29b59d65ad
Add a workflow to publish versions to another repository ( #17648 )
...
This is loosely a copy of the `publish-docs` workflow. It uses
https://github.com/astral-sh/versions/blob/main/scripts/publish-version.py
to add the latest version in the cargo dist plan to that repository.
2026-01-29 13:50:52 -06:00
7fa30ab278
Move release plan checks to a separate workflow ( #17422 )
...
We get a bunch of redundant skipped `Release / Build binary ...` jobs in
CI otherwise, and I would rather the release workflow didn't have a pull
request trigger at all.
Follows #17388
2026-01-12 14:49:40 -06:00
903dd292b3
Split up ci.yml ( #17388 )
...
This file is too big for an LLM context window and several contributors
have complained about it being too scary to touch.
This also gets us collapsible sections in the UI.
I renamed some jobs for clarity in the meantime. And added a meta-job
for required checks passing so we can avoid churn in our "Settings" when
we change job names.
Note this was entirely refactored by Claude.
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-12 12:34:30 -06:00
edafa2c020
Update actions/checkout digest to 8e8c483 ( #13905 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-12-29 17:14:09 -05:00
3d745d2261
Update actions/attest-build-provenance digest to 00014ed ( #16556 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: William Woodruff <william@astral.sh >
2025-12-29 16:15:40 -05:00
69910b4aab
Publish PyPI releases before crates.io artifacts ( #16989 )
...
## Summary
Closes #16987 .
## Test Plan
We need a good way to dry-run this...
---------
Signed-off-by: William Woodruff <william@astral.sh >
2025-12-09 15:20:21 -06:00
7954b34989
Revert "Temporarily drop crates-publish from the release for 0.9.15 re-run ( #16945 )" ( #16947 )
...
This reverts commit 89c411f0aehttps://github.com/astral-sh/uv/pull/16945 restoring crates publish.
2025-12-02 19:46:55 -06:00
89c411f0ae
Temporarily drop crates-publish from the release for 0.9.15 re-run ( #16945 )
...
See https://github.com/astral-sh/uv/pull/16944
The `crates.io` publish succeeded and is not idempotent (i.e., it'll
fail on another publish attempt) so we will skip it for a re-run of the
release workflow.
2025-12-02 18:57:47 -06:00
8d8aabb884
Add read permissions to publish-crates job ( #16797 )
2025-11-20 16:38:19 -06:00
dfe89047bb
Publish to crates.io ( #16770 )
2025-11-20 21:26:44 +00:00
d71ae61c0b
Fix github attestations of releases ( #16530 )
2025-10-30 22:31:19 -04:00
f3d3203734
Add uv release artifact attestations ( #11357 )
...
## Summary
Similar to https://github.com/astral-sh/uv/pull/8685 , this adds
attestations for uv release artifacts.
The changes on this PR would add attestations for
* `dist-manifest.json`
* `uv-installer.ps1`
* `uv-installer.sh`
* All `*.tar.gz` and `*.zip` uv binary files
## Test Plan
~(clarifying note: I'm aware this file is managed cargo dist and this
will not work without allow-dirty at this time)~
~Currently cargo dist targets generation in `build_local_artifacts`
which is not used here, plus we'd ideally want to attest the GH
downloads / artifacts.~ (edit: fixed by
https://github.com/axodotdev/cargo-dist/pull/2000 )
At a glance, this release workflow seems to work successfully:
e.g. Example Run:
https://github.com/samypr100/uv/actions/runs/13229100555
e.g. Example Release:
https://github.com/samypr100/uv/releases/tag/0.5.29
---------
Co-authored-by: Aria Desires <aria.desires@gmail.com >
2025-10-29 20:33:37 -04:00
6263d1008d
Re-upstream to dist to axodotdev/cargo-dist ( #15798 )
...
