chore(deps-ci): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: python-semantic-release/python-semantic-release and python-semantic-release/publish-action.

Updates python-semantic-release/python-semantic-release from 10.5.2 to 10.5.3

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v10.5.3 (2025-12-14)

This release is published under the MIT License.

🪲 Bug Fixes

• cmd-version: Resolve unauthenticated git repo issues for upstream verification (PR#1388, e164f68)

• github-action: Fix failed signing issue when ssh was missing from action environment (PR#1389, 18b7eda)

• parser-conventional-monorepo: Fix parser opts validator for outside dir path matches (PR#1382, a51eadd)

✅ Resolved Issues

• #1373: verify_upstream_unchanged fails on github actions when git repo is unauthenticated

• #1376: ssh-agent & ssh-add is missing from python-semantic-release github action

• #1380: Monorepo path_filters fails to reference paths outside the current package subtree

---

Detailed Changes: v10.5.2...v10.5.3

---

Installable artifacts are available from:

• PyPi Registry

• GitHub Release Assets

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

v10.5.3 (2025-12-14)

🪲 Bug Fixes

• cmd-version: Resolve unauthenticated git repo issues for upstream verification, closes [#1373](https://github.com/python-semantic-release/python-semantic-release/issues/1373)_ (PR#1388, e164f68)

• github-action: Fix failed signing issue when ssh was missing from action environment, closes [#1376](https://github.com/python-semantic-release/python-semantic-release/issues/1376)_ (PR#1389, 18b7eda)

• parser-conventional-monorepo: Fix parser opts validator for outside dir path matches, closes [#1380](https://github.com/python-semantic-release/python-semantic-release/issues/1380)_ (PR#1382, a51eadd)

.. _#1373: python-semantic-release/python-semantic-release#1373 .. _#1376: python-semantic-release/python-semantic-release#1376 .. _#1380: python-semantic-release/python-semantic-release#1380 .. _18b7eda: python-semantic-release/python-semantic-release@18b7eda .. _a51eadd: python-semantic-release/python-semantic-release@a51eadd .. _e164f68: python-semantic-release/python-semantic-release@e164f68 .. _PR#1382: python-semantic-release/python-semantic-release#1382 .. _PR#1388: python-semantic-release/python-semantic-release#1388 .. _PR#1389: python-semantic-release/python-semantic-release#1389

.. _changelog-v10.5.2:

Commits

• 350c48f chore: release v10.5.3
• a51eadd fix(parser-conventional-monorepo): fix parser opts validator for outside dir ...
• 427af48 test(fixtures): upgrade monorepos to monitor external package files
• 27a006c test(fixtures): upgrade commit simulation to modify specific files
• e164f68 fix(cmd-version): resolve unauthenticated git repo issues for upstream verifi...
• 18b7eda fix(github-action): fix failed signing issue when ssh was missing from action...
• 779af88 ci(deps): bump tj-actions/changed-files@v47.0.0 action to v47.0.1 (#1394)
• edf0229 ci(deps): bump actions/stale@v10.1.0 to v10.1.1 (#1394)
• e0927e3 ci(deps): bump actions/setup-python@v6.0.0 to v6.1.0 (#1394)
• b984f41 ci(deps): bump actions/upload-artifact@v5.0.0 to v6.0.0 (#1394)
• Additional commits viewable in compare view

Updates python-semantic-release/publish-action from 10.5.2 to 10.5.3

Release notes

Sourced from python-semantic-release/publish-action's releases.

v10.5.3 (2025-12-14)

Build System

• deps: Bump python-semantic-release from 10.5.2 to 10.5.3 (#95, 8086c8c)

---

Detailed Changes: v10.5.2...v10.5.3

Commits

• 310a998 ci(deps): bump tj-actions/changed-files@v47.0.0 to v47.0.1 (#96)
• 6a6e557 ci(deps): bump actions/checkout@v5.0.0 to v6.0.1 (#96)
• 1cbbbde ci(deps): bump stale@v10.1.0 action to v10.1.1 (#96)
• 51cbb35 ci(deps): bump python-semantic-release@v10.5.2 action to v10.5.3 (#96)
• 8086c8c build(deps): bump python-semantic-release from 10.5.2 to 10.5.3 (#95)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 52.31%. Comparing base (2a55611) to head (0966775).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #258   +/-   ##
=======================================
  Coverage   52.31%   52.31%           
=======================================
  Files           7        7           
  Lines        1317     1317           
  Branches      255      255           
=======================================
  Hits          689      689           
  Misses        520      520           
  Partials      108      108           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.