This is an automated email from the ASF dual-hosted git repository.

github-merge-queue[bot] pushed a commit to branch 
gh-readonly-queue/main/pr-11933-6d4142670b57f8db26f8faa21b9788685ff0c45e
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git

commit 003546e364dccd93b1f023f2e78211468327be62
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Oct 28 09:44:33 2026 +0000

    chore(deps): bump actions/setup-python from 7.0.0 to 7.1.0 (#11933)
    
    Bumps [actions/setup-python](https://github.com/actions/setup-python)
    from 7.0.0 to 7.1.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    
href="https://github.com/actions/setup-python/releases";>actions/setup-python's
    releases</a>.</em></p>
    <blockquote>
    <h2>v7.1.0</h2>
    <h2>What's Changed</h2>
    <h3>Enhancements</h3>
    <ul>
    <li>Add <code>mirror</code> and <code>mirror-token</code> inputs for
    custom Python distribution sources by <a
    href="https://github.com/luhenry";><code>@​luhenry</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1302";>actions/setup-python#1302</a></li>
    <li>Improve error message clarity by <a
    href="https://github.com/v-lmvysakh";><code>@​v-lmvysakh</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1351";>actions/setup-python#1351</a></li>
    </ul>
    <h3>Dependency Upgrade</h3>
    <ul>
    <li>Upgrade browserslist from 4.28.2 to 4.28.9 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1353";>actions/setup-python#1353</a></li>
    <li>Upgrade <code>@​typescript-eslint/parser</code> from 8.62.0 to
    8.70.0 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1343";>actions/setup-python#1343</a></li>
    <li>Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1342";>actions/setup-python#1342</a></li>
    <li>Upgrade <code>@​vercel/ncc</code> from 0.44.0 to 0.45.0 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1357";>actions/setup-python#1357</a></li>
    <li>Upgrade <code>@​types/semver</code> from 7.7.1 to 7.8.0 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1359";>actions/setup-python#1359</a></li>
    <li>Upgrade undici from 6.28.0 to 6.29.0 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1364";>actions/setup-python#1364</a></li>
    <li>Upgrade ts-jest from 29.4.11 to 29.4.14 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1361";>actions/setup-python#1361</a></li>
    <li>Upgrade brace-expansion from 5.0.9 to 5.0.12 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1365";>actions/setup-python#1365</a></li>
    <li>Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to
    7.1.0 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1363";>actions/setup-python#1363</a></li>
    <li>Upgrade <code>@​typescript-eslint/eslint-plugin</code> from 8.62.0
    to 8.71.1 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1369";>actions/setup-python#1369</a></li>
    <li>Upgrade actions/checkout from 7.0.0 to 7.0.1 by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1345";>actions/setup-python#1345</a></li>
    <li>Upgrade cache to 6.3.0 by <a
    
href="https://github.com/v-HarithaVattikuti";><code>@​v-HarithaVattikuti</code></a>
    in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1370";>actions/setup-python#1370</a></li>
    <li>Resolve Basic Validation audit failures by <a
    
href="https://github.com/v-HarithaVattikuti";><code>@​v-HarithaVattikuti</code></a>
    in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1347";>actions/setup-python#1347</a></li>
    <li>Resolve npm audit failures by <a
    
href="https://github.com/v-HarithaVattikuti";><code>@​v-HarithaVattikuti</code></a>
    in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1350";>actions/setup-python#1350</a></li>
    </ul>
    <h2>New Contributors</h2>
    <ul>
    <li><a href="https://github.com/luhenry";><code>@​luhenry</code></a> made
    their first contribution in <a
    
