CI: Upgrade Github actions, pin to commit SHAs - #3552
Merged
Conversation
Copilot created this pull request from a session on behalf of
EnricoMi
July 29, 2026 20:56
View session
EnricoMi
marked this pull request as ready for review
July 29, 2026 20:57
EnricoMi
changed the title
EnricoMi
changed the title
EnricoMi
changed the title
lettuce-bot Bot
added a commit
to lettuce-financial/github-bot-signed-commit
that referenced
this pull request
Aug 21, 2026
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [PyGithub](https://redirect.github.com/pygithub/pygithub) | `==2.9.1` → `==2.10.0` |  |  | | [pygithub](https://redirect.github.com/pygithub/pygithub) | `==2.9.1` → `==2.10.0` |  |  | --- ### Release Notes <details> <summary>pygithub/pygithub (PyGithub)</summary> ### [`v2.10.0`](https://redirect.github.com/PyGithub/PyGithub/releases/tag/v2.10.0): 2.10.0 [Compare Source](https://redirect.github.com/pygithub/pygithub/compare/v2.9.1...v2.10.0) ##### Notable changes ##### Drop Python 3.9 support due to End-of-Life Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release. ##### New Features - Allow to specify the Github API version by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3480](https://redirect.github.com/PyGithub/PyGithub/pull/3480) - Add issue dependency endpoints by [@​james-geiger](https://redirect.github.com/james-geiger) in [PyGithub/PyGithub#3477](https://redirect.github.com/PyGithub/PyGithub/pull/3477) ##### Improvements - Add `incomplete_results` property to `PaginatedList` by [@​Felixoid](https://redirect.github.com/Felixoid) in [PyGithub/PyGithub#3396](https://redirect.github.com/PyGithub/PyGithub/pull/3396) - Add `WorkflowRun.get_attempt` and `Repository.get_workflow_job` functions by [@​cecheta](https://redirect.github.com/cecheta) in [PyGithub/PyGithub#3401](https://redirect.github.com/PyGithub/PyGithub/pull/3401) - Add support for `head_repo` when creating pull request by [@​shannon](https://redirect.github.com/shannon) in [PyGithub/PyGithub#3479](https://redirect.github.com/PyGithub/PyGithub/pull/3479) - Add `max_rate_limit_wait` to `GithubRetry` to cap rate limit backoff by [@​tanistheta](https://redirect.github.com/tanistheta) in [PyGithub/PyGithub#3540](https://redirect.github.com/PyGithub/PyGithub/pull/3540) - Add `return_run_details` parameter to `Workflow.create_dispatch` by [@​SebastienSyd](https://redirect.github.com/SebastienSyd) in [PyGithub/PyGithub#3471](https://redirect.github.com/PyGithub/PyGithub/pull/3471) - Update `SecurityAndAnalysis` by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3503](https://redirect.github.com/PyGithub/PyGithub/pull/3503) ##### Bug Fixes - Fix duplicated URL in `OrganizationVariable.edit()` and `OrganizationSecret.edit()` by [@​Krishnachaitanyakc](https://redirect.github.com/Krishnachaitanyakc) in [PyGithub/PyGithub#3472](https://redirect.github.com/PyGithub/PyGithub/pull/3472) - Fix `GithubException.__str__` decoding bytes data by [@​SAY-5](https://redirect.github.com/SAY-5) in [PyGithub/PyGithub#3494](https://redirect.github.com/PyGithub/PyGithub/pull/3494) - Fixing `OrganizationVariable.value` by properly using base class by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3507](https://redirect.github.com/PyGithub/PyGithub/pull/3507) - Parse only the query string for `PaginatedList.totalCount` by [@​Noethix55555](https://redirect.github.com/Noethix55555) in [PyGithub/PyGithub#3518](https://redirect.github.com/PyGithub/PyGithub/pull/3518) - Encode boolean query parameters as lowercase by [@​Noethix55555](https://redirect.github.com/Noethix55555) in [PyGithub/PyGithub#3516](https://redirect.github.com/PyGithub/PyGithub/pull/3516) - Fix doubled slash in request path for `base_url` with trailing slash by [@​Noethix55555](https://redirect.github.com/Noethix55555) in [PyGithub/PyGithub#3537](https://redirect.github.com/PyGithub/PyGithub/pull/3537) - Fix `WorkflowRun` schema suggestion by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3559](https://redirect.github.com/PyGithub/PyGithub/pull/3559) - Fix OAuth2 authorization `state` / `code_verifier` parameters by [@​TheoGoudout](https://redirect.github.com/TheoGoudout) in [PyGithub/PyGithub#3440](https://redirect.github.com/PyGithub/PyGithub/pull/3440) - Allow creating custom property with `values_editable_by` param by [@​chawlajay9](https://redirect.github.com/chawlajay9) in [PyGithub/PyGithub#3548](https://redirect.github.com/PyGithub/PyGithub/pull/3548) - Fix `OrganizationSecret.edit()` to seal the value and use `PUT` by [@​Noethix55555](https://redirect.github.com/Noethix55555) in [PyGithub/PyGithub#3529](https://redirect.github.com/PyGithub/PyGithub/pull/3529) - Fix lazy retrieval of latest tag name by [@​sathieu](https://redirect.github.com/sathieu) in [PyGithub/PyGithub#3487](https://redirect.github.com/PyGithub/PyGithub/pull/3487) - Fix typing and typos by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3485](https://redirect.github.com/PyGithub/PyGithub/pull/3485) ##### Maintenance - Add support for Python 3.15 and drop EOL 3.9 by [@​hugovk](https://redirect.github.com/hugovk) in [PyGithub/PyGithub#3551](https://redirect.github.com/PyGithub/PyGithub/pull/3551) - Move self-link awareness into `CompletableGithubObject` by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3432](https://redirect.github.com/PyGithub/PyGithub/pull/3432) - Add documentation for agents, add Claude skills by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3509](https://redirect.github.com/PyGithub/PyGithub/pull/3509) - Add `sphinx-copybutton` for code blocks by [@​DivyanshiGautam31](https://redirect.github.com/DivyanshiGautam31) in [PyGithub/PyGithub#3493](https://redirect.github.com/PyGithub/PyGithub/pull/3493) - Add support to OpenAPI script for applying schema to methods by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3374](https://redirect.github.com/PyGithub/PyGithub/pull/3374) - Improve OpenAPI apply properties and methods by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3495](https://redirect.github.com/PyGithub/PyGithub/pull/3495) - Fix OpenAPI method verb detection by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3496](https://redirect.github.com/PyGithub/PyGithub/pull/3496) - Add OpenAPI script tests by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3489](https://redirect.github.com/PyGithub/PyGithub/pull/3489) - Fix OpenAPI apply method by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3498](https://redirect.github.com/PyGithub/PyGithub/pull/3498) - Reordering OpenAPI test sequence by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3500](https://redirect.github.com/PyGithub/PyGithub/pull/3500) - Apply typing convention by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3504](https://redirect.github.com/PyGithub/PyGithub/pull/3504) - Bump `mypy` Python version to 3.12 by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3505](https://redirect.github.com/PyGithub/PyGithub/pull/3505) - Use `@overload` to type `get_user` by [@​xmo-odoo](https://redirect.github.com/xmo-odoo) in [PyGithub/PyGithub#3502](https://redirect.github.com/PyGithub/PyGithub/pull/3502) - Add overload type annotations by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3506](https://redirect.github.com/PyGithub/PyGithub/pull/3506) - Simplify `OrganizationVariable` by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3508](https://redirect.github.com/PyGithub/PyGithub/pull/3508) - Add OpenAPI script filename option to create class by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3512](https://redirect.github.com/PyGithub/PyGithub/pull/3512) - OpenAPI script improvements by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3511](https://redirect.github.com/PyGithub/PyGithub/pull/3511) - Make OpenAPI index file deterministic by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3514](https://redirect.github.com/PyGithub/PyGithub/pull/3514) - Add more OpenAPI script tests by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3501](https://redirect.github.com/PyGithub/PyGithub/pull/3501) - Make unified diffs of run path by [@​EnricoMi](https://redirect.github.com/EnricoMi) in [PyGithub/PyGithub#3515](https://redirect.github.com/PyGithub/PyGithub/pull/3515) - CI: Upgrade Github actions, pin to commit SHAs by [@​EnricoMi](https://redirect.github.com/EnricoMi) with [@​Copilot](https://redirect.github.com/Copilot) in [PyGithub/PyGithub#3552](https://redirect.github.com/PyGithub/PyGithub/pull/3552) - Use simple str contains instead of re in requester 401 OTP check by [@​scop](https://redirect.github.com/scop) in [PyGithub/PyGithub#3541](https://redirect.github.com/PyGithub/PyGithub/pull/3541) - Remove deprecated usage of `lazy` argument in `get_repo` test calls by [@​comNayaK](https://redirect.github.com/comNayaK) in [PyGithub/PyGithub#3555](https://redirect.github.com/PyGithub/PyGithub/pull/3555) - docs: add exception handling example by [@​zain-asif-dev](https://redirect.github.com/zain-asif-dev) in [PyGithub/PyGithub#3543](https://redirect.github.com/PyGithub/PyGithub/pull/3543) - docs: add example for uploading multiple files in a single commit by [@​laurazimrn](https://redirect.github.com/laurazimrn) in [PyGithub/PyGithub#3545](https://redirect.github.com/PyGithub/PyGithub/pull/3545) **Full Changelog**: <PyGithub/PyGithub@v2.9.1...v2.10.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/lettuce-financial/github-bot-signed-commit). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zNS40IiwidXBkYXRlZEluVmVyIjoiNDQuMzUuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
All GitHub Actions in
.github/workflowsand.github/actionswere using mutable version tags (@v4,@v5, etc.), which are not reproducible and can be silently updated by action authors.Pins every action to a fixed commit SHA with the version appended as a comment, and upgrades each to its current latest release:
actions/checkoutactions/setup-pythonactions/upload-artifactactions/download-artifactactions/cachecodecov/codecov-actiongithub/codeql-actionEnricoMi/publish-unit-test-result-actiondawidd6/action-download-artifactliskin/gh-problem-matcher-wraprickstaa/top-issues-actionwas already pinned to a SHA.