chore(ci): Bump actions/setup-python from 5 to 7 by dependabot[bot] · Pull Request #58 · croviatrust/causari

dependabot · 2026-10-01T13:30:06Z

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-python#1330

Pin SHA commits and update docs with latest versions by @HarithaVattikuti in actions/setup-python#1338

Remove the pip-install input by @gowridurgad in actions/setup-python#1336

Bug Fix

Fix to Classify stderr warning messages as warnings instead of errors in annotations by @lmvysakh in actions/setup-python#1335

Validate and retry manifest fetch to prevent silent failures by @priyagupta108 in actions/setup-python#1332

Dependency Upgrade

Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @dependabot in actions/setup-python#1328

Remove EOL Python versions and Bumps numpy text fixture by @priya-kinthali in actions/setup-python#1333

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-python#1337

New Contributors

@lmvysakh made their first contribution in actions/setup-python#1335

@philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

... (truncated)

Commits

5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
0f3a009 Remove the pip-install input (#1336)
f8cf429 Migrate to ESM and upgrade dependencies (#1330)
54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
c709277 Annotation code fix (#1335)
6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
Additional commits viewable in compare view

dependabot · 2026-10-01T13:30:07Z

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-10-01T13:30:30Z

∵ causari · AI code survival

279 commits analyzed (git metadata only, retroactive, no setup).

AI-tagged (metadata matched): 82.0% line-weighted (5142 of 6267 lines still at HEAD, 14 commits) · 82.0% capped · median 92.5%

Of the lines introduced by metadata-matched commits, this percentage is the share git blame -w -M -C still attributes to those commits. It is not the share of the repository and it is not a quality score. Metadata matched does not prove who wrote each line. UNKNOWN and untagged are commits with no such signal; they are not a finding that a human wrote them.

Age-matched gap: +3.4 percentage points (AI-tagged 84.6% minus untagged 81.2% in the matched age windows). Positive means the metadata-matched lines have the higher line-weighted survival in those windows, over 1 matched age window holding 75% of the AI-tagged lines. Lines outside those windows are not in this gap.

Same repository, untagged lines: 192671 of 241807 still at HEAD (79.7% line-weighted, 265 commits).

Line age	AI-tagged	Untagged
0-30 d	84.6% (13 commits)	81.2% (184 commits)
30-90 d	—	63.0% (41 commits)
90-180 d	74.3% (1 commit)	63.9% (40 commits)

Agent	Commits	Introduced	Survived	Line-weighted	Capped	Median
cursor	14	6267	5142	82.0%	82.0%	92.5%

_{PROBABLE = heuristic. Counts lines from AI-tagged commits still attributed to them by git blame -w -M -C; inline completions leave no git trace and are not measured. Capped: each commit weighs at most min(p95 of per-commit introduced lines, 10000 lines); median: median of per-commit rates. Untagged = commits with no AI signal (human, inline-completed and untagged-agent code alike); age = commit date to HEAD date. absent means no introduced lines are included in the measurement (JSON null), not a measured zero and not a claim that the commits introduced nothing. An unavailable age-matched gap is not a gap of zero. Method v4: causari.dev/method. --json stores the commit, method, blame flags and counts. It does not store refs/notes/ai. The JSON field is still verified: metadata matched, not authorship proved.}

Read the age-matched gap as the comparison. An agent line marked below floor is not comparable. Meeting the floor is not a reliability guarantee.

Export: re audit <target> --json (the counts and commit 26b5b2186df1f4e18b7603df15a8f573247a7973), --summary for this Markdown, --seal to sign those JSON bytes for that commit and method v4. --badge and --card write SVGs. re report is the local ledger, not this audit.

The export stores the counts, commit 26b5b2186df1f4e18b7603df15a8f573247a7973, method v4, blame -w -M -C, and the coverage flags. It does not store refs/notes/ai. That ref is not part of the commit; adding or removing it can change the counts while the stored SHA stays the same. A repository that has moved has a different commit, and this export does not reproduce it.

Sealed: cs_2026_PSJEDFW6JCZ76INNWT65V57ZP4 (crovia.seal.v1) over this audit of 26b5b2186df1, written to causari-audit.seal.json. Verify offline with re seal verify causari-audit.seal.json or at https://causari.dev/verify — the seal proves these exact numbers were signed for this commit, not that they are true.

cloudflare-workers-and-pages · 2026-10-01T13:31:03Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	causari	`3ac5123`	Commit Preview URL Branch Preview URL	Oct 14 2026, 06:35 PM

dependabot · 2026-10-05T18:09:46Z

Dependabot can't parse your survival-report-recover.yml. Because of this, Dependabot cannot update this pull request.

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-7 branch 3 times, most recently from 7a381e3 to 2ebae1c Compare October 4, 2026 09:06

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-7 branch 6 times, most recently from ccdb508 to 69f4d3c Compare October 8, 2026 17:55

dependabot Bot changed the title ~~chore(ci): bump actions/setup-python from 5 to 7~~ chore(ci): Bump actions/setup-python from 5 to 7 Oct 14, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions/setup-python-7 branch from 69f4d3c to 3ac5123 Compare October 14, 2026 18:35

Navigation Menu

Repository navigation

chore(ci): Bump actions/setup-python from 5 to 7 - #58

chore(ci): Bump actions/setup-python from 5 to 7#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/setup-python-7

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

github-actions Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

cloudflare-workers-and-pages Bot commented Oct 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Labels

Uh oh!

github-actions Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

∵ causari · AI code survival

Uh oh!

cloudflare-workers-and-pages Bot commented Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

github-actions Bot commented Oct 1, 2026 •

edited

Loading

cloudflare-workers-and-pages Bot commented Oct 1, 2026 •

edited

Loading