From 2c38b375916aa0ecf8a5c16de5e5b1a01756cc4d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 01:02:55 +0000 Subject: [PATCH 1/3] Bump the actions group with 3 updates Bumps the actions group with 3 updates: [scientific-python/attach-next-milestone-action](https://github.com/scientific-python/attach-next-milestone-action), [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python). Updates `scientific-python/attach-next-milestone-action` from c9cfab10ad0c67fed91b01103db26b7f16634639 to 796cfa44ba1e1a9a4bce7896241d4612a3f06327 - [Release notes](https://github.com/scientific-python/attach-next-milestone-action/releases) - [Commits](https://github.com/scientific-python/attach-next-milestone-action/compare/c9cfab10ad0c67fed91b01103db26b7f16634639...796cfa44ba1e1a9a4bce7896241d4612a3f06327) Updates `actions/checkout` from 5 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v7) Updates `actions/setup-python` from 6 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: scientific-python/attach-next-milestone-action dependency-version: 796cfa44ba1e1a9a4bce7896241d4612a3f06327 dependency-type: direct:production dependency-group: actions - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/milestone-merged-prs.yaml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/test.yml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/milestone-merged-prs.yaml b/.github/workflows/milestone-merged-prs.yaml index f455839..2a824fa 100644 --- a/.github/workflows/milestone-merged-prs.yaml +++ b/.github/workflows/milestone-merged-prs.yaml @@ -12,7 +12,7 @@ jobs: name: attach to PR runs-on: ubuntu-latest steps: - - uses: scientific-python/attach-next-milestone-action@c9cfab10ad0c67fed91b01103db26b7f16634639 + - uses: scientific-python/attach-next-milestone-action@796cfa44ba1e1a9a4bce7896241d4612a3f06327 with: token: ${{ secrets.MILESTONE_LABELER_TOKEN }} force: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 73564b6..d78c1e5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,11 +14,11 @@ jobs: # IMPORTANT: this permission is mandatory for trusted publishing id-token: write steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 name: Install Python with: python-version: "3.11" diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 323bfc6..7c97cce 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -24,8 +24,8 @@ jobs: os: [ubuntu-latest, windows-latest, macos-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v5 - - uses: actions/setup-python@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-python@v7 id: setup-python with: python-version: ${{ matrix.python_version }} From c0d6b6889bb6b36f6442dcb57ec5c6feb8f8d764 Mon Sep 17 00:00:00 2001 From: Stefan van der Walt Date: Thu, 15 Oct 2026 15:44:07 -0700 Subject: [PATCH 2/3] Upgrade to newer attach milestone --- .github/workflows/milestone-merged-prs.yaml | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/.github/workflows/milestone-merged-prs.yaml b/.github/workflows/milestone-merged-prs.yaml index 2a824fa..8716fda 100644 --- a/.github/workflows/milestone-merged-prs.yaml +++ b/.github/workflows/milestone-merged-prs.yaml @@ -1,18 +1,23 @@ name: Milestone on: - pull_request_target: - types: - - closed + push: branches: - - "main" + - 'main' + +permissions: {} jobs: milestone_pr: - name: attach to PR + if: github.repository == 'scientific-python/spin' runs-on: ubuntu-latest + + permissions: + issues: write + pull-requests: write + steps: - uses: scientific-python/attach-next-milestone-action@796cfa44ba1e1a9a4bce7896241d4612a3f06327 with: - token: ${{ secrets.MILESTONE_LABELER_TOKEN }} + token: ${{ github.token }} force: true From ddb6c6a097b4c21adf8eaea8fab2edb57ad8fb9d Mon Sep 17 00:00:00 2001 From: Stefan van der Walt Date: Thu, 15 Oct 2026 15:45:58 -0700 Subject: [PATCH 3/3] Lint --- .github/workflows/milestone-merged-prs.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/milestone-merged-prs.yaml b/.github/workflows/milestone-merged-prs.yaml index 8716fda..2828edd 100644 --- a/.github/workflows/milestone-merged-prs.yaml +++ b/.github/workflows/milestone-merged-prs.yaml @@ -3,7 +3,7 @@ name: Milestone on: push: branches: - - 'main' + - "main" permissions: {}