chore(deps): update dependency python to 3.14

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
python	uses-with	minor	3.12 → 3.14

---

Release Notes

actions/python-versions (python)

v3.14.7: 3.14.7

Compare Source

Python 3.14.7

v3.14.6: 3.14.6

Compare Source

Python 3.14.6

v3.14.5: 3.14.5

Compare Source

Python 3.14.5

v3.14.4: 3.14.4

Compare Source

Python 3.14.4

v3.14.3: 3.14.3

Compare Source

Python 3.14.3

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.15: 3.13.15

Compare Source

Python 3.13.15

v3.13.14: 3.13.14

Compare Source

Python 3.13.14

v3.13.13: 3.13.13

Compare Source

Python 3.13.13

v3.13.12: 3.13.12

Compare Source

Python 3.13.12

v3.13.11: 3.13.11

Compare Source

Python 3.13.11

v3.13.10: 3.13.10

Compare Source

Python 3.13.10

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

PR author is in the excluded authors list.

[changeset-bot]

⚠️ No Changeset found

Latest commit: df85812

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[wave-bugbot]

🌊 WAVE BugBot — 3 finding(s)

🔴 3

• 🔴 P0 .github/workflows/_checks.yml:59 CWE-89 — Unpinned action tags
  The PR updates the Python version to 3.14 but does not address the use of unpinned action tags in the workflow file. Unpinned action tags can lead to security v
• 🔴 P0 .github/workflows/_checks.yml:59 CWE-264 — Overbroad token permissions
  The PR updates the Python version to 3.14 but does not address potential overbroad token permissions in the workflow file. Overbroad permissions can lead to sec
• 🔴 P0 .github/workflows/_checks.yml:59 CWE-312 — Secrets echoed to logs
  The PR updates the Python version to 3.14 but does not address potential secrets being echoed to logs in the workflow file. Echoing secrets can lead to security

_{severity: critical · major · minor · info — local review · $0 inference · wave-dispatch · react 👍/👎 to tune}

[devin-ai-integration]

Devin Review found 2 potential issues.

[devin-ai-integration]

🔍 Python 3.14 availability/wheel risk for the skill-validate gate

This bump only affects the inlined skill-validate gate, which uses stdlib modules plus pyyaml installed at line 60. Two things worth confirming before merge: (1) the pinned actions/setup-python@a26af69… (v5.6.0) resolves versions via its dynamic manifest, so 3.14 must be present in the manifest/runner tool cache for ubuntu-latest — otherwise every calling repo's gate fails at setup; (2) pip install pyyaml must have a prebuilt cp314 wheel, else pip falls back to a source build (needs Cython/compiler) and the gate breaks. Since this workflow is workflow_call-reusable and inherited by other WAVE repos, a failure here blocks all consumers, so it's worth a one-off green run to verify.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

🔍 Comment says this gate mirrors wave-foundation/scripts/validate-skills.py — keep runtime in sync

The header at lines 48-50 states this inlined validator mirrors wave-foundation/scripts/validate-skills.py and that the two should be kept in sync. Bumping the interpreter here only, without a corresponding change in wave-foundation, risks behavioral drift between the two copies (e.g. YAML/regex behavior differences across interpreter versions). Worth confirming the foundation counterpart is updated too.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

This Python version bump in a reusable workflow affects files owned by wave-av/streaming-team, not the PR author. Unresolved comments raise valid concerns about Python 3.14 availability in GitHub Actions runners and potential breakage across consumer repos that should be verified by the code owners.

No code changes detected at 2692be6. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.