chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	minor	v5.0.5 → v5.1.0
actions/checkout	action	patch	v7.0.0 → v7.0.1
actions/checkout	action	minor	v6.0.2 → v6.1.0
ni/python-actions	action	minor	v0.7.2 → v0.8.0
pypa/gh-action-pypi-publish	action	patch	v1.14.0 → v1.14.1	v1.14.2
zizmorcore/zizmor-action	action	minor	v0.5.7 → v0.6.0	v0.6.2 (+1)

---

Release Notes

actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in #​1775

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​2475
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2477
• Bump docker/build-push-action from 6.5.0 to 7.2.0 by @​dependabot[bot] in #​2478
• Bump docker/login-action from 3.3.0 to 4.2.0 by @​dependabot[bot] in #​2479
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2488
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​2476
• eslint 9 by @​dependabot[bot] in #​2474
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot[bot] in #​2499
• skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• escape values passed to --unset by @​aiqiaoy in #​2530

ni/python-actions (ni/python-actions)

v0.8.0: ni/python-actions v0.8.0

Compare Source

What's Changed

• setup-python: Remove custom python-version output logic (#​76)
  • This is no longer necessary because actions/setup-python now reports free-threading with a 't' suffix (e.g. 3.14.5t) and full PyPy version numbers (e.g. pypy3.11-v7.3.20).
• setup-poetry, analyze-project: Set continue-on-error to work around actions/cache failures (#​79)
  • This is a workaround for actions/cache#1754
• analyze-project: Add a use-cache input to disable caching (#​79)
• Testing
  • Set poetry min-release-age to 2 weeks for test projects (#​75)
  • Enable static analysis with zizmor (#​77)

Full Changelog: ni/python-actions@v0.7.3...v0.8.0

v0.7.3: ni/python-actions v0.7.3

Compare Source

What's Changed

• Update dependencies to avoid Node.js 20 deprecation warnings
  • jakebailey/pyright-action v3.0.2
• Testing
  • Update Python versions (drop pypy3.10, upgrade to final 3.14/3.14t)

Full Changelog: ni/python-actions@v0.7.2...v0.7.3

pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)

v1.14.1

Compare Source

This release was cut at EuroPython 2026 Sprints

🛠️ Internal Dependencies

@​adisivaprasad💰 helped get rid of the GitHub Actions runner warning about the old Node 20 runtime being used by updating actions/setup-python from v5.6.0 to v6.2.0 in #​408.

💪 New Contributors

• @​adisivaprasad made their first contribution in #​408
• @​jylenhof💰 followed up and reminded us to actually cut this release in #​413

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.0...v1.14.1

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

🙏 Special Thanks to @​jylenhof💰 for reminding me to work on this release!

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.0

Compare Source

zizmor 1.27.0 is now the default version used by the action.

What's Changed

• Fold Docker image pull output into a collapsed Actions log group by @​woodruffw with @​Copilot in #​132
• Readme: document missing inputs by @​staabm in #​130
• ci: block version sync workflow on forks by @​shaanmajid in #​129
• Sync zizmor versions by @​github-actions[bot] in #​137
• Add collect input by @​woodruffw in #​139

New Contributors

• @​woodruffw with @​Copilot made their first contribution in #​132
• @​staabm made their first contribution in #​130
• @​shaanmajid made their first contribution in #​129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

---

Configuration

📅 Schedule: (in timezone US/Central)

• Branch creation
  • Only on Sunday (* * * * 0)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[ni-github-admins]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

Test Results

   14 files     14 suites   16m 17s ⏱️
  224 tests   224 ✅ 0 💤 0 ❌
3 136 runs  3 136 ✅ 0 💤 0 ❌

Results for commit aa7d976.