FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by dependabot[bot] · Pull Request #2124 · gitpython-developers/GitPython · GitHub

  1. gitpython-developers
  2. GitPython

Repository navigation

Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 - #2124

Merged
Byron merged 2 commits into
mainfrom
dependabot/github_actions/Vampire/setup-wsl-7.0.0
Jul 25, 2026
ConversationCommits (2)ChecksFiles changed
Merged

Bump Vampire/setup-wsl from 6.0.0 to 7.0.0#2124
Byron merged 2 commits into
mainfrom
dependabot/github_actions/Vampire/setup-wsl-7.0.0

Conversation

dependabot Bot commented on behalf of github Apr 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps Vampire/setup-wsl from 6.0.0 to 7.0.0.

Release notes

Sourced from Vampire/setup-wsl's releases.

v7.0.0

Breaking Changes

  • Updated Node.js to 24 (#83)
  • Changed default distributon to Debian-13
  • Changed Alpine-3.17 wslId to contain the version
  • Changed Ubuntu-20.04 wslId to contain the version
  • Changed Ubuntu-22.04 wslId to contain the version
  • Removed deprecated Debian distributon
  • Removed deprecated Alpine distributon

Details

  • Use Debian-11 instead of Debian in tests [953e6c3afb783e7b5bb3c88ca43f5228fe0bb004]
  • Increase version to 7.0.0 [efe017909364b5e46e73a4bc9fa86aa48a9e7f5f]
  • Update Node.js to 24 (#83) [04ef237f5c17bfda76e11250393d6a04cb943f0b]
  • Change default distributon to Debian-13 [b67c897c36887e4ae2170685cfe52d5af21ccc69]
  • Remove deprecated Debian [ab5ed2714a272172593bd91018f4ec50040ca255]
  • Remove deprecated Alpine [0dc99a1e2ab17f3cf7b7f945607913f18bef5911]
  • Change Alpine-3.17 wslId to contain the version [4e9c3b1d5bc8dc5614576ad322385779b249a211]
  • Use wsl-file distribution for Ubuntu 20.04+ [9928f17803b5c48d0b78b3347e91dfbb92af0f03]
  • Change Ubuntu-20.04 and Ubuntu-22.04 wslIds to contain the version [f9577ca4c38935b96f9e985505bb5973a11efe48]
  • Continue tests for specific wrapper script on installation failure [cf87199e570ddb61025b510cf4ea12ef847259d9]

v6.1.0

Highlights

  • Alpine (3.17) support fixed (#82)
  • Debian (11) support fixed (#76)
  • Alpine 3.18 - 3.23 support added
  • Debian 12 - 13 support added

Deprecations

  • Using Alpine is deprecated, Alpine-3.17 is almost a drop-in replacement
  • Using Debian explicitly or as default is deprecated, Debian-11 is almost a drop-in replacement

Details

  • Fix verify-release workflow generation [6819906081f7afebe0cfc34e838b6f8405045672]
  • Disable testing on Alpine for the time being [14625297b76a90c46e1dc562a204a3a0e0a8f159]
  • Fix apt update on Debian (#76) [6eb7639cbde68375aef0a779c783d2137e8e7d99]
  • Update snakeyaml to 2.6 [90a7832599e91317c6c87bde953703db3931cb17]
  • Update release Gradle plugin to 3.1.0 [44828e1a0adcf0d70519abc3e0039d965fddeb09]
  • Update versions Gradle plugin to 0.51.0 [168ff3d15297f7854b79a42f94e4586737bc9d29]
  • Update Wooga GitHub Gradle plugin to 4.0.0 [47d527fcd9652fe13b5a49ae79b3d8a6de0a8404]
  • Update Grgit to 5.3.3 [6391a34ce2ef77d905a69dc59252e2215a5964ff]
  • Update Gradle to 8.14.4 [6f851d34b5a17714525389d57bb57c1a8ff99f59]
  • Get version update notifications for refresh versions plugin [01972ad1ecf384ed6df4e1f8fb7b741d1f72d8cc]
  • Update refreshVersions Gradle plugin to 0.60.6 [b00071dbb307c1dcc9fd88e451467f5cf40efad2]
  • Update github-api to 1.330 [b38a1f9b31713fe6d9024538684b5caa56a3d17f]
  • Update Dependency Analysis Gradle plugin to 3.1.0 [25def4e4b682f8b68001471a225cf815480a4079]
  • Update Gradle to 9.4.1 [0f597b6a31cef18eea42c1e8a2feee4cd2528407]
  • Allow newer wrapper versions in validateGradleWrapperJar [0e1d30dc232df29f9dda4d79cd777e76e70bfd8c]
  • Update versions Gradle plugin to 0.53.0 [8632db7e70de2fc411fe85a5670eefaae684e25e]

... (truncated)

Commits
  • d1da7f2 [Gradle Release Plugin] - pre tag commit: 'v7.0.0'.
  • cf87199 Continue tests for specific wrapper script on installation failure
  • f9577ca Change Ubuntu-20.04 and Ubuntu-22.04 wslIds to contain the version
  • 9928f17 Use wsl-file distribution for Ubuntu 20.04+
  • 4e9c3b1 Change Alpine-3.17 wslId to contain the version
  • 0dc99a1 Remove deprecated Alpine
  • ab5ed27 Remove deprecated Debian
  • b67c897 Change default distributon to Debian-13
  • 04ef237 Update Node.js to 24 (#83)
  • efe0179 Increase version to 7.0.0
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 12, 2026

Byron commented Apr 12, 2026

Copy link
Copy Markdown
Member

@EliahKagan It looks like this update is a breaking change to WSL, and I also don't know how much we want it.

EliahKagan requested changes Apr 13, 2026
View reviewed changes

EliahKagan left a comment •
edited
Loading

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

@EliahKagan It looks like this update is a breaking change to WSL, and I also don't know how much we want it.

TL;DR: This should be easy to fix and it's a good update to take once we slightly adjust our CI workflow to adapt to it, but I haven't rushed to do it since I think it makes sense to do it at the same time as some other changes.

The improvements to Vampire/setup-wsl since the version we're currently using actually include a fix for Vampire/setup-wsl#82, which I had reported, as it relates to #2107 and #2108 here. Alpine had started always giving a 403 error on download.

Even if we stick with Debian, I think we'll still want the upgrade, because if I understand correctly, in the version of the action we're currently on, Debian is affected by a different but related bug that kept it from getting current packages (Vampire/setup-wsl#76, Vampire/setup-wsl#85). In both cases, the underlying broad cause is that some distros can only be obtained reliably by methods that require they be specified with a version number, and lack a reliable and correct way to get them without specifying a version.

The CI failures here can be fixed by specifying the Debian version or, perhaps better, by no longer specifying the distro at all--since I think, from this point on and for a while, the default distro and version is likely to be reasonable for our purposes. Also, because Debian now has to be specified versioned, the action's default distro itself specifies it versioned, with the default version changing only when the action is upgraded. So the version of Debian we're using shouldn't drift at unexpected times. There's an intermediate version between what we're using and this version, where CI wouldn't fail, because the way we're specifying Debian is deprecated but not removed. But to get the main benefit, we'd have to stop specifying it that way anyway.

I've been meaning to make the changes described above, but I figured it would make sense to do it at the same time as dependabot.yml is edited to no longer allow beta ecosystems, as that's no longer required for pre-commit updates; and to add a 7-day cooldown for ecosystems that support it, which I think, of those we use here, is only github-actions. The cooldown period might also make it so this action wouldn't come in until a little later, which is another reason I haven't rushed to integrate this PR--we might end up taking the above-mentioned intermediate version first. When making these changes, it would also make sense to pin actions to full OIDs, which is a good thing in and of itself and also increases the benefit conferred by cooldown.

However, I have no objection to these things being done at different times or in a different order. (If you think some should not be done at all, please let me know, since I might otherwise proceed to do them.)

Byron commented Apr 13, 2026

Copy link
Copy Markdown
Member

TL;DR: This should be easy to fix and it's a good update to take once we slightly adjust our CI workflow to adapt to it, but I haven't rushed to do it since I think it makes sense to do it at the same time as some other changes.

That's great to hear, no rush then.
To me it sounds totally reasonable to also optimize for your time so that less of it is spent here.

Bump Vampire/setup-wsl from 6.0.0 to 7.0.0
99bb94e 
Bumps [Vampire/setup-wsl](https://github.com/vampire/setup-wsl) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/vampire/setup-wsl/releases)
- [Commits](Vampire/setup-wsl@v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: Vampire/setup-wsl
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Byron force-pushed the dependabot/github_actions/Vampire/setup-wsl-7.0.0 branch from 15958b8 to 99bb94e Compare July 20, 2026 08:15
Byron marked this pull request as draft July 20, 2026 08:16

Byron commented Jul 20, 2026

Copy link
Copy Markdown
Member

Converting to draft while we know this needs fixing.

EliahKagan commented Jul 20, 2026

Copy link
Copy Markdown
Member

Thanks. I should have this in soon. I very much agree with it being marked draft right now.

Byron commented Jul 25, 2026

Copy link
Copy Markdown
Member

@EliahKagan a word of warning: I let an agent loose on this PR, clearly marked, so you can see one version of a fix when you intend to work on it. Of course, ideally the agent will do the right thing and it can be merged without consuming much of your time at all.
The agent is running on Windows and instructed to try as much locally as possible as well.

EliahKagan commented Jul 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

I think the solution is just to remove the operating system specification altogether. It defaults to Debian-13 according to the release notes here, which is a better choice than the Debian-11 the agent seems to have guessed. We don't need to specify the operating system because we're using Debian and the action is now tracking reasonable recent or latest stable Debian major versions as the default distro. If we want a specific version, we should pin the action itself to a patch version as we seem already to be doing or, far far better, a full SHA.

That's actually something we should do on all actions, pinning to a full SHA, and enforce with CodeQL and Zizmor, plus at least a week cool down period, like we do in gitoxide. But agents run a risk of confabulating OIDs, and in any case OIDs should always be set mechanistically. The agent can be instructed to set them using pinact. That outputs the syntax that is both fully pinned and understood by Dependabot. This could be done in this PR but I'd suggest doing it separately.

ci: use no Debian WSL identifier (as default is new enough)
0428352 
setup-wsl v7 removes the deprecated unversioned Debian distribution, causing
every Windows matrix job to stop during environment setup. Select Debian-13 implicitly,
the documented replacement for the old Debian identifier, to preserve the workflow
environment while allowing the action upgrade.

Co-authored-by: Eliah Kagan <degeneracypressure@gmail.com>
Byron force-pushed the dependabot/github_actions/Vampire/setup-wsl-7.0.0 branch from 88263c0 to 0428352 Compare July 25, 2026 12:53

Byron commented Jul 25, 2026

Copy link
Copy Markdown
Member

Thanks @EliahKagan! I have done that and this PR will merge if CI passes with Debian 13 (implicit).

Byron marked this pull request as ready for review July 25, 2026 13:06
Copilot AI review requested due to automatic review settings July 25, 2026 13:06
Byron merged commit 07e8055 into main Jul 25, 2026
48 checks passed
dependabot Bot deleted the dependabot/github_actions/Vampire/setup-wsl-7.0.0 branch July 25, 2026 13:06
Copilot AI reviewed Jul 25, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull request overview

This PR updates the GitHub Actions workflow to use Vampire/setup-wsl v7.0.0, aligning the CI environment with the latest major release of the WSL setup action.

Changes:

  • Bump Vampire/setup-wsl from v6.0.0 to v7.0.0 in the Windows CI job.
  • Remove the previously specified distribution: Debian workflow input.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/pythonpackage.yml
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Byron Byron left review comments
Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
EliahKagan EliahKagan requested changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Back | FazBrowse Home | New Git URL