Bump actions/setup-python from 6.3.0 to 7.0.0

[dependabot]

Bumps actions/setup-python from 6.3.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Confirmed: this is an automated Dependabot major-version bump (6.3.0 → 7.0.0) for actions/setup-python, consistent with the repo's established pattern of not touching CHANGELOG.md for CI dependency bumps.

PR Review: Bump actions/setup-python from 6.3.0 to 7.0.0

Code Quality

• ✅ Style conventions: Change matches existing YAML formatting and indentation in .github/workflows/pylint.yaml:31.
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A (single-line action version bump)
• ✅ DRY: N/A
• ⚠️ Defects: This is a major version bump (6.x → 7.0.0), per dependabot's own metadata (update-type: version-update:semver-major), not a patch/minor bump. Major version bumps of GitHub Actions can include breaking changes (e.g., minimum runner OS requirements, Node.js runtime version changes, or changed default behavior for python-version/cache inputs). I don't have network access to confirm the specific changelog for actions/setup-python@v7.0.0, so I can't verify compatibility here — recommend confirming the workflow run succeeds (the CI run for this PR is the actual test) before merging, and checking the action's release notes/breaking-changes section manually since this is a major version.
• ✅ CLAUDE.md consideration: No changes to .claude/CLAUDE.md in this diff; existing file is already environment-agnostic (no local-machine-specific paths or credentials).

Testing

• ✅ N/A — this is a CI workflow dependency bump with no application code changed. The workflow run itself (pylint job executing successfully) is the effective test.
• Test coverage/unit/integration tests: not applicable to this change.

Documentation

• ✅ README: not needed for this change.
• ✅ API docs: not applicable.
• ✅ Inline comments: not applicable (single version string change).
• ✅ CHANGELOG.md: Not updated, but this is consistent with repo convention — checked git history and prior identical dependabot bumps (aa4786a, 6378d27, c1b9f41, 1d1243d, etc.) never touched CHANGELOG.md either. No issue here.
• ✅ Markdown/CommonMark: N/A, no markdown files changed.

Security

• ✅ No hardcoded credentials
• ✅ Input validation: N/A
• ✅ Error handling: N/A
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Summary

Low-risk, routine dependabot bump. Only flag: it's a major version bump (not patch/minor like the recent history of this same action), so it's worth letting the actual CI run on this PR pass before merging, and giving the actions/setup-python v7 release notes a quick manual look for breaking changes, since automated review here has no network access to verify them directly. No blocking issues found.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter