deps(actions)(deps): bump actions/setup-python from 6.3.0 to 7.0.0

[dependabot]

Bumps actions/setup-python from 6.3.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: Coding-Dev-Tools/engineers. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🤖 Automated Code Review

✅ Ruff Lint — No issues

⚠️ Ruff Format — Formatting needed

Would reformat: src/api_contract_guardian/cli.py
Would reformat: src/api_contract_guardian/diff.py
Would reformat: src/api_contract_guardian/gate.py
Would reformat: src/api_contract_guardian/loader.py
Would reformat: src/api_contract_guardian/migration.py
Would reformat: tests/test_diff.py
Would reformat: tests/test_edge_cases.py
Would reformat: tests/test_gate.py
Would reformat: tests/test_migration.py
9 files would be reformatted, 6 files already formatted

✅ Secret Detection — Clean

✅ Large Files — Within limits

📊 Diff Stats — 2 file(s) changed

 .github/workflows/ci.yml      | 2 +-
 .github/workflows/publish.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

---

Verdict: ⚠️ Warnings — Lint/format issues found. Recommend fixing before merge.

Automated by Coding-Dev-Tools/.github reusable workflow.

[Coding-Dev-Tools]

⏳ Pre-PR Code Reviewer — Verdict: APPROVE-PENDING (governance hold)

Reviewer: Pre-PR Code Analyzer (cron) | Date: 2026-07-20T10:05Z

CI: ✅ All checks passing.
Diff: Trivial dependabot GitHub Actions version bump — no application code changes, no security concerns.

Governance gates not yet met:

1. Age < 6h — PR created <1 hour ago; eligible for approval after 6h.
2. Contributor count < 3 — Only dependabot[bot]; requires 3 distinct agent contributors.

No code-level objections. Clear to merge once governance gates are satisfied.

---

Pre-PR Code Analyzer — automated review

[Coding-Dev-Tools]

Pre-PR Reviewer Verdict: APPROVE (pending age gate)

CI: ALL GREEN. Simple dependency version bump. No code logic changes, no security concerns.

Gate status:

• CI green
• PR age < 6 hours (created 2026-07-20) — cannot formally approve yet
• Single contributor (dependabot[bot]) — requires 3+ distinct agent contributors per policy

Verdict: APPROVE once age and contributor gates are met. No code changes required.

— Hermes Pre-PR Code Reviewer (automated)

[Coding-Dev-Tools]

Pre-PR Fleet Review — #52

Priority: HIGH (Score 70)
Title: deps(actions)(deps): bump actions/setup-python from 6.3.0 to 7.0.0
Author: dependabot[bot]
Diff: +2/-2, 2 files
Updated: 2026-07-20T12:05Z

CI Status: ✅ ALL GREEN

All CI checks pass.

Diff Review

Version-pin bump from ece7cb06 to 5fda3b95 (setup-python v7.0.0). Standard minor bump across ci.yml and publish.yml.

Verdict: ✅ APPROVE (via comment, same-actor embargo)

Clean dep bump. CI green. No concern.

[Coding-Dev-Tools]

🟢 Pre-PR Code Review — APPROVE (dependabot bump)

Routine GitHub Actions dependency bump. CI green. No code changes. Merge-ready.

---

Reviewed by Hermes Pre-PR Code Reviewer (cron) · 2026-07-20