## Summary
Both https://github.com/axodotdev/cargo-dist/releases/tag/v0.29.0 and
https://github.com/axodotdev/cargo-dist/releases/tag/v0.30.0 seem to
contain all relevant changes from
https://github.com/astral-sh/cargo-dist
## Test Plan
Not tested yet given I'd be running from a fork, but a dry-run run from
astral-sh/uv would be great 😅
2025-09-22 13:20:06 -04:00
371502df62
Upgrade cargo-dist to add UV_INSTALLER_URL to PowerShell installer ( #15114 )
...
## Summary
This ensures that `UV_INSTALLER_URL` is present in the PowerShell
installer.
2025-08-06 21:23:34 +01:00
b31d786fe9
Add UV_ prefix to installer environment variables ( #14964 )
...
## Summary
Available as of https://github.com/astral-sh/cargo-dist/pull/46 .
2025-07-30 01:24:59 +00:00
c710246d76
Update cargo-dist ( #14156 )
...
Also took the time to migrate to the external config format to normalize
our projects for team comfort (`ty` *has* to use this format for its
workspace structure).
2025-06-20 14:20:01 -04:00
1cfc67d266
Update Artifact GitHub Actions dependencies ( #13290 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| actions/download-artifact | action | digest | `95815c3` -> `d3f86a1` |
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact )
| action | minor | `v4.2.1` -> `v4.3.0` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
###
[`v4.3.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.3.0 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.2.1...v4.3.0 )
#### What's Changed
- feat: implement new `artifact-ids` input by
[@​GrantBirki](https://redirect.github.com/GrantBirki ) in
[https://github.com/actions/download-artifact/pull/401 ](https://redirect.github.com/actions/download-artifact/pull/401 )
- Fix workflow example for downloading by artifact ID by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/download-artifact/pull/402 ](https://redirect.github.com/actions/download-artifact/pull/402 )
- Prep for v4.3.0 release by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/404 ](https://redirect.github.com/actions/download-artifact/pull/404 )
#### New Contributors
- [@​GrantBirki](https://redirect.github.com/GrantBirki ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/401 ](https://redirect.github.com/actions/download-artifact/pull/401 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.2.1...v4.3.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 09:52:26 +00:00
eef3fc2215
update cargo-dist and enable ci checks ( #12949 )
...
Fixes #12881
Potentially Fixes #12780
Prevents #12879
2025-04-17 19:32:56 -04:00
693110506a
Update Artifact GitHub Actions dependencies ( #12865 )
2025-04-14 08:31:19 -04:00
876b9aef50
update cargo-dist ( #12790 )
...
Putting this up to confirm that it does what it should:
* undirty the release.yml by including action-commits in the config
* add `persist-credentials=false` hardening
* includes but does not use `[package.metadata.dist.binaries]` overrides
(for #11786 )
2025-04-10 09:42:41 -04:00
ba443fae75
use astral-sh/cargo-dist instead ( #12659 )
2025-04-03 17:25:18 -04:00
be615cb213
Update Artifact GitHub Actions dependencies ( #12572 )
2025-03-31 09:07:01 -04:00
5880a98163
Pin dependencies ( #12191 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action ) |
action | pinDigest | -> `0010eb0` |
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action )
| action | pinDigest | -> `3f4a782` |
| [PyO3/maturin-action](https://redirect.github.com/PyO3/maturin-action )
| action | pinDigest | -> `36db840` |
|
[SebRollen/toml-action](https://redirect.github.com/SebRollen/toml-action )
| action | pinDigest | -> `b1b3628` |
| [Swatinem/rust-cache](https://redirect.github.com/Swatinem/rust-cache )
| action | pinDigest | -> `f0deed1` |
|
[acj/freebsd-firecracker-action](https://redirect.github.com/acj/freebsd-firecracker-action )
| action | pinDigest | -> `4d93174` |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance )
| action | pinDigest | -> `c074443` |
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | pinDigest | -> `11bd719` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python )
| action | pinDigest | -> `4237552` |
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | pinDigest | -> `f94ec6b` |
|
[conda-incubator/setup-miniconda](https://redirect.github.com/conda-incubator/setup-miniconda )
| action | pinDigest | -> `505e639` |
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | pinDigest | -> `471d1dc` |
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | pinDigest | -> `74a5d14` |
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | pinDigest | -> `902fa8e` |
|
[docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action )
| action | pinDigest | -> `b5ca514` |
|
[ludeeus/action-shellcheck](https://redirect.github.com/ludeeus/action-shellcheck )
| action | pinDigest | -> `00cae50` |
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request )
| action | pinDigest | -> `271a8d0` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action )
| action | pinDigest | -> `2153a01` |
|
[uraimo/run-on-arch-action](https://redirect.github.com/uraimo/run-on-arch-action )
| action | pinDigest | -> `ac33288` |
|
[webfactory/ssh-agent](https://redirect.github.com/webfactory/ssh-agent )
| action | pinDigest | -> `dc588b6` |
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 16:25:19 -04:00
8cf439bc36
Update Artifact GitHub Actions dependencies ( #12192 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact )
| action | minor | `v4` -> `v4.1.9` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact )
| action | minor | `v4` -> `v4.6.1` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
###
[`v4.1.9`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.9 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.8...v4.1.9 )
#### What's Changed
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- docs: small migration fix by
[@​froblesmartin](https://redirect.github.com/froblesmartin ) in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- Update MIGRATION.md by
[@​andyfeller](https://redirect.github.com/andyfeller ) in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- Update artifact package to 2.2.2 by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- [@​froblesmartin](https://redirect.github.com/froblesmartin )
made their first contribution in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- [@​andyfeller](https://redirect.github.com/andyfeller ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- [@​yacaovsnc](https://redirect.github.com/yacaovsnc ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.9
###
[`v4.1.8`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.8 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.7...v4.1.8 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/341 ](https://redirect.github.com/actions/download-artifact/pull/341 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.8
###
[`v4.1.7`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.7 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.6...v4.1.7 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
dependency by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/325 ](https://redirect.github.com/actions/download-artifact/pull/325 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.6...v4.1.7
###
[`v4.1.6`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.6 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.5...v4.1.6 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/download-artifact/pull/324 ](https://redirect.github.com/actions/download-artifact/pull/324 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.5...v4.1.6
###
[`v4.1.5`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.5 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.4...v4.1.5 )
##### What's Changed
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/322 ](https://redirect.github.com/actions/download-artifact/pull/322 )
- Update dependencies `@actions/core` to v1.10.1 and `@actions/artifact`
to v2.1.5
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.4...v4.1.5
###
[`v4.1.4`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.4 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.3...v4.1.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/307 ](https://redirect.github.com/actions/download-artifact/pull/307 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.4
###
[`v4.1.3`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.3 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.2...v4.1.3 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/download-artifact/pull/292 ](https://redirect.github.com/actions/download-artifact/pull/292 )
- Update toolkit dependency with updated unzip logic by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/303 ](https://redirect.github.com/actions/download-artifact/pull/303 )
#### New Contributors
- [@​bethanyj28](https://redirect.github.com/bethanyj28 ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.3
###
[`v4.1.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.2 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.1...v4.1.2 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.1.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.1 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.0...v4.1.1 )
- Fix transient request timeouts
[https://github.com/actions/download-artifact/issues/249 ](https://redirect.github.com/actions/download-artifact/issues/249 )
- Bump `@actions/artifacts` to latest version
###
[`v4.1.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4...v4.1.0 )
#### What's Changed
- Some cleanup by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/247 ](https://redirect.github.com/actions/download-artifact/pull/247 )
- Fix default for run-id by
[@​stchr](https://redirect.github.com/stchr ) in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
- Support pattern matching to filter artifacts & merge to same directory
by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/259 ](https://redirect.github.com/actions/download-artifact/pull/259 )
#### New Contributors
- [@​stchr](https://redirect.github.com/stchr ) made their first
contribution in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.0
</details>
<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>
###
[`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1 )
#### What's Changed
- Update to use artifact 2.2.2 package by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/673 ](https://redirect.github.com/actions/upload-artifact/pull/673 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.1
###
[`v4.6.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.5.0...v4.6.0 )
##### What's Changed
- Expose env vars to control concurrency and timeout by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/662 ](https://redirect.github.com/actions/upload-artifact/pull/662 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.0
###
[`v4.5.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.5.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0 )
##### What's Changed
- fix: deprecated `Node.js` version in action by
[@​hamirmahal](https://redirect.github.com/hamirmahal ) in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- Add new `artifact-digest` output by
[@​bdehamer](https://redirect.github.com/bdehamer ) in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
##### New Contributors
- [@​hamirmahal](https://redirect.github.com/hamirmahal ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- [@​bdehamer](https://redirect.github.com/bdehamer ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0
###
[`v4.4.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3 )
#### What's Changed
- Undo indirect dependency updates from
[#​627](https://redirect.github.com/actions/upload-artifact/issues/627 )
by [@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/632 ](https://redirect.github.com/actions/upload-artifact/pull/632 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3
###
[`v4.4.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2 )
#### What's Changed
- Bump `@actions/artifact` to 2.1.11 by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/627 ](https://redirect.github.com/actions/upload-artifact/pull/627 )
- Includes fix for relative symlinks not resolving properly
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2
###
[`v4.4.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1 )
#### What's Changed
- Add a section about hidden files by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/607 ](https://redirect.github.com/actions/upload-artifact/pull/607 )
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to latest version, includes symlink and timeout fixes by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/625 ](https://redirect.github.com/actions/upload-artifact/pull/625 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1
###
[`v4.4.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0 )
#### Notice: Breaking Changes ⚠️
We will no longer include hidden files and folders by default in the
`upload-artifact` action of this version. This reduces the risk that
credentials are accidentally uploaded into artifacts. Customers who need
to continue to upload these files can use a new option,
`include-hidden-files`, to continue to do so.
See ["Notice of upcoming deprecations and breaking changes in GitHub
Actions
runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/ )
changelog and [this
issue](https://redirect.github.com/actions/upload-artifact/issues/602 )
for more details.
#### What's Changed
- Exclude hidden files by default by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/598 ](https://redirect.github.com/actions/upload-artifact/pull/598 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0
###
[`v4.3.6`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.6 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6 )
#### What's Changed
- Revert to
[@​actions/artifact](https://redirect.github.com/actions/artifact )
2.1.8 by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/594 ](https://redirect.github.com/actions/upload-artifact/pull/594 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.6
###
[`v4.3.5`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.5 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5 )
#### What's Changed
- Bump
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to v2.1.9 by [@​robherley](https://redirect.github.com/robherley )
in
[https://github.com/actions/upload-artifact/pull/588 ](https://redirect.github.com/actions/upload-artifact/pull/588 )
- Fixed artifact upload chunk timeout logic
[#​1774](https://redirect.github.com/actions/toolkit/pull/1774 )
- Use lazy stream to prevent issues with open file limits
[#​1771](https://redirect.github.com/actions/toolkit/pull/1771 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5
###
[`v4.3.4`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.4 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/584 ](https://redirect.github.com/actions/upload-artifact/pull/584 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4
###
[`v4.3.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/565 ](https://redirect.github.com/actions/upload-artifact/pull/565 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3
###
[`v4.3.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/516 ](https://redirect.github.com/actions/upload-artifact/pull/516 )
- Minor fix to the migration readme by
[@​andrewakim](https://redirect.github.com/andrewakim ) in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/561 ](https://redirect.github.com/actions/upload-artifact/pull/561 )
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core`
to v1.0.1 by [@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/562 ](https://redirect.github.com/actions/upload-artifact/pull/562 )
#### New Contributors
- [@​andrewakim](https://redirect.github.com/andrewakim ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2
###
[`v4.3.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.0...v4.3.1 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.3.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.2.0...v4.3.0 )
#### What's Changed
- Reorganize upload code in prep for merge logic & add more tests by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/504 ](https://redirect.github.com/actions/upload-artifact/pull/504 )
- Add sub-action to merge artifacts by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/505 ](https://redirect.github.com/actions/upload-artifact/pull/505 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.0
###
[`v4.2.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.2.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.1.0...v4.2.0 )
#### What's Changed
- Ability to overwrite an Artifact by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/501 ](https://redirect.github.com/actions/upload-artifact/pull/501 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.2.0
###
[`v4.1.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.0.0...v4.1.0 )
#### What's Changed
- Add migrations docs by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/482 ](https://redirect.github.com/actions/upload-artifact/pull/482 )
- Update README.md by
[@​samuelwine](https://redirect.github.com/samuelwine ) in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
- Support artifact-url output by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/496 ](https://redirect.github.com/actions/upload-artifact/pull/496 )
- Update readme to reflect new 500 artifact per job limit by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/497 ](https://redirect.github.com/actions/upload-artifact/pull/497 )
#### New Contributors
- [@​samuelwine](https://redirect.github.com/samuelwine ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 15:11:23 -05:00
b7f98f1ff2
Use the Depot Ubuntu runners instead of GitHub for release workflows ( #11948 )
...
See
-
https://opensource.axo.dev/cargo-dist/book/reference/config.html#github-custom-runners
- https://github.com/axodotdev/cargo-dist/issues/1760
- #11935
2025-03-04 13:28:14 -06:00
47f80a62c4
Sign docker images using cosign ( #8685 )
...
cosign uses the GitHub action ID token to retrieve an ephemeral code
signing certificate from Fulcio, and store the signature in the Rekor
transparency log.
Once an image has been successfully signed, you should be able to verify
the signature with:
```sh
cosign verify ghcr.io/astral-sh/uv:latest --certificate-identity-regexp='.*' --certificate-oidc-issuer-regexp='.*'
```
Closes #8670
2025-01-31 09:00:23 -06:00
26210cc0e6
Bump cargo-dist version to 0.28.0 ( #10884 )
...
Some installer improvements; see
https://github.com/axodotdev/cargo-dist/blob/main/CHANGELOG.md#version-0280-2025-01-08
2025-01-23 10:49:53 -06:00
d1b1da5ac1
Upgrade cargo-dist to v0.27.0 ( #10141 )
...
## Summary
Required peer to https://github.com/astral-sh/uv/pull/10115 .
2024-12-24 08:24:14 -05:00
7f9ab17577
Upgrade to cargo-dist 0.25.2-prerelease.3 ( #8958 )
...
Gets us the upstream fix
(https://github.com/axodotdev/cargo-dist/pull/1538Z ) for
https://github.com/axodotdev/axoupdater/issues/210 so we don't need to
patch releases manually for self update to work.
Includes a few other changes, i.e., they validate checksums now.
2024-11-08 17:08:23 -06:00
2340d73e33
Upgrade to cargo-dist v0.25.1 ( #8873 )
...
## Summary
This gets us access to `UV_INSTALLER_GITHUB_BASE_URL` and
`UV_INSTALLER_GHE_BASE_URL`.
See: https://github.com/axodotdev/cargo-dist/releases/tag/v0.25.1 .
2024-11-06 21:48:43 -05:00
cf7dbaa7a7
Update to cargo-dist v0.23.0 ( #8270 )
...
## Summary
Closes https://github.com/astral-sh/uv/issues/8242 .
2024-10-16 16:25:03 -04:00
b36b7badff
Upgrade to the latest cargo-dist version ( #7092 )
...
Notably includes support for
[`UV_INSTALL_DIR`](https://github.com/axodotdev/cargo-dist/blob/main/CHANGELOG.md#app-branded-installer-environment-variables )
2024-09-05 13:30:33 -05:00
c9e66bf8c8
Add publish-docs to release workflow ( #5153 )
...
## Summary
Forgot to add this here. Just kicked it off manually for the last
release.
2024-07-17 17:49:09 +00:00
1e8f5926e6
Upgrade to cargo-dist v0.18.0 ( #4792 )
...
## Summary
This enables us to get rid of `allow-dirty`!
2024-07-03 22:39:51 +00:00
6b45c41d76
Update cargo-dist to v0.17.0 ( #4608 )
...
## Summary
See: https://github.com/axodotdev/cargo-dist/releases/tag/v0.17.0 .
Relevant:
> The only reason you might want to override this setting is if you're
using [dispatch-releases =
true](https://opensource.axo.dev/cargo-dist/book/reference/config.html#dispatch-releases )
and you really want your git tag to be the last operation in your
release process (because creating a GitHub Release necessarily creates
the git tag if it doesn't yet exist, and many organizations really don't
like when you delete/change git tags). In this case setting
github-release = "announce" will accomplish that, but the above race
conditions would then apply.
We _do_ use `dispatch-releases = true`, and we _do_ want the git tag to
be the last operation, so we need to set `github-release = "announce"`
to preserve our current behavior.
2024-06-28 10:59:09 -04:00
e9490b92b5
Upgrade cargo-dist to v0.14.0 ( #3414 )
2024-05-06 13:48:41 -04:00
2a9cbdb11f
Upgrade to cargo-dist 0.13.3 ( #3217 )
2024-04-23 18:18:21 +00:00
ccf4a85f89
Fix Docker publish permissions in release pipeline ( #3195 )
2024-04-22 19:05:21 -04:00
11c6a07bb5
Regenerate with cargo-dist 0.13.2 ( #3194 )
2024-04-22 19:15:14 +00:00
1bf9d879ab
Re-add Docker image to release pipeline ( #3155 )
...
## Summary
I already re-created and pushed the image, and set its visibility to
public (it defaults to private) -- see:
https://github.com/astral-sh/uv/pkgs/container/uv .
Closes https://github.com/astral-sh/uv/issues/2774 .
2024-04-21 12:02:48 -04:00
90735660cb
Upgrade cargo-dist ( #2936 )
2024-04-09 16:19:22 +00:00
aa7760534f
Update dependency ubuntu to v22 ( #2897 )
2024-04-07 23:41:22 -05:00
0382abee70
Bump cargo-dist to 0.13.0-prerelease.3 ( #2783 )
...
Closes #2770 .
2024-04-02 21:23:55 +00:00
df812a181e
feat: bump actions/{download,upload}-artifact ( #1947 )
...
## Summary
Closes #1943
Makes sure `build-binaries` and `publish-pypi` workflows are compatible
with `actions/{download,upload}-artifact@v4`. In nature, this PR is very
similar to the changes in https://github.com/astral-sh/ruff/pull/10105 .
This PR also updates cargo-dist.
## Test Plan
I ran a small non-dry-run [smoke
test](https://github.com/samypr100/uv/actions/runs/8027864059 ) on my own
fork CI with only linux builds (for speed) and those jobs seem to work
at a glance.
2024-02-25 20:09:04 -05:00
5a50a753bd
Update cargo dist ( #1929 )
...
Pull in the fixes in the last few releases.
2024-02-23 18:56:34 +00:00
458b4f2dde
Remove Docker ( #1323 )
...
I will revisit this later.
2024-02-15 18:30:18 +00:00
72924935f8
Upgrade cargo-dist ( #1016 )
2024-01-19 20:19:02 +00:00
980e1f6d79
Set explicit Docker permissions ( #997 )
2024-01-19 05:29:29 +00:00
6af4eb7a45
Remove [puffin] prefix ( #989 )
...
And disable the plan job on CI now.
2024-01-19 01:59:06 +00:00
3a1cd44fc6
Add Puffin Docker image ( #985 )
...
Missing piece for the release.
## Test Plan
Built the image locally:
```shell
❯ docker run 99956098e1f8f04e209dcfc4a0afcee67df1fe8a726c164884e67f035b1a0f42
Usage: puffin [OPTIONS] <COMMAND>
Commands:
pip Resolve and install Python packages
venv Create a virtual environment
clean Clear the cache
help Print this message or the help of the given subcommand(s)
Options:
-q, --quiet Do not print any output
-v, --verbose Use verbose output
-n, --no-cache Avoid reading from or writing to the cache
--cache-dir <CACHE_DIR> Path to the cache directory [env: PUFFIN_CACHE_DIR=]
-h, --help Print help
-V, --version Print version
```
2024-01-18 20:21:31 -05:00
Zanie Blue