build(deps): bump actions/setup-python from 2 to 3 #31630

dependabot · 2022-03-01T09:01:13Z

Release notes

Sourced from actions/setup-python's releases.

v3.0.0

What's Changed

Update default runtime to node16 (actions/setup-python#340)

Update package-lock.json file version to 2, @types/node to 16.11.25 and typescript to 4.2.3 (actions/setup-python#341)

Remove legacy pypy2 and pypy3 keywords (actions/setup-python#342)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

This new major release removes support of legacy pypy2 and pypy3 keywords. Please use more specific and flexible syntax to specify a PyPy version:
jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version:
        - 'pypy-2.7' # the latest available version of PyPy that supports Python 2.7
        - 'pypy-3.8' # the latest available version of PyPy that supports Python 3.8
        - 'pypy-3.8-v7.3.8' # Python 3.8 and PyPy 7.3.8
    steps:
    - uses: actions/checkout@v2
    - uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
See more usage examples in the documentation

Update primary and restore keys for pip

In scope of this release we include a version of python in restore and primary cache keys for pip. Besides, we add temporary fix for Windows caching issue, that the pip cache dir command returns non zero exit code or writes to stderr. Moreover we updated node-fetch dependency.

Update actions/cache version to 1.0.8

We have updated actions/cache dependency version to 1.0.8 to support 10GB cache upload

Support caching dependencies

This release introduces dependency caching support (actions/setup-python#266)

Caching dependencies.

The action has a built-in functionality for caching and restoring pip/pipenv dependencies. The cache input is optional, and caching is turned off by default.

Besides, this release introduces dependency caching support for mono repos and repositories with complex structure.

By default, the action searches for the dependency file (requirements.txt for pip or Pipfile.lock for pipenv) in the whole repository. Use the cache-dependency-path input for cases when you want to override current behaviour and use different file for hash generation (for example requirements-dev.txt). This input supports wildcards or a list of file names for caching multiple dependencies.

Caching pip dependencies:
steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
  with:
    python-version: '3.9'
</tr></table> 

... (truncated)

Commits

0ebf233 Remove legacy PyPy input (#342)
665cd78 Update lockfileversion (#341)
93cb78f Update to node16 (#340)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v2...v3) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

hugovk

The breaking change doesn't affect us:

This new major release removes support of legacy pypy2 and pypy3 keywords.

https://github.com/actions/setup-python/releases/tag/v3.0.0

Safihre · 2022-04-19T08:17:55Z

@JelleZijlstra (tagged you because you seem very active 🙂 ) Probably good to get these merged? Others by Dependabot: #32226, #32227, #32228
If you don't merge them, Dependabot won't update them anymore.

JelleZijlstra · 2022-04-19T16:05:25Z

@hugovk do you know if we should backport this to the 3.x branches? Or does .github only matter on the main branch?

…on-3

hugovk · 2022-04-19T19:24:43Z

@JelleZijlstra I think we should backport them: we still want to test 3.x branches, I see it as a low-risk change that should help keep things maintainable in 3.x too.

The old action versions will probably keep working for some time, but I doubt they'll be maintained for the 5 years a 3.x branch is maintained for, so best to keep things up to date.

miss-islington · 2022-04-19T20:04:01Z

Thanks @dependabot[bot] for the PR, and @JelleZijlstra for merging it 🌮🎉.. I'm working now to backport this PR to: 3.9, 3.10.
🐍🍒⛏🤖

miss-islington · 2022-04-19T20:04:05Z

Sorry @dependabot[bot] and @JelleZijlstra, I had trouble checking out the 3.10 backport branch.
Please backport using cherry_picker on command line.
cherry_picker 74e319239b0a2a5ef8bc27670f4f533ee701d57f 3.10

JelleZijlstra · 2022-04-19T20:04:06Z

Thanks @hugovk!

bedevere-bot · 2022-04-19T20:04:13Z

GH-91706 is a backport of this pull request to the 3.9 branch.

miss-islington · 2022-04-19T20:04:50Z

Thanks @dependabot[bot] for the PR, and @JelleZijlstra for merging it 🌮🎉.. I'm working now to backport this PR to: 3.10.
🐍🍒⛏🤖

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v2...v3) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com> (cherry picked from commit 74e3192) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

bedevere-bot · 2022-04-19T20:04:57Z

GH-91707 is a backport of this pull request to the 3.10 branch.

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v2...v3) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com> (cherry picked from commit 74e3192) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot added skip issue skip news labels Mar 1, 2022

bedevere-bot added the awaiting review label Mar 1, 2022

the-knights-who-say-ni added the CLA signed label Mar 1, 2022

hugovk approved these changes Mar 1, 2022

View reviewed changes

bedevere-bot added awaiting core review and removed awaiting review labels Mar 1, 2022

JelleZijlstra self-assigned this Apr 19, 2022

Merge branch 'main' into dependabot/github_actions/actions/setup-pyth…

76d22f1

…on-3

JelleZijlstra added needs backport to 3.9 only security fixes needs backport to 3.10 only security fixes labels Apr 19, 2022

JelleZijlstra merged commit 74e3192 into main Apr 19, 2022

JelleZijlstra deleted the dependabot/github_actions/actions/setup-python-3 branch April 19, 2022 20:03

bedevere-bot removed the awaiting core review label Apr 19, 2022

bedevere-bot removed the needs backport to 3.9 only security fixes label Apr 19, 2022

JelleZijlstra added needs backport to 3.10 only security fixes and removed needs backport to 3.10 only security fixes labels Apr 19, 2022

bedevere-bot removed the needs backport to 3.10 only security fixes label Apr 19, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

build(deps): bump actions/setup-python from 2 to 3 #31630

build(deps): bump actions/setup-python from 2 to 3 #31630

Uh oh!

dependabot bot commented on behalf of github Mar 1, 2022

Uh oh!

hugovk left a comment

Uh oh!

Safihre commented Apr 19, 2022

Uh oh!

JelleZijlstra commented Apr 19, 2022

Uh oh!

hugovk commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

JelleZijlstra commented Apr 19, 2022

Uh oh!

bedevere-bot commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

bedevere-bot commented Apr 19, 2022

Uh oh!

Uh oh!

Uh oh!

build(deps): bump actions/setup-python from 2 to 3 #31630

build(deps): bump actions/setup-python from 2 to 3 #31630

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 1, 2022

v3.0.0

What's Changed

Breaking Changes

Update primary and restore keys for pip

Update actions/cache version to 1.0.8

Support caching dependencies

Caching dependencies.

Caching pip dependencies:

Uh oh!

hugovk left a comment

Choose a reason for hiding this comment

Uh oh!

Safihre commented Apr 19, 2022

Uh oh!

JelleZijlstra commented Apr 19, 2022

Uh oh!

hugovk commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

JelleZijlstra commented Apr 19, 2022

Uh oh!

bedevere-bot commented Apr 19, 2022

Uh oh!

miss-islington commented Apr 19, 2022

Uh oh!

bedevere-bot commented Apr 19, 2022

Uh oh!

Uh oh!