Skip to content

chore(deps): update dependency python to 3.14 - #47

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/python-3.x
Open

chore(deps): update dependency python to 3.14#47
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/python-3.x

Conversation

@renovate

@renovate renovate Bot commented Jun 21, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
python uses-with minor 3.123.14

Release Notes

actions/python-versions (python)

v3.14.7: 3.14.7

Compare Source

Python 3.14.7

v3.14.6: 3.14.6

Compare Source

Python 3.14.6

v3.14.5: 3.14.5

Compare Source

Python 3.14.5

v3.14.4: 3.14.4

Compare Source

Python 3.14.4

v3.14.3: 3.14.3

Compare Source

Python 3.14.3

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.15: 3.13.15

Compare Source

Python 3.13.15

v3.13.14: 3.13.14

Compare Source

Python 3.13.14

v3.13.13: 3.13.13

Compare Source

Python 3.13.13

v3.13.12: 3.13.12

Compare Source

Python 3.13.12

v3.13.11: 3.13.11

Compare Source

Python 3.13.11

v3.13.10: 3.13.10

Compare Source

Python 3.13.10

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@greptile-apps

greptile-apps Bot commented Jun 21, 2026

Copy link
Copy Markdown

PR author is in the excluded authors list.

@changeset-bot

changeset-bot Bot commented Jun 21, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6b0070a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@wave-bugbot

wave-bugbot Bot commented Jun 25, 2026

Copy link
Copy Markdown

🌊 WAVE BugBot — 2 finding(s)

🔴 2

  • 🔴 P0 .github/workflows/_checks.yml:59 CWE-621Unpinned action tags
    The workflow uses an unpinned action tag (@v1) instead of a specific commit SHA. This can lead to security vulnerabilities if the action is updated in a way tha
  • 🔴 P0 .github/workflows/_checks.yml:59 CWE-78Unpinned action tags (@v1 vs commit SHA)
    Using @v1 for actions can lead to security vulnerabilities if the action is updated in a way that introduces new risks. It's recommended to pin to specific comm

severity: critical · major · minor · info — local review · $0 inference · wave-dispatch · react 👍/👎 to tune

@renovate
renovate Bot force-pushed the renovate/python-3.x branch 3 times, most recently from 4a7c94d to 4ab44ee Compare July 25, 2026 03:53
@renovate
renovate Bot force-pushed the renovate/python-3.x branch 2 times, most recently from 11ecf8c to c289975 Compare August 1, 2026 23:13

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Open in Devin Review

- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
with:
python-version: "3.12"
python-version: "3.14"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Reusable workflow is a mirror of wave-foundation — bump may need upstream sync

The comment block at .github/workflows/_checks.yml:48-50 states this job is inlined to mirror wave-foundation/scripts/validate-skills.py and the shared checks.yml, and the header (.github/workflows/_checks.yml:3-6) says the file exists so "one source of truth -> update here, every repo inherits it (no copying = no drift)". Bumping only this repo's copy to Python 3.14 reintroduces the drift the comment warns about; the same bump should land in the upstream shared workflow. Worth verifying the automated dependency bump was applied org-wide rather than to this fork of the file only.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@renovate
renovate Bot force-pushed the renovate/python-3.x branch from c289975 to 7d62742 Compare August 2, 2026 00:36
@renovate
renovate Bot force-pushed the renovate/python-3.x branch from 7d62742 to 6b0070a Compare August 2, 2026 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants