Bump actions/setup-python from 6.3.0 to 7.0.0

[dependabot]

Bumps actions/setup-python from 6.3.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review: Bump actions/setup-python from 6.3.0 to 7.0.0

Summary

This is a mechanical Dependabot-style dependency bump updating actions/setup-python from v6.3.0 to v7.0.0 across 6 GitHub Actions workflow files (black.yaml, dependency-scan.yaml, flake8.yaml, isort.yaml, mypy.yaml, pylint.yaml). All six changes are identical in shape — a single line version bump with no other modifications.

Code Quality

• ✅ Style conventions — Consistent single-line version bump across all 6 files, matching existing YAML formatting.
• ✅ No commented-out code — N/A, none present.
• ✅ Meaningful variable names — N/A, no variables in this diff.
• ✅ DRY principle — N/A. Note: the same uses: actions/setup-python@vX.Y.Z line is duplicated across 6 workflow files rather than centralized (e.g., via a reusable workflow or composite action). This is pre-existing repo structure, not introduced by this PR, so not a blocker here — but worth noting as a future consolidation opportunity to avoid needing 6 identical version-bump commits/PRs each time.
• ✅ Defects/bugs/edge cases — No logic changes; this is infrastructure-only. actions/setup-python@v7.0.0 is a real, current major version of the action. No breaking changes are evident from this diff itself (the with: python-version: block is untouched), though I can't verify the action's internal changelog without network access — worth a quick manual check that CI passes on this PR before merging, since major version bumps to setup-python have occasionally changed default caching behavior or minimum runner requirements in the past.
• ✅ CLAUDE.md consideration — Reviewed .claude/CLAUDE.md. It contains no environment-specific paths, credentials, or machine-specific details — it's appropriately generic (build commands, env var structure, snippet categories) and usable by any local developer. No changes needed and this PR doesn't touch it.

Testing

• N/A Unit tests — Not applicable; no application code changed.
• N/A Integration tests — Not applicable.
• N/A Edge cases — Not applicable.
• N/A Test coverage — Not applicable; this PR affects CI tooling only, not test-covered code paths. Actual verification comes from the workflows themselves running successfully post-merge.

Documentation

• N/A Readme/API docs/CHANGELOG — Not applicable for a CI dependency bump of this size; typically not expected to be logged in application CHANGELOG.md.
• N/A Markdown/CommonMark formatting — No markdown files touched in this diff.

Security

• ✅ No hardcoded credentials — None present.
• N/A Input validation — Not applicable.
• N/A Error handling — Not applicable.
• N/A No sensitive data in logs — Not applicable.
• ✅ License file (.lic) check — No .lic files present in this diff; no strings matching AQAAAD found.

Verdict

✅ Approve. This is a low-risk, mechanical version bump with no logic or behavioral changes to review. All 6 files are updated consistently. No blocking issues found. Recommend confirming the CI workflows themselves pass (green checks) on this PR before merging, as the standard sanity check for any action-version bump.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter