From 5a70c9b1167195220d9b173c96d6f70d5172aa3e Mon Sep 17 00:00:00 2001 From: melbinjp Date: Tue, 18 Aug 2026 16:15:25 +0530 Subject: [PATCH 1/2] deps: actions/setup-python v6 to v7 across every workflow Supersedes dependabot #22, which has been open 27 days and went CONFLICTING because release.yml and scheduled-ci.yml both changed under it today. It also predates verify-wheel.yml, so merging it as-is would have left one workflow on v6 and produced a second dependabot PR immediately. 12 occurrences across 7 files. v7.0.0 released 2026-07-20. --- .github/workflows/agent-audit.yml | 2 +- .github/workflows/ci.yml | 10 +++++----- .github/workflows/pr-review.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/review-preview.yml | 2 +- .github/workflows/scheduled-ci.yml | 2 +- .github/workflows/verify-wheel.yml | 2 +- 7 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/agent-audit.yml b/.github/workflows/agent-audit.yml index 6fdb779..29f2129 100644 --- a/.github/workflows/agent-audit.yml +++ b/.github/workflows/agent-audit.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 693ee71..1fac633 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" @@ -41,7 +41,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" @@ -70,7 +70,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} cache: "pip" @@ -98,7 +98,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" @@ -119,7 +119,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml index 93cd963..b6be291 100644 --- a/.github/workflows/pr-review.yml +++ b/.github/workflows/pr-review.yml @@ -34,7 +34,7 @@ jobs: persist-credentials: false - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7465215..0a5d1a4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 0 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" @@ -57,7 +57,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" cache: "pip" diff --git a/.github/workflows/review-preview.yml b/.github/workflows/review-preview.yml index d068a71..97bf219 100644 --- a/.github/workflows/review-preview.yml +++ b/.github/workflows/review-preview.yml @@ -46,7 +46,7 @@ jobs: persist-credentials: false - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" diff --git a/.github/workflows/scheduled-ci.yml b/.github/workflows/scheduled-ci.yml index 72ea672..17bd557 100644 --- a/.github/workflows/scheduled-ci.yml +++ b/.github/workflows/scheduled-ci.yml @@ -74,7 +74,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" diff --git a/.github/workflows/verify-wheel.yml b/.github/workflows/verify-wheel.yml index 7cd2197..7a99e5c 100644 --- a/.github/workflows/verify-wheel.yml +++ b/.github/workflows/verify-wheel.yml @@ -55,7 +55,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} From a759ca5bbdc609d851dc5ac17f197cc0b1ae16bb Mon Sep 17 00:00:00 2001 From: melbinjp Date: Tue, 18 Aug 2026 18:09:43 +0530 Subject: [PATCH 2/2] docs-check: pin v0.1.1, and stop claiming v0.1.0 is the listed release The comment said v0.1.0 is 'the same one a Marketplace listing is made from'. That stopped being true today: the listing was published from v0.1.1, because v0.1.0's action.yml carries name 'docproof' and GitHub refuses a name matching an existing account. So this gate was pinned to a release that can no longer be listed while claiming it was the listed one - a stale statement inside the gate whose job is catching stale statements. Measured both ways before bumping rather than assumed: v0.1.0 and v0.1.1 each report 112 claims checked and nothing contradicted on this tree, run from a worktree at each tag. So this is hygiene, not a fix, and the commit says so. --- .github/workflows/docs-check.yml | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml index 83669ba..5f66d44 100644 --- a/.github/workflows/docs-check.yml +++ b/.github/workflows/docs-check.yml @@ -38,8 +38,17 @@ jobs: # gate silently took whatever was on that branch at the time. A gate whose own version # moves underneath it cannot tell you whether the code changed or the checker did. # - # v0.1.0 exists now, and the release it comes from is the same one a Marketplace - # listing is made from. - - uses: melbinjp/docproof@v0.1.0 + # **Bumped v0.1.0 -> v0.1.1, 2026-08-18.** The line under this used to say v0.1.0 was + # "the same one a Marketplace listing is made from", and that stopped being true the + # hour the listing went up: it was published from **v0.1.1**, because v0.1.0 carries a + # metadata name GitHub rejects. So this repository was pinned to a release that can no + # longer be listed, while claiming it was the listed one. A stale comment in the gate + # whose whole job is catching stale documentation. + # + # **Measured before bumping, both ways: no behaviour change here.** v0.1.0 and v0.1.1 + # each report 112 claims checked and nothing contradicted on this tree. The seven + # commits between them are precision work on other corpora plus the name fix, so this + # is hygiene rather than a fix, and saying otherwise would be inventing a win. + - uses: melbinjp/docproof@v0.1.1 with: show-skips: 'true'