7c2f6c696b
Update astral-sh/setup-uv action to v8 ( #18765 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | major | `v7.6.0` → `v8.0.0` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v8.0.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v8.0.0 ):
🌈 Immutable releases and secure tags
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.6.0...v8.0.0 )
### This is the first immutable release of `setup-uv` 🥳
All future releases are also immutable, if you want to know more about
what this means checkout [the
docs](https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases ).
This release also has two breaking changes
#### New format for `manifest-file`
The previously deprecated way of defining a custom version manifest to
control which `uv` versions are available and where to download them
from got removed. The functionality is still there but you have to use
the [new
format](https://redirect.github.com/astral-sh/setup-uv/blob/main/docs/customization.md#format ).
#### No more major and minor tags
To increase **security** even more we will **stop publishing minor
tags**. You won't be able to use `@v8` or `@v8.0` any longer. We do this
because pinning to major releases opens up users to supply chain attacks
like what happened to
[tj-actions](https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/ ).
> \[!TIP]
> Use the immutable tag as a version `astral-sh/setup-uv@8.0.0`
> Or even better the githash
`astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57`
#### 🚨 Breaking changes
- Remove update-major-minor-tags workflow
[@​eifinger](https://redirect.github.com/eifinger )
([#​826](https://redirect.github.com/astral-sh/setup-uv/issues/826 ))
- Remove deprecrated custom manifest
[@​eifinger](https://redirect.github.com/eifinger )
([#​813](https://redirect.github.com/astral-sh/setup-uv/issues/813 ))
#### 🧰 Maintenance
- Shortcircuit latest version from manifest
[@​eifinger](https://redirect.github.com/eifinger )
([#​828](https://redirect.github.com/astral-sh/setup-uv/issues/828 ))
- Simplify inputs.ts
[@​eifinger](https://redirect.github.com/eifinger )
([#​827](https://redirect.github.com/astral-sh/setup-uv/issues/827 ))
- Bump release-drafter to v7.1.1
[@​eifinger](https://redirect.github.com/eifinger )
([#​825](https://redirect.github.com/astral-sh/setup-uv/issues/825 ))
- Refactor inputs
[@​eifinger](https://redirect.github.com/eifinger )
([#​823](https://redirect.github.com/astral-sh/setup-uv/issues/823 ))
- Replace inline compile args with tsconfig
[@​eifinger](https://redirect.github.com/eifinger )
([#​824](https://redirect.github.com/astral-sh/setup-uv/issues/824 ))
- chore: update known checksums for 0.11.2
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​821](https://redirect.github.com/astral-sh/setup-uv/issues/821 ))
- chore: update known checksums for 0.11.1
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​817](https://redirect.github.com/astral-sh/setup-uv/issues/817 ))
- chore: update known checksums for 0.11.0
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​815](https://redirect.github.com/astral-sh/setup-uv/issues/815 ))
- Fix latest-version workflow check
[@​eifinger](https://redirect.github.com/eifinger )
([#​812](https://redirect.github.com/astral-sh/setup-uv/issues/812 ))
- chore: update known checksums for 0.10.11/0.10.12
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​811](https://redirect.github.com/astral-sh/setup-uv/issues/811 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1kb2NrZXIiLCJidWlsZDpza2lwLXJlbGVhc2UiLCJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 09:48:20 +02:00
5708102a5d
Update Swatinem/rust-cache action to v2.9.1 ( #18656 )
2026-03-22 21:39:30 -04:00
24d81d2bf4
Update astral-sh/setup-uv action to v7.6.0 ( #18515 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 17:19:45 +00:00
afd816f3cd
Update astral-sh/setup-uv action to v7.5.0 ( #18432 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | minor | `v7.3.1` → `v7.5.0` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v7.5.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v7.5.0 ):
🌈 Use `astral-sh/versions` as version provider
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.4.0...v7.5.0 )
### No more rate-limits
This release addresses a long-standing source of timeouts and rate-limit
failures in setup-uv.
Previously, the action resolved version identifiers like 0.5.x by
iterating over available uv releases via the GitHub API to find the best
match. In contrast, latest and exact versions such as 0.5.0 skipped
version resolution entirely and downloaded uv directly.
The `manifest-file` input was an earlier attempt to improve this. It
allows providing an url to a file that lists available versions,
checksums, and even custom download URLs. The action also shipped with
such a manifest.
However, because that bundled file could become outdated whenever new uv
releases were published, the action still had to fall back to the GitHub
API in many cases.
This release solves the problem by sourcing version data from Astral’s
versions repository via the raw content endpoint:
<https://raw.githubusercontent.com/astral-sh/versions/refs/heads/main/v1/uv.ndjson >
By using the raw endpoint instead of the GitHub API, version resolution
no longer depends on API authentication and is much less likely to run
into rate limits or timeouts.
***
> \[!TIP]
> The next section is only interesting for users of the `manifest-file`
input
The `manifest-file` input lets you override that source with your own
URL, for example to test custom uv builds or alternate download
locations.
The manifest file must be in NDJSON format, where each line is a JSON
object representing a version and its artifacts. For example:
```json
{"version":"0.10.7","artifacts":[{"platform":"x86_64-unknown-linux-gnu","variant":"default","url":"https://example.com/uv-x86_64-unknown-linux-gnu.tar.gz ","archive_format":"tar.gz","sha256":"..."}]}
{"version":"0.10.6","artifacts":[{"platform":"x86_64-unknown-linux-gnu","variant":"default","url":"https://example.com/uv-x86_64-unknown-linux-gnu.tar.gz ","archive_format":"tar.gz","sha256":"..."}]}
```
> \[!WARNING]\
> The old format still works but is deprecated. A warning will be logged
when you use it.
#### Changes
- docs: replace copilot instructions with AGENTS.md
[@​eifinger](https://redirect.github.com/eifinger )
([#​794](https://redirect.github.com/astral-sh/setup-uv/issues/794 ))
#### 🚀 Enhancements
- Use astral-sh/versions as primary version provider
[@​eifinger](https://redirect.github.com/eifinger )
([#​802](https://redirect.github.com/astral-sh/setup-uv/issues/802 ))
#### 📚 Documentation
- docs: add cross-client dependabot rollup skill
[@​eifinger](https://redirect.github.com/eifinger )
([#​793](https://redirect.github.com/astral-sh/setup-uv/issues/793 ))
###
[`v7.4.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v7.4.0 ):
🌈 Add riscv64 architecture support to platform detection
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.3.1...v7.4.0 )
##### Changes
Thank you [@​luhenry](https://redirect.github.com/luhenry ) for
adding support for riscv64 arch
##### 🚀 Enhancements
- Add riscv64 architecture support to platform detection
[@​luhenry](https://redirect.github.com/luhenry )
([#​791](https://redirect.github.com/astral-sh/setup-uv/issues/791 ))
##### 🧰 Maintenance
- Delete .github/workflows/dependabot-build.yml
[@​eifinger](https://redirect.github.com/eifinger )
([#​789](https://redirect.github.com/astral-sh/setup-uv/issues/789 ))
- Harden Dependabot build workflow
[@​eifinger](https://redirect.github.com/eifinger )
([#​788](https://redirect.github.com/astral-sh/setup-uv/issues/788 ))
- Fix: check PR author instead of event sender for Dependabot detection
[@​eifinger-bot](https://redirect.github.com/eifinger-bot )
([#​787](https://redirect.github.com/astral-sh/setup-uv/issues/787 ))
- chore: update known checksums for 0.10.9
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​783](https://redirect.github.com/astral-sh/setup-uv/issues/783 ))
- Add workflow to auto-build dist on Dependabot PRs
[@​eifinger-bot](https://redirect.github.com/eifinger-bot )
([#​782](https://redirect.github.com/astral-sh/setup-uv/issues/782 ))
- chore: update known checksums for 0.10.8
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​779](https://redirect.github.com/astral-sh/setup-uv/issues/779 ))
- chore: update known checksums for 0.10.7
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​775](https://redirect.github.com/astral-sh/setup-uv/issues/775 ))
##### ⬆️ Dependency updates
- chore(deps): bump versions
[@​eifinger](https://redirect.github.com/eifinger )
([#​792](https://redirect.github.com/astral-sh/setup-uv/issues/792 ))
- Bump actions/setup-node from 6.2.0 to 6.3.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​790](https://redirect.github.com/astral-sh/setup-uv/issues/790 ))
- Bump eifinger/actionlint-action from 1.10.0 to 1.10.1
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​778](https://redirect.github.com/astral-sh/setup-uv/issues/778 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1kb2NrZXIiLCJidWlsZDpza2lwLXJlbGVhc2UiLCJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-13 07:51:23 +00:00
4ff4720da5
Use uv to manage our Python documentation dependencies ( #18263 )
...
I want to lock our Zig build dependencies and this is an incremental
step towards doing so via uv
2026-03-04 09:52:15 -06:00
cd0589a7bd
Update astral-sh/setup-uv action to v7.3.1 ( #18233 )
2026-03-01 20:54:15 -05:00
70a3bf09df
Update peter-evans/create-pull-request action to v8.1.0 ( #17932 )
2026-02-23 21:37:00 -05:00
bef1c37e13
Fix sync Python CI after test crate split-out ( #18086 )
...
Fixup for #17551
2026-02-18 17:12:59 +00:00
ff577a2edf
Update astral-sh/setup-uv action to v7.3.0 ( #17927 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | minor | `v7.2.1` → `v7.3.0` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v7.3.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v7.3.0 ):
🌈 New features and bug fixes for activate-environment
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.2.1...v7.3.0 )
#### Changes
This release contains a few bug fixes and a new feature for the
activate-environment functionality.
#### 🐛 Bug fixes
- fix: warn instead of error when no python to cache
[@​eifinger](https://redirect.github.com/eifinger )
([#​762](https://redirect.github.com/astral-sh/setup-uv/issues/762 ))
- fix: use --clear to create venv
[@​eifinger](https://redirect.github.com/eifinger )
([#​761](https://redirect.github.com/astral-sh/setup-uv/issues/761 ))
#### 🚀 Enhancements
- feat: add venv-path input for activate-environment
[@​eifinger](https://redirect.github.com/eifinger )
([#​746](https://redirect.github.com/astral-sh/setup-uv/issues/746 ))
#### 🧰 Maintenance
- chore: update known checksums for 0.10.0
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​759](https://redirect.github.com/astral-sh/setup-uv/issues/759 ))
- refactor: tilde-expansion tests as unittests and no self-hosted tests
[@​eifinger](https://redirect.github.com/eifinger )
([#​760](https://redirect.github.com/astral-sh/setup-uv/issues/760 ))
- chore: update known checksums for 0.9.30
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​756](https://redirect.github.com/astral-sh/setup-uv/issues/756 ))
- chore: update known checksums for 0.9.29
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​748](https://redirect.github.com/astral-sh/setup-uv/issues/748 ))
#### 📚 Documentation
- Fix punctuation
[@​pm-dev563](https://redirect.github.com/pm-dev563 )
([#​747](https://redirect.github.com/astral-sh/setup-uv/issues/747 ))
#### ⬆️ Dependency updates
- Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​753](https://redirect.github.com/astral-sh/setup-uv/issues/753 ))
- Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​751](https://redirect.github.com/astral-sh/setup-uv/issues/751 ))
- Bump actions/checkout from 6.0.1 to 6.0.2
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​740](https://redirect.github.com/astral-sh/setup-uv/issues/740 ))
- Bump release-drafter/release-drafter from 6.1.0 to 6.2.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​743](https://redirect.github.com/astral-sh/setup-uv/issues/743 ))
- Bump eifinger/actionlint-action from 1.9.3 to 1.10.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​731](https://redirect.github.com/astral-sh/setup-uv/issues/731 ))
- Bump actions/setup-node from 6.1.0 to 6.2.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​738](https://redirect.github.com/astral-sh/setup-uv/issues/738 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1yZWxlYXNlIiwiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-11 17:59:49 -06:00
1f406a177e
Update astral-sh/setup-uv action to v7.2.1 ( #17804 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | patch | `v7.2.0` → `v7.2.1` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v7.2.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v7.2.1 ):
🌈 update known checksums up to 0.9.28
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.2.0...v7.2.1 )
##### Changes
##### 🧰 Maintenance
- chore: update known checksums for 0.9.28
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​744](https://redirect.github.com/astral-sh/setup-uv/issues/744 ))
- chore: update known checksums for 0.9.27
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​742](https://redirect.github.com/astral-sh/setup-uv/issues/742 ))
- chore: update known checksums for 0.9.26
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​734](https://redirect.github.com/astral-sh/setup-uv/issues/734 ))
- chore: update known checksums for 0.9.25
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​733](https://redirect.github.com/astral-sh/setup-uv/issues/733 ))
- chore: update known checksums for 0.9.24
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​730](https://redirect.github.com/astral-sh/setup-uv/issues/730 ))
##### 📚 Documentation
- Clarify impact of using actions/setup-python
[@​eifinger](https://redirect.github.com/eifinger )
([#​732](https://redirect.github.com/astral-sh/setup-uv/issues/732 ))
##### ⬆️ Dependency updates
- Bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​741](https://redirect.github.com/astral-sh/setup-uv/issues/741 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1yZWxlYXNlIiwiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-02 11:18:41 +00:00
a7d5bc907b
Update actions/checkout action to v6.0.2 ( #17683 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | patch | `v6.0.1` → `v6.0.2` |
---
### Release Notes
<details>
<summary>actions/checkout (actions/checkout)</summary>
###
[`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602 )
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2 )
- Fix tag handling: preserve annotations and explicit fetch-tags by
[@​ericsciple](https://redirect.github.com/ericsciple ) in
[#​2356](https://redirect.github.com/actions/checkout/pull/2356 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYnVpbGQ6c2tpcC1yZWxlYXNlIiwiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-26 10:53:48 +00:00
abd6b8f56c
Update astral-sh/setup-uv action to v7.2.0 ( #17579 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | minor | `v7.1.6` → `v7.2.0` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v7.2.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v7.2.0 ):
🌈 add outputs python-version and python-cache-hit
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v7.1.6...v7.2.0 )
##### Changes
Among some minor typo fixes and quality of life features for developers
of actions the main feature of this release are new outputs:
- **python-version:** The Python version that was set (same content as
existing `UV_PYTHON`)
- **python-cache-hit:** A boolean value to indicate the Python cache
entry was found
While implementing this it became clear, that it is easier to handle the
Python binaries in a separate cache entry. The added benefit for users
is that the "normal" cache containing the dependencies can be used in
all runs no matter if these cache the Python binaries or not.
> \[!NOTE]\
> This release will invalidate caches that contain the Python binaries.
This happens a single time.
##### 🐛 Bug fixes
- chore: remove stray space from UV\_PYTHON\_INSTALL\_DIR message
[@​akx](https://redirect.github.com/akx )
([#​720](https://redirect.github.com/astral-sh/setup-uv/issues/720 ))
##### 🚀 Enhancements
- add outputs python-version and python-cache-hit
[@​eifinger](https://redirect.github.com/eifinger )
([#​728](https://redirect.github.com/astral-sh/setup-uv/issues/728 ))
- Add action typings with validation
[@​krzema12](https://redirect.github.com/krzema12 )
([#​721](https://redirect.github.com/astral-sh/setup-uv/issues/721 ))
##### 🧰 Maintenance
- fix: use uv\_build backend for old-python-constraint-project
[@​eifinger](https://redirect.github.com/eifinger )
([#​729](https://redirect.github.com/astral-sh/setup-uv/issues/729 ))
- chore: update known checksums for 0.9.22
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​727](https://redirect.github.com/astral-sh/setup-uv/issues/727 ))
- chore: update known checksums for 0.9.21
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​726](https://redirect.github.com/astral-sh/setup-uv/issues/726 ))
- chore: update known checksums for 0.9.20
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​725](https://redirect.github.com/astral-sh/setup-uv/issues/725 ))
- chore: update known checksums for 0.9.18
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​718](https://redirect.github.com/astral-sh/setup-uv/issues/718 ))
##### ⬆️ Dependency updates
- Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​719](https://redirect.github.com/astral-sh/setup-uv/issues/719 ))
- Bump github/codeql-action from 4.31.6 to 4.31.9
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​723](https://redirect.github.com/astral-sh/setup-uv/issues/723 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-19 07:38:25 +00:00
11d46df064
Update "Sync Python downloads" job to use Rust cache ( #17446 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-01-13 21:56:09 +00:00
3c72e56d92
Use constants for latest Python versions in tests ( #17444 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-01-13 21:36:45 +00:00
cfaf1430a2
Update peter-evans/create-pull-request action to v8 ( #17392 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request )
| action | major | `v7.0.8` → `v8.0.0` |
---
### Release Notes
<details>
<summary>peter-evans/create-pull-request
(peter-evans/create-pull-request)</summary>
###
[`v8.0.0`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v8.0.0 ):
Create Pull Request v8.0.0
[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.11...v8.0.0 )
##### What's new in v8
- Requires [Actions Runner
v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1 )
or later if you are using a self-hosted runner for Node 24 support.
##### What's Changed
- chore: Update checkout action version to v6 by
[@​yonas](https://redirect.github.com/yonas ) in
[#​4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258 )
- Update actions/checkout references to
[@​v6](https://redirect.github.com/v6 ) in docs by
[@​Copilot](https://redirect.github.com/Copilot ) in
[#​4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259 )
- feat: v8 by
[@​peter-evans](https://redirect.github.com/peter-evans ) in
[#​4260](https://redirect.github.com/peter-evans/create-pull-request/pull/4260 )
##### New Contributors
- [@​yonas](https://redirect.github.com/yonas ) made their first
contribution in
[#​4258](https://redirect.github.com/peter-evans/create-pull-request/pull/4258 )
- [@​Copilot](https://redirect.github.com/Copilot ) made their
first contribution in
[#​4259](https://redirect.github.com/peter-evans/create-pull-request/pull/4259 )
**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.11...v8.0.0 >
###
[`v7.0.11`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.11 ):
Create Pull Request v7.0.11
[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.10...v7.0.11 )
##### What's Changed
- fix: restrict remote prune to self-hosted runners by
[@​peter-evans](https://redirect.github.com/peter-evans ) in
[#​4250](https://redirect.github.com/peter-evans/create-pull-request/pull/4250 )
**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.10...v7.0.11 >
###
[`v7.0.10`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.10 ):
Create Pull Request v7.0.10
[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.9...v7.0.10 )
⚙️ Fixes an issue where updating a pull request failed when targeting a
forked repository with the same owner as its parent.
##### What's Changed
- build(deps): bump the github-actions group with 2 updates by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​4235](https://redirect.github.com/peter-evans/create-pull-request/pull/4235 )
- build(deps-dev): bump prettier from 3.6.2 to 3.7.3 in the npm group by
[@​dependabot](https://redirect.github.com/dependabot )\[bot] in
[#​4240](https://redirect.github.com/peter-evans/create-pull-request/pull/4240 )
- fix: provider list pulls fallback for multi fork same owner by
[@​peter-evans](https://redirect.github.com/peter-evans ) in
[#​4245](https://redirect.github.com/peter-evans/create-pull-request/pull/4245 )
##### New Contributors
- [@​obnyis](https://redirect.github.com/obnyis ) made their first
contribution in
[#​4064](https://redirect.github.com/peter-evans/create-pull-request/pull/4064 )
**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.9...v7.0.10 >
###
[`v7.0.9`](https://redirect.github.com/peter-evans/create-pull-request/releases/tag/v7.0.9 ):
Create Pull Request v7.0.9
[Compare
Source](https://redirect.github.com/peter-evans/create-pull-request/compare/v7.0.8...v7.0.9 )
⚙️ Fixes an
[incompatibility](https://redirect.github.com/peter-evans/create-pull-request/issues/4228 )
with the recently released `actions/checkout@v6`.
#### What's Changed
- \~70 dependency updates by
[@​dependabot](https://redirect.github.com/dependabot )
- docs: fix workaround description about `ready_for_review` by
[@​ybiquitous](https://redirect.github.com/ybiquitous ) in
[#​3939](https://redirect.github.com/peter-evans/create-pull-request/pull/3939 )
- Docs: `add-paths` default behavior by
[@​joeflack4](https://redirect.github.com/joeflack4 ) in
[#​3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928 )
- docs: update to create-github-app-token v2 by
[@​Goooler](https://redirect.github.com/Goooler ) in
[#​4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063 )
- Fix compatibility with actions/checkout\@​v6 by
[@​ericsciple](https://redirect.github.com/ericsciple ) in
[#​4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230 )
#### New Contributors
- [@​joeflack4](https://redirect.github.com/joeflack4 ) made their
first contribution in
[#​3928](https://redirect.github.com/peter-evans/create-pull-request/pull/3928 )
- [@​Goooler](https://redirect.github.com/Goooler ) made their
first contribution in
[#​4063](https://redirect.github.com/peter-evans/create-pull-request/pull/4063 )
- [@​ericsciple](https://redirect.github.com/ericsciple ) made
their first contribution in
[#​4230](https://redirect.github.com/peter-evans/create-pull-request/pull/4230 )
**Full Changelog**:
<https://github.com/peter-evans/create-pull-request/compare/v7.0.8...v7.0.9 >
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-12 10:52:09 +01:00
1a1eab6ad5
Update actions/checkout action to v6 ( #17295 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 17:01:41 +00:00
0fafde3f6e
Update astral-sh/setup-uv action to v7 ( #17291 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-02 16:21:18 +00:00
512c0ca5ed
Open PRs as drafts for sync-python-releases ( #16763 )
...
## Summary
This is a little goofy, but it saves us a click: when automation PRs are
opened as drafts, they don't need to be cycled through closed/opened to
force the CI to run. Instead, once undrafted the CI runs.
See #16505 for an example of the closed/opened cycle hack this avoids.
## Test Plan
No functional changes besides CI automation.
Signed-off-by: William Woodruff <william@astral.sh >
2025-11-17 15:04:10 -06:00
9ec385a266
Update astral-sh/setup-uv action to v6.8.0 ( #16129 )
...
> [!NOTE]
> Mend has cancelled [the proposed
renaming](https://redirect.github.com/renovatebot/renovate/discussions/37842 )
of the Renovate GitHub app being renamed to `mend[bot]`.
>
> This notice will be removed on 2025-10-07.
<hr>
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | minor | `v6.7.0` -> `v6.8.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v6.8.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.8.0 ):
🌈 Add **/*.py.lock to cache-dependency-glob
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v6.7.0...v6.8.0 )
#### Changes
Thanks to [@​parched](https://redirect.github.com/parched ) the
default `cache-dependency-glob` now also find all lock files generated
by `uv lock --script`
#### 🚀 Enhancements
- Always show prune cache output
[@​eifinger](https://redirect.github.com/eifinger )
([#​597](https://redirect.github.com/astral-sh/setup-uv/issues/597 ))
- Add \*\*/\*.py.lock to cache-dependency-glob
[@​parched](https://redirect.github.com/parched )
([#​590](https://redirect.github.com/astral-sh/setup-uv/issues/590 ))
#### 🧰 Maintenance
- persist credentials for version update
[@​eifinger](https://redirect.github.com/eifinger )
([#​584](https://redirect.github.com/astral-sh/setup-uv/issues/584 ))
#### 📚 Documentation
- README.md: Fix Python versions and update checkout action
[@​cclauss](https://redirect.github.com/cclauss )
([#​572](https://redirect.github.com/astral-sh/setup-uv/issues/572 ))
#### ⬆️ Dependency updates
- Bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​571](https://redirect.github.com/astral-sh/setup-uv/issues/571 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQxLjEzMS45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-06 09:15:10 +02:00
0db76839ef
Update astral-sh/setup-uv action to v6.7.0 ( #15857 )
2025-09-14 22:50:05 -04:00
fb518380ab
chore(ci): address linting findings in sync-python-releases.yml ( #15117 )
...
## Summary
Continuing to burn these down, one at a time.
This eliminates some implicit credentials, moves a permission block to
its minimum scope of effect, and removes an (unexploitable) template
expansion.
@konstin to answer your earlier question: I tried `permissions:` this
time and got a syntax warning, so I suspect it _needs_ to be an empty
mapping object here 🙂
## Test Plan
I will manually dispatch this workflow once the PR is open.
Edit: Dispatched:
https://github.com/astral-sh/uv/actions/runs/16787049700/job/47540074086
Signed-off-by: William Woodruff <william@astral.sh >
2025-08-06 15:45:19 -05:00
ecbe32a4b5
Update astral-sh/setup-uv action to v6.4.3 ( #14924 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | patch | `v6.4.1` -> `v6.4.3` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v6.4.3`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.4.3 ):
🌈 fix relative paths starting with dots
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v6.4.2...v6.4.3 )
#### 🐛 Bug fixes
- fix relative paths starting with dots
[@​eifinger](https://redirect.github.com/eifinger )
([#​500](https://redirect.github.com/astral-sh/setup-uv/issues/500 ))
###
[`v6.4.2`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.4.2 ):
🌈 Interpret relative inputs as under working-directory
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v6.4.1...v6.4.2 )
#### Changes
This release will interpret relative paths in inputs as relative
to the value of `working-directory` (default is `${{ github.workspace
}}`) .
This means the following configuration
```yaml
- uses: astral-sh/setup-uv@v6
with:
working-directory: /my/path
cache-dependency-glob: uv.lock
```
will look for the `cache-dependency-glob` under `/my/path/uv.lock`
#### 🐛 Bug fixes
- interpret relative inputs as under working-directory
[@​eifinger](https://redirect.github.com/eifinger )
([#​498](https://redirect.github.com/astral-sh/setup-uv/issues/498 ))
#### 🧰 Maintenance
- chore: update known versions for 0.8.1/0.8.2
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​497](https://redirect.github.com/astral-sh/setup-uv/issues/497 ))
- chore: update known versions for 0.8.0
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​491](https://redirect.github.com/astral-sh/setup-uv/issues/491 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS40MC4wIiwidXBkYXRlZEluVmVyIjoiNDEuNDAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-28 12:44:37 +00:00
abcd03bc0e
Update astral-sh/setup-uv action to v6.4.1 ( #14774 )
2025-07-20 21:25:01 -04:00
a8b838dee9
Update astral-sh/setup-uv action to v6.3.1 ( #14360 )
2025-06-29 22:17:48 -04:00
d65c146b21
feat: add dynamically generated sysconfig replacement mappings ( #13441 )
...
## Summary
Implementation referenced in
https://github.com/astral-sh/uv/pull/12239#issuecomment-2744880003
Closes #12919 #12901
This makes the sysconfig replacements mappings dynamically generated
from
https://github.com/astral-sh/python-build-standalone/blob/main/cpython-unix/targets.yml
## Test Plan
cargo dev tests, and tested scenario from
https://github.com/astral-sh/uv/issues/12901#issuecomment-2822107454
2025-06-02 10:58:30 -05:00
853163dee5
Update astral-sh/setup-uv action to v6.1.0 ( #13652 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | minor | `v6.0.1` -> `v6.1.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v6.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.1.0 ):
🌈
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v6.0.1...v6.1.0 )
#### Changes
This release adds the input `server-url` which defaults to
`https://github.com `. You can set this to a custom url to control where
this action downloads the uv release from. This is useful for users of
gitea and comparable solutions.
[@​sebadevo](https://redirect.github.com/sebadevo ) pointed out
that we don't invalidate the cache when the `prune-cache` input is
changed. This leads to unnessecarily big caches. The input is now used
to compute the cache key, properly invalidating the cache when it is
changed.
> \[!NOTE]\
> For most users this release will invalidate the cache once.
> You will see the known warning
[no-github-actions-cache-found-for-key](https://redirect.github.com/astral-sh/setup-uv?tab=readme-ov-file#why-do-i-see-warnings-like-no-github-actions-cache-found-for-key )
> This is expected and will only appear once.
