From 4fe49df06e2386be4ab63b8f0f80093d5f2943e9 Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 18:59:04 +0200 Subject: [PATCH 1/7] Fix pytest deprecation: pass a list instead of an iterator to parametrize --- tests/unit/test_utils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/unit/test_utils.py b/tests/unit/test_utils.py index cf35a97e..33092628 100644 --- a/tests/unit/test_utils.py +++ b/tests/unit/test_utils.py @@ -44,7 +44,7 @@ def test_raise_for_non_2d_array(self) -> None: @pytest.mark.parametrize( ("densities_type", "rows_type"), - product((id_func, tuple, list), (id_func, tuple, list, np.asarray)), + list(product((id_func, tuple, list), (id_func, tuple, list, np.asarray))), ) def test_expected_output( self, From c3702187d48cee8f2bbe625380911fef091e8deb Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:01:39 +0200 Subject: [PATCH 2/7] [pre-commit.ci] pre-commit autoupdate updates: - [github.com/python-jsonschema/check-jsonschema.git: 0.37.2 -> 0.37.4](https://github.com/python-jsonschema/check-jsonschema.git/compare/0.37.2...0.37.4) - [github.com/codespell-project/codespell: v2.4.2 -> v2.4.3](https://github.com/codespell-project/codespell/compare/v2.4.2...v2.4.3) - [github.com/astral-sh/ruff-pre-commit: v0.15.13 -> v0.15.22](https://github.com/astral-sh/ruff-pre-commit/compare/v0.15.13...v0.15.22) --- .pre-commit-config.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 26b1dc42..b62d60ac 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -43,7 +43,7 @@ repos: exclude: ^\.bumpversion\.cfg$ - repo: https://github.com/python-jsonschema/check-jsonschema.git - rev: 0.37.2 + rev: 0.37.4 hooks: - id: check-github-actions - id: check-github-workflows @@ -65,7 +65,7 @@ repos: - id: nbstripout - repo: https://github.com/codespell-project/codespell - rev: v2.4.2 + rev: v2.4.3 hooks: - id: codespell args: [ "-L", "probly", "-L", "mis" ] @@ -104,7 +104,7 @@ repos: additional_dependencies: [setuptools-scm] - repo: https://github.com/astral-sh/ruff-pre-commit - rev: v0.15.13 + rev: v0.15.22 hooks: - id: ruff-format - id: ruff From bee981cf74624d4ec054bf6636eff615f5a02340 Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:02:54 +0200 Subject: [PATCH 3/7] Bump softprops/action-gh-release from 2 to 3 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a17ee29a..6dc7355b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -131,7 +131,7 @@ jobs: ./dist/*.whl - name: Create GitHub Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: body_path: LATEST_RELEASE_NOTES.md # `dist/` contains the built distributions, and the From 2bdf861eb7a2424a4df54477c299033c3593b482 Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:03:15 +0200 Subject: [PATCH 4/7] Bump codecov/codecov-action from 6 to 7 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6bfe52b0..c2fd790d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -104,7 +104,7 @@ jobs: # Upload coverage reports to Codecov - name: Upload coverage to codecov - uses: codecov/codecov-action@v6 + uses: codecov/codecov-action@v7 env: OS: "${{ matrix.os }}" PYTHON: "${{ matrix.python-version }}" From 5126f9dda498abf6d7137147a6b2bc07c6f0facf Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:03:33 +0200 Subject: [PATCH 5/7] Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6dc7355b..374e5a99 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -124,7 +124,7 @@ jobs: name: python-package-distributions path: dist/ - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v3.3.0 + uses: sigstore/gh-action-sigstore-python@v3.4.0 with: inputs: >- ./dist/*.tar.gz From 351ccbfc23a9eb7bbd3cfc6ea42a0cbe6c8aa8c7 Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:03:58 +0200 Subject: [PATCH 6/7] Bump actions/checkout from 6 to 7 --- .github/workflows/check-release-notes.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/codeql.yml | 2 +- .github/workflows/release.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/check-release-notes.yml b/.github/workflows/check-release-notes.yml index 29ff11b5..1a8a9ff9 100644 --- a/.github/workflows/check-release-notes.yml +++ b/.github/workflows/check-release-notes.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 1 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Default MISSING_CHANGELOG_ENTRY to 1 run: echo 'MISSING_CHANGELOG_ENTRY=1' >> "$GITHUB_ENV" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c2fd790d..3df39def 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 6 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-python with: python-version: "3.10" @@ -68,7 +68,7 @@ jobs: DIFF_AGAINST: HEAD timeout-minutes: 8 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 711fbf37..db89cfca 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: # actions: read # contents: read steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: github/codeql-action/init@v4 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 374e5a99..fb0387c6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 6 steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work @@ -105,7 +105,7 @@ jobs: steps: # Generate the release notes - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: # TODO: This can be very expensive for large repos. Is there a better way to do this? # Fetch all history and tags for setuptools_scm to work From 32ea9190471f48050baec32ad779efbca9e248e0 Mon Sep 17 00:00:00 2001 From: Tomas Pereira de Vasconcelos Date: Fri, 24 Jul 2026 19:28:31 +0200 Subject: [PATCH 7/7] Add changelog entries for consolidated bot PRs --- docs/reference/changelog.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/reference/changelog.md b/docs/reference/changelog.md index e7bf832f..69f0e29e 100644 --- a/docs/reference/changelog.md +++ b/docs/reference/changelog.md @@ -13,6 +13,12 @@ Unreleased changes - Bump codecov/codecov-action from 5 to 6 ({gh-pr}`371`) - Bump actions/github-script from 8 to 9 ({gh-pr}`373`) - pre-commit autoupdate ({gh-pr}`374`) +- Bump softprops/action-gh-release from 2 to 3 ({gh-pr}`380`) +- Bump codecov/codecov-action from 6 to 7 ({gh-pr}`381`) +- Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 ({gh-pr}`382`) +- Bump actions/checkout from 6 to 7 ({gh-pr}`383`) +- pre-commit autoupdate ({gh-pr}`379`) +- Fix the test suite's compatibility with the latest pytest release ({gh-pr}`384`) ---