Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
FantasticFiasco/action-update-license-year	action	patch	v3 → v3.0.4
actions/checkout	action	minor	v6 → v6.1.0
actions/checkout	action	minor	v4 → v4.4.0
actions/setup-python	action	minor	v5 → v5.6.0
peter-evans/create-pull-request	action	minor	v8.0.0 → v8.1.1
softprops/action-gh-release	action	patch	v3.0.2 → v3.0.3

---

Release Notes

FantasticFiasco/action-update-license-year (FantasticFiasco/action-update-license-year)

v3.0.4

Compare Source

👮‍♂️ Security

• Fixed security vulnerabilities in direct and transient dependencies

v3.0.3

Compare Source

👮‍♂️ Security

• Fixed security vulnerabilities in direct and transient dependencies

v3.0.2

Compare Source

💉 Fixed

• #​360 Unable to import GPG private key

v3.0.1

Compare Source

💉 Fixed

• #​359 Unable to import GPG private key

👮‍♂️ Security

• Security vulnerability in transient dependency minimatch

actions/checkout (actions/checkout)

v6.1.0

Compare Source

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

actions/setup-python (actions/setup-python)

v5.6.0

Compare Source

What's Changed

• Workflow updates related to Ubuntu 20.04 by @​aparnajyothi-y in #​1065
• Fix for Candidate Not Iterable Error by @​aparnajyothi-y in #​1082
• Upgrade semver and @​types/semver by @​dependabot in #​1091
• Upgrade prettier from 2.8.8 to 3.5.3 by @​dependabot in #​1046
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​1081

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in #​973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in #​1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in #​1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in #​1011
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in #​1016
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​1015

New Contributors

• @​colesbury made their first contribution in #​973
• @​mahabaleshwars made their first contribution in #​1043

Full Changelog: actions/setup-python@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Enhancements:

• Update cache error message by @​aparnajyothi-y in #​968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in #​985
• Configure Dependabot settings by @​HarithaVattikuti in #​1008

Documentation changes:

• Readme update - recommended permissions by @​benwells in #​1009
• Improve Advanced Usage examples by @​lrq3000 in #​645

Dependency updates:

• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in #​895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in #​1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in #​1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in #​1007

New Contributors

• @​benwells made their first contribution in #​1009
• @​HarithaVattikuti made their first contribution in #​1008
• @​lrq3000 made their first contribution in #​645

Full Changelog: actions/setup-python@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​941
• Upgrade IA publish by @​Jcambass in #​943

Bug Fixes:

• Normalise Line Endings to Ensure Cross-Platform Consistency by @​priya-kinthali in #​938
• Revise isGhes logic by @​jww3 in #​963
• Bump pillow from 7.2 to 10.2.0 by @​aparnajyothi-y in #​956

Enhancements:

• Enhance workflows and documentation updates by @​priya-kinthali in #​965
• Bump default versions to latest by @​jeffwidman in #​905

New Contributors

• @​Jcambass made their first contribution in #​941
• @​jww3 made their first contribution in #​963

Full Changelog: actions/setup-python@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

Bug fixes:

• Add .zip extension to Windows package downloads for Expand-Archive Compatibility by @​priyagupta108 in #​916
  This addresses compatibility issues on Windows self-hosted runners by ensuring that the filenames for Python and PyPy package downloads explicitly include the .zip extension, allowing the Expand-Archive command to function correctly.
• Add arch to cache key by @​Zxilly in #​896
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.

Documentation changes:

• Fix display of emojis in contributors doc by @​sciencewhiz in #​899
• Documentation update for caching poetry dependencies by @​gowridurgad in #​908

Dependency updates:

• Bump @​iarna/toml version from 2.2.5 to 3.0.0 by @​priya-kinthali in #​912
• Bump pyinstaller from 3.6 to 5.13.1 by @​aparnajyothi-y in #​923

New Contributors

• @​sciencewhiz made their first contribution in #​899
• @​priyagupta108 made their first contribution in #​916
• @​Zxilly made their first contribution in #​896
• @​aparnajyothi-y made their first contribution in #​923

Full Changelog: actions/setup-python@v5...v5.2.0

v5.1.1

Compare Source

What's Changed

Bug fixes:

• fix(ci): update all failing workflows by @​mayeut in #​863
  This update ensures compatibility and optimal performance of workflows on the latest macOS version.

Documentation changes:

• Documentation update for cache by @​gowridurgad in #​873

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in #​893

New Contributors

• @​gowridurgad made their first contribution in #​873

Full Changelog: actions/setup-python@v5...v5.1.1

v5.1.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​766.
• Dependency updates by @​dependabot and @​HarithaVattikuti in #​817
• Documentation changes for version in README by @​basnijholt in #​776
• Documentation changes for link in README by @​ukd1 in #​793
• Documentation changes for link in Advanced Usage by @​Jamim in #​782
• Documentation changes for avoiding rate limit issues on GHES by @​priya-kinthali in #​835

New Contributors

• @​basnijholt made their first contribution in #​776
• @​ukd1 made their first contribution in #​793
• @​Jamim made their first contribution in #​782
• @​Shegox made their first contribution in #​766
• @​priya-kinthali made their first contribution in #​835

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

peter-evans/create-pull-request (peter-evans/create-pull-request)

v8.1.1: Create Pull Request v8.1.1

Compare Source

What's Changed

• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in #​4305
• build(deps): bump minimatch by @​dependabot[bot] in #​4311
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in #​4316
• build(deps): bump @​tootallnate/once and jest-environment-jsdom by @​dependabot[bot] in #​4323
• build(deps-dev): bump undici from 6.23.0 to 6.24.0 by @​dependabot[bot] in #​4328
• build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​4334
• build(deps): bump picomatch by @​dependabot[bot] in #​4339
• build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in #​4344
• build(deps-dev): bump the npm group with 3 updates by @​dependabot[bot] in #​4349
• fix: retry post-creation API calls on 422 eventual consistency errors by @​peter-evans in #​4356

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

v8.1.0: Create Pull Request v8.1.0

Compare Source

What's Changed

• README.md: bump given GitHub actions to their latest versions by @​deining in #​4265
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in #​4273
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in #​4274
• build(deps-dev): bump undici from 6.22.0 to 6.23.0 by @​dependabot[bot] in #​4284
• Update distribution by @​actions-bot in #​4289
• fix: Handle remote prune failures gracefully on self-hosted runners by @​peter-evans in #​4295
• feat: add @​octokit/plugin-retry to handle retriable server errors by @​peter-evans in #​4298

New Contributors

• @​deining made their first contribution in #​4265

Full Changelog: peter-evans/create-pull-request@v8.0.0...v8.1.0

softprops/action-gh-release (softprops/action-gh-release)

v3.0.3

Compare Source

3.0.3 is a maintenance release with updated dependencies. It also safely
classifies malformed GitHub API errors to avoid secondary failures (#​822).

What's Changed

Bug fixes 🐛

• fix: safely classify GitHub API errors by @​chenrui333 in #​822

Other Changes 🔄

• dependency updates

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "after 9am and before 5pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Coverage Report for CI Build 35329283347

Coverage remained the same at 86.202%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	645
Covered Lines:	556
Line Coverage:	86.2%
Coverage Strength:	7.76 hits per line

---

💛 - Coveralls