#### 🐛 Bug fixes
- Purge cache in cache key
[@​eifinger](https://redirect.github.com/eifinger )
([#​423](https://redirect.github.com/astral-sh/setup-uv/issues/423 ))
#### 🚀 Enhancements
- feat: support custom github url
[@​Zoupers](https://redirect.github.com/Zoupers )
([#​414](https://redirect.github.com/astral-sh/setup-uv/issues/414 ))
#### 🧰 Maintenance
- chore: update known versions for 0.7.7
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​422](https://redirect.github.com/astral-sh/setup-uv/issues/422 ))
- chore: update known versions for 0.7.6
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​415](https://redirect.github.com/astral-sh/setup-uv/issues/415 ))
- chore: update known versions for 0.7.5
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​412](https://redirect.github.com/astral-sh/setup-uv/issues/412 ))
- chore: update known versions for 0.7.4
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​410](https://redirect.github.com/astral-sh/setup-uv/issues/410 ))
- chore: update known versions for 0.7.3
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​405](https://redirect.github.com/astral-sh/setup-uv/issues/405 ))
- Fix path to known-checksums.ts
[@​eifinger](https://redirect.github.com/eifinger )
([#​404](https://redirect.github.com/astral-sh/setup-uv/issues/404 ))
- Fix update-known-versions workflow argument
[@​eifinger](https://redirect.github.com/eifinger )
([#​401](https://redirect.github.com/astral-sh/setup-uv/issues/401 ))
- Fix update-known-versions workflow
[@​eifinger](https://redirect.github.com/eifinger )
([#​400](https://redirect.github.com/astral-sh/setup-uv/issues/400 ))
- Create version-manifest.json on uv release
[@​eifinger](https://redirect.github.com/eifinger )
([#​399](https://redirect.github.com/astral-sh/setup-uv/issues/399 ))
- Run infrastructure workflows on arm runners
[@​eifinger](https://redirect.github.com/eifinger )
([#​396](https://redirect.github.com/astral-sh/setup-uv/issues/396 ))
- chore: update known checksums for 0.7.2
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​395](https://redirect.github.com/astral-sh/setup-uv/issues/395 ))
- chore: update known checksums for 0.7.0
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​390](https://redirect.github.com/astral-sh/setup-uv/issues/390 ))
#### 📚 Documentation
- Add section to README explaining if packages are installed by setup-uv
[@​pirate](https://redirect.github.com/pirate )
([#​398](https://redirect.github.com/astral-sh/setup-uv/issues/398 ))
#### ⬆️ Dependency updates
- Bump dependencies
[@​eifinger](https://redirect.github.com/eifinger )
([#​424](https://redirect.github.com/astral-sh/setup-uv/issues/424 ))
- Bump typescript from 5.8.2 to 5.8.3
@​[dependabot\[bot\]](https://redirect.github.com/apps/dependabot )
([#​393](https://redirect.github.com/astral-sh/setup-uv/issues/393 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuMTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-26 14:37:37 +02:00
4b7f5f1103
Update Python releases ( #13509 )
2025-05-17 13:19:20 -05:00
12a978cd34
Update astral-sh/setup-uv action to v6.0.1 ( #13291 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | patch | `v6.0.0` -> `v6.0.1` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v6.0.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.0.1 ):
🌈 Fix default cache dependency glob
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v6.0.0...v6.0.1 )
##### Changes
The new default in v6 used illegal patterns and therefore didn't match
requirements files. This is now fixed.
##### 🐛 Bug fixes
- Fix default cache dependency glob
[@​eifinger](https://redirect.github.com/eifinger )
([#​388](https://redirect.github.com/astral-sh/setup-uv/issues/388 ))
##### 🧰 Maintenance
- chore: update known checksums for 0.6.17
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​384](https://redirect.github.com/astral-sh/setup-uv/issues/384 ))
##### ⬆️ Dependency updates
- Bump dependencies
[@​eifinger](https://redirect.github.com/eifinger )
([#​389](https://redirect.github.com/astral-sh/setup-uv/issues/389 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 11:38:56 +02:00
5ee54b4fa3
minify and filter embed managed pythons json on compile time ( #12967 )
...
## Summary
In #10939 I added the generated
`crates/uv-python/src/download-metadata-minified.json` file which is a
minified version of `crates/uv-python/download-metadata.json`.
The main reason for this PR is to avoid bloating the git objects as this
is a single-line file.
As a bonus, I also filtered the embed json to include only the versions
for the compiled target. Which should improve the binary size and
performance by a bit.
## Test Plan
<!-- How was it tested? -->
2025-04-30 15:51:03 -04:00
aacf2a724c
Update astral-sh/setup-uv action to v6 ( #13162 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | major | `v5.4.2` -> `v6.0.0` |
---
### Release Notes
<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>
###
[`v6.0.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v6.0.0 ):
🌈 activate-environment and working-directory
[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v5.4.2...v6.0.0 )
##### Changes
This version contains some breaking changes which have been gathering up
for a while. Lets dive into them:
- [Activate environment](#activate-environment)
- [Working Directory](#working-directory)
- [Default `cache-dependency-glob`](#default-cache-dependency-glob)
- [Use default cache dir on self hosted
runners](#use-default-cache-dir-on-self-hosted-runners)
##### Activate environment
In previous versions using the input `python-version` automatically
activated a venv at the repository root.
This led to some unwanted side-effects, was sometimes unexpected and not
flexible enough.
The venv activation is now explicitly controlled with the new input
`activate-environment` (false by default):
```yaml
- name: Install the latest version of uv and activate the environment
uses: astral-sh/setup-uv@v6
with:
activate-environment: true
- run: uv pip install pip
```
The venv gets created by the [`uv
venv`](https://docs.astral.sh/uv/pip/environments/ ) command so the
python version is controlled by the `python-version` input or the files
`pyproject.toml`, `uv.toml`, `.python-version` in the
`working-directory`.
##### Working Directory
The new input `working-directory` controls where we look for
`pyproject.toml`, `uv.toml` and `.python-version` files
which are used to determine the version of uv and python to install.
It can also be used to control where the venv gets created.
```yaml
- name: Install uv based on the config files in the working-directory
uses: astral-sh/setup-uv@v6
with:
working-directory: my/subproject/dir
```
> \[!CAUTION]
>
> The inputs `pyproject-file` and `uv-file` have been removed.
##### Default `cache-dependency-glob`
[@​ssbarnea](https://redirect.github.com/ssbarnea ) found out that
the default `cache-dependency-glob` was not suitable for a lot of users.
The old default
```yaml
cache-dependency-glob: |
**/requirements*.txt
**/uv.lock
```
is changed and should cover over 99.5% of use cases:
```yaml
cache-dependency-glob: |
**/*(requirements|constraints)*.(txt|in)
**/pyproject.toml
**/uv.lock
```
> \[!NOTE]
>
> This shouldn't be a breaking change. The only thing you may notice is
that your caches get invalidated once.
##### Use default cache dir on self hosted runners
The directory where uv stores its cache was always set to a directory in
`RUNNER_TEMP`. For self-hosted runners this made no sense as this gets
cleaned after every run and led to slower runs than necessary.
On self-hosted runners `UV_CACHE_DIR` is no longer set and the [default
cache
directory](https://docs.astral.sh/uv/concepts/cache/#cache-directory ) is
used instead.
##### 🚨 Breaking changes
- Change default cache-dependency-glob
[@​eifinger](https://redirect.github.com/eifinger )
([#​352](https://redirect.github.com/astral-sh/setup-uv/issues/352 ))
- No default UV_CACHE_DIR on selfhosted runners
[@​eifinger](https://redirect.github.com/eifinger )
([#​380](https://redirect.github.com/astral-sh/setup-uv/issues/380 ))
- new inputs activate-environment and working-directory
[@​eifinger](https://redirect.github.com/eifinger )
([#​381](https://redirect.github.com/astral-sh/setup-uv/issues/381 ))
##### 🧰 Maintenance
- chore: update known checksums for 0.6.16
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​378](https://redirect.github.com/astral-sh/setup-uv/issues/378 ))
- chore: update known checksums for 0.6.15
@​[github-actions\[bot\]](https://redirect.github.com/apps/github-actions )
([#​377](https://redirect.github.com/astral-sh/setup-uv/issues/377 ))
##### 📚 Documentation
- bump to v6 in README
[@​eifinger](https://redirect.github.com/eifinger )
([#​382](https://redirect.github.com/astral-sh/setup-uv/issues/382 ))
- log info on venv activation
[@​eifinger](https://redirect.github.com/eifinger )
([#​375](https://redirect.github.com/astral-sh/setup-uv/issues/375 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTcuMyIsInVwZGF0ZWRJblZlciI6IjM5LjI1Ny4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-28 10:53:35 +02:00
bdfb014d68
Update astral-sh/setup-uv action to v5.4.2 ( #13004 )
2025-04-21 03:54:04 +00:00
78f2b697ce
Update actions/checkout action to v4.2.2 ( #13002 )
2025-04-21 03:08:09 +00:00
f967ca7afe
Update astral-sh/setup-uv digest to d4b2f3b ( #12995 )
2025-04-21 02:12:27 +00:00
2b62f73064
Add UV_PYTHON_DOWNLOADS_JSON_URL to set custom managed python sources ( #10939 )
...
## Summary
Add an option to overwrite the list of available Python downloads from a
local JSON file by using the environment variable
`UV_PYTHON_DOWNLOADS_JSON_URL`
as an experimental support for providing custom sources for Python
distribution binaries #8015
related #10203
I probably should make the JSON to be fetched from a remote URL instead
of a local file.
please let me know what you think and I will modify the code
accordingly.
## Test Plan
### normal run
```
root@75c66494ba8b:/# /code/target/release/uv python list
cpython-3.14.0a4+freethreaded-linux-x86_64-gnu <download available>
cpython-3.14.0a4-linux-x86_64-gnu <download available>
cpython-3.13.1+freethreaded-linux-x86_64-gnu <download available>
cpython-3.13.1-linux-x86_64-gnu <download available>
cpython-3.12.8-linux-x86_64-gnu <download available>
cpython-3.11.11-linux-x86_64-gnu <download available>
cpython-3.10.16-linux-x86_64-gnu <download available>
cpython-3.9.21-linux-x86_64-gnu <download available>
cpython-3.8.20-linux-x86_64-gnu <download available>
cpython-3.7.9-linux-x86_64-gnu <download available>
pypy-3.10.14-linux-x86_64-gnu <download available>
pypy-3.9.19-linux-x86_64-gnu <download available>
pypy-3.8.16-linux-x86_64-gnu <download available>
pypy-3.7.13-linux-x86_64-gnu <download available>
```
### empty JSON file
```sh
root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=/code/crates/uv-python/my-download-metadata.json
root@75c66494ba8b:/# cat $UV_PYTHON_DOWNLOADS_JSON_URL
{}
root@75c66494ba8b:/# /code/target/release/uv python list
root@75c66494ba8b:/#
```
### JSON file with valid version
```sh
root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=/code/crates/uv-python/my-download-metadata.json
root@75c66494ba8b:/# cat $UV_PYTHON_DOWNLOADS_JSON_URL
{
"cpython-3.11.9-linux-x86_64-gnu": {
"name": "cpython",
"arch": {
"family": "x86_64",
"variant": null
},
"os": "linux",
"libc": "gnu",
"major": 3,
"minor": 11,
"patch": 9,
"prerelease": "",
"url": "https://github.com/astral-sh/python-build-standalone/releases/download/20240814/cpython-3.11.9%2B20240814-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz ",
"sha256": "daa487c7e73005c4426ac393273117cf0e2dc4ab9b2eeda366e04cd00eea00c9",
"variant": null
}
}
root@75c66494ba8b:/# /code/target/release/uv python list
cpython-3.11.9-linux-x86_64-gnu <download available>
root@75c66494ba8b:/#
```
### Remote Path
```sh
root@75c66494ba8b:/# export UV_PYTHON_DOWNLOADS_JSON_URL=http://a.com/file.json
root@75c66494ba8b:/# /code/target/release/uv python list
error: Remote python downloads JSON is not yet supported, please use a local path (without `file://` prefix)
```
---------
Co-authored-by: Aria Desires <aria.desires@gmail.com >
2025-04-07 13:55:00 -04:00
c1b49b9ab2
Update astral-sh/setup-uv digest to 0c5e2b8 ( #12569 )
2025-03-31 13:29:05 +00:00
b69be96e0f
Update astral-sh/setup-uv digest to 2269511 ( #12409 )
2025-03-23 22:14:16 -04:00
68ece236a9
Update peter-evans/create-pull-request action to v7.0.8 ( #12226 )
2025-03-17 14:16:46 -04:00
5880a98163
Pin dependencies ( #12191 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action ) |
action | pinDigest | -> `0010eb0` |
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action )
| action | pinDigest | -> `3f4a782` |
| [PyO3/maturin-action](https://redirect.github.com/PyO3/maturin-action )
| action | pinDigest | -> `36db840` |
|
[SebRollen/toml-action](https://redirect.github.com/SebRollen/toml-action )
| action | pinDigest | -> `b1b3628` |
| [Swatinem/rust-cache](https://redirect.github.com/Swatinem/rust-cache )
| action | pinDigest | -> `f0deed1` |
|
[acj/freebsd-firecracker-action](https://redirect.github.com/acj/freebsd-firecracker-action )
| action | pinDigest | -> `4d93174` |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance )
| action | pinDigest | -> `c074443` |
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | pinDigest | -> `11bd719` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python )
| action | pinDigest | -> `4237552` |
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | pinDigest | -> `f94ec6b` |
|
[conda-incubator/setup-miniconda](https://redirect.github.com/conda-incubator/setup-miniconda )
| action | pinDigest | -> `505e639` |
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | pinDigest | -> `471d1dc` |
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | pinDigest | -> `74a5d14` |
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | pinDigest | -> `902fa8e` |
|
[docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action )
| action | pinDigest | -> `b5ca514` |
|
[ludeeus/action-shellcheck](https://redirect.github.com/ludeeus/action-shellcheck )
| action | pinDigest | -> `00cae50` |
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request )
| action | pinDigest | -> `271a8d0` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action )
| action | pinDigest | -> `2153a01` |
|
[uraimo/run-on-arch-action](https://redirect.github.com/uraimo/run-on-arch-action )
| action | pinDigest | -> `ac33288` |
|
[webfactory/ssh-agent](https://redirect.github.com/webfactory/ssh-agent )
| action | pinDigest | -> `dc588b6` |
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 16:25:19 -04:00
9d417da4e1
Update astral-sh/setup-uv action to v5 ( #10116 )
2024-12-23 08:47:58 -05:00
064fcd92af
Update astral-sh/setup-uv action to v4 ( #9407 )
2024-11-24 20:48:57 -05:00
734a8cec81
Update astral-sh/setup-uv action to v3 ( #7633 )
2024-09-22 21:00:49 -04:00
ee74d74605
Update peter-evans/create-pull-request action to v7 ( #7206 )
2024-09-08 20:37:18 -04:00
2da795ae8c
Document official setup-uv action ( #7056 )
...
## Summary
Closes https://github.com/astral-sh/uv/issues/7047 .
2024-09-05 13:59:01 -04:00
d0fa9ccdfa
Use astral-sh/setup-uv action ( #7084 )
...
## Summary
Use the now official `astral-sh/setup-uv` action in
`sync-python-release.yml` workflow.
2024-09-05 13:04:46 -04:00
5d727cb0af
Deprecate the --isolated flag ( #5466 )
...
## Summary
This PR deprecates the `--isolated` flag. The treatment varies across
the APIs:
- For non-preview APIs, we warn but treat it as equivalent to
`--no-config`.
- For preview APIs, we warn and ignore it, with two exceptions...
- For `tool run` and `run` specifically, we don't even warn, because we
can't differentiate the command-specific `--isolated` from the global
`--isolated`.
2024-07-30 22:40:38 +00:00
5365794023
Update hynek/setup-cached-uv action to v2 ( #5550 )
2024-07-29 09:44:03 -04:00
62e72f51ff
Remove an extra quote in sync-python-releaes.yml ( #5393 )
2024-07-24 02:53:00 +00:00
17d63b0e07
Update python-build-standalone workflow ( #5390 )
...
## Summary
After #5337 , `fetch-download-metadata.py` fetches not just from
`python-build-standalone`, so updates the workflow to
`sync-python-releases.yml`.
Also includes `crates/uv-python/download-metadata.json` in `add-paths`.
---------
Co-authored-by: Zanie Blue <contact@zanie.dev >
2024-07-24 02:11:52 +00:00
renovate[bot]