

orhun/git-cliff-action (orhun/git-cliff-action)

`v4.9.0`

Compare Source

[4.9.0] - 2026-09-01

🐛 Bug Fixes

Use BSD-compatible stat format on macOS (#80)
(action) Terminate content output with a newline (#81)

⚙️ Miscellaneous Tasks

(sync) Resolve github cli login (#79)
Bump git-cliff to v2.14.1 (#85)

pyvista/setup-headless-display-action (pyvista/setup-headless-display-action)

`v5.1.0`

Compare Source

What's Changed

Bump pyvista/setup-headless-display-action from 4 to 5 in the actions group by @dependabot[bot] in #54
Set LP_NUM_THREADS=0 with the Windows off-screen renderer by @user27182 in #55

New Contributors

@user27182 made their first contribution in #55

Full Changelog: pyvista/setup-headless-display-action@v5.0.0...v5.1.0

`v5.0.0`

Compare Source

What's Changed

Prevent 24-hour macOS production workflow hangs by @banesullivan with @Copilot in #49
Bump actions/checkout from 6 to 7 in the actions group by @dependabot[bot] in #50
Bump actions/setup-python from 6 to 7 in the actions group by @dependabot[bot] in #51
Fix timeouts by @larsoner in #52
Support wayland via weston by @larsoner in #53

New Contributors

@banesullivan with @Copilot made their first contribution in #49

Full Changelog: pyvista/setup-headless-display-action@v4...v5.0.0

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- Between 12:00 AM and 05:59 AM (* 0-5 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-28T14:03:12Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

sonarqubecloud · 2026-09-28T14:19:19Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot added bot Automated pull requests or issues dependencies Pull requests that update a dependency file renovate Pull requests from Renovate skip:codecov Skip Codecov reporting and check skip:test:long_running Skip long-running tests (≥5min) labels Aug 19, 2026

renovate Bot requested a review from a team as a code owner August 19, 2026 22:56

renovate Bot added dependencies Pull requests that update a dependency file bot Automated pull requests or issues renovate Pull requests from Renovate skip:test:long_running Skip long-running tests (≥5min) skip:codecov Skip Codecov reporting and check labels Aug 19, 2026

renovate Bot force-pushed the renovate/github-actions branch 7 times, most recently from 49d23b2 to c1f677a Compare August 26, 2026 17:15

renovate Bot force-pushed the renovate/github-actions branch 9 times, most recently from 1175925 to 20a7147 Compare September 3, 2026 03:34

renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 18bb3a2 to 10dee88 Compare September 4, 2026 22:48

renovate Bot force-pushed the renovate/github-actions branch 9 times, most recently from 88b10da to 92cb524 Compare September 11, 2026 22:07

renovate Bot force-pushed the renovate/github-actions branch 7 times, most recently from 3843139 to f97965a Compare September 20, 2026 04:30

renovate Bot force-pushed the renovate/github-actions branch 6 times, most recently from f379080 to 0d1a838 Compare September 26, 2026 22:52

chore(deps): update github actions

cb573d1

olivermeyer force-pushed the renovate/github-actions branch from 0d1a838 to cb573d1 Compare September 28, 2026 13:52

Navigation Menu

chore(deps): update github actions - #714

chore(deps): update github actions#714
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Aug 19, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 28, 2026

Uh oh!

sonarqubecloud Bot commented Sep 28, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Changes

NO_PROXY

New output python-runtime-id

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1: 🌈 Tolerate transient manifest timeouts

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Extra security by default

version: latest-known

Read python version from .tool-versions

🚨 Breaking changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

[4.9.0] - 2026-09-01

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate Bot commented Sep 28, 2026

Edited/Blocked Notification

Uh oh!

sonarqubecloud Bot commented Sep 28, 2026

Quality Gate passed

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 19, 2026 •

edited

Loading

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

New output `python-runtime-id`

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

`v10.0.0`: 🌈 Disable automatic caching for sensitive events and new QOL features

`version: latest-known`

Read python version from `.tool-versions`