chore(deps): update actions/setup-python action to v7

[kognic-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	major	v6.3.0 → v7.0.0

---

Release Notes

actions/setup-python (actions/setup-python)

v7.0.0

Compare Source

What's Changed

Enhancements

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in #​1330
• Pin SHA commits and update docs with latest versions by @​HarithaVattikuti in #​1338
• Remove the pip-install input by @​gowridurgad in #​1336

Bug Fix

• Fix to Classify stderr warning messages as warnings instead of errors in annotations by @​lmvysakh in #​1335
• Validate and retry manifest fetch to prevent silent failures by @​priyagupta108 in #​1332

Dependency Upgrade

• Bump certifi from 2020.6.20 to 2024.7.4 in /tests/data by @​dependabot in #​1328
• Remove EOL Python versions and Bumps numpy text fixture by @​priya-kinthali in #​1333
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in #​1337

New Contributors

• @​lmvysakh made their first contribution in #​1335
• @​philip-gai made their first contribution in #​1337

Full Changelog: actions/setup-python@v6...v7.0.0

---

Configuration

📅 Schedule: (in timezone Europe/Stockholm)

• Branch creation
  • "after 09:00 and before 15:00 on monday, tuesday, wednesday and thursday,after 09:00 and before 13:00 on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[kognic-github-app]

✅ Agent review approved this PR.

actions/setup-python v7.0.0 (released 2026-07-20, ~29 days before today) was reviewed. Release notes: ESM migration, removal of pip-install input (breaking), bug fixes, dep upgrades. The workflow only uses python-version: '3.14' — it never used pip-install, so the breaking change is not applicable. SHA-pinned to 5fda3b95a4ea91299a34e894583c3862153e4b97. Chatter: two issues found — one discusses pip auto-update supply chain concerns (design criticism, no active attack) and one about immutable releases; neither indicates compromise of v7.0.0. No injection attempts detected.

Sources:

• https://github.com/actions/setup-python/releases/tag/v7.0.0
• Forced pip update raises supply chain safety concerns (and is often useless) actions/setup-python#1346
• Use immutable GitHub release feature actions/setup-python#1299
• Remove the pip-install input actions/setup-python#1336

Package	Ecosystem	Source repo	Verification
actions/setup-python	npm	github.com/actions/setup-python	chatter+changelog