#9927 ci: Bump the actions group with 3 updates Pull request opened by dependabot[bot] Bumps the actions group with 3 updates: hynek/build-and-inspect-python-package, github/codeql-action and codecov/codecov-action. Updates

hynek/build-and-inspect-python-package

from 2.14.0 to 2.17.0 Release notes Sourced from hynek/build-and-inspect-python-package's releases.

v2.17.0

Fixed

• The action now passes Zizmor in pedantic mode. #212

v2.16.0

Added

• New

include-free-threaded

input. When set to

'true'

, free-threaded Python siblings (for example,

3.14t

) are included in the version outputs for Python 3.14 and later, inserted inline after each matching version. #208

v2.15.0

Added

• The Python version used to build the package can now be configured using the

python-version

input. #191

Changelog Sourced from hynek/build-and-inspect-python-package's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

2.17.0 - 2026-03-27

Fixed

• The action now passes Zizmor in pedantic mode.#212

2.16.0 - 2026-03-26

Added

• New

include-free-threaded

input. When set to

'true'

, free-threaded Python siblings (for example,

3.14t

) are included in the version outputs for Python 3.14 and later, inserted inline after each matching version.#208

2.15.0 - 2026-03-19

Added

• The Python version used to build the package can now be configured using the

python-version

input.#191

Changed

• Pick Python version explictly instead of

"3.x"

to prevent incompatibily problems like #182 in the future.

2.14.0 - 2025-10-11

Changed

• Update tools such that they work on Python 3.14 (which is now

3.x

on GitHub Actions).#182

• The action now ignores

UV_PYTHON

coming from the outside.#184

... (truncated) Commits • `fe0a0fb` v2.17.0 • `53f0dea` Access ENV variable directly (#216) • `2ada6ad` Let Zizmor collect all • `c587d90` ci: make ci-supported-python.yml pass pedantic Zizmor • `e943986` ci: make ci.yml pass pedantic Zizmor • `dd13d25` Explain write • `3579e59` Switch Zizmor to pedantic • `969aa25` update: no permissions by default • `c9b743b` The action is, in fact, useless • `28c7e15` update: actually do persist dependencies • Additional commits viewable in compare view Updates

github/codeql-action

from 4.32.6 to 4.35.1 Release notes Sourced from github/codeql-action's releases.

v4.35.1

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

v4.35.0

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767

• Update default CodeQL bundle version to 2.25.1. #3773

v4.34.1

• Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

v4.34.0

• Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569

• We are rolling out improved incremental analysis to C/C++ analyses that use build mode

none

. We expect this rollout to be complete by the end of April 2026. #3584

• Update default CodeQL bundle version to 2.25.0. #3585

v4.33.0

• Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

To opt out of this change:

• Repositories owned by an organization: Create a custom repository property with the name …

meltano/meltano