Skip to content

chore(deps): update astral-sh/setup-uv to v10.1.0 - #53

Merged
mldangelo-oai merged 5 commits into
mainfrom
renovate/astral-sh-setup-uv-8.x
Sep 18, 2026
Merged

mldangelo-oai merged 5 commits into
mainfrom
renovate/astral-sh-setup-uv-8.x

Conversation

@renovate

@renovate renovate Bot commented Jul 1, 2026 •

Copy link
Copy Markdown
Contributor

This follow-up takes the action from the repository's v8.1.0 directly to setup-uv v10.1.0, pinned to bec219d24cd3e171d82865faccec33120bb574f4. The original Renovate proposal stopped at v8.3.2.

  • Pin uv itself to 0.12.17 in all six CI and release jobs. setup-uv v10.1 checks the downloaded artifact against Astral's version manifest for newer versions, and Renovate understands the version input. This includes upstream package-index hash verification added in uv 0.12.16.
  • Use enable-cache: auto so normal CI still uses the cache while sensitive events retain the v10 protection. Accept the v9 default of not pruning the cache.
  • This branch is integrated with the Node/CI baseline and previously merged dependency changes.
  • Verified the official manifest entries for Linux, Windows, and macOS; the downloaded macOS archive also matched both the manifest and Astral's release checksum. Verified all six workflow occurrences, linted all workflows, and tested uv 0.12.17 against the repository lock. GitHub runs the normal Linux/Windows matrix for this PR.
Original Renovate proposal for v8.3.2

This PR contains the following updates:

Package Type Update Change
astral-sh/setup-uv action minor v8.1.0 → v8.3.2

Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

v8.3.2

Compare Source

v8.3.1

Compare Source

v8.3.0

Compare Source

v8.2.0: 🌈 New inputs quiet and download-from-astral-mirror

Compare Source

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details.
In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

download-from-astral-mirror

In some cases you may want to directly use the fallback of checking for available versions and downloading releases from GitHub instead of using the astral.sh mirror. Setting download-from-astral-mirror: false allows you to do that.

Bugfixes

When using the astral.sh mirror to query available versions and download releases (done by default) we now stop sending the GitHub token in the header. The mirror never looked at it but we shouldn't be handing out that data even if it is just a short lived token.
All other bugfixes try to limit the impact of failed GitHub queries due to retries and other faults.

We couldn't pinpoint all rootcauses yet but added more logging for error cases to track them down.

🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "monthly"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-8.x branch from ff1e545 to 72310e6 Compare July 8, 2026 09:41
@renovate renovate Bot changed the title chore(deps): update astral-sh/setup-uv action to v8.2.0 chore(deps): update astral-sh/setup-uv action to v8.3.0 Jul 8, 2026
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-8.x branch from 72310e6 to 1feeefb Compare July 10, 2026 11:41
@renovate renovate Bot changed the title chore(deps): update astral-sh/setup-uv action to v8.3.0 chore(deps): update astral-sh/setup-uv action to v8.3.1 Jul 10, 2026
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-8.x branch from 1feeefb to b10326c Compare July 11, 2026 10:12
@renovate renovate Bot changed the title chore(deps): update astral-sh/setup-uv action to v8.3.1 chore(deps): update astral-sh/setup-uv action to v8.3.2 Jul 11, 2026
@mldangelo-oai mldangelo-oai changed the title chore(deps): update astral-sh/setup-uv action to v8.3.2 chore(deps): update astral-sh/setup-uv to v10.1.0 Sep 18, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-18T19:16:32.805333Z 8d407d3 New commits
🔒 Security Review ✅ Completed 2026-09-18T19:17:02.905499Z 8d407d3 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@renovate

renovate Bot commented Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@mldangelo-oai
mldangelo-oai merged commit 089431a into main Sep 18, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant