Bump actions/setup-python from 6.2.0 to 6.3.0

[dependabot]

Bumps actions/setup-python from 6.2.0 to 6.3.0.

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

• Add RHEL support and include Linux distro in cache keys by @​priyagupta108 in actions/setup-python#1323
• Fix pip cache error handling on Windows by @​priyagupta108 in actions/setup-python#1040

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in actions/setup-python#1281
• Upgrade actions dependencies by @​gowridurgad with @​Copilot in actions/setup-python#1303
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-python#1324
• Upgrade dependency versions and test workflow configuration by @​HarithaVattikuti in actions/setup-python#1322

Documentation

• Update advanced-usage.md by @​Dunky-Z in actions/setup-python#811

New Contributors

• @​gowridurgad with @​Copilot made their first contribution in actions/setup-python#1303
• @​jasongin made their first contribution in actions/setup-python#1324
• @​Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

• ece7cb0 Fix pip cache error handling on Windows. (#1040)
• 1d18d7a Update advanced-usage.md (#811)
• d2b357a Update dependency versions and test workflow configuration (#1322)
• 8f639b1 Merge pull request #1324 from jasongin/update-actions-cache-5.1.0
• 6731c2b Resolve high-severity audit issues
• 0cb1a84 Add RHEL support and include Linux distro in cache keys (#1323)
• dc6eab6 Update dist
• 6f4b74b Strict equality
• fa8bde1 Bump @​actions/cache to 5.1.0, log cache write denied
• c8813ba Upgrade @​actions dependencies and update licenses (#1303)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

Review: Bump actions/setup-python from 6.2.0 to 6.3.0

This is a pure Dependabot version bump touching 7 GitHub Actions workflow files (black, check-development-dependencies, dependency-scan, flake8, isort, mypy, pylint). Each change is identical: uses: actions/setup-python@v6.2.0 → @v6.3.0.

Code Quality — ✅

• Consistent, mechanical change across all files; no formatting issues.
• No commented-out code, no logic changes, no defects possible in a pinned-version bump like this.
• .claude/CLAUDE.md not touched by this PR — nothing to flag there.

Testing — ✅ (N/A)

No new functions/endpoints; a CI Action version bump has no unit/integration test surface.

Documentation — ✅

• CHANGELOG.md not updated, but this matches established repo convention: checked git history (e.g. commit 5445390 — the analogous actions/checkout bump — and 4a8bed5, 25d982f) shows dependabot version bumps never touch CHANGELOG.md here. No action needed.
• No README/API doc changes needed for a CI tooling bump.

Security — ✅

• No credentials, no .lic files, no AQAAAD-prefixed strings in the diff.
• Bumping to a newer patch/minor version of actions/setup-python is a routine, low-risk update from GitHub's official action.

No issues found — this PR is safe to merge as-is.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[github-actions]

🤖 Claude Code Review

All 7 workflow files are consistently updated with no stragglers left on the old version. This is a routine Dependabot version bump for actions/setup-python (v6.2.0 → v6.3.0), and there are no defects to report.

Review

Code Quality

• ✅ Style conventions: Consistent YAML formatting, matches existing file style across all 7 files.
• ✅ No commented-out code: N/A, pure version bump.
• ✅ Meaningful names: N/A, no code identifiers involved.
• ✅ DRY: N/A.
• ✅ Defects: Verified all 7 workflow files (black.yaml, check-development-dependencies.yaml, dependency-scan.yaml, flake8.yaml, isort.yaml, mypy.yaml, pylint.yaml) consistently bump from v6.2.0 to v6.3.0 — no file was missed (confirmed via grep, all now on v6.3.0). This is a minor patch bump of a trusted first-party GitHub Action; low risk.
• ✅ CLAUDE.md: Not touched by this diff, nothing to assess.

Testing

• N/A — CI infrastructure version bump only, no application logic changed.

Documentation

• ✅ CHANGELOG.md: Not updated, but checked project history — none of the prior actions/setup-python bump PRs (980f4a6, bef1a41, 345fe47) touched CHANGELOG.md either, and the file hasn't recorded entries since 2021. Consistent with established project convention; not a defect.
• N/A for README/API docs/inline comments — no relevant surface changed.
• ✅ Markdown: no .md files changed in this diff.

Security

• ✅ No hardcoded credentials, no input validation/error handling/logging concerns applicable — this is a version pin change to a trusted GitHub-maintained action.
• ✅ No license files (.lic) or AQAAAD-prefixed strings present.

Verdict: ✅ Approve. Clean, mechanical, consistent dependency bump with no issues found.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter