Bump @vercel/ncc from 0.38.1 to 0.38.3 by dependabot[bot] · Pull Request #1016 · actions/setup-python

dependabot · 2025-01-22T19:02:03Z

Bumps @vercel/ncc from 0.38.1 to 0.38.3.

Release notes

Sourced from @vercel/ncc's releases.

0.38.3

0.38.3 (2024-11-15)

Bug Fixes

add missing --asset-builds to cli help message (#1228) (84f8c52)

0.38.2

0.38.2 (2024-09-23)

Bug Fixes

deps: update webpack to v5.94.0, terser to v5.33.0 (#1213) (158a1fd), closes #1193 #1194 #1177 #1204 #1195

Huge thanks to @theoludwig 🎉

Commits

84f8c52 fix: add missing --asset-builds to cli help message (#1228)
0ff93c6 chore(deps): Bump elliptic from 6.5.7 to 6.6.0 (#1223)
ae5bf16 chore(deps): Bump amannn/action-semantic-pull-request from 5.3.0 to 5.5.3 (#1...
738a2bf chore(deps-dev): Bump axios from 0.21.4 to 1.7.7 (#1209)
158a1fd fix(deps): update webpack to v5.94.0, terser to v5.33.0 (#1213)
c1c9c65 chore(deps): Bump fast-xml-parser from 4.2.7 to 4.5.0 (#1219)
6ef9a48 chore(deps-dev): Bump express from 4.18.2 to 4.20.0 (#1214)
9e7451b ci: ignore failing test on macOS + run in band test-coverage (#1216)
b2a325d chore(ci): drop node@16 from ci (#1164)
3c68358 chore(deps): Bump crypto-js from 4.1.1 to 4.2.0 (#1130)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

aparnajyothi-y · 2025-02-18T06:32:26Z

@dependabot rebase

dependabot · 2025-02-18T06:32:29Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

aparnajyothi-y · 2025-02-18T06:32:43Z

@dependabot recreate

Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.3. - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](vercel/ncc@0.38.1...0.38.3) --- updated-dependencies: - dependency-name: "@vercel/ncc" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

@mahabaleshwars

* Bump braces from 3.0.2 to 3.0.3 (actions#893) * Bump braces from 3.0.2 to 3.0.3 Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.28.3 to 5.28.4 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> * fix(ci): update all failing workflows (actions#863) * fix(ci): update all failing workflows With `macos-latest` moving to `macos-14`, most workflows are currently failing. Update them to be able to run on `macos-latest` Don't test python 3.5 on ubuntu. It's been EOL for almost 4 years and there are now some certificate issues with pip. * review: remove test with python 3.5, 3.6 & 3.7 * add latest versions to e2e-tests.yml * Documentation update for cache (actions#873) * updated doc * added note * modify1 * Update advanced-usage.md * Update 0000-caching-dependencies.md --------- Co-authored-by: gowridurgad <gowridurga@github.com> * Updated @iarna/toml version to 3.0.0 (actions#912) * Fix display of emojis in contributors doc (actions#899) * Fix: Add `.zip` extension to Windows package downloads for `Expand-Archive` Compatibility (actions#916) * Fix: specify filename during Windows package download * Changed unit test download urls * fix: add arch to cache key (actions#896) * fix: add arch to cache key * test: update tests accordingly * Documentation update for caching poetry dependencies (actions#908) * Create testing.yml * Update testing.yml * Fix for parsing version number from TOML 1.0.0 pyproject.toml file * Delete .github/workflows/testing.yml * fixed license issue * updated the Note * updated doc * updated the doc * npm run build * Mark up corrections --------- Co-authored-by: gowridurgad <gowridurga@github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> * Bump pyinstaller from 3.6 to 5.13.1 in /__tests__/data (actions#923) * Update e2e-cache.yml * Update basic-validation.yml * Pyinstaller upgrade to 5.13.1 * pyinstaller-update * Update basic-validation.yml * Update e2e-cache.yml * initial commit (actions#938) * Create publish-immutable-actions.yml This workflow file publishes new action releases to the immutable action package of the same name as this repo. This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature. * Upgrade IA publish * Bump default versions to latest (actions#905) People copy/paste these values all the time... might as well start them off on the right foot with a modern default. * Revise `isGhes` logic (actions#963) * Revise `isGhes` logic * ran `npm run format` * add unit test * ran `npm run format` * Bump pillow from 7.2 to 10.2.0 in /__tests__/data (actions#956) * Update e2e-cache.yml * Update basic-validation.yml * Pyinstaller upgrade to 5.13.1 * pyinstaller-update * Update basic-validation.yml * Update e2e-cache.yml * fix-db-alert-164-165-166 * upgrade pillow * Enhance workflows: Add macOS 13 support, upgrade publish-action, and update documentation for arm64 and latest versions (actions#965) * update ci workflows with latest versions and added macos-13 * updated document with latest versions * Update error message for no dependencies to cache (actions#968) * Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 (actions#985) * included ubuntu24 testing * Remove Python 3.8 testing from workflows due to end of life (EOL) * Update README.md (actions#1009) * Use the new cache service: upgrade `@actions/cache` to `^4.0.0` (actions#1007) * Upgrade-actions/cache * Review licenses & update types * Fixed poetry install command in e2e-cache.yml * Updated package-lock.json * Configure Dependabot settings (actions#1008) * Create dependabot.yml * Update e2e-cache.yml * Bump undici from 5.28.4 to 5.28.5 (actions#1012) * Bump undici from 5.28.4 to 5.28.5 Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.4...v5.28.5) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * fix for chec-dist and license check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> * Bump urllib3 from 1.25.9 to 1.26.19 in /__tests__/data (actions#895) Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.9 to 1.26.19. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/1.26.19/CHANGES.rst) - [Commits](urllib3/urllib3@1.25.9...1.26.19) --- updated-dependencies: - dependency-name: urllib3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (actions#1014) Bumps [actions/publish-immutable-action](https://github.com/actions/publish-immutable-action) from 0.0.3 to 0.0.4. - [Release notes](https://github.com/actions/publish-immutable-action/releases) - [Commits](actions/publish-immutable-action@0.0.3...v0.0.4) --- updated-dependencies: - dependency-name: actions/publish-immutable-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Bump @actions/http-client from 2.2.1 to 2.2.3 (actions#1020) * Bump @actions/http-client from 2.2.1 to 2.2.3 Bumps [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) from 2.2.1 to 2.2.3. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client) --- updated-dependencies: - dependency-name: "@actions/http-client" dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix for licensed and check-dist checks failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> * Bump requests from 2.24.0 to 2.32.2 in /__tests__/data (actions#1019) Bumps [requests](https://github.com/psf/requests) from 2.24.0 to 2.32.2. - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.24.0...v2.32.2) --- updated-dependencies: - dependency-name: requests dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Improve Advanced Usage examples (actions#645) * docs: fix outputs python-version example and description Description was lacking words, example was misleading (id was set to cp310 which clearly was a reference to CPython 3.10, but the id is referring to the setup-python action! * docs: copy-editing in advanced-usage.md Signed-off-by: Stephen L. <lrq3000@gmail.com> * docs: add example if statement in advanced-usage.md Signed-off-by: Stephen L. <lrq3000@gmail.com> * docs: implement changes suggested by @mahabaleshwars (deprecate pypy2.7, 3.7, 3.8, tweak example, remove wildcard *) Signed-off-by: Stephen L. <LRQ3000@gmail.com> --------- Signed-off-by: Stephen L. <lrq3000@gmail.com> Signed-off-by: Stephen L. <LRQ3000@gmail.com> * fix: install PyPy on Linux ARM64 (actions#1011) * ci: check non-eol versions of PyPy are available on all runners * fix: install PyPy on Linux ARM64 * ci: remove eol ubuntu-20.04 * Bump @vercel/ncc from 0.38.1 to 0.38.3 (actions#1016) * Bump @vercel/ncc from 0.38.1 to 0.38.3 Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.3. - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](vercel/ncc@0.38.1...0.38.3) --- updated-dependencies: - dependency-name: "@vercel/ncc" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * check failure fix --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> * Support free threaded Python versions like '3.13t' (actions#973) * Support free threaded Python versions like '3.13t' Python wheels, pyenv, and a number of other tools use 't' in the Python version number to identify free threaded builds. For example, '3.13t', '3.14.0a1', '3.14t-dev'. This PR supports that syntax in `actions/setup-python`, strips the "t", and adds "-freethreading" to the architecture to select the correct Python version. See actions#771 * Add free threading to advanced usage documentation * Fix desugaring of `3.13.1t` and add test case. * Add freethreaded input and fix handling of prerelease versions * Fix lint * Add 't' suffix to python-version output * Use distinct cache key for free threaded Python * Remove support for syntax like '3.14.0a1' * Clarify use of 't' suffix * Improve error message when trying to use free threaded Python versions before 3.13 * Bump @actions/glob from 0.4.0 to 0.5.0 (actions#1015) * Bump @actions/glob from 0.4.0 to 0.5.0 Bumps [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) from 0.4.0 to 0.5.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob) --- updated-dependencies: - dependency-name: "@actions/glob" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix for check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> * Add support for .tool-versions file in setup-python (actions#1043) * add support for .tool-versions file * update regex * optimize code * update test-python.yml for .tool-versions * fix format-check errors * fix formatting in test-python.yml * Fix test-python.yml error * workflow update with latest versions * update test cases * fix lint issue * Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 (actions#1056) * include freethread e2e testing and upgrade cache from 4.0.0 to 4.0.2 * include verify gil step and validated python version * Rename files * include ubuntu-arm runners for testing * Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (actions#1065) * remove ubuntu-20.04 * check failure fix * remove spaces * npm run format-check * Fix for Candidate Not Iterable Error (actions#1082) * candidates not iterable * update the error message * update error to debug * update debug to info * error message updates * Bump semver and @types/semver (actions#1091) * Bump semver and @types/semver Bumps [semver](https://github.com/npm/node-semver) and [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver). These dependencies needed to be updated together. Updates `semver` from 7.6.0 to 7.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.0...v7.7.1) Updates `@types/semver` from 7.5.8 to 7.7.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) --- updated-dependencies: - dependency-name: semver dependency-version: 7.7.1 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: "@types/semver" dependency-version: 7.7.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fixed check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> * Bump prettier from 2.8.8 to 3.5.3 (actions#1046) * Bump prettier from 2.8.8 to 3.5.3 Bumps [prettier](https://github.com/prettier/prettier) from 2.8.8 to 3.5.3. - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@2.8.8...3.5.3) --- updated-dependencies: - dependency-name: prettier dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Enable cancelled checks --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> * Bump ts-jest from 29.1.2 to 29.3.2 (actions#1081) Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.3.2. - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.1.2...v29.3.2) --- updated-dependencies: - dependency-name: ts-jest dependency-version: 29.3.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Enhance reading from .python-version (actions#787) * Enhance reading from .python-version * Fix typos * Fix lint * Add built files * Don't use EOL versions in `utils.test.ts` * Fix Prettier * Don't use unreleased versions in `utils.test.ts` * Update versions in `utils.test.ts` again * Bump @actions/tool-cache from 2.0.1 to 2.0.2 (actions#1095) * Bump @actions/tool-cache from 2.0.1 to 2.0.2 Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.1 to 2.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache) --- updated-dependencies: - dependency-name: "@actions/tool-cache" dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Fix failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> * Add support for `pip-version` (actions#1129) * Add pip-version input * Update workflow files * Add documentation * Update workflow files * Enhance cache-dependency-path handling to support files outside the workspace root (actions#1128) * ehnace cache dependency path handling * logic update * npm run format-check * update cacheDependencies tests to cover resolved paths and copy edge cases * check failure fix * depricate-windows-2019 * refactored the code * Check failure fix * Add Architecture-Specific PATH Management for Python with --user Flag on Windows (actions#1122) * logic to update install oath with --user flg * format update * format update * update * test job to validate --user flag installtion * updated the script * updated the yaml * update the inputs * updated script * update the correct script file name * updated script and yaml * npm run format-check * fix-test failures * path update * check failure fix * updated test * update free threaded version * updated the comments * Include python version in PyPy python-version output (actions#1110) * update documentation (actions#1156) * fix: fix --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Stephen L. <lrq3000@gmail.com> Signed-off-by: Stephen L. <LRQ3000@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> Co-authored-by: Matthieu Darbois <mayeut@users.noreply.github.com> Co-authored-by: gowridurgad <159780674+gowridurgad@users.noreply.github.com> Co-authored-by: gowridurgad <gowridurga@github.com> Co-authored-by: priya-kinthali <147703874+priya-kinthali@users.noreply.github.com> Co-authored-by: sciencewhiz <sciencewhiz@users.noreply.github.com> Co-authored-by: Priya Gupta <147705955+priyagupta108@users.noreply.github.com> Co-authored-by: Zxilly <31370133+Zxilly@users.noreply.github.com> Co-authored-by: aparnajyothi-y <147696841+aparnajyothi-y@users.noreply.github.com> Co-authored-by: Joel Ambass <Jcambass@users.noreply.github.com> Co-authored-by: Jeff Widman <jeff@jeffwidman.com> Co-authored-by: John Wesley Walker III <81404201+jww3@users.noreply.github.com> Co-authored-by: Ben Wells <benwells@github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> Co-authored-by: Stephen Karl Larroque <lrq3000@users.noreply.github.com> Co-authored-by: Sam Gross <colesbury@gmail.com> Co-authored-by: mahabaleshwars <147705296+mahabaleshwars@users.noreply.github.com> Co-authored-by: Kryštof Korb <krystof@korb.cz> Co-authored-by: Marc Mueller <30130371+cdce8p@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-python](https://github.com/actions/setup-python) | action | major | `v4` → `v6` | --- ### Release Notes <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v6.2.0`](https://github.com/actions/setup-python/releases/tag/v6.2.0) [Compare Source](actions/setup-python@v6.1.0...v6.2.0) #### What's Changed ##### Dependency Upgrades - Upgrade dependencies to Node 24 compatible versions by [@salmanmkc](https://github.com/salmanmkc) in [#1259](actions/setup-python#1259) - Upgrade urllib3 from 2.5.0 to 2.6.3 in `/__tests__/data` by [@dependabot](https://github.com/dependabot) in [#1253](actions/setup-python#1253) and [#1264](actions/setup-python#1264) **Full Changelog**: <actions/setup-python@v6...v6.2.0> ### [`v6.1.0`](https://github.com/actions/setup-python/releases/tag/v6.1.0) [Compare Source](actions/setup-python@v6.0.0...v6.1.0) #### What's Changed ##### Enhancements: - Add support for `pip-install` input by [@gowridurgad](https://github.com/gowridurgad) in [#1201](actions/setup-python#1201) - Add graalpy early-access and windows builds by [@timfel](https://github.com/timfel) in [#880](actions/setup-python#880) ##### Dependency and Documentation updates: - Enhanced wording and updated example usage for `allow-prereleases` by [@yarikoptic](https://github.com/yarikoptic) in [#979](actions/setup-python#979) - Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by [@dependabot](https://github.com/dependabot) in [#1139](actions/setup-python#1139) - Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by [@dependabot](https://github.com/dependabot) in [#1094](actions/setup-python#1094) - Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by [@dependabot](https://github.com/dependabot) in [#1199](actions/setup-python#1199) - Upgrade requests from 2.32.2 to 2.32.4 by [@dependabot](https://github.com/dependabot) in [#1130](actions/setup-python#1130) - Upgrade prettier from 3.5.3 to 3.6.2 by [@dependabot](https://github.com/dependabot) in [#1234](actions/setup-python#1234) - Upgrade [@types/node](https://github.com/types/node) from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by [@dependabot](https://github.com/dependabot) in [#1235](actions/setup-python#1235) #### New Contributors - [@yarikoptic](https://github.com/yarikoptic) made their first contribution in [#979](actions/setup-python#979) **Full Changelog**: <actions/setup-python@v6...v6.1.0> ### [`v6.0.0`](https://github.com/actions/setup-python/releases/tag/v6.0.0) [Compare Source](actions/setup-python@v5.6.0...v6.0.0) #### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@salmanmkc](https://github.com/salmanmkc) in [#1164](actions/setup-python#1164) Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. [See Release Notes](https://github.com/actions/runner/releases/tag/v2.327.1) ##### Enhancements: - Add support for `pip-version` by [@priyagupta108](https://github.com/priyagupta108) in [#1129](actions/setup-python#1129) - Enhance reading from .python-version by [@krystof-k](https://github.com/krystof-k) in [#787](actions/setup-python#787) - Add version parsing from Pipfile by [@aradkdj](https://github.com/aradkdj) in [#1067](actions/setup-python#1067) ##### Bug fixes: - Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1183](actions/setup-python#1183) - Change missing cache directory error to warning by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1182](actions/setup-python#1182) - Add Architecture-Specific PATH Management for Python with --user Flag on Windows by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1122](actions/setup-python#1122) - Include python version in PyPy python-version output by [@cdce8p](https://github.com/cdce8p) in [#1110](actions/setup-python#1110) - Update docs: clarification on pip authentication with setup-python by [@priya-kinthali](https://github.com/priya-kinthali) in [#1156](actions/setup-python#1156) ##### Dependency updates: - Upgrade idna from 2.9 to 3.7 in /**tests**/data by [@dependabot](https://github.com/dependabot)\[bot] in [#843](actions/setup-python#843) - Upgrade form-data to fix critical vulnerabilities [#182](actions/setup-python#182) & [#183](actions/setup-python#183) by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1163](actions/setup-python#1163) - Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1165](actions/setup-python#1165) - Upgrade actions/checkout from 4 to 5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1181](actions/setup-python#1181) - Upgrade [@actions/tool-cache](https://github.com/actions/tool-cache) from 2.0.1 to 2.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1095](actions/setup-python#1095) #### New Contributors - [@krystof-k](https://github.com/krystof-k) made their first contribution in [#787](actions/setup-python#787) - [@cdce8p](https://github.com/cdce8p) made their first contribution in [#1110](actions/setup-python#1110) - [@aradkdj](https://github.com/aradkdj) made their first contribution in [#1067](actions/setup-python#1067) **Full Changelog**: <actions/setup-python@v5...v6.0.0> ### [`v5.6.0`](https://github.com/actions/setup-python/releases/tag/v5.6.0) [Compare Source](actions/setup-python@v5.5.0...v5.6.0) #### What's Changed - Workflow updates related to Ubuntu 20.04 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1065](actions/setup-python#1065) - Fix for Candidate Not Iterable Error by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#1082](actions/setup-python#1082) - Upgrade semver and [@types/semver](https://github.com/types/semver) by [@dependabot](https://github.com/dependabot) in [#1091](actions/setup-python#1091) - Upgrade prettier from 2.8.8 to 3.5.3 by [@dependabot](https://github.com/dependabot) in [#1046](actions/setup-python#1046) - Upgrade ts-jest from 29.1.2 to 29.3.2 by [@dependabot](https://github.com/dependabot) in [#1081](actions/setup-python#1081) **Full Changelog**: <actions/setup-python@v5...v5.6.0> ### [`v5.5.0`](https://github.com/actions/setup-python/releases/tag/v5.5.0) [Compare Source](actions/setup-python@v5.4.0...v5.5.0) #### What's Changed ##### Enhancements: - Support free threaded Python versions like '3.13t' by [@colesbury](https://github.com/colesbury) in [#973](actions/setup-python#973) - Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade [@action/cache](https://github.com/action/cache) from 4.0.0 to 4.0.3 by [@priya-kinthali](https://github.com/priya-kinthali) in [#1056](actions/setup-python#1056) - Add support for .tool-versions file in setup-python by [@mahabaleshwars](https://github.com/mahabaleshwars) in [#1043](actions/setup-python#1043) ##### Bug fixes: - Fix architecture for pypy on Linux ARM64 by [@mayeut](https://github.com/mayeut) in [#1011](actions/setup-python#1011) This update maps arm64 to aarch64 for Linux ARM64 PyPy installations. ##### Dependency updates: - Upgrade [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.3 by [@dependabot](https://github.com/dependabot) in [#1016](actions/setup-python#1016) - Upgrade [@actions/glob](https://github.com/actions/glob) from 0.4.0 to 0.5.0 by [@dependabot](https://github.com/dependabot) in [#1015](actions/setup-python#1015) #### New Contributors - [@colesbury](https://github.com/colesbury) made their first contribution in [#973](actions/setup-python#973) - [@mahabaleshwars](https://github.com/mahabaleshwars) made their first contribution in [#1043](actions/setup-python#1043) **Full Changelog**: <actions/setup-python@v5...v5.5.0> ### [`v5.4.0`](https://github.com/actions/setup-python/releases/tag/v5.4.0) [Compare Source](actions/setup-python@v5.3.0...v5.4.0) #### What's Changed ##### Enhancements: - Update cache error message by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#968](actions/setup-python#968) - Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by [@priya-kinthali](https://github.com/priya-kinthali) in [#985](actions/setup-python#985) - Configure Dependabot settings by [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#1008](actions/setup-python#1008) ##### Documentation changes: - Readme update - recommended permissions by [@benwells](https://github.com/benwells) in [#1009](actions/setup-python#1009) - Improve Advanced Usage examples by [@lrq3000](https://github.com/lrq3000) in [#645](actions/setup-python#645) ##### Dependency updates: - Upgrade `undici` from 5.28.4 to 5.28.5 by [@dependabot](https://github.com/dependabot) in [#1012](actions/setup-python#1012) - Upgrade `urllib3` from 1.25.9 to 1.26.19 in /**tests**/data by [@dependabot](https://github.com/dependabot) in [#895](actions/setup-python#895) - Upgrade `actions/publish-immutable-action` from 0.0.3 to 0.0.4 by [@dependabot](https://github.com/dependabot) in [#1014](actions/setup-python#1014) - Upgrade `@actions/http-client` from 2.2.1 to 2.2.3 by [@dependabot](https://github.com/dependabot) in [#1020](actions/setup-python#1020) - Upgrade `requests` from 2.24.0 to 2.32.2 in /**tests**/data by [@dependabot](https://github.com/dependabot) in [#1019](actions/setup-python#1019) - Upgrade `@actions/cache` to `^4.0.0` by [@priyagupta108](https://github.com/priyagupta108) in [#1007](actions/setup-python#1007) #### New Contributors - [@benwells](https://github.com/benwells) made their first contribution in [#1009](actions/setup-python#1009) - [@HarithaVattikuti](https://github.com/HarithaVattikuti) made their first contribution in [#1008](actions/setup-python#1008) - [@lrq3000](https://github.com/lrq3000) made their first contribution in [#645](actions/setup-python#645) **Full Changelog**: <actions/setup-python@v5...v5.4.0> ### [`v5.3.0`](https://github.com/actions/setup-python/releases/tag/v5.3.0) [Compare Source](actions/setup-python@v5.2.0...v5.3.0) #### What's Changed - Add workflow file for publishing releases to immutable action package by [@Jcambass](https://github.com/Jcambass) in [#941](actions/setup-python#941) - Upgrade IA publish by [@Jcambass](https://github.com/Jcambass) in [#943](actions/setup-python#943) ##### Bug Fixes: - Normalise Line Endings to Ensure Cross-Platform Consistency by [@priya-kinthali](https://github.com/priya-kinthali) in [#938](actions/setup-python#938) - Revise `isGhes` logic by [@jww3](https://github.com/jww3) in [#963](actions/setup-python#963) - Bump pillow from 7.2 to 10.2.0 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#956](actions/setup-python#956) ##### Enhancements: - Enhance workflows and documentation updates by [@priya-kinthali](https://github.com/priya-kinthali) in [#965](actions/setup-python#965) - Bump default versions to latest by [@jeffwidman](https://github.com/jeffwidman) in [#905](actions/setup-python#905) #### New Contributors - [@Jcambass](https://github.com/Jcambass) made their first contribution in [#941](actions/setup-python#941) - [@jww3](https://github.com/jww3) made their first contribution in [#963](actions/setup-python#963) **Full Changelog**: <actions/setup-python@v5...v5.3.0> ### [`v5.2.0`](https://github.com/actions/setup-python/releases/tag/v5.2.0) [Compare Source](actions/setup-python@v5.1.1...v5.2.0) #### What's Changed ##### Bug fixes: - Add `.zip` extension to Windows package downloads for `Expand-Archive` Compatibility by [@priyagupta108](https://github.com/priyagupta108) in [#916](actions/setup-python#916) This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly. - Add arch to cache key by [@Zxilly](https://github.com/Zxilly) in [#896](actions/setup-python#896) This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format. ##### Documentation changes: - Fix display of emojis in contributors doc by [@sciencewhiz](https://github.com/sciencewhiz) in [#899](actions/setup-python#899) - Documentation update for caching poetry dependencies by [@gowridurgad](https://github.com/gowridurgad) in [#908](actions/setup-python#908) ##### Dependency updates: - Bump [@iarna/toml](https://github.com/iarna/toml) version from 2.2.5 to 3.0.0 by [@priya-kinthali](https://github.com/priya-kinthali) in [#912](actions/setup-python#912) - Bump pyinstaller from 3.6 to 5.13.1 by [@aparnajyothi-y](https://github.com/aparnajyothi-y) in [#923](actions/setup-python#923) #### New Contributors - [@sciencewhiz](https://github.com/sciencewhiz) made their first contribution in [#899](actions/setup-python#899) - [@priyagupta108](https://github.com/priyagupta108) made their first contribution in [#916](actions/setup-python#916) - [@Zxilly](https://github.com/Zxilly) made their first contribution in [#896](actions/setup-python#896) - [@aparnajyothi-y](https://github.com/aparnajyothi-y) made their first contribution in [#923](actions/setup-python#923) **Full Changelog**: <actions/setup-python@v5...v5.2.0> ### [`v5.1.1`](https://github.com/actions/setup-python/releases/tag/v5.1.1) [Compare Source](actions/setup-python@v5.1.0...v5.1.1) #### What's Changed ##### Bug fixes: - fix(ci): update all failing workflows by [@mayeut](https://github.com/mayeut) in [#863](actions/setup-python#863) This update ensures compatibility and optimal performance of workflows on the latest macOS version. ##### Documentation changes: - Documentation update for cache by [@gowridurgad](https://github.com/gowridurgad) in [#873](actions/setup-python#873) ##### Dependency updates: - Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by [@dependabot](https://github.com/dependabot) in [#893](actions/setup-python#893) #### New Contributors - [@gowridurgad](https://github.com/gowridurgad) made their first contribution in [#873](actions/setup-python#873) **Full Changelog**: <actions/setup-python@v5...v5.1.1> ### [`v5.1.0`](https://github.com/actions/setup-python/releases/tag/v5.1.0) [Compare Source](actions/setup-python@v5.0.0...v5.1.0) #### What's Changed - Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by [@Shegox](https://github.com/Shegox) in [#766](actions/setup-python#766). - Dependency updates by [@dependabot](https://github.com/dependabot) and [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#817](actions/setup-python#817) - Documentation changes for version in README by [@basnijholt](https://github.com/basnijholt) in [#776](actions/setup-python#776) - Documentation changes for link in README by [@ukd1](https://github.com/ukd1) in [#793](actions/setup-python#793) - Documentation changes for link in Advanced Usage by [@Jamim](https://github.com/Jamim) in [#782](actions/setup-python#782) - Documentation changes for avoiding rate limit issues on GHES by [@priya-kinthali](https://github.com/priya-kinthali) in [#835](actions/setup-python#835) #### New Contributors - [@basnijholt](https://github.com/basnijholt) made their first contribution in [#776](actions/setup-python#776) - [@ukd1](https://github.com/ukd1) made their first contribution in [#793](actions/setup-python#793) - [@Jamim](https://github.com/Jamim) made their first contribution in [#782](actions/setup-python#782) - [@Shegox](https://github.com/Shegox) made their first contribution in [#766](actions/setup-python#766) - [@priya-kinthali](https://github.com/priya-kinthali) made their first contribution in [#835](actions/setup-python#835) **Full Changelog**: <actions/setup-python@v5.0.0...v5.1.0> ### [`v5.0.0`](https://github.com/actions/setup-python/releases/tag/v5.0.0) [Compare Source](actions/setup-python@v4.9.1...v5.0.0) #### What's Changed In scope of this release, we update node version runtime from node16 to node20 ([#772](actions/setup-python#772)). Besides, we update dependencies to the latest versions. **Full Changelog**: <actions/setup-python@v4.8.0...v5.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: Renovate Bot <renovate-bot@internal.local> Co-committed-by: Renovate Bot <renovate-bot@internal.local>

dependabot bot requested a review from a team as a code owner January 22, 2025 19:02

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 22, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/vercel/ncc-0.38.3 branch from 84d935e to 2e55982 Compare February 18, 2025 06:33

check failure fix

bbb590a

aparnajyothi-y approved these changes Feb 18, 2025

View reviewed changes

priya-kinthali approved these changes Feb 18, 2025

View reviewed changes

HarithaVattikuti approved these changes Feb 18, 2025

View reviewed changes

HarithaVattikuti merged commit 6ca8e85 into main Feb 18, 2025

HarithaVattikuti deleted the dependabot/npm_and_yarn/vercel/ncc-0.38.3 branch February 18, 2025 21:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump @vercel/ncc from 0.38.1 to 0.38.3#1016

Bump @vercel/ncc from 0.38.1 to 0.38.3#1016
HarithaVattikuti merged 2 commits intomainfrom
dependabot/npm_and_yarn/vercel/ncc-0.38.3

dependabot bot commented on behalf of github Jan 22, 2025 •

edited

Loading

Uh oh!

aparnajyothi-y commented Feb 18, 2025

Uh oh!

dependabot bot commented on behalf of github Feb 18, 2025

Uh oh!

aparnajyothi-y commented Feb 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot bot commented on behalf of github Jan 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

0.38.3

0.38.3 (2024-11-15)

Bug Fixes

0.38.2

0.38.2 (2024-09-23)

Bug Fixes

Uh oh!

aparnajyothi-y commented Feb 18, 2025

Uh oh!

dependabot bot commented on behalf of github Feb 18, 2025

Uh oh!

aparnajyothi-y commented Feb 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot bot commented on behalf of github Jan 22, 2025 •

edited

Loading