From f79bd3f2494757efceda1fb60a47e97fca255762 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 30 Mar 2025 17:07:55 -0400
Subject: [PATCH 01/34] .

---
 .github/workflows/build.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index aece4ac..c3dbee4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -26,9 +26,6 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
-    - name: Prework
-      run: touch pyproject.toml
-
     - name: Setup Python
       uses: actions-ext/python/setup@main
       with:

From 7d38fa0efaa24aa8f05cd506a58fd99e0d58f467 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 30 Mar 2025 17:08:41 -0400
Subject: [PATCH 02/34] remove matrix from ci

---
 .github/workflows/build.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c3dbee4..e7a6bff 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -17,11 +17,7 @@ permissions:
 
 jobs:
   build:
-    runs-on: ${{ matrix.os }}
-    strategy:
-      matrix:
-        os: [ubuntu-latest]
-        python-version: [3.11]
+    runs-on: ubuntu-latest
 
     steps:
     - uses: actions/checkout@v4

From 6103d49492693d5c78476209ea102937688c93f7 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 30 Mar 2025 17:11:06 -0400
Subject: [PATCH 03/34] restore prework in ci

---
 .github/workflows/build.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e7a6bff..75414ef 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -22,6 +22,9 @@ jobs:
     steps:
     - uses: actions/checkout@v4
 
+    - name: Prework
+      run: touch pyproject.toml
+
     - name: Setup Python
       uses: actions-ext/python/setup@main
       with:

From 03107c223bbe0f6ca2a3bdfcc3929d2c3b2900a5 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 30 Mar 2025 19:26:53 -0400
Subject: [PATCH 04/34] format readme

---
 README.md | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index a7732c1..6b04a96 100644
--- a/README.md
+++ b/README.md
@@ -1,11 +1,12 @@
 # python
+
 Helper actions for Python projects
 
-| Name | Action Reference | Description |
-|:-----|:-----------------|:------------|
-| [setup](./setup) | actions-ext/python/setup | Setup Python with `pip` caching and `uv` |
-| [setup-cibuildwheel](./setup-cibuildwheel) | actions-ext/python/setup-cibuildwheel | Setup [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/) and caching |
-| [setup-cibuildwheel-cache](./setup-cibuildwheel-cache) | actions-ext/python/setup-cibuildwheel-cache | Setup [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/) caching |
-| [run-cibuildwheel](./run-cibuildwheel) | actions-ext/python/run-cibuildwheel | Run [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/) |
-| [upload-dist](./upload-dist) | actions-ext/python/upload-dist | Upload a python sdist or wheel |
-| [download-dist](./download-dist) | actions-ext/python/download-dist | Download and install a python sdist or wheel |
+| Name                                                   | Action Reference                              | Description                                                                        |
+| :----------------------------------------------------- | :-------------------------------------------- | :--------------------------------------------------------------------------------- |
+| [setup](./setup)                                       | `actions-ext/python/setup`                    | Setup Python with `pip` caching and `uv`                                           |
+| [setup-cibuildwheel](./setup-cibuildwheel)             | `actions-ext/python/setup-cibuildwheel`       | Setup [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/) and caching |
+| [setup-cibuildwheel-cache](./setup-cibuildwheel-cache) | `actions-ext/python/setup-cibuildwheel-cache` | Setup [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/) caching     |
+| [run-cibuildwheel](./run-cibuildwheel)                 | `actions-ext/python/run-cibuildwheel`         | Run [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/)               |
+| [upload-dist](./upload-dist)                           | `actions-ext/python/upload-dist`              | Upload a python sdist or wheel                                                     |
+| [download-dist](./download-dist)                       | `actions-ext/python/download-dist`            | Download and install a python sdist or wheel                                       |

From 7e56fa3d2e4959d247c66a21bc534aed4fad6e09 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Apr 2025 15:30:23 -0400
Subject: [PATCH 05/34] Add uv option as input

---
 setup/action.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/setup/action.yml b/setup/action.yml
index 52bcd3f..77d4c82 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -11,10 +11,20 @@ inputs:
       - '3.11'
       - '3.12'
     default: '3.11'
+  uv:
+    type: boolean
+    description: "Use uv to install python packages"
+    default: true
 
 runs:
   using: 'composite'
   steps:
+    - name: Set up Python ${{ inputs.version }}
+      uses: actions/setup-python@v4
+      with:
+        python-version: ${{ inputs.version }}
+      if: ${{ inputs.uv == 'true' }}
+
     - name: Set up Python ${{ inputs.version }}
       uses: actions/setup-python@v4
       with:
@@ -23,6 +33,7 @@ runs:
         cache-dependency-path: |
           "**/pyproject.toml"
           "**/setup.py"
+      if: ${{ inputs.uv != 'true' }}
 
     - name: Install uv
       uses: astral-sh/setup-uv@v5
@@ -30,7 +41,9 @@ runs:
         enable-cache: true
         ignore-nothing-to-cache: true
         prune-cache: false
+      if: ${{ inputs.uv == 'true' }}
 
     - name: Setup uv to use system python without extra flags
       shell: bash
       run: echo "UV_SYSTEM_PYTHON=1" >> $GITHUB_ENV
+      if: ${{ inputs.uv == 'true' }}

From 6fd7f852577ba384d8404924753414578e2335b5 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Apr 2025 15:39:05 -0400
Subject: [PATCH 06/34] Make input a string explicitly

---
 setup/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup/action.yml b/setup/action.yml
index 77d4c82..a8d9756 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -14,7 +14,7 @@ inputs:
   uv:
     type: boolean
     description: "Use uv to install python packages"
-    default: true
+    default: 'true'
 
 runs:
   using: 'composite'

From 4da92072cec404b4ec06bf0e22e51f519762195f Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Apr 2025 15:43:10 -0400
Subject: [PATCH 07/34] Bump to setup-python v5

---
 setup/action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup/action.yml b/setup/action.yml
index a8d9756..57b59e6 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -20,13 +20,13 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.version }}
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.version }}
         cache: "pip"

From ee5b4fa0ff37f9e48a8c32362bb5f62818190055 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 12 Apr 2025 11:32:42 -0400
Subject: [PATCH 08/34] Install uv as python package

---
 setup/action.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/setup/action.yml b/setup/action.yml
index 57b59e6..c635b67 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -47,3 +47,8 @@ runs:
       shell: bash
       run: echo "UV_SYSTEM_PYTHON=1" >> $GITHUB_ENV
       if: ${{ inputs.uv == 'true' }}
+
+    - name: Install uv as a python package for use of `python -m uv`
+      shell: bash
+      run: python -m pip install uv
+      if: ${{ inputs.uv == 'true' }}

From 06b927febc28a96b144e9ba2b57d808c4445af0e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 Aug 2025 06:49:47 +0000
Subject: [PATCH 09/34] Bump actions/checkout from 4 to 5

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 75414ef..05fc78d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Prework
       run: touch pyproject.toml

From 11d143c2b8cde54c9f0c9ff349c1c0c326d3ccce Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:05:19 -0400
Subject: [PATCH 10/34] Add support for 13, 13t, 14, 14t

---
 .github/workflows/build.yml   | 7 +++++--
 setup-cibuildwheel/action.yml | 5 ++++-
 setup/action.yml              | 6 ++++++
 3 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 05fc78d..4b110af 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -18,6 +18,9 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13", "3.13t", "3.14", "3.14t"]
 
     steps:
     - uses: actions/checkout@v5
@@ -28,12 +31,12 @@ jobs:
     - name: Setup Python
       uses: actions-ext/python/setup@main
       with:
-        version: '3.11'
+        version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel
       uses: actions-ext/python/setup-cibuildwheel@main
       with:
-        version: '3.11'
+        version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel caching
       uses: actions-ext/python/setup-cibuildwheel-cache@main
diff --git a/setup-cibuildwheel/action.yml b/setup-cibuildwheel/action.yml
index a3a9efb..b6184d7 100644
--- a/setup-cibuildwheel/action.yml
+++ b/setup-cibuildwheel/action.yml
@@ -10,7 +10,10 @@ inputs:
       - '3.10'
       - '3.11'
       - '3.12'
-    default: '3.9'
+      - '3.13'
+      - '3.13t'
+      - '3.14'
+    default: '3.11'
 
 runs:
   using: 'composite'
diff --git a/setup/action.yml b/setup/action.yml
index c635b67..9d06718 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -10,6 +10,10 @@ inputs:
       - '3.10'
       - '3.11'
       - '3.12'
+      - '3.13'
+      - '3.13t'
+      - '3.14'
+      - '3.14t'
     default: '3.11'
   uv:
     type: boolean
@@ -22,6 +26,7 @@ runs:
     - name: Set up Python ${{ inputs.version }}
       uses: actions/setup-python@v5
       with:
+        allow-prereleases: true
         python-version: ${{ inputs.version }}
       if: ${{ inputs.uv == 'true' }}
 
@@ -29,6 +34,7 @@ runs:
       uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.version }}
+        allow-prereleases: true
         cache: "pip"
         cache-dependency-path: |
           "**/pyproject.toml"

From 9da94d2058c3b0cee07a98a01816d738087f2bf1 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:17:02 -0400
Subject: [PATCH 11/34] allow prereleases

---
 setup/action.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/setup/action.yml b/setup/action.yml
index c635b67..ee5ced8 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -23,12 +23,14 @@ runs:
       uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.version }}
+        allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
       uses: actions/setup-python@v5
       with:
         python-version: ${{ inputs.version }}
+        allow-prereleases: true
         cache: "pip"
         cache-dependency-path: |
           "**/pyproject.toml"

From cf85e9b1959c754b8c0f7be5c09b014d93cdf5fb Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:20:11 -0400
Subject: [PATCH 12/34] remove duplicate

---
 setup/action.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/setup/action.yml b/setup/action.yml
index e9b0d22..704a345 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -26,7 +26,6 @@ runs:
     - name: Set up Python ${{ inputs.version }}
       uses: actions/setup-python@v5
       with:
-        allow-prereleases: true
         python-version: ${{ inputs.version }}
         allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}

From 83a1165ba655f17c000635111ef20fbc0dd364a0 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:22:07 -0400
Subject: [PATCH 13/34] Setup python version

---
 setup/action.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/setup/action.yml b/setup/action.yml
index 704a345..b85d1b4 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -47,6 +47,8 @@ runs:
         enable-cache: true
         ignore-nothing-to-cache: true
         prune-cache: false
+        with:
+          python-version: ${{ inputs.version }}
       if: ${{ inputs.uv == 'true' }}
 
     - name: Setup uv to use system python without extra flags

From 6ccb96d6167c475fd711997aec23278a5b78dd4e Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:23:03 -0400
Subject: [PATCH 14/34] Setup python version

---
 setup/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup/action.yml b/setup/action.yml
index b85d1b4..65a6437 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -48,7 +48,7 @@ runs:
         ignore-nothing-to-cache: true
         prune-cache: false
         with:
-          python-version: ${{ inputs.version }}
+          python-version: "${{ inputs.version }}"
       if: ${{ inputs.uv == 'true' }}
 
     - name: Setup uv to use system python without extra flags

From cd31d83ca57ee65df087c8375d24d9b0c936b499 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:23:29 -0400
Subject: [PATCH 15/34] Setup python version

---
 setup/action.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/setup/action.yml b/setup/action.yml
index 65a6437..1bda7e3 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -44,11 +44,10 @@ runs:
     - name: Install uv
       uses: astral-sh/setup-uv@v5
       with:
+        python-version: "${{ inputs.version }}"
         enable-cache: true
         ignore-nothing-to-cache: true
         prune-cache: false
-        with:
-          python-version: "${{ inputs.version }}"
       if: ${{ inputs.uv == 'true' }}
 
     - name: Setup uv to use system python without extra flags

From 9c1420b8f33749206d2c0333ba8fcf903af05d30 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:25:02 -0400
Subject: [PATCH 16/34] ensure pip and uv are both installed

---
 setup/action.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/setup/action.yml b/setup/action.yml
index 1bda7e3..d36ad32 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -57,5 +57,7 @@ runs:
 
     - name: Install uv as a python package for use of `python -m uv`
       shell: bash
-      run: python -m pip install uv
+      run: |
+        uv pip install pip
+        python -m pip install uv
       if: ${{ inputs.uv == 'true' }}

From 19e44f8124718c28660ccbd7e4df7173230f02ca Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sat, 23 Aug 2025 17:26:42 -0400
Subject: [PATCH 17/34] ensure pip and uv are both installed

---
 setup/action.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/setup/action.yml b/setup/action.yml
index d36ad32..78d7050 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -42,7 +42,7 @@ runs:
       if: ${{ inputs.uv != 'true' }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v5
+      uses: astral-sh/setup-uv@v6
       with:
         python-version: "${{ inputs.version }}"
         enable-cache: true
@@ -57,7 +57,5 @@ runs:
 
     - name: Install uv as a python package for use of `python -m uv`
       shell: bash
-      run: |
-        uv pip install pip
-        python -m pip install uv
+      run: python -m pip install uv
       if: ${{ inputs.uv == 'true' }}

From 9000ad5d211c88202bd5c06969a52c26c605d4af Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 8 Sep 2025 17:55:14 -0400
Subject: [PATCH 18/34] Bump setup-python to v6

---
 setup/action.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup/action.yml b/setup/action.yml
index 78d7050..a4f1d30 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -24,14 +24,14 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true

From 14ab2923a14b6391d0db368351786d972bfddbbb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Nov 2025 04:18:55 +0000
Subject: [PATCH 19/34] Bump actions/checkout from 5 to 6

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4b110af..2443e19 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13", "3.13t", "3.14", "3.14t"]
 
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
 
     - name: Prework
       run: touch pyproject.toml

From 6bb89211479d157a956fec56a2dd2f0e909de647 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 12 Apr 2026 12:32:59 -0400
Subject: [PATCH 20/34] Add test-sdist and test-wheel steps

---
 README.md             |  2 ++
 test-sdist/action.yml | 18 ++++++++++++++++++
 test-wheel/action.yml | 18 ++++++++++++++++++
 3 files changed, 38 insertions(+)
 create mode 100644 test-sdist/action.yml
 create mode 100644 test-wheel/action.yml

diff --git a/README.md b/README.md
index 6b04a96..29a1623 100644
--- a/README.md
+++ b/README.md
@@ -10,3 +10,5 @@ Helper actions for Python projects
 | [run-cibuildwheel](./run-cibuildwheel)                 | `actions-ext/python/run-cibuildwheel`         | Run [`cibuildwheel`](https://cibuildwheel.readthedocs.io/en/stable/)               |
 | [upload-dist](./upload-dist)                           | `actions-ext/python/upload-dist`              | Upload a python sdist or wheel                                                     |
 | [download-dist](./download-dist)                       | `actions-ext/python/download-dist`            | Download and install a python sdist or wheel                                       |
+| [test-wheel](./test-wheel)                             | `actions-ext/python/test-wheel`               | Install a wheel in a fresh venv and verify module import                           |
+| [test-sdist](./test-sdist)                             | `actions-ext/python/test-sdist`               | Install an sdist in a fresh venv and verify module import                          |
diff --git a/test-sdist/action.yml b/test-sdist/action.yml
new file mode 100644
index 0000000..424c72d
--- /dev/null
+++ b/test-sdist/action.yml
@@ -0,0 +1,18 @@
+name: Test Sdist Install
+description: 'Install an sdist from dist/ in a fresh venv and verify a module can be imported'
+
+inputs:
+  module:
+    description: "Python module name to test importing"
+    required: true
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Test sdist install
+      shell: bash
+      run: |
+        python -m venv .test-sdist
+        VENV_BIN=".test-sdist/bin"; [ -d ".test-sdist/Scripts" ] && VENV_BIN=".test-sdist/Scripts"
+        "$VENV_BIN/pip" install dist/*.tar.gz
+        "$VENV_BIN/python" -c "import ${{ inputs.module }}"
diff --git a/test-wheel/action.yml b/test-wheel/action.yml
new file mode 100644
index 0000000..b516c46
--- /dev/null
+++ b/test-wheel/action.yml
@@ -0,0 +1,18 @@
+name: Test Wheel Install
+description: 'Install a wheel from dist/ in a fresh venv and verify a module can be imported'
+
+inputs:
+  module:
+    description: "Python module name to test importing"
+    required: true
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Test wheel install
+      shell: bash
+      run: |
+        python -m venv .test-wheel
+        VENV_BIN=".test-wheel/bin"; [ -d ".test-wheel/Scripts" ] && VENV_BIN=".test-wheel/Scripts"
+        "$VENV_BIN/pip" install dist/*.whl
+        "$VENV_BIN/python" -c "import ${{ inputs.module }}"
\ No newline at end of file

From c61f9d71284f987d9727ce61b6bd27143fd1d625 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Sun, 12 Apr 2026 13:04:00 -0400
Subject: [PATCH 21/34] .

---
 test-sdist/action.yml | 2 +-
 test-wheel/action.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/test-sdist/action.yml b/test-sdist/action.yml
index 424c72d..06f4fdb 100644
--- a/test-sdist/action.yml
+++ b/test-sdist/action.yml
@@ -14,5 +14,5 @@ runs:
       run: |
         python -m venv .test-sdist
         VENV_BIN=".test-sdist/bin"; [ -d ".test-sdist/Scripts" ] && VENV_BIN=".test-sdist/Scripts"
-        "$VENV_BIN/pip" install dist/*.tar.gz
+        for sdist in dist/*.tar.gz; do "$VENV_BIN/pip" install "$sdist"; done
         "$VENV_BIN/python" -c "import ${{ inputs.module }}"
diff --git a/test-wheel/action.yml b/test-wheel/action.yml
index b516c46..0d65511 100644
--- a/test-wheel/action.yml
+++ b/test-wheel/action.yml
@@ -14,5 +14,5 @@ runs:
       run: |
         python -m venv .test-wheel
         VENV_BIN=".test-wheel/bin"; [ -d ".test-wheel/Scripts" ] && VENV_BIN=".test-wheel/Scripts"
-        "$VENV_BIN/pip" install dist/*.whl
+        for whl in dist/*.whl; do "$VENV_BIN/pip" install "$whl"; done
         "$VENV_BIN/python" -c "import ${{ inputs.module }}"
\ No newline at end of file

From c1e57dc1992da03e45353b86658b1ecbfba70b80 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Wed, 20 May 2026 17:35:06 -0400
Subject: [PATCH 22/34] Pin up/down and setup-python actions

---
 .github/dependabot.yml      | 2 +-
 .github/workflows/build.yml | 2 +-
 download-dist/action.yml    | 2 +-
 setup/action.yml            | 4 ++--
 upload-dist/action.yml      | 4 ++--
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 900be67..72a1ca7 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -3,5 +3,5 @@ updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "monthly"
     labels: []
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2443e19..a5d3ee8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13", "3.13t", "3.14", "3.14t"]
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
     - name: Prework
       run: touch pyproject.toml
diff --git a/download-dist/action.yml b/download-dist/action.yml
index f3cc4aa..783a809 100644
--- a/download-dist/action.yml
+++ b/download-dist/action.yml
@@ -25,7 +25,7 @@ runs:
   using: 'composite'
   steps:
     - name: Download artifact (${{ inputs.kind }})
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
       with:
         name: ${{ inputs.kind }}
         path: ./dist
diff --git a/setup/action.yml b/setup/action.yml
index a4f1d30..fd2b535 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -24,14 +24,14 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
diff --git a/upload-dist/action.yml b/upload-dist/action.yml
index b7d49aa..ce42f14 100644
--- a/upload-dist/action.yml
+++ b/upload-dist/action.yml
@@ -13,14 +13,14 @@ runs:
   using: 'composite'
   steps:
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.whl'
       if: ${{ inputs.kind == 'wheel' }}
 
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.tar.gz'

From fab291cfd887d524e7deda39d2ceb602daf808a5 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Fri, 5 Jun 2026 12:02:04 -0400
Subject: [PATCH 23/34] .

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 .gitignore

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..365dfea
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+AGENTS.md
+ROADMAP.md

From 6ae1c4de7349bab7176af5edfc7370a9826f0f03 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 04:34:02 +0000
Subject: [PATCH 24/34] Bump actions/checkout from 6.0.2 to 7.0.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a5d3ee8..5764e1c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13", "3.13t", "3.14", "3.14t"]
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
 
     - name: Prework
       run: touch pyproject.toml

From 483e9bc27293f10c0c798fa01ff9bc0518c71b02 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 10:38:03 -0400
Subject: [PATCH 25/34] pin sub actions

---
 .github/workflows/build.yml         | 6 +++---
 run-cibuildwheel/action.yml         | 2 +-
 setup-cibuildwheel-cache/action.yml | 2 +-
 setup-cibuildwheel/action.yml       | 2 +-
 setup/action.yml                    | 7 ++++---
 upload-dist/action.yml              | 4 ++--
 6 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5764e1c..28b5741 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -29,14 +29,14 @@ jobs:
       run: touch pyproject.toml
 
     - name: Setup Python
-      uses: actions-ext/python/setup@main
+      uses: ./python/setup
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel
-      uses: actions-ext/python/setup-cibuildwheel@main
+      uses: ./python/setup-cibuildwheel
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel-cache@main
+      uses: ./python/setup-cibuildwheel-cache
diff --git a/run-cibuildwheel/action.yml b/run-cibuildwheel/action.yml
index 5ffb747..bde0809 100644
--- a/run-cibuildwheel/action.yml
+++ b/run-cibuildwheel/action.yml
@@ -27,7 +27,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel@v1
+      uses: ./python/setup-cibuildwheel
       with:
         version: ${{ inputs.version }}
 
diff --git a/setup-cibuildwheel-cache/action.yml b/setup-cibuildwheel-cache/action.yml
index 0453416..196c861 100644
--- a/setup-cibuildwheel-cache/action.yml
+++ b/setup-cibuildwheel-cache/action.yml
@@ -30,7 +30,7 @@ runs:
       shell: python
 
     - name: Cache cibuildwheel tools
-      uses: actions/cache@v3
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: ${{ steps.cibuildwheel-cache.outputs.dir }}
         key: ${{ runner.os }}-cibuildwheel-${{ inputs.version }}
diff --git a/setup-cibuildwheel/action.yml b/setup-cibuildwheel/action.yml
index b6184d7..c092819 100644
--- a/setup-cibuildwheel/action.yml
+++ b/setup-cibuildwheel/action.yml
@@ -19,7 +19,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: actions-ext/python/setup-cibuildwheel-cache@v1
+      uses: ./python/setup-cibuildwheel-cache
       with:
         version: ${{ inputs.version }}
 
diff --git a/setup/action.yml b/setup/action.yml
index fd2b535..2230e73 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -24,14 +24,15 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
       if: ${{ inputs.uv == 'true' }}
 
     - name: Set up Python ${{ inputs.version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: ${{ inputs.version }}
         allow-prereleases: true
@@ -42,7 +43,7 @@ runs:
       if: ${{ inputs.uv != 'true' }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v6
+      uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
       with:
         python-version: "${{ inputs.version }}"
         enable-cache: true
diff --git a/upload-dist/action.yml b/upload-dist/action.yml
index ce42f14..b34c5e1 100644
--- a/upload-dist/action.yml
+++ b/upload-dist/action.yml
@@ -13,14 +13,14 @@ runs:
   using: 'composite'
   steps:
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.whl'
       if: ${{ inputs.kind == 'wheel' }}
 
     - name: Upload artifact (${{ inputs.kind }})
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ inputs.kind }}
         path: 'dist/*.tar.gz'

From 3327753a563b380e4efc5cb91a548301e68c2e64 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 10:56:27 -0400
Subject: [PATCH 26/34] update docs

---
 download-dist/README.md            | 2 +-
 run-cibuildwheel/README.md         | 2 +-
 setup-cibuildwheel-cache/README.md | 2 +-
 setup-cibuildwheel/README.md       | 2 +-
 setup/README.md                    | 2 +-
 upload-dist/README.md              | 4 ++--
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/download-dist/README.md b/download-dist/README.md
index ffafac1..e9440b4 100644
--- a/download-dist/README.md
+++ b/download-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will download and install a `cp311` wheel for `m
 
 ```yaml
 - name: Download wheels
-  uses: actions-ext/python/download-dist@v1
+  uses: actions-ext/python/download-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     version: '3.11'
     kind: 'wheel'
diff --git a/run-cibuildwheel/README.md b/run-cibuildwheel/README.md
index 39f5d54..83db590 100644
--- a/run-cibuildwheel/README.md
+++ b/run-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will build a `cp311` wheel for `manylinux-x86_64
 
 ```yaml
 - name: Run cibuildwheel
-  uses: actions-ext/python/run-cibuildwheel@v1
+  uses: actions-ext/python/run-cibuildwheel@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     version: '3.11'
     kind: 'cp'
diff --git a/setup-cibuildwheel-cache/README.md b/setup-cibuildwheel-cache/README.md
index fe09198..0ac9007 100644
--- a/setup-cibuildwheel-cache/README.md
+++ b/setup-cibuildwheel-cache/README.md
@@ -7,5 +7,5 @@ The following example yaml code will setup cibuildwheel caching.
 
 ```yaml
 - name: Setup cibuildwheel caching
-  uses: actions-ext/python/setup-cibuildwheel-cache@v1
+  uses: actions-ext/python/setup-cibuildwheel-cache@483e9bc27293f10c0c798fa01ff9bc0518c71b02
 ```
diff --git a/setup-cibuildwheel/README.md b/setup-cibuildwheel/README.md
index bdb3da2..193b033 100644
--- a/setup-cibuildwheel/README.md
+++ b/setup-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will install cibuildwheel and configure caching.
 
 ```yaml
 - name: Setup cibuildwheel
-  uses: actions-ext/python/setup-cibuildwheel@v1
+  uses: actions-ext/python/setup-cibuildwheel@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     version: '3.11'
 ```
diff --git a/setup/README.md b/setup/README.md
index 186283d..5ab6744 100644
--- a/setup/README.md
+++ b/setup/README.md
@@ -7,7 +7,7 @@ The following example yaml code will setup Python 3.11 environment with pip cach
 
 ```yaml
 - name: Setup Python
-  uses: actions-ext/python/setup@v1
+  uses: actions-ext/python/setup@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     version: '3.11'
 ```
diff --git a/upload-dist/README.md b/upload-dist/README.md
index 906cba0..56764e2 100644
--- a/upload-dist/README.md
+++ b/upload-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will upload `dist/*.tar.gz` as an asset called `
 
 ```yaml
 - name: Upload sdist
-  uses: actions-ext/python/upload-dist@v1
+  uses: actions-ext/python/upload-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     kind: 'sdist'
 ```
@@ -16,7 +16,7 @@ The following example yaml code will upload `dist/*.whl` as an asset called `whe
 
 ```yaml
 - name: Upload wheel
-  uses: actions-ext/python/upload-dist@v1
+  uses: actions-ext/python/upload-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
   with:
     kind: 'wheel'
 ```

From 067e195d8bb8f82fc8c16b5547850c66c00a342f Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 10:56:47 -0400
Subject: [PATCH 27/34] .

---
 download-dist/README.md            | 2 +-
 run-cibuildwheel/README.md         | 2 +-
 setup-cibuildwheel-cache/README.md | 2 +-
 setup-cibuildwheel/README.md       | 2 +-
 setup/README.md                    | 2 +-
 upload-dist/README.md              | 4 ++--
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/download-dist/README.md b/download-dist/README.md
index e9440b4..60907b5 100644
--- a/download-dist/README.md
+++ b/download-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will download and install a `cp311` wheel for `m
 
 ```yaml
 - name: Download wheels
-  uses: actions-ext/python/download-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/download-dist@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     version: '3.11'
     kind: 'wheel'
diff --git a/run-cibuildwheel/README.md b/run-cibuildwheel/README.md
index 83db590..b9779b3 100644
--- a/run-cibuildwheel/README.md
+++ b/run-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will build a `cp311` wheel for `manylinux-x86_64
 
 ```yaml
 - name: Run cibuildwheel
-  uses: actions-ext/python/run-cibuildwheel@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/run-cibuildwheel@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     version: '3.11'
     kind: 'cp'
diff --git a/setup-cibuildwheel-cache/README.md b/setup-cibuildwheel-cache/README.md
index 0ac9007..7f0fb9f 100644
--- a/setup-cibuildwheel-cache/README.md
+++ b/setup-cibuildwheel-cache/README.md
@@ -7,5 +7,5 @@ The following example yaml code will setup cibuildwheel caching.
 
 ```yaml
 - name: Setup cibuildwheel caching
-  uses: actions-ext/python/setup-cibuildwheel-cache@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/setup-cibuildwheel-cache@3327753a563b380e4efc5cb91a548301e68c2e64
 ```
diff --git a/setup-cibuildwheel/README.md b/setup-cibuildwheel/README.md
index 193b033..dd24902 100644
--- a/setup-cibuildwheel/README.md
+++ b/setup-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will install cibuildwheel and configure caching.
 
 ```yaml
 - name: Setup cibuildwheel
-  uses: actions-ext/python/setup-cibuildwheel@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/setup-cibuildwheel@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     version: '3.11'
 ```
diff --git a/setup/README.md b/setup/README.md
index 5ab6744..8167319 100644
--- a/setup/README.md
+++ b/setup/README.md
@@ -7,7 +7,7 @@ The following example yaml code will setup Python 3.11 environment with pip cach
 
 ```yaml
 - name: Setup Python
-  uses: actions-ext/python/setup@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/setup@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     version: '3.11'
 ```
diff --git a/upload-dist/README.md b/upload-dist/README.md
index 56764e2..1d40cca 100644
--- a/upload-dist/README.md
+++ b/upload-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will upload `dist/*.tar.gz` as an asset called `
 
 ```yaml
 - name: Upload sdist
-  uses: actions-ext/python/upload-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/upload-dist@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     kind: 'sdist'
 ```
@@ -16,7 +16,7 @@ The following example yaml code will upload `dist/*.whl` as an asset called `whe
 
 ```yaml
 - name: Upload wheel
-  uses: actions-ext/python/upload-dist@483e9bc27293f10c0c798fa01ff9bc0518c71b02
+  uses: actions-ext/python/upload-dist@3327753a563b380e4efc5cb91a548301e68c2e64
   with:
     kind: 'wheel'
 ```

From 14e52561e5f255ba52d2e04d3cc2f3dedb1065af Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 11:04:16 -0400
Subject: [PATCH 28/34] .

---
 .github/workflows/build.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 28b5741..458e393 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -29,14 +29,14 @@ jobs:
       run: touch pyproject.toml
 
     - name: Setup Python
-      uses: ./python/setup
+      uses: ./setup
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel
-      uses: ./python/setup-cibuildwheel
+      uses: ./setup-cibuildwheel
       with:
         version: ${{ matrix.python-version }}
 
     - name: Setup cibuildwheel caching
-      uses: ./python/setup-cibuildwheel-cache
+      uses: ./setup-cibuildwheel-cache

From 2a19687f6c6ab14bcb521335d4ae0c75e96ccf21 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 11:04:33 -0400
Subject: [PATCH 29/34] .

---
 download-dist/README.md            | 2 +-
 run-cibuildwheel/README.md         | 2 +-
 setup-cibuildwheel-cache/README.md | 2 +-
 setup-cibuildwheel/README.md       | 2 +-
 setup/README.md                    | 2 +-
 upload-dist/README.md              | 4 ++--
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/download-dist/README.md b/download-dist/README.md
index 60907b5..2cdb909 100644
--- a/download-dist/README.md
+++ b/download-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will download and install a `cp311` wheel for `m
 
 ```yaml
 - name: Download wheels
-  uses: actions-ext/python/download-dist@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/download-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     version: '3.11'
     kind: 'wheel'
diff --git a/run-cibuildwheel/README.md b/run-cibuildwheel/README.md
index b9779b3..d168a55 100644
--- a/run-cibuildwheel/README.md
+++ b/run-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will build a `cp311` wheel for `manylinux-x86_64
 
 ```yaml
 - name: Run cibuildwheel
-  uses: actions-ext/python/run-cibuildwheel@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/run-cibuildwheel@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     version: '3.11'
     kind: 'cp'
diff --git a/setup-cibuildwheel-cache/README.md b/setup-cibuildwheel-cache/README.md
index 7f0fb9f..0ee482d 100644
--- a/setup-cibuildwheel-cache/README.md
+++ b/setup-cibuildwheel-cache/README.md
@@ -7,5 +7,5 @@ The following example yaml code will setup cibuildwheel caching.
 
 ```yaml
 - name: Setup cibuildwheel caching
-  uses: actions-ext/python/setup-cibuildwheel-cache@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/setup-cibuildwheel-cache@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
 ```
diff --git a/setup-cibuildwheel/README.md b/setup-cibuildwheel/README.md
index dd24902..ded87a2 100644
--- a/setup-cibuildwheel/README.md
+++ b/setup-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will install cibuildwheel and configure caching.
 
 ```yaml
 - name: Setup cibuildwheel
-  uses: actions-ext/python/setup-cibuildwheel@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/setup-cibuildwheel@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     version: '3.11'
 ```
diff --git a/setup/README.md b/setup/README.md
index 8167319..b35ffdd 100644
--- a/setup/README.md
+++ b/setup/README.md
@@ -7,7 +7,7 @@ The following example yaml code will setup Python 3.11 environment with pip cach
 
 ```yaml
 - name: Setup Python
-  uses: actions-ext/python/setup@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/setup@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     version: '3.11'
 ```
diff --git a/upload-dist/README.md b/upload-dist/README.md
index 1d40cca..5a72ca8 100644
--- a/upload-dist/README.md
+++ b/upload-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will upload `dist/*.tar.gz` as an asset called `
 
 ```yaml
 - name: Upload sdist
-  uses: actions-ext/python/upload-dist@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/upload-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     kind: 'sdist'
 ```
@@ -16,7 +16,7 @@ The following example yaml code will upload `dist/*.whl` as an asset called `whe
 
 ```yaml
 - name: Upload wheel
-  uses: actions-ext/python/upload-dist@3327753a563b380e4efc5cb91a548301e68c2e64
+  uses: actions-ext/python/upload-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
   with:
     kind: 'wheel'
 ```

From 5f78fa2cadf4dad2a7cded3c72655bcdd3dda735 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 11:05:42 -0400
Subject: [PATCH 30/34] .

---
 run-cibuildwheel/action.yml   | 2 +-
 setup-cibuildwheel/action.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/run-cibuildwheel/action.yml b/run-cibuildwheel/action.yml
index bde0809..363d62e 100644
--- a/run-cibuildwheel/action.yml
+++ b/run-cibuildwheel/action.yml
@@ -27,7 +27,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: ./python/setup-cibuildwheel
+      uses: ./setup-cibuildwheel
       with:
         version: ${{ inputs.version }}
 
diff --git a/setup-cibuildwheel/action.yml b/setup-cibuildwheel/action.yml
index c092819..0335d2d 100644
--- a/setup-cibuildwheel/action.yml
+++ b/setup-cibuildwheel/action.yml
@@ -19,7 +19,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup cibuildwheel caching
-      uses: ./python/setup-cibuildwheel-cache
+      uses: ./setup-cibuildwheel-cache
       with:
         version: ${{ inputs.version }}
 

From 6e1b91a408ea89f49bc8aff8724f83826f7b5446 Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Mon, 20 Jul 2026 11:05:52 -0400
Subject: [PATCH 31/34] .

---
 download-dist/README.md            | 2 +-
 run-cibuildwheel/README.md         | 2 +-
 setup-cibuildwheel-cache/README.md | 2 +-
 setup-cibuildwheel/README.md       | 2 +-
 setup/README.md                    | 2 +-
 upload-dist/README.md              | 4 ++--
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/download-dist/README.md b/download-dist/README.md
index 2cdb909..d555b52 100644
--- a/download-dist/README.md
+++ b/download-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will download and install a `cp311` wheel for `m
 
 ```yaml
 - name: Download wheels
-  uses: actions-ext/python/download-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/download-dist@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     version: '3.11'
     kind: 'wheel'
diff --git a/run-cibuildwheel/README.md b/run-cibuildwheel/README.md
index d168a55..40a3940 100644
--- a/run-cibuildwheel/README.md
+++ b/run-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will build a `cp311` wheel for `manylinux-x86_64
 
 ```yaml
 - name: Run cibuildwheel
-  uses: actions-ext/python/run-cibuildwheel@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/run-cibuildwheel@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     version: '3.11'
     kind: 'cp'
diff --git a/setup-cibuildwheel-cache/README.md b/setup-cibuildwheel-cache/README.md
index 0ee482d..561c23a 100644
--- a/setup-cibuildwheel-cache/README.md
+++ b/setup-cibuildwheel-cache/README.md
@@ -7,5 +7,5 @@ The following example yaml code will setup cibuildwheel caching.
 
 ```yaml
 - name: Setup cibuildwheel caching
-  uses: actions-ext/python/setup-cibuildwheel-cache@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/setup-cibuildwheel-cache@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
 ```
diff --git a/setup-cibuildwheel/README.md b/setup-cibuildwheel/README.md
index ded87a2..e9461fa 100644
--- a/setup-cibuildwheel/README.md
+++ b/setup-cibuildwheel/README.md
@@ -7,7 +7,7 @@ The following example yaml code will install cibuildwheel and configure caching.
 
 ```yaml
 - name: Setup cibuildwheel
-  uses: actions-ext/python/setup-cibuildwheel@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/setup-cibuildwheel@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     version: '3.11'
 ```
diff --git a/setup/README.md b/setup/README.md
index b35ffdd..22eb429 100644
--- a/setup/README.md
+++ b/setup/README.md
@@ -7,7 +7,7 @@ The following example yaml code will setup Python 3.11 environment with pip cach
 
 ```yaml
 - name: Setup Python
-  uses: actions-ext/python/setup@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/setup@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     version: '3.11'
 ```
diff --git a/upload-dist/README.md b/upload-dist/README.md
index 5a72ca8..75f5c94 100644
--- a/upload-dist/README.md
+++ b/upload-dist/README.md
@@ -7,7 +7,7 @@ The following example yaml code will upload `dist/*.tar.gz` as an asset called `
 
 ```yaml
 - name: Upload sdist
-  uses: actions-ext/python/upload-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/upload-dist@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     kind: 'sdist'
 ```
@@ -16,7 +16,7 @@ The following example yaml code will upload `dist/*.whl` as an asset called `whe
 
 ```yaml
 - name: Upload wheel
-  uses: actions-ext/python/upload-dist@14e52561e5f255ba52d2e04d3cc2f3dedb1065af
+  uses: actions-ext/python/upload-dist@5f78fa2cadf4dad2a7cded3c72655bcdd3dda735
   with:
     kind: 'wheel'
 ```

From 955aef1f3f45f04383c4321b72260f9bcedc5870 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 04:33:31 +0000
Subject: [PATCH 32/34] Bump actions/checkout from 7.0.0 to 7.0.1

Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 458e393..2b954da 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -23,7 +23,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13", "3.13t", "3.14", "3.14t"]
 
     steps:
-    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
 
     - name: Prework
       run: touch pyproject.toml

From d90cab2e338a1ce1cd6f023dffdbbcdf3fa98f3f Mon Sep 17 00:00:00 2001
From: Tim Paine <3105306+timkpaine@users.noreply.github.com>
Date: Tue, 1 Sep 2026 11:05:55 -0400
Subject: [PATCH 33/34] Update Dependabot to scan composite action directories

The github-actions ecosystem only scans .github/workflows and a root
action.yml for a given directory, so composite actions in subdirectories
were never checked for updates.

Signed-off-by: Tim Paine <3105306+timkpaine@users.noreply.github.com>
---
 .github/dependabot.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 72a1ca7..5754440 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,16 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
-    directory: "/"
+    directories:
+      - "/"
+      - "/download-dist"
+      - "/run-cibuildwheel"
+      - "/setup"
+      - "/setup-cibuildwheel"
+      - "/setup-cibuildwheel-cache"
+      - "/test-sdist"
+      - "/test-wheel"
+      - "/upload-dist"
     schedule:
       interval: "monthly"
     labels: []

From 74560d6f52dd2a8aaa09835fc586443c3cb0327b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 15:36:03 +0000
Subject: [PATCH 34/34] Bump astral-sh/setup-uv from 8.3.2 to 10.0.1 in /setup

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 10.0.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/11f9893b081a58869d3b5fccaea48c9e9e46f990...20cfd1bf945f4377ade1205e4dbc17946fc9a30d)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 setup/action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup/action.yml b/setup/action.yml
index 2230e73..a9d02e0 100644
--- a/setup/action.yml
+++ b/setup/action.yml
@@ -43,7 +43,7 @@ runs:
       if: ${{ inputs.uv != 'true' }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       with:
         python-version: "${{ inputs.version }}"
         enable-cache: true