href="https://redirect.github.com/actions/setup-python/pull/1302";>actions/setup-python#1302</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    
href="https://github.com/actions/setup-python/compare/v7.0.0...v7.1.0";>https://github.com/actions/setup-python/compare/v7.0.0...v7.1.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    
href="https://github.com/actions/setup-python/commit/6d4fd22b20465ccc0f7354476588e8df7c9ca0e0";><code>6d4fd22</code></a>
    Cache upgrade to 6.3.0 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1370";>#1370</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/ec52d0af729a7c50ced4261d17a07916f43f5b8e";><code>ec52d0a</code></a>
    Bump <code>@​typescript-eslint/eslint-plugin</code> from 8.62.0 to
    8.71.1 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1369";>#1369</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/ff73b2463e2f3baa703f830da214b8dfeeaeccf8";><code>ff73b24</code></a>
    Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0
    (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1363";>#1363</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/0e40890053525508c059c61932a6b8614f9e95db";><code>0e40890</code></a>
    Bump brace-expansion from 5.0.9 to 5.0.12 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1365";>#1365</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/3892123fbe74688ccc83ec7c465dc688359e5199";><code>3892123</code></a>
    Bump ts-jest from 29.4.11 to 29.4.14 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1361";>#1361</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/660965736c4aecc62797ea07d351a3c259f14660";><code>6609657</code></a>
    Bump undici from 6.28.0 to 6.29.0 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1364";>#1364</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/e1be392b26fb1917a7b2c455817e4b4dad6544ce";><code>e1be392</code></a>
    Bump <code>@​types/semver</code> from 7.7.1 to 7.8.0 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1359";>#1359</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/06da6279cdbca41027908073e81a4544dc79c06b";><code>06da627</code></a>
    Bump <code>@​vercel/ncc</code> from 0.44.0 to 0.45.0 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1357";>#1357</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/af9bcc7548695e66d75709de6f29e337624b8de8";><code>af9bcc7</code></a>
    Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1342";>#1342</a>)</li>
    <li><a
    
href="https://github.com/actions/setup-python/commit/7aeabeba5501120d873c50398519dbfd0657031c";><code>7aeabeb</code></a>
    Bump <code>@​typescript-eslint/parser</code> from 8.62.0 to 8.70.0 (<a
    
href="https://redirect.github.com/actions/setup-python/issues/1343";>#1343</a>)</li>
    <li>Additional commits viewable in <a
    
href="https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0";>compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ci.yml          | 2 +-
 .github/workflows/dev.yml         | 2 +-
 .github/workflows/integration.yml | 2 +-
 .github/workflows/parquet.yml     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 279421b960..2bf371ab51 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,7 +54,7 @@ jobs:
           # PR routing uses the merge base, including changes from all commits.
           fetch-depth: 0
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # 
v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # 
v7.1.0
         with:
           python-version: '3.12'
       - name: Install CI configuration dependency
diff --git a/.github/workflows/dev.yml b/.github/workflows/dev.yml
index 99da9f8c10..94789ea821 100644
--- a/.github/workflows/dev.yml
+++ b/.github/workflows/dev.yml
@@ -31,7 +31,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # 
v7.0.1
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # 
v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # 
v7.1.0
         with:
           python-version: "3.12"
       - name: Setup Java
diff --git a/.github/workflows/integration.yml 
b/.github/workflows/integration.yml
index 2dea1c5da2..bedc753650 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -198,7 +198,7 @@ jobs:
           # this key is not equal because maturin uses different compilation 
flags.
           key: ${{ runner.os }}-${{ runner.arch }}-target-maturin-cache-${{ 
matrix.rust }}-${{ hashFiles('**/Cargo.toml', 'rust-toolchain.toml') }}
           restore-keys: ${{ runner.os }}-${{ runner.arch 
}}-target-maturin-cache-${{ matrix.rust }}-
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # 
v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # 
v7.1.0
         with:
           python-version: '3.12'
       - name: Upgrade pip and setuptools
diff --git a/.github/workflows/parquet.yml b/.github/workflows/parquet.yml
index 21f98e2148..af1fb4ddff 100644
--- a/.github/workflows/parquet.yml
+++ b/.github/workflows/parquet.yml
@@ -164,7 +164,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # 
v7.0.1
       - name: Setup Python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # 
v7.0.0
+        uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # 
v7.1.0
         with:
           python-version: "3.10"
           cache: "pip"

Reply via email to