chore(ci): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: python-semantic-release/python-semantic-release and python-semantic-release/publish-action.

Updates python-semantic-release/python-semantic-release from 10.6.2 to 10.7.0

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v10.7.0 (2026-09-22)

This release is published under the MIT License.

✨ Features

• cmd-stamp: Expand version stamp mechanism to support typed python variables (PR#1485, 947c57b)

• cmd-version: Add optional git --signoff to version commits (PR#1492, 3cecbeb)

📖 Documentation

• configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

• configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

• deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

• deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

• cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

✅ Resolved Issues

• #1441: feat: add option to signoff commits made by python-semantic-release

• #1443: feat: extend version_variables to replace vars with python type annotations

---

Detailed Changes: v10.6.2...v10.7.0

---

Installable artifacts are available from:

• PyPi Registry

• GitHub Release Assets

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

v10.7.0 (2026-09-22)

✨ Features

• cmd-stamp: Expand version stamp mechanism to support typed python variables, closes [#1443](https://github.com/python-semantic-release/python-semantic-release/issues/1443)_ (PR#1485, 947c57b)

• cmd-version: Add optional git --signoff to version commits, closes [#1441](https://github.com/python-semantic-release/python-semantic-release/issues/1441)_ (PR#1492, 3cecbeb)

📖 Documentation

• configuration: Added signoff_commit setting definition (PR#1492, 3cecbeb)

• configuration: Document Python type annotation support for version_variables (PR#1485, 947c57b)

⚙️ Build System

• deps: Correct click range specification for python3.10+ (PR#1486, e4b3bad)

• deps: Expand click dependency range to include v8.5.* (PR#1489, fa87c95)

💡 Additional Release Information

• cmd-version: With this release, we added a boolean flag, semantic_release.signoff_commit, as an available configuration option to toggle the addition of the Signed-off-by git trailer/footer message to release commits made by Python Semantic Release. Default is currently set to False but if you want to try this option, set this configuration setting to True. In a future major release, this setting will be set to True by default.

.. _#1441: python-semantic-release/python-semantic-release#1441 .. _#1443: python-semantic-release/python-semantic-release#1443 .. _3cecbeb: python-semantic-release/python-semantic-release@3cecbeb .. _947c57b: python-semantic-release/python-semantic-release@947c57b .. _e4b3bad: python-semantic-release/python-semantic-release@e4b3bad .. _fa87c95: python-semantic-release/python-semantic-release@fa87c95 .. _PR#1485: python-semantic-release/python-semantic-release#1485 .. _PR#1486: python-semantic-release/python-semantic-release#1486 .. _PR#1489: python-semantic-release/python-semantic-release#1489 .. _PR#1492: python-semantic-release/python-semantic-release#1492

.. _changelog-v10.6.2:

Commits

• b700dbe chore: release v10.7.0
• 3cecbeb feat(cmd-version): add optional git --signoff to version commits (#1492)
• 0f4d414 build(deps-dev): expand filelock compatibility range to include v4.0+ (#1...
• 35f7674 ci(deps): bump docker/build-push-action@v7.3.0 to v7.4.0 (#1495)
• fa87c95 build(deps): expand click dependency range to include v8.5.* (#1489)
• 4e78311 test(fixtures): adjust git monorepo creation fixtures to prevent race conditi...
• 1d56d3a test(cmd-version): refactor imports to new flatdict variant
• 1c48576 build(deps-test): swap broken flatdict with cj365-flatdict variant
• f77ed51 ci(deps): bump mikepenz/action-junit-report@v6.4.2 to v6.5.0 (#1484)
• 086cf14 test(fixtures): adjust git repo creation fixtures to prevent race conditions ...
• Additional commits viewable in compare view

Updates python-semantic-release/publish-action from 10.6.2 to 10.7.0

Release notes

Sourced from python-semantic-release/publish-action's releases.

v10.7.0 (2026-09-22)

Build System

• deps: Bump python-semantic-release from 10.6.2 to 10.7.0 (#111, 99d4062)

---

Detailed Changes: v10.6.2...v10.7.0

Commits

• 99d4062 build(deps): bump python-semantic-release from 10.6.2 to 10.7.0 (#111)
• 81b4773 ci(deps): bump python-semantic-release@v10.6.2 action to v10.7.0 (#112)
• 9c35d91 ci(deps): bump docker/build-push-action@v7.3.0 to v7.4.0 (#110)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.12%. Comparing base (e31afc4) to head (3074f44).
⚠️ Report is 21 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #206   +/-   ##
=======================================
  Coverage   99.12%   99.12%           
=======================================
  Files           3        3           
  Lines         114      114           
  Branches        8        8           
=======================================
  Hits          113      113           
  Partials        1        1           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.