Skip to content

ci: bump actions/checkout and setup-python - #28

Merged
proxymesh merged 2 commits into
mainfrom
cursor/combine-dependabot-actions-1ee1
Sep 1, 2026
Merged

ci: bump actions/checkout and setup-python#28
proxymesh merged 2 commits into
mainfrom
cursor/combine-dependabot-actions-1ee1

Conversation

@proxymeshai

@proxymeshai proxymeshai commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

Combines the two Dependabot GitHub Actions bumps.

Changes

  • Bump actions/checkout from 6.1.0 to 7.0.1
  • Bump actions/setup-python from 6.3.0 to 7.0.0
  • Annotate all pinned Action SHAs with version comments (# vX.Y.Z)

Replaces

Slack Thread

Open in Web Open in Cursor 

…t PROXY_URL

Combine Dependabot bumps for actions/checkout 7.0.1 and actions/setup-python
7.0.0. Integration tests skip cleanly on Dependabot PRs when the PROXY_URL
secret is unavailable (repository Actions secrets are not injected for
Dependabot unless also configured under Dependabot secrets).

Co-authored-by: ProxyMesh AI <proxymeshai@users.noreply.github.com>
@proxymeshai
proxymeshai marked this pull request as ready for review September 1, 2026 17:52
@cursor
cursor Bot requested a review from proxymesh September 1, 2026 17:56

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not approved: this is not a routine Dependabot version-only bump (it also changes integration-test skip logic). Cursor Bugbot completed with no issues; Cursor Security Agent was not present. Human review is needed; @proxymesh was assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: dependabot approver

Dependabot now has PROXY_URL configured, so restore the hard require
check. Add version comments on all pinned GitHub Actions SHAs.

Co-authored-by: ProxyMesh AI <proxymeshai@users.noreply.github.com>
@cursor cursor Bot changed the title ci: bump actions/checkout and setup-python; fix Dependabot integration CI ci: bump actions/checkout and setup-python Sep 1, 2026
@proxymesh
proxymesh merged commit 2269c1d into main Sep 1, 2026
2 checks passed
@proxymesh
proxymesh deleted the cursor/combine-dependabot-actions-1ee1 branch September 1, 2026 20:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants