GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump the actions group with 6 updates by dependabot[bot] · Pull Request #335 · python/python-docs-theme

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link

Copy Markdown

Contributor

Bumps the actions group with 6 updates:

Package	From	To
j178/prek-action	`3.0.0`	`3.1.0`
actions/setup-python	`7.0.0`	`7.1.0`
hynek/build-and-inspect-python-package	`3.0.1`	`3.0.2`
actions/download-artifact	`8.0.1`	`8.0.2`
pypa/gh-action-pypi-publish	`1.14.2`	`1.14.3`
actions/upload-artifact	`7.0.1`	`7.0.2`

Updates j178/prek-action from 3.0.0 to 3.1.0

Release notes

Sourced from j178/prek-action's releases.

v3.1.0

What's Changed

Add sha256 input for prek downloads by @j178 in j178/prek-action#184

Support latest-known for prek versions by @j178 in j178/prek-action#193

Full Changelog: j178/prek-action@v3.0.2...v3.1.0

v3.0.2

What's Changed

Preserve class names in bundled dist by @TheKevJames in j178/prek-action#181

Update known versions for prek 0.5.6 by @j178 in j178/prek-action#182

New Contributors

@TheKevJames made their first contribution in j178/prek-action#181

Full Changelog: j178/prek-action@v3.0.1...v3.0.2

v3.0.1

What's Changed

Update known versions for prek 0.4.12 by @j178 in j178/prek-action#171

Update known versions for prek 0.4.13 by @j178 in j178/prek-action#172

Update known versions for prek 0.4.14 by @j178 in j178/prek-action#173

Update known versions for prek 0.5.0 by @j178 in j178/prek-action#174

Update known versions for prek 0.5.1 by @j178 in j178/prek-action#175

Update known versions for prek 0.5.2 by @j178 in j178/prek-action#176

Update known versions for prek 0.5.3 by @j178 in j178/prek-action#177

Update known versions for prek 0.5.4 by @j178 in j178/prek-action#178

Update known versions for prek 0.5.5 by @j178 in j178/prek-action#179

Full Changelog: j178/prek-action@v3.0.0...v3.0.1

Commits

44924fe Update dependency string-argv to ^0.4.0 (#194)
02957df Support latest-known for prek versions (#193)
a8c7a75 Update dependency @actions/cache to v6.3.0 (#188)
906445e Update npm dev dependencies (#189)
d04c8ff Update actions/setup-node action to v7 (#190)
2239efc Update npm dev dependencies (major) (#192)
54d6013 Update pre-commit hook biomejs/pre-commit to v2.5.15 (#187)
e6767ad Update GitHub Actions (#186)
681cfae Update dependency j178/prek-action to v3 (#191)
53f334a Improve README inputs and example headings (#185)
Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Add mirror and mirror-token inputs for custom Python distribution sources by @luhenry in actions/setup-python#1302

Improve error message clarity by @v-lmvysakh in actions/setup-python#1351

Dependency Upgrade

Upgrade browserslist from 4.28.2 to 4.28.9 by @dependabot in actions/setup-python#1353

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-python#1343

Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @dependabot in actions/setup-python#1342

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-python#1357

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-python#1359

Upgrade undici from 6.28.0 to 6.29.0 by @dependabot in actions/setup-python#1364

Upgrade ts-jest from 29.4.11 to 29.4.14 by @dependabot in actions/setup-python#1361

Upgrade brace-expansion from 5.0.9 to 5.0.12 by @dependabot in actions/setup-python#1365

Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-python#1363

Upgrade @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @dependabot in actions/setup-python#1369

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-python#1345

Upgrade cache to 6.3.0 by @v-HarithaVattikuti in actions/setup-python#1370

Resolve Basic Validation audit failures by @v-HarithaVattikuti in actions/setup-python#1347

Resolve npm audit failures by @v-HarithaVattikuti in actions/setup-python#1350

New Contributors

@luhenry made their first contribution in actions/setup-python#1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits

6d4fd22 Cache upgrade to 6.3.0 (#1370)
ec52d0a Bump @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
e1be392 Bump @types/semver from 7.7.1 to 7.8.0 (#1359)
06da627 Bump @vercel/ncc from 0.44.0 to 0.45.0 (#1357)
af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
7aeabeb Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
Additional commits viewable in compare view

Updates hynek/build-and-inspect-python-package from 3.0.1 to 3.0.2

Release notes

Sourced from hynek/build-and-inspect-python-package's releases.

v3.0.2

This is a pure security dependency update brought to you by the number 4.

Changelog

Sourced from hynek/build-and-inspect-python-package's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

3.0.2 - 2026-10-21

Bump certifi to 2026.10.19 to address GHSA-6q48-6c7w-9gw2. #248

3.0.1 - 2026-07-30

Fixed

To avoid uv configuration interference with the project that is being built, the installation of our own tools is now ran in a different directory. Additionally, UV_EXCLUDE_NEWER is unset. #240

3.0.0 - 2026-07-30

Security

Given the increase and supply-chain attacks and advancements in tooling (for example, pinact or GitHub's Dependabot), this action will stop force-tagging minor and micro releases. This means, there will be no @v3 or @v3.0 tag that gets updated and force-pushed with each update. Always tag with the full version and commit hash; use Zizmor to secure your actions if you can.

Changed

Only updates of actions and build dependencies, notably including Twine 7 that adds support for packaging metadata 2.5 and PEP 794 – Import Name Metadata.

2.18.0 - 2026-05-11

Added

New input: skip-sdist to skip building the source distribution. #228

2.17.0 - 2026-03-27

... (truncated)

Commits

67230f7 v3.0.2
975130b Automated dependency upgrades (#249)
b8130cf Update dev (#250)
ba3543e Add PR#
8ab913f Bump certifi to 2026.10.19 (#248)
8219e97 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.4 in the github-actions group...
8909afb Automated dependency upgrades (#246)
6dd88b0 Bump re-actors/alls-green from 1.2.2 to 1.3.0 in the github-actions group (#245)
b8e2c9b Automated dependency upgrades (#244)
d6a1dd4 Automated dependency upgrades (#243)
Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Updates pypa/gh-action-pypi-publish from 1.14.2 to 1.14.3

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.14.3

[!important] 🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @sethmlarson💰 in #427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

https://emudhra.we-have-a-problem.com

🛠️ Security Tightening

@webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via pypa/gh-action-pypi-publish#420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

Commits

7245906 Merge pull request #427 from sethmlarson/certifi-sigstore
331eccb Upgrade certifi and sigstore
f68fee4 💰 Sync the FUNDING config
c0d6f8e Merge branch 'integrity/runtime/deptree' into unstable/v1
9090099 🧪 Make smoke test deps hash-pinned in CI
34e40c2 📌 Bump pip-tools managed transitive deptrees
e800ed5 👷 Enable hash-checking in the runtime deptree 🔗
dd8c5f4 🔧 Make pip-tools config available in container
See full diff in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump the actions group with 6 updates

4e04c90

Bumps the actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [j178/prek-action](https://github.com/j178/prek-action) | `3.0.0` | `3.1.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` |
| [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) | `3.0.1` | `3.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.14.2` | `1.14.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |


Updates `j178/prek-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/j178/prek-action/releases)
- [Commits](j178/prek-action@4e14d07...44924fe)

Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@5fda3b9...6d4fd22)

Updates `hynek/build-and-inspect-python-package` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases)
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md)
- [Commits](hynek/build-and-inspect-python-package@2abe76d...67230f7)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `pypa/gh-action-pypi-publish` from 1.14.2 to 1.14.3
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@dc37677...7245906)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: j178/prek-action
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: hynek/build-and-inspect-python-package
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot assigned ezio-melotti

Nov 1, 2026

dependabot Bot added dependencies

Pull requests that update a dependency file

github_actions Pull requests that update GitHub Actions code labels

Nov 1, 2026

ezio-melotti approved these changes

Nov 1, 2026

View reviewed changes

read-the-docs-community Bot commented Nov 1, 2026

Copy link

Copy Markdown

Documentation build overview

📚 python-docs-theme-previews | 🛠️ Build #35567171 | 📁 Comparing 4e04c90 against latest (a157071)

🔍 Preview build

214 files changed · + 1 added · ± 213 modified

+ Added

c-api/pyexpat.html

± Modified

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

ezio-melotti merged commit ea003f9 into main

Nov 1, 2026

25 checks passed

Uh oh!

There was an error while loading. Please reload this page.

Reviewers

ezio-melotti

ezio-melotti approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

ezio-melotti

Labels

dependencies

Pull requests that update a dependency file

github_actions

Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.