Skip to content

build(deps): bump the actions group across 1 directory with 3 updates - #4607

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-61b5708d97
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-61b5708d97

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates in the / directory: astral-sh/setup-uv, actions/cache and pypa/cibuildwheel.

Updates astral-sh/setup-uv from 10.0.1 to 10.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

... (truncated)

Commits

Updates actions/cache from 4 to 6

Release notes

Sourced from actions/cache's releases.

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 4.2.1 to 4.3.1

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.3.1

  • 🛠 Updates CPython 3.15 to the final 3.15.0 release (#3009)

v4.3.0

  • ✨ Extends option inheritance to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using CIBW_INHERIT. (#2928)
  • ✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the pypy enable flag (#2998)
  • ✨ Adds GraalPy 3.13 (v25.3) support on Linux, Windows, and macOS arm64, available with the graalpy enable flag (#2982)
  • ✨ Adds log-fold-mode to override CI log folding, including CIBW_LOG_FOLD_MODE=disabled to keep build steps expanded (#2972)
  • ✨ Adds a python-path input to the GitHub Action to choose the Python interpreter used to run cibuildwheel, and falls back to system python3 on runner architectures unsupported by setup-python, such as native riscv64 (#2990)
  • 🐛 Fixes Windows command execution when paths or arguments contain shell metacharacters, including dependency specifiers containing < or > (#2978)
  • 🛠 Improves readability of logged commands whose arguments contain quotes (#2993)
  • 🛠 Updates Pyodide to 0.27.8, 0.29.5, and 314.0.7, and updates its build tooling, including auditwheel-emscripten 0.3.0 (#2996)
  • 🛠 Updates dependencies and container pins, including CPython 3.15.0rc3 (#2986, #3003)
  • 📚 Corrects references to --archs in CLI help, error messages, and documentation (#2992)
Changelog

Sourced from pypa/cibuildwheel's changelog.

v4.3.1

10 October 2026

  • 🛠 Updates CPython 3.15 to the final 3.15.0 release (#3009)

v4.3.0

5 October 2026

  • ✨ Extends option inheritance to every configuration layer, so global and platform-specific settings can append or prepend to existing values, including cibuildwheel's defaults. Environment variables can also extend earlier settings using CIBW_INHERIT. (#2928)
  • ✨ Adds PyPy 3.12 support and updates PyPy 3.11 to v8.0.0, available with the pypy enable flag (#2998)
  • ✨ Adds GraalPy 3.13 (v25.3) support on Linux, Windows, and macOS arm64, available with the graalpy enable flag (#2982)
  • ✨ Adds log-fold-mode to override CI log folding, including CIBW_LOG_FOLD_MODE=disabled to keep build steps expanded (#2972)
  • ✨ Adds a python-path input to the GitHub Action to choose the Python interpreter used to run cibuildwheel, and falls back to system python3 on runner architectures unsupported by setup-python, such as native riscv64 (#2990)
  • 🐛 Fixes Windows command execution when paths or arguments contain shell metacharacters, including dependency specifiers containing < or > (#2978)
  • 🛠 Improves readability of logged commands whose arguments contain quotes (#2993)
  • 🛠 Updates Pyodide to 0.27.8, 0.29.5, and 314.0.7, and updates its build tooling, including auditwheel-emscripten 0.3.0 (#2996)
  • 🛠 Updates dependencies and container pins, including CPython 3.15.0rc3 (#2986, #3003)
  • 📚 Corrects references to --archs in CLI help, error messages, and documentation (#2992)
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 16, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 16, 2026
@github-actions github-actions Bot added backport:skip Skip creating a backport to any release branches first-time-contributor PR opened by an author who had not previously committed to this repository labels Oct 16, 2026

@github-actions github-actions Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

go2 replay realtime (arm64)

Details
Benchmark suite Current: 42796d4 Previous: d9793f1 Ratio
peak memory 1700.5 MB 1711.082 MB 0.99
peak threads 364 threads 360 threads 1.01
network (transport) 2736.319 MB 2730.994 MB 1.00
disk write 1.492 MB 1.766 MB 0.84
instructions 137.581 G 137.511 G 1.00

This comment was automatically generated by workflow using github-action-benchmark.

