build(deps): bump the actions group with 2 updates

[dependabot]

Bumps the actions group with 2 updates: python-semantic-release and hypothesis.

Updates python-semantic-release from 10.5.3 to 10.6.0

Release notes

Sourced from python-semantic-release's releases.

v10.6.0 (2026-07-04)

This release is published under the MIT License.

✨ Features

• cmd-version: Add file replacement variant for version_variables (PR#1391, 95ce7ec)

• parser-emoji: Adds more non-release triggering emojis to the default emoji parser (PR#1410, 2833aa9)

🪲 Bug Fixes

• cmd-config-generate: Fix config output for Microsoft Windows UTF-8 encoding (PR#1400, 0343194)

• cmd-publish: Fix handling of asset uploading errors on publish (PR#1397, 81a0f98)

• github: Fix bubble up errors of asset uploads for GitHub (PR#1397, 81a0f98)

• hvcs: Mask git credential URL in very verbose debug logs (PR#1445, 811afb0)

📖 Documentation

• cmd-config-generate: Add Windows PowerShell specific generate-config usage example (PR#1400, 0343194)

• configuration: Modify version_variables definition to include new file replacement (PR#1391, 95ce7ec)

• examples: Update references to github actions for hash references (PR#1449, 873da58)

• package: Change package changelog link to doc website (PR#1434, 05f897f)

✅ Resolved Issues

• #702: semantic-release generate-config --pyproject produces unreadable toml on Windows

• #1375: Allow updates to version file containing only a version

• #1395: [bug] Silently ignores auth error on GitHub publish

• #1426: Git credentials are logged with very verbose (-vv) logging

---

Detailed Changes: v10.5.3...v10.6.0

---

Installable artifacts are available from:

• PyPi Registry

... (truncated)

Changelog

Sourced from python-semantic-release's changelog.

v10.6.0 (2026-07-04)

✨ Features

• cmd-version: Add file replacement variant for version_variables, closes [#1375](https://github.com/python-semantic-release/python-semantic-release/issues/1375)_ (PR#1391, 95ce7ec)

• parser-emoji: Adds more non-release triggering emojis to the default emoji parser (PR#1410, 2833aa9)

🪲 Bug Fixes

• cmd-config-generate: Fix config output for Microsoft Windows UTF-8 encoding, closes [#702](https://github.com/python-semantic-release/python-semantic-release/issues/702)_ (PR#1400, 0343194)

• cmd-publish: Fix handling of asset uploading errors on publish, closes [#1395](https://github.com/python-semantic-release/python-semantic-release/issues/1395)_ (PR#1397, 81a0f98)

• github: Fix bubble up errors of asset uploads for GitHub (PR#1397, 81a0f98)

• hvcs: Mask git credential URL in very verbose debug logs, closes [#1426](https://github.com/python-semantic-release/python-semantic-release/issues/1426)_ (PR#1445, 811afb0)

📖 Documentation

• cmd-config-generate: Add Windows PowerShell specific generate-config usage example (PR#1400, 0343194)

• configuration: Modify version_variables definition to include new file replacement (PR#1391, 95ce7ec)

• examples: Update references to github actions for hash references (PR#1449, 873da58)

• package: Change package changelog link to doc website (PR#1434, 05f897f)

.. _#1375: python-semantic-release/python-semantic-release#1375 .. _#1395: python-semantic-release/python-semantic-release#1395 .. _#1426: python-semantic-release/python-semantic-release#1426 .. _#702: python-semantic-release/python-semantic-release#702 .. _0343194: python-semantic-release/python-semantic-release@0343194 .. _05f897f: python-semantic-release/python-semantic-release@05f897f .. _2833aa9: python-semantic-release/python-semantic-release@2833aa9 .. _811afb0: python-semantic-release/python-semantic-release@811afb0 .. _81a0f98: python-semantic-release/python-semantic-release@81a0f98 .. _873da58: python-semantic-release/python-semantic-release@873da58 .. _95ce7ec: python-semantic-release/python-semantic-release@95ce7ec

... (truncated)

Commits

• 37a30a7 chore: release v10.6.0
• 811afb0 fix(hvcs): mask git credential URL in very verbose debug logs (#1445)
• 05f897f docs(package): change package changelog link to doc website (#1434)
• 873da58 docs(examples): update references to github actions for hash references (#1449)
• 6f1c12f ci(deps): bump pypa/gh-action-pypi-publish@v1.13.0 to v1.14.0
• 33fa72b ci(deps): bump mikepenz/action-junit-report@v6.0.1 to v6.4.2
• db240e1 ci(deps): bump tj-actions/changed-files@v47.0.1 to v47.0.6
• cee77b9 ci(deps): bump docker/build-push-action@v6.18.0 to v7.3.0
• bfacbd5 ci(deps): bump actions/upload-artifact@v6.0.0 to v7.0.1
• a432ae8 ci(deps): bump actions/download-artifact@v7.0.0 to v8.0.1
• Additional commits viewable in compare view

Updates hypothesis from 6.155.7 to 6.156.1

Commits

• 5f23056 Bump hypothesis version to 6.156.1 and update changelog
• b45fc67 Merge pull request #4785 from Liam-DeVoe/fix-release
• afd3210 reword
• f6ff3d7 cut a new release
• e77dd6f Bump hypothesis version to 6.156.0 and update changelog
• 3205ada Merge pull request #4783 from Liam-DeVoe/fix-release
• c604da9 more ci fixes
• 72dee8d Merge pull request #4782 from Liam-DeVoe/fix-release
• 95f0de6 fix release CI
• 5ff525a Merge pull request #4776 from Liam-DeVoe/rust-cathetus-migration
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e118cfe3-02f2-44f8-bc56-687590c8dd35

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/uv/actions-277138afed

---

_{Comment @coderabbitai help to get the list of available commands.}