Skip to content

8.0.0

Latest

Choose a tag to compare

@github-actions github-actions released this 13 May 12:01
e46075c

8.0.0 - 2026-05-13

Summary

In this major release, several modifications were made to the PTB's workflow templates:

  • For automatically resolving vulnerabilities, the dependency-update.yml workflow was
    added. For more details, see the Update Dependencies section.
  • The periodic run which was previously executed in the ci.yml has been moved to its
    own periodic-validation.yml and will run weekly. This also has been modified to
    run the slow-checks.yml so that more complete linting and coverage information is
    sent to Sonar.
  • With the addition of periodic-validation.yml, the pr-merge.yml was reduced so that
    it only executes gh-pages.yml.
  • The unit tests job has been moved from checks.yml to its own fast-tests.yml file.
  • Workflow extensions were added to fast-tests and merge-gate. This allows users to
    add custom fast-tests-extension.yml and merge-gate-extension.yml files. For more
    details, check out the Workflow Extensions section.
  • slow-checks.yml is only maintained by the project (not the PTB). See the Not Maintained by the PTB section.

Features

  • #829: Extended removing a job from a workflow to also remove it from the needs of another job
  • #825: Created two workflows by splitting up previous ones:
    • Moved the periodic jobs in ci.yml to its own periodic-validation.yml
    • Moved the unit tests job in checks.yml to its own fast-tests.yml
  • #730: Added workflow extensions to fast-tests and merge-gate
  • #756: Added dependency-update.yml to automate resolving vulnerabilities with a generated pull request
  • #792: Improved dependency-update.yml documentation
  • #831: Switched slow-checks.yml to be provided by the project and not maintained by the PTB and improved output of pydantic validation of .workflow-patcher.yml

Bugfix

  • #563: Fixed merge-gate to prevent auto-merges from happening when integration tests failed

Security Issues

This release fixes vulnerabilities by updating dependencies:

Dependency Vulnerability Affected Fixed in
urllib3 CVE-2026-44431 2.6.3 2.7.0
urllib3 CVE-2026-44432 2.6.3 2.7.0
  • #836: Relocked poetry.lock

Dependency Updates

main

  • Updated dependency coverage:7.13.4 to 7.14.0
  • Updated dependency importlib-resources:6.5.2 to 7.1.0
  • Updated dependency mypy:1.19.1 to 2.1.0
  • Updated dependency nox:2026.2.9 to 2026.4.10
  • Updated dependency pip-licenses:5.5.1 to 5.5.5
  • Updated dependency pre-commit:4.5.1 to 4.6.0
  • Updated dependency pydantic:2.12.5 to 2.13.4
  • Updated dependency pysonar:1.0.2.1722 to 1.5.0.4793
  • Updated dependency sphinxcontrib-mermaid:2.0.1 to 2.0.2
  • Updated dependency typer:0.24.1 to 0.25.1

dev

  • Updated dependency types-pyyaml:6.0.12.20250915 to 6.0.12.20260510