Fix pip cache error handling on Windows. (#1040)

* Add error handling for Windows 'pip cache dir' execution

* Add comments

.github/workflows/e2e-cache-freethreaded.yml

@@ -33,7 +33,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -60,7 +60,7 @@ jobs:
           ]
         python-version: [3.13.1t, 3.13.2t, 3.13.5t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         id: cache-pipenv
         uses: ./
@@ -68,9 +68,19 @@ jobs:
           python-version: ${{ matrix.python-version }}
           cache: 'pipenv'
       - name: Install pipenv
-        run: curl https://raw.githubusercontent.com/pypa/pipenv/master/get-pipenv.py | python
+        run: python -m pip install --upgrade pip pipenv
-      - name: Install dependencies
+      - name: Install dependencies on Linux/macOS
-        run: pipenv install requests
+        if: runner.os != 'Windows'
+        run: |
+          export PIPENV_PYTHON=$(which python)
+          pipenv install requests
+      - name: Install dependencies on Windows
+        if: runner.os == 'Windows'
+        run: |
+          # Remove existing virtualenv if any
+          python -m pipenv --rm || echo "No existing env"
+          # Create fresh env using current Python
+          python -m pipenv install --python $(python -c "import sys; print(sys.executable)") requests
 
   python-poetry-dependencies-caching:
     name: Test poetry (Python ${{ matrix.python-version}}, ${{ matrix.os }})
@@ -90,7 +100,7 @@ jobs:
           ]
         python-version: [3.13.0, 3.13.1, 3.13.2]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install poetry
         run: pipx install poetry
       - name: Init pyproject.toml
@@ -122,7 +132,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -150,7 +160,7 @@ jobs:
           ]
         python-version: [3.13.1t, 3.13.2t, 3.13.5t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         id: cache-pipenv
         uses: ./
@@ -159,9 +169,19 @@ jobs:
           cache: 'pipenv'
           cache-dependency-path: '**/pipenv-requirements.txt'
       - name: Install pipenv
-        run: curl https://raw.githubusercontent.com/pypa/pipenv/master/get-pipenv.py | python
+        run: python -m pip install --upgrade pip pipenv
-      - name: Install dependencies
+      - name: Install dependencies on Linux/macOS
-        run: pipenv install requests
+        if: runner.os != 'Windows'
+        run: |
+          export PIPENV_PYTHON=$(which python)
+          pipenv install requests
+      - name: Install dependencies on Windows
+        if: runner.os == 'Windows'
+        run: |
+          # Remove existing virtualenv if any
+          python -m pipenv --rm || echo "No existing env"
+          # Create fresh env using current Python
+          python -m pipenv install --python $(python -c "import sys; print(sys.executable)") requests
 
   python-pip-dependencies-caching-with-pip-version:
     name: Test pip (Python ${{ matrix.python-version}}, ${{ matrix.os }})
@@ -181,7 +201,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -209,7 +229,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -238,7 +258,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -264,7 +284,7 @@ jobs:
           ]
         python-version: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:

.github/workflows/e2e-cache.yml

@@ -49,7 +49,7 @@ jobs:
             python-version: pypy-3.9-v7.x
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -88,7 +88,7 @@ jobs:
           - os: ubuntu-22.04-arm
             python-version: pypy-3.10-v7.x
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         id: cache-pipenv
         uses: ./
@@ -143,9 +143,10 @@ jobs:
             '3.13'
           ]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Install poetry
-        run: pipx install poetry
+        run: |
+          pipx install poetry
       - name: Init pyproject.toml
         run: mv ./__tests__/data/pyproject.toml .
       - name: Setup Python
@@ -153,6 +154,10 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'poetry'
+      - name: Bootstrap packaging
+        run: |
+          python -m ensurepip --upgrade
+          python -m pip install --upgrade pip setuptools wheel packaging
       - name: Install dependencies
         run: poetry install --no-root
 
@@ -189,7 +194,7 @@ jobs:
           - os: macos-latest
             python-version: pypy-3.9-v7.x
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -227,7 +232,7 @@ jobs:
           - os: ubuntu-22.04-arm
             python-version: pypy-3.11-v7.x
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         id: cache-pipenv
         uses: ./
@@ -273,7 +278,7 @@ jobs:
           ]
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -301,7 +306,7 @@ jobs:
           ]
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -330,7 +335,7 @@ jobs:
           ]
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:
@@ -356,7 +361,7 @@ jobs:
           ]
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python
         uses: ./
         with:

.github/workflows/e2e-tests.yml

@@ -29,7 +29,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Run with setup-python 3.9.13
         uses: ./
@@ -73,8 +73,16 @@ jobs:
           python-version: '3.13'
       - name: Verify 3.13
         run: python __tests__/verify-python.py 3.13
+
+      - name: Install pipx (Windows)
+        if: runner. os == 'Windows'
+        run: python -m pip install pipx
+
       - name: Run python-path sample 3.13
         run: pipx run --python '${{ steps.cp313.outputs.python-path }}' nox --version
+        env:
+          PIPX_HOME: '${{ runner.temp }}/pipx'
+          PIPX_BIN_DIR: '${{ runner.temp }}/pipx/bin'
 
       - name: Run with setup-python ==3.13
         uses: ./

.github/workflows/publish-immutable-actions.yml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checking out
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Publish
         id: publish
         uses: actions/publish-immutable-action@v0.0.4

.github/workflows/test-graalpy.yml

@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.graalpy }}
         id: setup-python
@@ -86,7 +86,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.graalpy }}
         id: setup-python
@@ -108,7 +108,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-15-intel]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup GraalPy and check latest
         uses: ./
         id: graalpy

.github/workflows/test-pypy.yml

@@ -40,13 +40,13 @@ jobs:
           - 'pypy-3.10-v7.3.x'
           - 'pypy-3.10-v7.x'
           - 'pypy-2.7-v7.3.12rc1'
-          - 'pypy-3.10-nightly'
+          - 'pypy-3.11-nightly'
           - 'pypy3.10-v7.3.17'
           - 'pypy3.11-v7.3.19'
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.pypy }}
         id: setup-python
@@ -98,7 +98,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.pypy }}
         id: setup-python
@@ -146,11 +146,11 @@ jobs:
             ubuntu-latest,
             macos-15-intel
           ]
-        pypy: ['pypy2.7', 'pypy3.9', 'pypy3.10-nightly', 'pypy3.11']
+        pypy: ['pypy2.7', 'pypy3.9', 'pypy3.11-nightly', 'pypy3.11']
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.pypy }}
         id: setup-python
@@ -181,7 +181,7 @@ jobs:
             macos-15-intel
           ]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup PyPy and check latest
         uses: ./
         with:
@@ -223,7 +223,7 @@ jobs:
             macos-15-intel
           ]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup PyPy and check latest
         uses: ./
         with:

.github/workflows/test-python-freethreaded.yml

@@ -33,7 +33,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.python }}
         id: setup-python
@@ -70,7 +70,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: echo ${{ matrix.python }} > .python-version
@@ -110,7 +110,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: echo ${{ matrix.python }} > .python-version
@@ -148,7 +148,7 @@ jobs:
         python: [3.13.0, 3.13.1, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -189,7 +189,7 @@ jobs:
         python: [3.13.0, 3.13.1, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -230,7 +230,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t, 3.14t-dev]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-tool-versions-file ${{ matrix.python }}
         run: |
@@ -261,7 +261,7 @@ jobs:
         python: [3.13t, 3.14t-dev]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -301,7 +301,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t, 3.14t-dev]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -340,7 +340,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14.0-alpha.6
         id: setup-python
@@ -377,7 +377,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14t-dev
         id: setup-python
@@ -414,7 +414,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14t
         id: setup-python
@@ -453,7 +453,7 @@ jobs:
         python: [3.13.0t, 3.13.1t, 3.13.2t]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.python }}
         id: setup-python
@@ -485,7 +485,7 @@ jobs:
           ]
         python-version: [3.13t, 3.14t-dev]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python and check latest
         id: setup-python
         uses: ./
@@ -511,7 +511,7 @@ jobs:
             macos-15-intel
           ]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python and check latest
         id: setup-python
         uses: ./
@@ -542,7 +542,7 @@ jobs:
         python: [3.13.1, 3.13.2, 3.14-dev, 3.14.0-alpha.6]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: setup-python ${{ matrix.python }}
         id: setup-python
         uses: ./

.github/workflows/test-python.yml

@@ -33,7 +33,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.12.3, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.python }}
         id: setup-python
@@ -77,7 +77,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.12.3, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: echo ${{ matrix.python }} > .python-version
@@ -124,7 +124,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.12.3, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: echo ${{ matrix.python }} > .python-version
@@ -169,7 +169,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, '==3.12.3', 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -219,7 +219,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.12.3, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -272,7 +272,7 @@ jobs:
             python: graalpy-24.1.2
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-tool-versions-file ${{ matrix.python }}
         run: |
@@ -303,7 +303,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -353,7 +353,7 @@ jobs:
         python: [3.9.13, 3.10.11, 3.11.9, 3.13.2]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: build-version-file ${{ matrix.python }}
         run: |
@@ -402,7 +402,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14.0-alpha.6
         id: setup-python
@@ -445,7 +445,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14-dev
         id: setup-python
@@ -482,7 +482,7 @@ jobs:
           ]
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python 3.14
         id: setup-python
@@ -521,7 +521,7 @@ jobs:
         python: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: setup-python ${{ matrix.python }}
         id: setup-python
@@ -553,7 +553,7 @@ jobs:
           ]
         python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python and check latest
         uses: ./
         with:
@@ -585,7 +585,7 @@ jobs:
             macos-15-intel
           ]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Python and check latest
         uses: ./
         with:

.licensed.yml

@@ -10,6 +10,8 @@ allowed:
   - cc0-1.0
   - unlicense
   - 0bsd
+  - blueoak-1.0.0
 
 reviewed:
   npm:
+    - "@actions/http-client"

README.md

@@ -25,7 +25,7 @@ See [action.yml](action.yml)
 **Python**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13' 
@@ -35,7 +35,7 @@ steps:
 **PyPy**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6 
   with:
     python-version: 'pypy3.10' 
@@ -45,7 +45,7 @@ steps:
 **GraalPy**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6 
   with:
     python-version: 'graalpy-24.0' 
@@ -55,7 +55,7 @@ steps:
 **Free threaded Python**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13t'
@@ -90,7 +90,7 @@ The action defaults to searching for a dependency file (`requirements.txt` or `p
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'

__tests__/cache-restore.test.ts

@@ -190,19 +190,12 @@ virtualenvs.path = "{cache-dir}/virtualenvs"  # /Users/patrick/Library/Caches/py
 
         restoredKeys.forEach(restoredKey => {
           if (restoredKey) {
-            if (process.platform === 'linux' && packageManager === 'pip') {
+            const osSegment =
-              expect(infoSpy).toHaveBeenCalledWith(
+              process.platform === 'linux' ? '-20.04-Ubuntu' : '';
-                `Cache restored from key: setup-python-${process.env['RUNNER_OS']}-${process.arch}-20.04-Ubuntu-python-${pythonVersion}-${packageManager}-${fileHash}`
+            const versionSuffix = packageManager === 'poetry' ? '-v2' : '';
-              );
+            expect(infoSpy).toHaveBeenCalledWith(
-            } else if (packageManager === 'poetry') {
+              `Cache restored from key: setup-python-${process.env['RUNNER_OS']}-${process.arch}${osSegment}-python-${pythonVersion}-${packageManager}${versionSuffix}-${fileHash}`
-              expect(infoSpy).toHaveBeenCalledWith(
+            );
-                `Cache restored from key: setup-python-${process.env['RUNNER_OS']}-${process.arch}-python-${pythonVersion}-${packageManager}-v2-${fileHash}`
-              );
-            } else {
-              expect(infoSpy).toHaveBeenCalledWith(
-                `Cache restored from key: setup-python-${process.env['RUNNER_OS']}-${process.arch}-python-${pythonVersion}-${packageManager}-${fileHash}`
-              );
-            }
           } else {
             expect(infoSpy).toHaveBeenCalledWith(
               `${packageManager} cache is not found`

__tests__/data/pyproject.toml

@@ -9,6 +9,7 @@ python = ">=3.9,<3.14"
 flake8 = "^4.0.1"
 pyinstaller = "6.10.0"
 setuptools = ">=78.1.1" 
+packaging = ">=22.0,<26"
 
 [tool.poetry.dev-dependencies]
 

__tests__/data/requirements-linux.txt

@@ -1,12 +1,12 @@
 certifi==2020.6.20
 chardet==3.0.4
 docutils==0.16
-idna==3.7
+idna==3.15
 Kivy==2.0.0rc3
 Kivy-Garden==0.1.4
 packaging==20.7
 pdf2image==1.12.1
-Pygments==2.6.1
+Pygments==2.20.0
-requests==2.32.4
+requests==2.33.0
-urllib3==2.5.0
+urllib3==2.7.0
 xlrd==1.2.0

__tests__/data/requirements.txt

@@ -8,7 +8,7 @@ docutils==0.16
 
 future==0.18.2; python_version >= '2.6' and python_version not in '3.0, 3.1, 3.2'
 
-idna==3.7
+idna==3.15
 
 itsdangerous==1.1.0
 
@@ -32,7 +32,7 @@ pefile==2021.9.3; python_full_version >= '3.6.0'
 
 pillow>=10.2.0
 
-pygments==2.6.1
+pygments==2.20.0
 
 pyinstaller==6.10.0
 
@@ -40,8 +40,8 @@ pyparsing==2.4.7; python_version >= '2.6' and python_version not in '3.0, 3.1, 3
 
 pywin32-ctypes==0.2.0
 
-requests==2.32.4
+requests==2.33.0
 
-urllib3==2.5.0
+urllib3==2.7.0
 
 xlrd==1.2.0

docs/advanced-usage.md

@@ -33,7 +33,7 @@ If there is a specific version of Python that you need and you don't want to wor
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.12.6' 
@@ -47,7 +47,7 @@ You can specify **only a major and minor version** if you are okay with the most
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13' 
@@ -61,7 +61,7 @@ You can specify the version with **prerelease tag** to download and set up an ac
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.14.0-alpha.1'
@@ -72,7 +72,7 @@ It's also possible to use **x.y-dev syntax** to download and set up the latest p
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.14-dev'
@@ -85,7 +85,7 @@ Free threaded Python is only available starting with the 3.13 release.
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13t'
@@ -96,7 +96,7 @@ Note that the **t** suffix is not `semver` syntax. If you wish to specify a rang
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '>=3.13'
@@ -110,7 +110,7 @@ You can also use several types of ranges that are specified in [semver](https://
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '>=3.9 <3.14'
@@ -121,7 +121,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13.0-alpha - 3.13.0'
@@ -132,7 +132,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.x'
@@ -165,7 +165,7 @@ jobs:
         - 'pypy3.10' # the latest available version of PyPy that supports Python 3.10
         - 'pypy3.10-v7.3.17' # Python 3.10 and PyPy 7.3.17
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
@@ -183,7 +183,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       with:
         python-version: |
@@ -200,7 +200,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       with:
         python-version: |
@@ -217,7 +217,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       with:
         python-version: |
@@ -242,7 +242,7 @@ jobs:
         python-version: ['3.x', 'pypy3.8', 'pypy3.9' ]
     name: Python ${{ matrix.python-version }} sample
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -268,7 +268,7 @@ jobs:
           - os: windows-latest
             python-version: '3.9'
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -286,7 +286,7 @@ jobs:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version-file: '.python-version' # Read python version from a file .python-version
@@ -295,7 +295,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version-file: 'pyproject.toml' # Read python version from a file pyproject.toml
@@ -304,7 +304,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version-file: '.tool-versions' # Read python version from a file .tool-versions
@@ -313,7 +313,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version-file: 'Pipfile' # Read python version from a file Pipfile
@@ -328,7 +328,7 @@ If `check-latest` is set to `true`, the action first checks if the cached versio
 
 ```yaml
 steps:
-  - uses: actions/checkout@v5
+  - uses: actions/checkout@v6
   - uses: actions/setup-python@v6
     with:
       python-version: '3.13'
@@ -343,7 +343,7 @@ steps:
 **Caching pipenv dependencies:**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'
@@ -356,7 +356,7 @@ steps:
 **Caching poetry dependencies:**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - name: Install poetry
   run: pipx install poetry
 - uses: actions/setup-python@v6
@@ -371,7 +371,7 @@ steps:
 **Using a list of file paths to cache dependencies**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'
@@ -386,7 +386,7 @@ steps:
 **Using wildcard patterns to cache dependencies**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'
@@ -398,7 +398,7 @@ steps:
 **Using a list of wildcard patterns to cache dependencies**
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'
@@ -413,7 +413,7 @@ steps:
 
 ```yaml
 steps:
-- uses: actions/checkout@v5
+- uses: actions/checkout@v6
 - uses: actions/setup-python@v6
   with:
     python-version: '3.13'
@@ -436,7 +436,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       id: cp312
       with:
@@ -453,7 +453,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       id: cp313
       with:
@@ -469,7 +469,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
     - uses: actions/setup-python@v6
       id: cp313
       with:
@@ -500,7 +500,7 @@ Such a requirement on side-effect could be because you don't want your composite
 
 ```yaml
  steps:
-   - uses: actions/checkout@v5
+   - uses: actions/checkout@v6
    - uses: actions/setup-python@v6
      id: cp313
      with:
@@ -555,8 +555,8 @@ GitHub hosted runners have a tool cache that comes with a few versions of Python
 |**PyPy tool cache**|`RUNNER_TOOL_CACHE/PyPy/*`|
 
 GitHub runner images are set up in [actions/runner-images](https://github.com/actions/runner-images). During the setup, the available versions of Python and PyPy are automatically downloaded, set up and documented.
-- Tool cache setup for Ubuntu: [Install-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/linux/scripts/installers/Install-Toolset.ps1) [Configure-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/linux/scripts/installers/Configure-Toolset.ps1)
+- Tool cache setup for Ubuntu: [Install-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/ubuntu/scripts/build/Install-Toolset.ps1) [Configure-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/ubuntu/scripts/build/Configure-Toolset.ps1)
-- Tool cache setup for Windows: [Install-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/win/scripts/Installers/Install-Toolset.ps1) [Configure-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/win/scripts/Installers/Configure-Toolset.ps1)
+- Tool cache setup for Windows: [Install-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/windows/scripts/build/Install-Toolset.ps1) [Configure-Toolset.ps1](https://github.com/actions/runner-images/blob/main/images/windows/scripts/build/Configure-Toolset.ps1)
 
 
 ## Using `setup-python` with a self-hosted runner
@@ -646,7 +646,7 @@ jobs:
         python_version: ["3.14"]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "${{ matrix.python_version }}"
@@ -661,7 +661,7 @@ The version of Pip should be specified in the format `major`, `major.minor`, or
 
 ```yaml
       steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:
@@ -681,7 +681,7 @@ The `pip-install` input allows you to install dependencies as part of the Python
 
 ```yaml
       steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Python
         uses: actions/setup-python@v6
         with:

package.json

@@ -1,6 +1,6 @@
 {
   "name": "setup-python",
-  "version": "6.0.0",
+  "version": "6.3.0",
   "private": true,
   "description": "Setup python action",
   "main": "dist/index.js",
@@ -28,13 +28,13 @@
   "author": "GitHub",
   "license": "MIT",
   "dependencies": {
-    "@actions/cache": "^4.0.3",
+    "@actions/cache": "^5.1.0",
-    "@actions/core": "^1.10.0",
+    "@actions/core": "^2.0.3",
-    "@actions/exec": "^1.1.0",
+    "@actions/exec": "^2.0.0",
-    "@actions/glob": "^0.5.0",
+    "@actions/glob": "^0.5.1",
-    "@actions/http-client": "^2.2.3",
+    "@actions/http-client": "^3.0.2",
-    "@actions/io": "^1.0.2",
+    "@actions/io": "^2.0.0",
-    "@actions/tool-cache": "^2.0.2",
+    "@actions/tool-cache": "^3.0.1",
     "@iarna/toml": "^3.0.0",
     "semver": "^7.7.1"
   },
@@ -54,5 +54,8 @@
     "prettier": "^3.6.2",
     "ts-jest": "^29.3.2",
     "typescript": "^5.9.3"
+  },
+  "overrides": {
+    "fast-xml-parser": "^5.9.2"
   }
 }

src/cache-distributions/cache-distributor.ts

@@ -1,5 +1,6 @@
 import * as cache from '@actions/cache';
 import * as core from '@actions/core';
+import {getOSInfo, IS_LINUX} from '../utils';
 import {CACHE_DEPENDENCY_BACKUP_PATH} from './constants';
 
 export enum State {
@@ -22,6 +23,33 @@ abstract class CacheDistributor {
   }>;
   protected async handleLoadedCache() {}
 
+  /**
+   * Builds the Linux distro portion of a cache key (e.g. `-26.04-Ubuntu`, `-9-rhel`).
+   * RHEL is keyed by major version since it ships one ABI-stable artifact per major.
+   */
+  protected async getLinuxInfoKeySegment(): Promise<string> {
+    if (!IS_LINUX) {
+      return '';
+    }
+
+    const osInfo = await getOSInfo();
+    if (!osInfo) {
+      return '';
+    }
+
+    // lsb_release reports RHEL as "RedHatEnterpriseLinux" while /etc/os-release
+    // reports it as "rhel"; normalize both to "rhel" so the key is consistent.
+    const normalizedName = osInfo.osName.toLowerCase();
+    const isRhel =
+      normalizedName === 'rhel' || normalizedName.includes('redhat');
+    const osName = isRhel ? 'rhel' : osInfo.osName;
+    const osVersion = isRhel
+      ? osInfo.osVersion.split('.')[0]
+      : osInfo.osVersion;
+
+    return `-${osVersion}-${osName}`;
+  }
+
   public async restoreCache() {
     const {primaryKey, restoreKey} = await this.computeKeys();
     if (primaryKey.endsWith('-')) {

src/cache-distributions/pip-cache.ts

@@ -7,7 +7,7 @@ import * as path from 'path';
 import os from 'os';
 
 import CacheDistributor from './cache-distributor';
-import {getLinuxInfo, IS_LINUX, IS_WINDOWS} from '../utils';
+import {IS_WINDOWS} from '../utils';
 import {CACHE_DEPENDENCY_BACKUP_PATH} from './constants';
 
 class PipCache extends CacheDistributor {
@@ -21,24 +21,28 @@ class PipCache extends CacheDistributor {
   }
 
   protected async getCacheGlobalDirectories() {
-    let exitCode = 1;
+    let exitCode = 0;
     let stdout = '';
     let stderr = '';
 
     // Add temporary fix for Windows
-    // On windows it is necessary to execute through an exec
+    // On Windows, it is necessary to execute through an exec
-    // because the getExecOutput gives a non zero code or writes to stderr for pip 22.0.2,
+    // because the getExecOutput gives a non-zero code or writes to stderr for pip 22.0.2,
     // or spawn must be started with the shell option enabled for getExecOutput
     // Related issue: https://github.com/actions/setup-python/issues/328
     if (IS_WINDOWS) {
       const execPromisify = utils.promisify(child_process.exec);
-      ({stdout: stdout, stderr: stderr} = await execPromisify('pip cache dir'));
+      try {
+        ({stdout, stderr} = await execPromisify('pip cache dir'));
+      } catch (err) {
+        // Pip outputs warnings to stderr (e.g., --no-python-version-warning flag deprecation warning), causing false failure detection
+        // Related issue: https://github.com/actions/setup-python/issues/1034
+        // If an error occurs, capture stderr and set exitCode to 1 to indicate failure
+        stderr = (err as any).stderr ?? (err as Error).message;
+        exitCode = 1;
+      }
     } else {
-      ({
+      ({stdout, stderr, exitCode} = await exec.getExecOutput('pip cache dir'));
-        stdout: stdout,
-        stderr: stderr,
-        exitCode: exitCode
-      } = await exec.getExecOutput('pip cache dir'));
     }
 
     if (exitCode && stderr) {
@@ -62,17 +66,9 @@ class PipCache extends CacheDistributor {
     const hash =
       (await glob.hashFiles(this.cacheDependencyPath)) ||
       (await glob.hashFiles(this.cacheDependencyBackupPath));
-    let primaryKey = '';
+    const osSegment = await this.getLinuxInfoKeySegment();
-    let restoreKey = '';
+    const primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}${osSegment}-python-${this.pythonVersion}-${this.packageManager}-${hash}`;
-
+    const restoreKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}${osSegment}-python-${this.pythonVersion}-${this.packageManager}`;
-    if (IS_LINUX) {
-      const osInfo = await getLinuxInfo();
-      primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-${osInfo.osVersion}-${osInfo.osName}-python-${this.pythonVersion}-${this.packageManager}-${hash}`;
-      restoreKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-${osInfo.osVersion}-${osInfo.osName}-python-${this.pythonVersion}-${this.packageManager}`;
-    } else {
-      primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-python-${this.pythonVersion}-${this.packageManager}-${hash}`;
-      restoreKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-python-${this.pythonVersion}-${this.packageManager}`;
-    }
 
     return {
       primaryKey,

src/cache-distributions/pipenv-cache.ts

@@ -32,7 +32,8 @@ class PipenvCache extends CacheDistributor {
 
   protected async computeKeys() {
     const hash = await glob.hashFiles(this.patterns);
-    const primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-python-${this.pythonVersion}-${this.packageManager}-${hash}`;
+    const osSegment = await this.getLinuxInfoKeySegment();
+    const primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}${osSegment}-python-${this.pythonVersion}-${this.packageManager}-${hash}`;
     const restoreKey = undefined;
     return {
       primaryKey,

src/cache-distributions/poetry-cache.ts

@@ -46,8 +46,9 @@ class PoetryCache extends CacheDistributor {
 
   protected async computeKeys() {
     const hash = await glob.hashFiles(this.patterns);
+    const osSegment = await this.getLinuxInfoKeySegment();
     // "v2" is here to invalidate old caches of this cache distributor, which were created broken:
-    const primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}-python-${this.pythonVersion}-${this.packageManager}-v2-${hash}`;
+    const primaryKey = `${this.CACHE_KEY_PREFIX}-${process.env['RUNNER_OS']}-${process.arch}${osSegment}-python-${this.pythonVersion}-${this.packageManager}-v2-${hash}`;
     const restoreKey = undefined;
     return {
       primaryKey,

src/cache-save.ts

@@ -70,7 +70,11 @@ async function saveCache(packageManager: string) {
     return;
   }
 
-  if (cacheId == -1) {
+  if (cacheId === -1) {
+    // saveCache returns -1 without throwing when the cache was not saved, e.g.
+    // a reserve collision or a read-only token (fork PR). @actions/cache has
+    // already logged the reason at the appropriate severity, so just trace it.
+    core.debug(`Cache was not saved for the key: ${primaryKey}`);
     return;
   }
   core.info(`Cache saved with the key: ${primaryKey}`);