[dependabot]

Bumps the actions-deps group with 2 updates: j178/prek-action and pypa/cibuildwheel.

Updates j178/prek-action from 3.0.0 to 3.1.0

Release notes

Sourced from j178/prek-action's releases.

v3.1.0

What's Changed

• Add sha256 input for prek downloads by @​j178 in j178/prek-action#184
• Support latest-known for prek versions by @​j178 in j178/prek-action#193

Full Changelog: j178/prek-action@v3.0.2...v3.1.0

v3.0.2

What's Changed

• Preserve class names in bundled dist by @​TheKevJames in j178/prek-action#181
• Update known versions for prek 0.5.6 by @​j178 in j178/prek-action#182

New Contributors

• @​TheKevJames made their first contribution in j178/prek-action#181

Full Changelog: j178/prek-action@v3.0.1...v3.0.2

v3.0.1

What's Changed

• Update known versions for prek 0.4.12 by @​j178 in j178/prek-action#171
• Update known versions for prek 0.4.13 by @​j178 in j178/prek-action#172
• Update known versions for prek 0.4.14 by @​j178 in j178/prek-action#173
• Update known versions for prek 0.5.0 by @​j178 in j178/prek-action#174
• Update known versions for prek 0.5.1 by @​j178 in j178/prek-action#175
• Update known versions for prek 0.5.2 by @​j178 in j178/prek-action#176
• Update known versions for prek 0.5.3 by @​j178 in j178/prek-action#177
• Update known versions for prek 0.5.4 by @​j178 in j178/prek-action#178
• Update known versions for prek 0.5.5 by @​j178 in j178/prek-action#179

Full Changelog: j178/prek-action@v3.0.0...v3.0.1

Commits

• 44924fe Update dependency string-argv to ^0.4.0 (#194)
• 02957df Support latest-known for prek versions (#193)
• a8c7a75 Update dependency @​actions/cache to v6.3.0 (#188)
• 906445e Update npm dev dependencies (#189)
• d04c8ff Update actions/setup-node action to v7 (#190)
• 2239efc Update npm dev dependencies (major) (#192)
• 54d6013 Update pre-commit hook biomejs/pre-commit to v2.5.15 (#187)
• e6767ad Update GitHub Actions (#186)
• 681cfae Update dependency j178/prek-action to v3 (#191)
• 53f334a Improve README inputs and example headings (#185)
• Additional commits viewable in compare view

Updates pypa/cibuildwheel from 4.3.1 to 4.3.5

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.3.5

• 🐛 Stops passing the target build environment to the host virtualenv call, regression in v4.3.4 (#3023)
• 🛠 Updates dependencies and constraints (pyodide-build 0.39.3, CPython 3.15.2, etc) (#3024, #3027)
• 💼 Updates CI actions (#3025)

v4.3.4

• 🔐 Warns when a uv build frontend is selected and the host uv is older than 0.13.4, which still trusts the compromised eMudhra CA roots (#3021)
• 🔐 Uses cibuildwheel's CA bundle for pip on Python 3.9, where pip uses its bundled certifi, which still trusts the compromised eMudhra roots (#3017)
• 🔐 Uses cibuildwheel's CA bundle for pip on GraalPy, where truststore is not supported (#3019)
• 🔐 Uses cibuildwheel's CA bundle in Android, iOS, and Pyodide cross venvs, where pip uses the host's OpenSSL CA file (#3020)
• 🐛 Seeds build's isolated environment with the pinned pip on macOS and Windows, fixing GraalPy 25.0 builds (#3018)
• 💼 Stops Azure cache growth from restoreKeys (#3022)

v4.3.3

• 🔐 Updates manylinux images and pip to fix vulnerability to eMudhra.

v4.3.2

• 🔐 Updates our dependency pins to certifi==2026.10.19, following the eMudhra Intermediate CA Compromise. Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.

Changelog

Sourced from pypa/cibuildwheel's changelog.

v4.3.5

27 October 2026

• 🐛 Stops passing the target build environment to the host virtualenv call, regression in v4.3.4 (#3023)
• 🛠 Updates dependencies and constraints (pyodide-build 0.39.3, CPython 3.15.2, etc) (#3024, #3027)
• 💼 Updates CI actions (#3025)

v4.3.4

22 October 2026

• 🔐 Warns when a uv build frontend is selected and the host uv is older than 0.13.4, which still trusts the compromised eMudhra CA roots (#3021)
• 🔐 Uses cibuildwheel's CA bundle for pip on Python 3.9, where pip uses its bundled certifi, which still trusts the compromised eMudhra roots (#3017)
• 🔐 Uses cibuildwheel's CA bundle for pip on GraalPy, where truststore is not supported (#3019)
• 🔐 Uses cibuildwheel's CA bundle in Android, iOS, and Pyodide cross venvs, where pip uses the host's OpenSSL CA file (#3020)
• 🐛 Seeds build's isolated environment with the pinned pip on macOS and Windows, fixing GraalPy 25.0 builds (#3018)
• 💼 Stops Azure cache growth from restoreKeys (#3022)

v4.3.3

21 October 2026

• 🔐 Updates manylinux images and pip to fix vulnerability to eMudhra.

v4.3.2

20 October 2026

• 🔐 Updates our dependency pins to certifi==2026.10.19, following the eMudhra Intermediate CA Compromise. Linux builds may still be vulnerable through manylinux images - a patch release will soon follow if so.

Commits

• f9b966c Bump version: v4.3.5
• 7e3caea Update constraints (#3027)
• dff3913 chore(deps): bump the actions group with 2 updates (#3025)
• 2956993 fix: do not pass target environment to the host virtualenv call (#3023)
• 5d621c9 [Bot] Update dependencies (#3024)
• b9e566a Bump version: v4.3.4
• 0d511ac fix: use cibuildwheel's CA bundle in cross venvs (#3020)
• d6c9b11 feat: warn when uv is too old to have the eMudhra CA fix (#3021)
• 4463120 fix: seed build's isolated env with the pinned pip (#3018)
• 6d4911a fix: use cibuildwheel's CA bundle for pip on GraalPy (#3019)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions