chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0

[dependabot]

Bumps actions/setup-python from 6.3.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Confirmed this is a standard dependabot automated PR, consistent with prior similar bumps (checkout, mypy, virtualenv) that don't touch CHANGELOG.md.

Review: Bump actions/setup-python from 6.3.0 to 7.0.0

Type: Automated dependabot dependency bump, CI-only change (13 workflow files). No application code touched.

Code Quality

• ✅ Consistent formatting — every occurrence follows the same uses: actions/setup-python@vX.Y.Z pattern, correctly bumped.
• ✅ No commented-out code.
• N/A Meaningful variable names / DRY — not applicable to a version-string bump.
• ✅ No logic defects. Verified via grep -rn "actions/setup-python@" .github/workflows/ that all 13 references were updated consistently (black, build-distribution, check-development-dependencies, create-sphinx-documentation, dependency-scan, flake8, isort, mypy, publish-to-pypi, pylint, pytest-darwin, pytest-linux, pytest-windows) — no stale v6.3.0 references left behind.
• ✅ .claude/CLAUDE.md not touched by this diff, no concerns there.
• ⚠️ Minor/non-blocking: this is a major version bump (v6→v7), unlike the other recent dependabot bumps in this repo's history which were patch/minor (e.g., checkout 7.0.0→7.0.1, mypy 2.2.0→2.3.0). Major version bumps of actions/setup-python can carry breaking changes (e.g., minimum runner/Node version requirements, changed default caching behavior). Worth confirming CI actually passes green on this PR (pytest-linux/darwin/windows, black, mypy, pylint, flake8, isort, dependency-scan, build-distribution, sphinx-docs workflows all use this action) before merging, since that's the only real verification available for a pure CI-config change.

Testing

• N/A — no application code; verification is "does CI pass," not unit/integration tests.

Documentation

• ✅ No README/API doc changes needed for this change.
• ✅ CHANGELOG.md not updated — consistent with this repo's convention for dependabot CI bumps (verified prior bumps like 398bec7, 12f06be, 8a690a5 also skip CHANGELOG.md).

Security

• ✅ No hardcoded credentials.
• ✅ No input validation/error handling concerns (CI config only).
• ✅ No license files (.lic) or AQAAAD-prefixed strings present in this diff.
• ✅ Pinned to an exact tag (v7.0.0), not a floating major tag or unpinned ref — good supply-chain hygiene, consistent with existing convention.

Verdict

No blocking issues. Approve, contingent on this PR's own CI run passing (the only meaningful check for a version-pin bump touching every workflow file).

Automated code review analyzing defects and coding standards

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing
szengineflags.py
szerror.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter