Bump the github-actions-dependency group across 1 directory with 7 updates

[dependabot]

Updates the requirements on actions/setup-python, actions/setup-node, docker/login-action, open-edge-platform/dlstreamer, dorny/paths-filter, astral-sh/setup-uv and open-edge-platform/orch-ci/.github/workflows/pre-merge.yml to permit the latest version.
Updates actions/setup-python from 4 to 6

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

• Upgrade to node 24 by @​salmanmkc in actions/setup-python#1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

• Add support for pip-version by @​priyagupta108 in actions/setup-python#1129
• Enhance reading from .python-version by @​krystof-k in actions/setup-python#787
• Add version parsing from Pipfile by @​aradkdj in actions/setup-python#1067

Bug fixes:

• Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @​aparnajyothi-y in actions/setup-python#1183
• Change missing cache directory error to warning by @​aparnajyothi-y in actions/setup-python#1182
• Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @​aparnajyothi-y in actions/setup-python#1122
• Include python version in PyPy python-version output by @​cdce8p in actions/setup-python#1110
• Update docs: clarification on pip authentication with setup-python by @​priya-kinthali in actions/setup-python#1156

Dependency updates:

• Upgrade idna from 2.9 to 3.7 in /tests/data by @​dependabot[bot] in actions/setup-python#843
• Upgrade form-data to fix critical vulnerabilities #182 & #183 by @​aparnajyothi-y in actions/setup-python#1163
• Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @​aparnajyothi-y in actions/setup-python#1165
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-python#1181
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in actions/setup-python#1095

New Contributors

• @​krystof-k made their first contribution in actions/setup-python#787
• @​cdce8p made their first contribution in actions/setup-python#1110
• @​aradkdj made their first contribution in actions/setup-python#1067

Full Changelog: actions/setup-python@v5...v6.0.0

v5.6.0

What's Changed

• Workflow updates related to Ubuntu 20.04 by @​aparnajyothi-y in actions/setup-python#1065
• Fix for Candidate Not Iterable Error by @​aparnajyothi-y in actions/setup-python#1082
• Upgrade semver and @​types/semver by @​dependabot in actions/setup-python#1091
• Upgrade prettier from 2.8.8 to 3.5.3 by @​dependabot in actions/setup-python#1046
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in actions/setup-python#1081

Full Changelog: actions/setup-python@v5...v5.6.0

v5.5.0

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in actions/setup-python#973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in actions/setup-python#1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in actions/setup-python#1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in actions/setup-python#1011 This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

... (truncated)

Commits

• a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
• bfe8cc5 Upgrade @​actions dependencies to Node 24 compatible versions (#1259)
• 4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
• 83679a8 Bump @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...
• bfc4944 Bump prettier from 3.5.3 to 3.6.2 (#1234)
• 97aeb3e Bump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)
• 443da59 Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...
• cfd55ca graalpy: add graalpy early-access and windows builds (#880)
• bba65e5 Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)
• 18566f8 Improve wording and "fix example" (remove 3.13) on testing against pre-releas...
• Additional commits viewable in compare view

Updates actions/setup-node from 4 to 6

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

• Limit automatic caching to npm, update workflows and documentation by @​priyagupta108 in actions/setup-node#1374

Dependency Upgrades

• Upgrade ts-jest from 29.1.2 to 29.4.1 and document breaking changes in v5 by @​dependabot[bot] in #1336
• Upgrade prettier from 2.8.8 to 3.6.2 by @​dependabot[bot] in #1334
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot[bot] in #1362

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

• Enhance caching in setup-node with automatic package manager detection by @​priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

• Upgrade action to use node24 by @​salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​octokit/request-error and @​actions/github by @​dependabot[bot] in actions/setup-node#1227
• Upgrade uuid from 9.0.1 to 11.1.0 by @​dependabot[bot] in actions/setup-node#1273
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in actions/setup-node#1295
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in actions/setup-node#1332
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-node#1345

New Contributors

• @​priya-kinthali made their first contribution in actions/setup-node#1348
• @​salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

• 6044e13 Docs: bump actions/checkout from v5 to v6 (#1468)
• 8e49463 Fix README typo (#1226)
• 621ac41 README.md: bump to latest released checkout version v6 (#1446)
• 2951748 Bump @​actions/cache to v5.0.1 (#1449)
• 21ddc7b Correct mirror option typos (#1442)
• 65d868f Update Documentation for Lockfile (#1454)
• 395ad32 Bump js-yaml from 3.14.1 to 3.14.2 (#1435)
• a4d2e2b Bump actions/checkout from 5 to 6 (#1439)
• b9b25d4 Remove always-auth configuration handling from action (#1436)
• 633bb92 Bump @​actions/cache from 4.0.3 to 4.1.0 (#1384)
• Additional commits viewable in compare view

Updates docker/login-action from 3.4.0 to 3.7.0

Release notes

Sourced from docker/login-action's releases.

v3.7.0

• Add scope input to set scopes for the authentication token by @​crazy-max in docker/login-action#912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in docker/login-action#914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in docker/login-action#911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in docker/login-action#915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

• Add registry-auth input for raw authentication to registries by @​crazy-max in docker/login-action#887
• Bump @​aws-sdk/client-ecr to 3.890.0 in docker/login-action#882 docker/login-action#890
• Bump @​aws-sdk/client-ecr-public to 3.890.0 in docker/login-action#882 docker/login-action#890
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/login-action#883
• Bump brace-expansion from 1.1.11 to 1.1.12 in docker/login-action#880
• Bump undici from 5.28.4 to 5.29.0 in docker/login-action#879
• Bump tmp from 0.2.3 to 0.2.4 in docker/login-action#881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

• Support dual-stack endpoints for AWS ECR by @​Spacefish @​crazy-max in docker/login-action#874 docker/login-action#876
• Bump @​aws-sdk/client-ecr to 3.859.0 in docker/login-action#860 docker/login-action#878
• Bump @​aws-sdk/client-ecr-public to 3.859.0 in docker/login-action#860 docker/login-action#878
• Bump @​docker/actions-toolkit from 0.57.0 to 0.62.1 in docker/login-action#870
• Bump form-data from 2.5.1 to 2.5.5 in docker/login-action#875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

Commits

• c94ce9f Merge pull request #915 from docker/dependabot/npm_and_yarn/lodash-4.17.23
• 8339c95 Merge pull request #912 from docker/scope
• c83e932 build(deps): bump lodash from 4.17.21 to 4.17.23
• b268aa5 chore: update generated content
• a603229 documentation for scope input
• 7567f92 Add scope input to set scopes for the authentication token
• 0567fa5 Merge pull request #914 from dphi/add-support-for-amazonaws.eu
• f6ef577 feat: add support for AWS European Sovereign Cloud ECR registries
• 916386b Merge pull request #911 from crazy-max/ensure-redact
• 5b3f94a chore: update generated content
• Additional commits viewable in compare view

Updates open-edge-platform/dlstreamer to fee915adb4d7bab30efc0b2029a531b1e752cb53

Changelog

Sourced from open-edge-platform/dlstreamer's changelog.

Deep Learning Streamer (DL Streamer) Pipeline Framework Release Notes

Deep Learning Streamer (DL Streamer) Pipeline Framework Release 2025.2.0

Intel® Deep Learning Streamer (Intel® DL Streamer) Pipeline Framework is a streaming media analytics framework, based on GStreamer* multimedia framework, for creating complex media analytics pipelines. It ensures pipeline interoperability and provides optimized media, and inference operations using Intel® Distribution of OpenVINO™ Toolkit Inference Engine backend, across Intel® architecture, CPU, discrete GPU, integrated GPU and NPU. The complete solution leverages:

• Open source GStreamer* framework for pipeline management

• GStreamer* plugins for input and output such as media files and real-time streaming from camera or network

• Video decode and encode plugins, either CPU optimized plugins or GPU-accelerated plugins based on VAAPI

• Deep Learning models converted from training frameworks TensorFlow*, Caffe* etc.

• The following elements in the Pipeline Framework repository:

  Element	Description
  gvaattachroi	Adds user-defined regions of interest to perform inference on, instead of full frame.
  gvaaudiodetect	Performs audio event detection using AclNet model.
  gvaaudiotranscribe	Performs audio transcription using OpenVino GenAI Whisper model.
  gvaclassify	Performs object classification. Accepts the ROI as an input and outputs classification results with the ROI metadata.
  gvadetect	Performs object detection on a full-frame or region of interest (ROI) using object detection models such as YOLOv4-v11, MobileNet SSD, Faster-RCNN etc. Outputs the ROI for detected objects.
  gvafpscounter	Measures frames per second across multiple streams in a single process.
  gvagenai	Performs inference with Vision Language Models using OpenVINO™ GenAI, accepts video and text prompt as an input, and outputs text description. It can be used to generate text summarization from video.
  gvainference	Runs deep learning inference on a full-frame or ROI using any model with an RGB or BGR input.
  gvametaaggregate	Aggregates inference results from multiple pipeline branches
  gvametaconvert	Converts the metadata structure to the JSON format.
  gvametapublish	Publishes the JSON metadata to MQTT or Kafka message brokers or files.
  gvamotiondetect	Performs lightweight motion detection on NV12 video frames and emits motion regions of interest (ROIs) as analytics metadata.
  gvapython	Provides a callback to execute user-defined Python functions on every frame. Can be used for metadata conversion, inference post-processing, and other tasks.
  gvarealsense	Provides integration with Intel RealSense cameras, enabling video and depth stream capture for use in GStreamer pipelines.
  gvatrack	Performs object tracking using zero-term, or imageless tracking algorithms. Assigns unique object IDs to the tracked objects.
  gvawatermark	Overlays the metadata on the video frame to visualize the inference results.

For the details on supported platforms, please refer to System Requirements. For installing Pipeline Framework with the prebuilt binaries or Docker* or to build the binaries from the open source, refer to Intel® DL Streamer Pipeline Framework installation guide.

New in this Release

Title	High-level description
Motion detection (gvamotiondetect)	Performs lightweight motion detection on NV12 video frames and emits motion regions of interest (ROIs) as analytics metadata.
Audio transcription (gvaaudiotranscribe)	Transcribes audio content with OpenVino GenAI Whisper model.
Gvagenai element added	Performs inference with Vision Language Models using OpenVINO™ GenAI, accepts video and text prompt as an input, and outputs text description. Models supported: MiniCPM-V, Gemma3, Phi-4-multimodal-instruct.
Deep SORT	Preview version of Deep SORT tracking algorithm in gvatrack element.
gvawatermark element support on GPU	Gvawatermark implementation extended about GPU support (CPU default).
Pipeline optimizer support	1st version of DL Streamer optimizer implementation added allowing end user finding the most FPS optimized pipeline.
GstAnalytics metadata support	Enabled GstAnalytics metadata support.
OpenVINO custom operations	Add support for OpenVINO custom operations.
D3D11 preprocessing enabled	Windows support extended about D3D11 preprocessing implementation.
UX, Stability && Performance fixes	• memory management fixes • automatically select pre-process-backend=va-surface-sharing for GPU • adjusting caps negotiations and preproc backend selection • removing deleted element from all shared reference lists. • using OpenCV preproc to convert sparse tensors to contiguous tensors • creation of new VADisplay ctx per each inference instance • remove need for dual va+opencv image pre-processing
Intel Core Ultra Panther Lake CPU/GPU support	Readiness for supporting Intel Core Ultra Panther Lake CPU/GPU.
OpenVINO update	Update to 2025.3 version.

... (truncated)

Commits

• See full diff in compare view

Updates dorny/paths-filter from 2.11.1 to 3.0.2

Release notes

Sourced from dorny/paths-filter's releases.

v3.0.2

What's Changed

• feat: add config parameter for predicate quantifier by @​petermetz in dorny/paths-filter#224

New Contributors

• @​petermetz made their first contribution in dorny/paths-filter#224

Full Changelog: dorny/paths-filter@v3...v3.0.2

v3.0.1

What's Changed

• Compare base and ref when token is empty by @​frouioui in dorny/paths-filter#133

New Contributors

• @​frouioui made their first contribution in dorny/paths-filter#133

Full Changelog: dorny/paths-filter@v3...v3.0.1

v3.0.0

What's Changed

• Update README.md: added real world usage example by @​iamtodor in dorny/paths-filter#178
• Update Node.js to version 20 by @​danielhjacobs in dorny/paths-filter#206
• Update to nodejs 20 by @​dorny in dorny/paths-filter#210
• chore(deps): bump checkout action to v4 and use setup-node to setup node and cache npm deps by @​chenrui333 in dorny/paths-filter#211
• Update all dependencies by @​dorny in dorny/paths-filter#215

New Contributors

• @​iamtodor made their first contribution in dorny/paths-filter#178
• @​danielhjacobs made their first contribution in dorny/paths-filter#206
• @​chenrui333 made their first contribution in dorny/paths-filter#211

Full Changelog: dorny/paths-filter@v2.11.1...v3.0.0

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v3.0.2

• Add config parameter for predicate quantifier

v3.0.1

• Compare base and ref when token is empty

v3.0.0

• Update to Node.js 20
• Update all dependencies

v2.11.1

• Update @​actions/core to v1.10.0 - Fixes warning about deprecated set-output
• Document need for pull-requests: read permission
• Updating to actions/checkout@v3

v2.11.0

• Set list-files input parameter as not required
• Update Node.js
• Fix incorrect handling of Unicode characters in exec()
• Use Octokit pagination
• Updates real world links

v2.10.2

• Fix getLocalRef() returns wrong ref

v2.10.1

• Improve robustness of change detection

v2.10.0

• Add ref input parameter
• Fix change detection in PR when pullRequest.changed_files is incorrect

v2.9.3

• Fix change detection when base is a tag

v2.9.2

• Fix fetching git history

v2.9.1

• Fix fetching git history + fallback to unshallow repo

v2.9.0

• Add list-files: csv format

v2.8.0

• Add count output variable
• Fix log grouping of changes

... (truncated)

Commits

• de90cc6 Update dist and CHANGELOG for v3.0.2
• cf89abd Merge pull request #224 from petermetz/feat-filter-predicate-quantifier
• f90d526 feat: add config parameter for predicate quantifier
• ebc4d7e Update CHANGELOG for v3.0.1
• 45f16f1 Merge pull request #133 from frouioui/main
• 5da0e4c Merge branch 'master'
• 1441771 Update README.md
• 0bc4621 Bump major version to v3
• 7267a85 Update CHANGELOG for v2.12.0
• e36f112 Merge pull request #215 from dorny/update-dependencies
• Additional commits viewable in compare view

Updates astral-sh/setup-uv from 6.1.0 to 7.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.3.0 🌈 New features and bug fixes for activate-environment

Changes

This release contains a few bug fixes and a new feature for the activate-environment functionality.

🐛 Bug fixes

• fix: warn instead of error when no python to cache @​eifinger (#762)
• fix: use --clear to create venv @​eifinger (#761)

🚀 Enhancements

• feat: add venv-path input for activate-environment @​eifinger (#746)

🧰 Maintenance

• chore: update known checksums for 0.10.0 @github-actions[bot] (#759)
• refactor: tilde-expansion tests as unittests and no self-hosted tests @​eifinger (#760)
• chore: update known checksums for 0.9.30 @github-actions[bot] (#756)
• chore: update known checksums for 0.9.29 @github-actions[bot] (#748)

📚 Documentation

• Fix punctuation @​pm-dev563 (#747)

⬆️ Dependency updates

• Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 @dependabot[bot] (#753)
• Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 @dependabot[bot] (#751)
• Bump actions/checkout from 6.0.1 to 6.0.2 @dependabot[bot] (#740)
• Bump release-drafter/release-drafter from 6.1.0 to 6.2.0 @dependabot[bot] (#743)
• Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @dependabot[bot] (#731)
• Bump actions/setup-node from 6.1.0 to 6.2.0 @dependabot[bot] (#738)

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:

• python-version: The Python version that was set (same content as existing UV_PYTHON)
• python-cache-hit: A boolean value to indicate the Python cache entry was found

While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the "normal" cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.

[!NOTE]
This release will invalidate caches that contain the Python binaries. This happens a single time.

🐛 Bug fixes

• chore: remove stray space from UV_PYTHON_INSTALL_DIR message @​akx (#720)

... (truncated)

Commits

• eac588a Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 (#753)
• a97c6cb Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#751)
• 02182fa fix: warn instead of error when no python to cache (#762)
• a3b3eae chore: update known checksums for 0.10.0 (#759)
• 78cebec fix: use --clear to create venv (#761)
• b6b8e2c refactor: tilde-expansion tests as unittests and no self-hosted tests (#760)
• e31bec8 chore: update known checksums for 0.9.30 (#756)
• db2b65e Bump actions/checkout from 6.0.1 to 6.0.2 (#740)
• 3511ff7 feat: add venv-path input for activate-environment (#746)
• 99b0f04 Fix punctuation (#747)
• Additional commits viewable in compare view

Updates open-edge-platform/orch-ci/.github/workflows/pre-merge.yml from 0.1.34 to 2026.0.8

Commits

• 467367d Version bump to 2026.0.8 (#549)
• fd47dfd [gha] Bump open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard....
• df9830d [gha] Bump open-edge-platform/orch-ci/.github/workflows/post-merge.yml from 2...
• 9873d71 [gha] Bump open-edge-platform/orch-ci/.github/workflows/notify-teams.yml from...
• 2eda9ab [gha] Bump open-edge-platform/orch-ci/.github/workflows/pre-merge.yml from 20...
• 6e5fe41 [gha] Bump open-edge-platform/orch-ci from 2026.0.6 to 2026.0.7 (#544)
• 00270c8 Version bump to 2026.0.8-dev (#543)
• 3f2ae03 Update VERSION (#542)
• bddadb7 Update GOTOOLS_VERSIONS PROTOC_GEN_CONNECT_OPENAPI_VER=0.23.0 (#541)
• 3bd0250 Skip .git from signing binaries (#540)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions