build(deps): bump actions/setup-python from 6 to 7

[dependabot]

Bumps actions/setup-python from 6 to 7.

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-python#1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in actions/setup-python#1338
• Remove the pip-install input by @​gowridurgad in actions/setup-python#1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in actions/setup-python#1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in actions/setup-python#1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in actions/setup-python#1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in actions/setup-python#1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-python#1337

New Contributors

• @​lmvysakh made their first contribution in actions/setup-python#1335
• @​philip-gai made their first contribution in actions/setup-python#1337

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

• Add RHEL support and include Linux distro in cache keys by @​priyagupta108 in actions/setup-python#1323
• Fix pip cache error handling on Windows by @​priyagupta108 in actions/setup-python#1040

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in actions/setup-python#1281
• Upgrade actions dependencies by @​gowridurgad with @​Copilot in actions/setup-python#1303
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-python#1324
• Upgrade dependency versions and test workflow configuration by @​HarithaVattikuti in actions/setup-python#1322

Documentation

• Update advanced-usage.md by @​Dunky-Z in actions/setup-python#811

New Contributors

• @​gowridurgad with @​Copilot made their first contribution in actions/setup-python#1303
• @​jasongin made their first contribution in actions/setup-python#1324
• @​Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

• Upgrade dependencies to Node 24 compatible versions by @​salmanmkc in actions/setup-python#1259

... (truncated)

Commits

• 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)
• 4ab7e95 Merge pull request #1337 from actions/philip-gai/bump-actions-cache-6-2-0
• 0f3a009 Remove the pip-install input (#1336)
• f8cf429 Migrate to ESM and upgrade dependencies (#1330)
• 54baeea Validate and retry manifest fetch to prevent silent failures (#1332)
• c709277 Annotation code fix (#1335)
• 6849080 remove EOL Python versions and Bumps numpy text fixture (#1333)
• 0903b46 Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data (#1328)
• See full diff in compare view

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[sumithr]

Parked from the current dependency batch on blast radius: this PR changes runner setup across all 10 workflow files (#463 is 17 call sites, #552 is 16), so a regression removes the whole CI signal rather than one job. Neither is driven by a security advisory.

Deliberately left open rather than closed so Dependabot keeps it rebased. Tracked in #581 for evaluation as its own piece of work.

[sumithr]

Un-parked and verified. Fresh CI against current main: 33 passed, 0 failed.

v7 has two changes that could have bitten this repo. Both checked:

1. pip-install input removed (actions/setup-python#1336). Not used anywhere:

grep -rn 'pip-install' .github/workflows/   ->  NO

The only inputs we pass are python-version, cache: pip and cache-dependency-path: pyproject.toml.

2. EOL Python versions removed (actions/setup-python#1333). Our matrix spans 3.10 to 3.14, so this was the real risk. All edge jobs pass:

pass  pytest (ubuntu-latest / macos-latest / windows-latest, py3.10)
pass  pytest (ubuntu-latest / macos-latest / windows-latest, py3.14)

3. @actions/cache upgraded to 6.2.0 (actions/setup-python#1337). We rely on cache: pip in 8 places, and a silent cache regression shows up as slow CI rather than red CI, so it was checked directly in the lint run:

Cache hit for: setup-python-Linux-x64-24.04-Ubuntu-python-3.13.14-pip-0425a2e...
Cache restored successfully
Cache hit occurred on the primary key ..., not saving cache.

16 call sites across all 10 workflow files, all green.