@greptile-apps

greptile-apps Bot commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

RetriggerView in GreptileConfidence Score: 5/5

[High impact] No merge-blocking issue was identified in the dependency updates.

Summary

Updates three GitHub Actions dependencies across six workflows:

  • Dimos workflows set up uv with the newer action.
  • CI jobs restore and save Rust build caches with actions/cache 6.
  • Wheel checks and releases build packages with cibuildwheel 4.3.0.

No actionable issues were found. Workflow inputs, permissions, and build targets remain unchanged.

Paired execution checks passed for the old and new setup-uv and cache action bundles using workflow-derived inputs on Linux x64 with simulated runner and cache services. All six workflows passed workflow validation with the existing custom runner labels declared. Both cibuildwheel versions selected identical wheel targets for the smoke job and all three release configurations, and configuration resolution succeeded for every selected target. Container-image digests changed, while the selected image families remained unchanged.

Full GitHub workflows, successful cache transfers, Docker wheel builds, and native macOS/ARM64 execution were not run. No merge-blocking issue was identified within the checked scope.

Reviews (1) · Last reviewed commit: "chore(deps): bump the actions group acro..." · Reviewed by Greptile

@codecov

codecov Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

❌ 2 Tests Failed:

Tests completed Failed Passed Skipped
7372 2 7370 56
View the top 2 failed test(s) by shortest run time
dimos.e2e_tests.test_dimsim_walk_forward::test_walk_forward
Stack Traces | 166s run time
lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef56bd063f0>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7ef565c544a0>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7ef565c54540>
human_input = <function human_input.<locals>.send_human_input at 0x7ef565c54680>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7ef56c48fce0>

    @pytest.mark.self_hosted_large
    def test_walk_forward(
        lcm_spy, start_blueprint, wait_for_system_ready, human_input, dim_sim
    ) -> None:
        start_blueprint(
            "run",
            "--disable",
            "spatial-memory",
            "--disable",
            "security-module",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        wait_for_system_ready(timeout=300.0)
    
        # The coordinator can be ready while DimSim is still loading its scene.
        # Teleports sent before physics starts are discarded by the bridge.
        lcm_spy.wait_for_message_result(
            "/odom#geometry_msgs.PoseStamped",
            PoseStamped,
            predicate=lambda _: True,
            fail_message="DimSim did not publish initial odometry",
            timeout=300,
        )
    
        origin_x, origin_y = 1, 2
        dim_sim.set_agent_position(origin_x, origin_y)
        lcm_spy.wait_until_odom_position(origin_x, origin_y, threshold=0.1, timeout=30)
    
        human_input("move forward 3 meter")
    
>       lcm_spy.wait_until_odom_position(origin_x + 3, origin_y, threshold=0.4, timeout=120)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7ef56c48fce0>
human_input = <function human_input.<locals>.send_human_input at 0x7ef565c54680>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef56bd063f0>
origin_x   = 1
origin_y   = 2
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7ef565c544a0>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7ef565c54540>

dimos/e2e_tests/test_dimsim_walk_forward.py:51: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:143: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7ef566dabce0>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef56bd063f0>
        threshold  = 0.4
        timeout    = 120
        x          = 4
        y          = 2
dimos/e2e_tests/lcm_spy.py:129: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x7ef5909422d0: unset>
        fail_message = 'Failed to get to position x=4, y=2'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x7ef565c54860>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7ef566dabce0>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef56bd063f0>
        timeout    = 120
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x7ef5909422d0: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=4, y=2

deadline   = 9292637.597938968
interval   = 0.1
message    = 'Failed to get to position x=4, y=2'
predicate  = <bound method Event.is_set of <threading.Event at 0x7ef5909422d0: unset>>
timeout    = 120

.../utils/testing/waiting.py:35: TimeoutError
dimos.e2e_tests.test_dimsim_spatial_memory::test_go_to_the_bed
Stack Traces | 273s run time
lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef5675c7d10>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7ef566dab560>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7ef566dab600>
human_input = <function human_input.<locals>.send_human_input at 0x7ef566dab740>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7ef56b89a510>
explore_house = <function explore_house.<locals>.explore at 0x7ef566dabf60>

    @pytest.mark.self_hosted_large
    def test_go_to_the_bed(
        lcm_spy, start_blueprint, wait_for_system_ready, human_input, dim_sim, explore_house
    ) -> None:
        start_blueprint(
            "run",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        wait_for_system_ready(timeout=300.0)
    
        explore_house()
    
        human_input("go to the bed")
    
>       lcm_spy.wait_until_odom_position(-3.567, -1.332, threshold=2, timeout=180)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7ef56b89a510>
explore_house = <function explore_house.<locals>.explore at 0x7ef566dabf60>
human_input = <function human_input.<locals>.send_human_input at 0x7ef566dab740>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef5675c7d10>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7ef566dab560>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7ef566dab600>

dimos/e2e_tests/test_dimsim_spatial_memory.py:33: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:143: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7ef566daa8e0>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef5675c7d10>
        threshold  = 2
        timeout    = 180
        x          = -3.567
        y          = -1.332
dimos/e2e_tests/lcm_spy.py:129: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x7ef56bdbfe30: unset>
        fail_message = 'Failed to get to position x=-3.567, y=-1.332'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x7ef566da9620>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7ef566daa8e0>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7ef5675c7d10>
        timeout    = 180
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x7ef56bdbfe30: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=-3.567, y=-1.332

deadline   = 9292472.289361928
interval   = 0.1
message    = 'Failed to get to position x=-3.567, y=-1.332'
predicate  = <bound method Event.is_set of <threading.Event at 0x7ef56bdbfe30: unset>>
timeout    = 180

.../utils/testing/waiting.py:35: TimeoutError

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@dependabot dependabot Bot changed the title chore(deps): bump the actions group across 1 directory with 3 updates build(deps): bump the actions group across 1 directory with 3 updates Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from 76a44ee to cfaad6e Compare October 19, 2026 05:38
@dependabot
dependabot Bot requested review from TomCC7 and aclauer as code owners October 19, 2026 05:38
@github-actions github-actions Bot added the ready-to-merge Required CI checks have passed on this PR label Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from cfaad6e to 00fa76a Compare October 20, 2026 05:37
@github-actions github-actions Bot removed the ready-to-merge Required CI checks have passed on this PR label Oct 20, 2026
@github-actions github-actions Bot added the ready-to-merge Required CI checks have passed on this PR label Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from 00fa76a to a30ca70 Compare October 21, 2026 05:37
@github-actions github-actions Bot removed the ready-to-merge Required CI checks have passed on this PR label Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from a30ca70 to e6fb958 Compare October 22, 2026 05:37
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from e6fb958 to 63ea1f0 Compare October 23, 2026 05:37
Bumps the actions group with 3 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/cache](https://github.com/actions/cache) and [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel).


Updates `astral-sh/setup-uv` from 10.0.1 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v10.0.1...v10.3.0)

Updates `actions/cache` from 4 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v6)

Updates `pypa/cibuildwheel` from 4.2.1 to 4.3.1
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@v4.2.1...v4.3.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: pypa/cibuildwheel
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-61b5708d97 branch from 63ea1f0 to 42796d4 Compare October 24, 2026 06:11

This branch was successfully deployed

1 active (outdated) deployment
cachix — 63ea1f01 Deployed Oct 23, 2026 by dependabot[bot] via cachix-build #14090
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip Skip creating a backport to any release branches dependencies Pull requests that update a dependency file first-time-contributor PR opened by an author who had not previously committed to this repository github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants