[PR #485] [MERGED] Bump actions/setup-python from 2 to 3.1.1 #1095

New issue

Closed

opened 2026-03-15 11:18:13 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 11:18:13 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/asciinema/asciinema/pull/485
Author: @dependabot[bot]
Created: 4/7/2022
Status: ✅ Merged
Merged: 4/26/2022
Merged by: @ku1ik

Base: develop ← Head: dependabot/github_actions/actions/setup-python-3.1.1

📝 Commits (1)

f38bf40 Bump actions/setup-python from 2 to 3.1.1

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 .github/workflows/asciinema.yml (+2 -2)
📝 .github/workflows/pre-commit.yml (+1 -1)

📄 Description

Bumps actions/setup-python from 2 to 3.1.1.

Release notes

Sourced from actions/setup-python's releases.

Add "cache-hit" output and fix "python-version" output for PyPy

This release introduces new output cache-hit (actions/setup-python#373) and fix python-version output for PyPy (actions/setup-python#365)

The cache-hit output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.

The python-version contains version of Python or PyPy.

Support caching poetry dependencies and caching on GHES 3.5

In the scope of this release, we added support for caching from GHES 3.5 and fixed the download issue for files > 2GB during restore.

Caching poetry dependencies
steps:
- uses: actions/checkout@v3
- name: Install poetry
  run: pipx install poetry
- uses: actions/setup-python@v3
  with:
    python-version: '3.9'
    cache: 'poetry'
- run: poetry install
- run: poetry run pytest
v3.0.0

What's Changed

Update default runtime to node16 (actions/setup-python#340)

Update package-lock.json file version to 2, @types/node to 16.11.25 and typescript to 4.2.3 (actions/setup-python#341)

Remove legacy pypy2 and pypy3 keywords (actions/setup-python#342)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

This new major release removes support of legacy pypy2 and pypy3 keywords. Please use more specific and flexible syntax to specify a PyPy version:
jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version:
        - 'pypy-2.7' # the latest available version of PyPy that supports Python 2.7
        - 'pypy-3.8' # the latest available version of PyPy that supports Python 3.8
        - 'pypy-3.8-v7.3.8' # Python 3.8 and PyPy 7.3.8
    steps:
    - uses: actions/checkout@v2
    - uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
See more usage examples in the documentation

... (truncated)

Commits

21c0493 Cache hit output (#373)
7933d5a Add pyton-version to setup PyPy output (#365)
7885ec3 Rework pipenv caching test (#375)
9c644ca Update README.md to fix setup-python version in example (#368)
3e8e90e dist fix (#367)
05fb98d Cache on ghes (#363)
6c56602 Merge pull request #281 from patrick91/feature/poetry-caching
9516be8 Merge pull request #358 from actions/brcrista/codeql-main
7aa3e95 Update dist
6c31eb3 Use \n instead of os.EOL
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/asciinema/asciinema/pull/485 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/7/2022 **Status:** ✅ Merged **Merged:** 4/26/2022 **Merged by:** [@ku1ik](https://github.com/ku1ik) **Base:** `develop` ← **Head:** `dependabot/github_actions/actions/setup-python-3.1.1` --- ### 📝 Commits (1) - [`f38bf40`](https://github.com/asciinema/asciinema/commit/f38bf40baf3e7d48a7ac3978c92e3e4a52ed1932) Bump actions/setup-python from 2 to 3.1.1 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/asciinema.yml` (+2 -2) 📝 `.github/workflows/pre-commit.yml` (+1 -1) </details> ### 📄 Description Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>Add "cache-hit" output and fix "python-version" output for PyPy</h2> <p>This release introduces new output cache-hit (<a href="https://github-redirect.dependabot.com/actions/setup-python/pull/373">actions/setup-python#373</a>) and fix python-version output for PyPy (<a href="https://github-redirect.dependabot.com/actions/setup-python/pull/365">actions/setup-python#365</a>)</p> <p>The cache-hit output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.</p> <p>The python-version contains version of Python or PyPy.</p> <h2>Support caching poetry dependencies and caching on GHES 3.5</h2> <ul> <li>In the scope of this release, we added <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/362">support for caching from GHES 3.5</a> and fixed the download issue for files > 2GB during restore.</li> <li>Caching poetry dependencies</li> </ul> <pre lang="yaml"><code>steps: - uses: actions/checkout@v3 - name: Install poetry run: pipx install poetry - uses: actions/setup-python@v3 with: python-version: '3.9' cache: 'poetry' - run: poetry install - run: poetry run pytest </code></pre> <h2>v3.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update default runtime to node16 (<a href="https://github-redirect.dependabot.com/actions/setup-python/pull/340">actions/setup-python#340</a>)</li> <li>Update <code>package-lock.json</code> file version to 2, <code>@types/node</code> to 16.11.25 and <code>typescript</code> to 4.2.3 (<a href="https://github-redirect.dependabot.com/actions/setup-python/pull/341">actions/setup-python#341</a>)</li> <li>Remove legacy <code>pypy2</code> and <code>pypy3</code> keywords (<a href="https://github-redirect.dependabot.com/actions/setup-python/pull/342">actions/setup-python#342</a>)</li> </ul> <h3>Breaking Changes</h3> <p>With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.</p> <p>This new major release removes support of legacy <code>pypy2</code> and <code>pypy3</code> keywords. Please use more specific and flexible syntax to specify a PyPy version:</p> <pre lang="yaml"><code>jobs: build: runs-on: ubuntu-latest strategy: matrix: python-version: - 'pypy-2.7' # the latest available version of PyPy that supports Python 2.7 - 'pypy-3.8' # the latest available version of PyPy that supports Python 3.8 - 'pypy-3.8-v7.3.8' # Python 3.8 and PyPy 7.3.8 steps: - uses: actions/checkout@v2 - uses: actions/setup-python@v3 with: python-version: ${{ matrix.python-version }} </code></pre> <p>See more usage examples in the <a href="https://github.com/actions/setup-python#specifying-a-pypy-version">documentation</a></p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/21c0493ecfd34b1217f0a90ec19a327f3cc0a048"><code>21c0493</code></a> Cache hit output (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/373">#373</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/7933d5a3dd7112211f44c3c6d4c1156a64d3f5bf"><code>7933d5a</code></a> Add pyton-version to setup PyPy output (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/365">#365</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/7885ec3539f8a6278aa15a514b195c3b3e10dd32"><code>7885ec3</code></a> Rework pipenv caching test (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/375">#375</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/9c644ca2ab8e57ea0a487b5ec2f8290740378bfd"><code>9c644ca</code></a> Update README.md to fix setup-python version in example (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/368">#368</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/3e8e90edf01accdf7b76addef61eac60c478e3a7"><code>3e8e90e</code></a> dist fix (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/367">#367</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/05fb98de9ae200fbc898ddcaa011ef774ac3837f"><code>05fb98d</code></a> Cache on ghes (<a href="https://github-redirect.dependabot.com/actions/setup-python/issues/363">#363</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/6c566026c0404efac87e650f7de19f11a9406300"><code>6c56602</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/281">#281</a> from patrick91/feature/poetry-caching</li> <li><a href="https://github.com/actions/setup-python/commit/9516be869fd78eb4feec5395859f8dd36d3c8b75"><code>9516be8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-python/issues/358">#358</a> from actions/brcrista/codeql-main</li> <li><a href="https://github.com/actions/setup-python/commit/7aa3e95001ed5078678a8bf348e8d617387daed8"><code>7aa3e95</code></a> Update dist</li> <li><a href="https://github.com/actions/setup-python/commit/6c31eb3fc78f87d417c5590abb7825859b6ae048"><code>6c31eb3</code></a> Use <code>\n</code> instead of <code>os.EOL</code></li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v2...v3.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=2&new-version=3.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>