chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0

[dependabot]

Bumps actions/setup-python from 6.3.0 to 7.0.0.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

[oWretch]

@copilot Can you please review what has changed between the 6.3.0 and 7.0.0 releases of actions/setup-python and what impact upgrading might have on this repository. Include suggestions of what changes would need to be made, or new functionality that should be utilised with the new release.

[Copilot]

@copilot Can you please review what has changed between the 6.3.0 and 7.0.0 releases of actions/setup-python and what impact upgrading might have on this repository. Include suggestions of what chan...

Here's the analysis of changes between actions/setup-python 6.3.0 → 7.0.0 and their impact on this repository.

---

Breaking Change

pip-install input removed (#1336)

The pip-install input (which allowed specifying packages to install with pip as part of the action) has been removed. This does not affect this repository — the pre-commit job does not use that input; it installs pre-commit via a separate pip install pre-commit step, which remains unaffected.

---

Other Changes

Category	Change
ESM migration	Action migrated to ESM + dependency upgrades (#1330)
Bug fix	stderr warnings are now annotated as warnings instead of errors (#1335)
Bug fix	Manifest fetch now validates and retries to prevent silent failures (#1332)
Dependency	@actions/cache upgraded to 6.2.0 (#1337)
Runtime	Still using node24 — no runner changes needed

---

Current Usage in This Repository

The pre-commit job in .github/workflows/ci.yml uses the action without any inputs:

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0

The upgrade itself is fully compatible — no changes are required.

---

Suggestions for New Functionality

Two inputs available in v7.0.0 (and prior) that aren't currently used, but would improve the workflow:

1. Pin Python version — Currently, the workflow uses whatever Python version is on the runner, which can vary across runner image updates. Adding an explicit version prevents silent surprises:

   - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
     with:
       python-version: '3.x'

   Alternatively, a .python-version file in the repo root would be picked up automatically.

2. Enable pip caching — The cache: 'pip' input would cache the pip package cache between runs, speeding up the pip install pre-commit step:

   - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
     with:
       python-version: '3.x'
       cache: 'pip'

   This requires a requirements.txt (or similar) to act as the cache key. Since only pre-commit is installed, a minimal requirements.txt with pre-commit could be added to the repo root, or the cache-dependency-path input could be set to .pre-commit-config.yaml.

Would you like me to apply either or both of these improvements to the workflow?

[oWretch]

@copilot Yes please apply both of those improvements

[Copilot]

@copilot Yes please apply both of those improvements

Done in the latest commit. The setup-python step in the pre-commit job now has:

- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
  with:
    python-version: '3.x'
    cache: 'pip'
    cache-dependency-path: .pre-commit-config.yaml

.pre-commit-config.yaml is used as the cache key file — any change to that file (e.g. hook version bumps) will invalidate the pip cache automatically.