Bump the github-actions group across 1 directory with 3 updates

[dependabot]

Bumps the github-actions group with 3 updates in the / directory: github/codeql-action, r-lib/actions and pypa/cibuildwheel.

Updates github/codeql-action from 3.28.10 to 3.28.13

Release notes

Sourced from github/codeql-action's releases.

v3.28.13

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

v3.28.11

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025

• Update default CodeQL bundle version to 2.20.6. #2793

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.28.13 - 24 Mar 2025

No user facing changes.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #2810

3.28.11 - 07 Mar 2025

• Update default CodeQL bundle version to 2.20.6. #2793

3.28.10 - 21 Feb 2025

• Update default CodeQL bundle version to 2.20.5. #2772
• Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #2768

3.28.9 - 07 Feb 2025

• Update default CodeQL bundle version to 2.20.4. #2753

3.28.8 - 29 Jan 2025

• Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #2744

3.28.7 - 29 Jan 2025

No user facing changes.

3.28.6 - 27 Jan 2025

• Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #2726

3.28.5 - 24 Jan 2025

• Update default CodeQL bundle version to 2.20.3. #2717

3.28.4 - 23 Jan 2025

No user facing changes.

... (truncated)

Commits

• 1b549b9 Merge pull request #2819 from github/update-v3.28.13-e0ea14102
• 82630c8 Update changelog for v3.28.13
• e0ea141 Merge pull request #2818 from github/cklin/empty-pr-diff-range
• b361a91 Diff-informed analysis: fix empty PR handling
• bd1d9ab Merge pull request #2816 from github/cklin/overlay-file-list
• b98ae6c Add overlay-database-utils tests
• 9825184 Add getFileOidsUnderPath() tests
• ac67cff Merge pull request #2817 from github/cklin/default-setup-diff-informed
• 9c674ba build: refresh js files
• d109dd5 Detect PR branches for Default Setup
• Additional commits viewable in compare view

Updates r-lib/actions from 2.11.2 to 2.11.3

Changelog

Sourced from r-lib/actions's changelog.

v2.11.3 (2025-03-24)

• [setup-r] now supports Rtools45, and installs it by default for R >= 4.5.0.

v2.11.2 (2025-02-19)

• [setup-r] now installs gfortran 14.2 for R 4.5.0 and later (#965).

• [setup-r] now does not use PPM on aarch64 Linux, because PPM does not have binary packages for aarch64 Linux, and it would send x86_64 binarires for aarch64 systems as well.

• [setup-r] now unlinks [email protected] on macOS silently, to avoid an error from the problem matchers (#973).

• [setup-r-dependencies] now supports dependencies: FALSE (@​eitsupi, #961).

• [setup-r-dependencies] now creates the R_LIBS_USER and R_LIBS_SITE library directories (#974).

• [setup-r-dependencies] now prints the R repo status (#975).

• Example workflows that use renv now call setup-r with r-version: renv, to install the R version declared in the renv.lock file.

v2.11.1 (2024-11-25)

• [setup-r] now unlinks the pre-installed pkg-config brew package to fix a clash with the new pkgconf package (#948).

v2.11.0 (2024-11-09)

• [setup-r-dependencies] parameter pak-version can now be repo or none as well. repo means that the action will install pak from the configured repositories, using install.packages(). repo is appropriate on systems that do not have access to our pak repository on GitHUb. none means that the action does not install pak at all. Use this if you want to install pak yourself manually. Set the R_LIB_FOR_PAK environment variable to point to the library where pak is installed.

• [setup-r] now has a working-directory parameter, to be able to specify the location of the renv.lock file (#922, @​calderonsamuel).

• Example check-like workflows now run on all pull requests, not only on pull requests against the main branch.

... (truncated)

Commits

• bd49c52 Update NEWS for v2.11.3 (#997)
• 12d8dd4 Run brew silently, warnings trigger annotations (#993)
• 41634eb Support Rtools45 (#992)
• c8e6990 codecov/codecov-action v4->v5 (#984)
• 813ef1c Fix typo in pak-version param description (#989)
• See full diff in compare view

Updates pypa/cibuildwheel from 2.22.0 to 2.23.1

Release notes

Sourced from pypa/cibuildwheel's releases.

v2.23.1

• ⚠️ Added warnings when the shorthand values manylinux1, manylinux2010, manylinux_2_24, and musllinux_1_1 are used to specify the images in linux builds. The shorthand to these (unmaintainted) images will be removed in v3.0. If you want to keep using these images, explicitly opt-in using the full image URL, which can be found in this file. (#2312)
• 🛠 Dependency updates, including a manylinux update which fixes an issue with rustup. (#2315)

v2.23.0

• ✨ Adds official support for the new GitHub Actions Arm runners. In fact these worked out-of-the-box, now we include them in our tests and example configs. (#2135 via #2281)
• ✨ Adds support for building PyPy 3.11 wheels (#2268 via #2281)
• 🛠 Adopts the beta pypa/manylinux image for armv7l builds (#2269 via #2281)
• 🛠 Dependency updates, including Pyodide 0.27 (#2117 and #2281)

Changelog

Sourced from pypa/cibuildwheel's changelog.

---

title: Changelog

Changelog

v2.23.1

15 March 2025

• ⚠️ Added warnings when the shorthand values manylinux1, manylinux2010, manylinux_2_24, and musllinux_1_1 are used to specify the images in linux builds. The shorthand to these (unmaintainted) images will be removed in v3.0. If you want to keep using these images, explicitly opt-in using the full image URL, which can be found in this file. (#2312)
• 🛠 Dependency updates, including a manylinux update which fixes an issue with rustup. (#2315)

v2.23.0

1 March 2025

• ✨ Adds official support for the new GitHub Actions Arm runners. In fact these worked out-of-the-box, now we include them in our tests and example configs. (#2135 via #2281)
• ✨ Adds support for building PyPy 3.11 wheels (#2268 via #2281)
• 🛠 Adopts the beta pypa/manylinux image for armv7l builds (#2269 via #2281)
• 🛠 Dependency updates, including Pyodide 0.27 (#2117 and #2281)

v2.22.0

23 November 2024

• 🌟 Added a new CIBW_ENABLE/enable feature that replaces CIBW_FREETHREADED_SUPPORT/free-threaded-support and CIBW_PRERELEASE_PYTHONS with a system that supports both. In cibuildwheel 3, this will also include a PyPy setting and the deprecated options will be removed. (#2048)
• 🌟 Dependency groups are now supported for tests. Use CIBW_TEST_GROUPS/test-groups to specify groups in [dependency-groups] for testing. (#2063)
• 🌟 Support for the experimental Ubuntu-based ARMv7l manylinux image (#2052)
• ✨ Show a warning when cibuildwheel is run from Python 3.10 or older; cibuildwheel 3.0 will require Python 3.11 or newer as host (#2050)
• 🐛 Fix issue with stderr interfering with checking the docker version (#2074)
• 🛠 Python 3.9 is now used in CIBW_BEFORE_ALL/before-all on linux, replacing 3.8, which is now EoL (#2043)
• 🛠 Error messages for producing a pure-Python wheel are slightly more informative (#2044)
• 🛠 Better error when uname -m fails on ARM (#2049)
• 🛠 Better error when repair fails and docs for abi3audit on Windows (#2058)
• 🛠 Better error when manylinux-interpreters ensure fails (#2066)
• 🛠 Update Pyodide to 0.26.4, and adapt to the unbundled pyodide-build (now 0.29) (#2090)
• 🛠 Now cibuildwheel uses dependency-groups for development dependencies (#2064, #2085)
• 📚 Docs updates and tidy ups (#2061, #2067, #2072)

v2.21.3

9 October 2024

• 🛠 Update CPython 3.13 to 3.13.0 final release (#2032)
• 📚 Docs updates and tidy ups (#2035)

v2.21.2

... (truncated)

Commits

• 42728e8 Bump version: v2.23.1
• 6e1527b Fix unit test when other warnings are present
• c25fe60 fix: image deprecation warning (#2314)
• a880bf5 fix: warn on deprecated images being set (#2312)
• c087d85 Update dependencies
• 6cccd09 Bump version: v2.23.0
• aa1534d chore(2.x): update dependencies (#2294)
• ee23dd1 fix(test): implement retry for test_container_removed
• 55037e9 ci/doc: move azure macOS build to macOS-13 (#2101)
• 8874ee2 Remove specific Python versions from the update-dependencies job
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[robomics]

@dependabot rebase

[robomics]

@dependabot recreate