2baee75a94
Restore DockerHub images and annotations ( #16441 )
...
- **Revert "Drop publish of extended images to DockerHub temporarily
(#16355 )"**
- **Revert "Drop annotations from DockerHub uv images (#16356 )"**
2025-10-24 13:16:24 -05:00
88f519a3bf
Drop annotations from DockerHub uv images ( #16356 )
2025-10-18 14:58:06 -05:00
70cfc4020a
Drop publish of extended images to DockerHub temporarily ( #16355 )
...
To workaround https://github.com/astral-sh/uv/issues/16350
2025-10-18 14:47:48 -05:00
593678055f
Publish Python 3.14 Docker Images ( #16150 )
...
## Summary
Tentative PR to drop the `-rc` suffix from the published images.
Do not merge this yet until the formal release
[upstream](https://hub.docker.com/_/python ) :)
2025-10-07 18:10:07 -05:00
2f7bb7e8ca
Promote trixie and alpine 3.22 as default tags ( #15352 )
...
## Summary
Semi related to https://github.com/astral-sh/uv/issues/15270 , except
there's no removal.
Makes Alpine 3.22 and debian trixie the default tags instead of removing
bookworm and alpine 3.21 to minimize churn.
~~This PR is pending https://github.com/astral-sh/uv/pull/15351 merged
first.~~ Merged
## Test Plan
No functional changes made besides changing tag pointers.
2025-10-07 17:26:37 -05:00
7d9633be9f
Update docker/metadata-action action to v5.8.0 ( #15863 )
...
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs
from Renovate will soon appear from 'Mend'. Learn more
[here](https://redirect.github.com/renovatebot/renovate/discussions/37842 ).
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | minor | `v5.7.0` -> `v5.8.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>
###
[`v5.8.0`](https://redirect.github.com/docker/metadata-action/releases/tag/v5.8.0 )
[Compare
Source](https://redirect.github.com/docker/metadata-action/compare/v5.7.0...v5.8.0 )
- New `is_not_default_branch` global expression by
[@​crazy-max](https://redirect.github.com/crazy-max ) in
[#​535](https://redirect.github.com/docker/metadata-action/pull/535 )
- Allow to match part of the git tag or value for semver/pep440 types by
[@​crazy-max](https://redirect.github.com/crazy-max ) in
[#​536](https://redirect.github.com/docker/metadata-action/pull/536 )
[#​537](https://redirect.github.com/docker/metadata-action/pull/537 )
- Bump
[@​actions/github](https://redirect.github.com/actions/github )
from 6.0.0 to 6.0.1 in
[#​523](https://redirect.github.com/docker/metadata-action/pull/523 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.56.0 to 0.62.1 in
[#​526](https://redirect.github.com/docker/metadata-action/pull/526 )
- Bump form-data from 2.5.1 to 2.5.5 in
[#​533](https://redirect.github.com/docker/metadata-action/pull/533 )
- Bump moment-timezone from 0.5.47 to 0.6.0 in
[#​525](https://redirect.github.com/docker/metadata-action/pull/525 )
- Bump semver from 7.7.1 to 7.7.2 in
[#​524](https://redirect.github.com/docker/metadata-action/pull/524 )
**Full Changelog**:
<https://github.com/docker/metadata-action/compare/v5.7.0...v5.8.0 >
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-15 13:48:03 -05:00
2bc4dc8ac2
Update docker/login-action action to v3.5.0 ( #15862 )
...
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs
from Renovate will soon appear from 'Mend'. Learn more
[here](https://redirect.github.com/renovatebot/renovate/discussions/37842 ).
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | minor | `v3.4.0` -> `v3.5.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>docker/login-action (docker/login-action)</summary>
###
[`v3.5.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.5.0 )
[Compare
Source](https://redirect.github.com/docker/login-action/compare/v3.4.0...v3.5.0 )
- Support dual-stack endpoints for AWS ECR by
[@​Spacefish](https://redirect.github.com/Spacefish )
[@​crazy-max](https://redirect.github.com/crazy-max ) in
[#​874](https://redirect.github.com/docker/login-action/pull/874 )
[#​876](https://redirect.github.com/docker/login-action/pull/876 )
- Bump
[@​aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr )
to 3.859.0 in
[#​860](https://redirect.github.com/docker/login-action/pull/860 )
[#​878](https://redirect.github.com/docker/login-action/pull/878 )
- Bump
[@​aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public )
to 3.859.0 in
[#​860](https://redirect.github.com/docker/login-action/pull/860 )
[#​878](https://redirect.github.com/docker/login-action/pull/878 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.57.0 to 0.62.1 in
[#​870](https://redirect.github.com/docker/login-action/pull/870 )
- Bump form-data from 2.5.1 to 2.5.5 in
[#​875](https://redirect.github.com/docker/login-action/pull/875 )
**Full Changelog**:
<https://github.com/docker/login-action/compare/v3.4.0...v3.5.0 >
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-15 13:47:48 -05:00
249154ee08
Restore DockerHub publishing ( #15381 )
...
- **Revert "Skip DockerHub annotations too (#15366 )"**
- **Revert "Disable DockerHub publish for extended images in 0.8.12
(#15365 )"**
Closes https://github.com/astral-sh/uv/issues/15367
2025-08-19 11:45:41 -05:00
36151df0e4
Skip DockerHub annotations too ( #15366 )
2025-08-18 18:36:31 -05:00
f77d78a8ad
Disable DockerHub publish for extended images in 0.8.12 ( #15365 )
2025-08-18 18:21:39 -05:00
5b088e9430
chore: add trixie base images and alpine 3.22 support ( #15351 )
...
## Summary
Follow up to
https://github.com/astral-sh/uv/pull/15269#issuecomment-3194000772
Enables the following additional images to be published
* buildpack-deps:trixie
* debian:trixie-slim
* alpine:3.22
## Test Plan
Existing Tests. The newly added images were checked manually.
2025-08-18 17:55:42 -05:00
b0ae6e082a
Update depot/build-push-action action to v1.16.2 ( #15336 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[depot/build-push-action](https://redirect.github.com/depot/build-push-action )
| action | patch | `v1.16.1` -> `v1.16.2` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>depot/build-push-action (depot/build-push-action)</summary>
###
[`v1.16.2`](https://redirect.github.com/depot/build-push-action/releases/tag/v1.16.2 )
[Compare
Source](https://redirect.github.com/depot/build-push-action/compare/v1.16.1...v1.16.2 )
##### What's Changed
- Use ubuntu-latest for release workflow
([#​42](https://redirect.github.com/depot/build-push-action/issues/42 ))
[@​jacobwgillespie](https://redirect.github.com/jacobwgillespie )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-18 09:25:03 -05:00
d8d4f02e5e
Add Debian 13 trixie to published Docker images ( #15269 )
...
Closes https://github.com/astral-sh/uv/issues/15230
---------
Co-authored-by: Zanie Blue <contact@zanie.dev >
2025-08-14 08:54:24 -05:00
6010a21d6b
Update depot/build-push-action action to v1.16.1 ( #15277 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[depot/build-push-action](https://redirect.github.com/depot/build-push-action )
| action | patch | `v1.16.0` -> `v1.16.1` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>depot/build-push-action (depot/build-push-action)</summary>
###
[`v1.16.1`](https://redirect.github.com/depot/build-push-action/releases/tag/v1.16.1 )
[Compare
Source](https://redirect.github.com/depot/build-push-action/compare/v1.16.0...v1.16.1 )
##### What's Changed
- Update
[@​depot/actions-public-oidc-client](https://redirect.github.com/depot/actions-public-oidc-client )
to v1.1.0
([#​41](https://redirect.github.com/depot/build-push-action/issues/41 ))
[@​jacobwgillespie](https://redirect.github.com/jacobwgillespie )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-14 08:27:08 -05:00
3cc895a99a
Fix missing uv version in Docker image tags ( #15263 )
...
The change in https://github.com/astral-sh/uv/pull/15245 added a
variable to the step scope that's shadowed by the inner loop.
Closes https://github.com/astral-sh/uv/issues/15262
2025-08-13 21:36:02 +00:00
9a53806419
Update depot/build-push-action action to v1.16.0 ( #15261 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[depot/build-push-action](https://redirect.github.com/depot/build-push-action )
| action | minor | `v1.15.0` -> `v1.16.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>depot/build-push-action (depot/build-push-action)</summary>
###
[`v1.16.0`](https://redirect.github.com/depot/build-push-action/releases/tag/v1.16.0 )
[Compare
Source](https://redirect.github.com/depot/build-push-action/compare/v1.15.0...v1.16.0 )
##### What's Changed
- Add support for annotations
([#​38](https://redirect.github.com/depot/build-push-action/issues/38 ))
[@​zanieb](https://redirect.github.com/zanieb )
- feat: add `save-tags` for multiple depot registry tags
([#​40](https://redirect.github.com/depot/build-push-action/issues/40 ))
[@​goller](https://redirect.github.com/goller )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS42Ni4yIiwidXBkYXRlZEluVmVyIjoiNDEuNjYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-13 16:25:59 -05:00
65b4dbc47e
chore(ci): address lint findings in build-docker.yml ( #15245 )
...
## Summary
This re-creates #15145 , with fixes following the revert in #15174 .
The overall approach is the same, except that I've added an explicit
permissions block to `docker-annotate-base` that should cover the needed
permissions in that job.
(One confusion is around how that wasn't failing before -- FWICT it was
receiving the default `GITHUB_TOKEN`, which doesn't include `id-token:
write` or `packages: write`. So it _should_ have been failing even
before I explicitly did `permissions: {}`...)
Edit: Oh, I see why -- the actual release process does a
`workflow_call`, so this inherits its `GITHUB_TOKEN` from
`release.yml:custom-build-docker`, which in turn has the right
permissions granted to it.
## Test Plan
See what happens in CI. Plus maybe we could do a release dry-run?
Signed-off-by: William Woodruff <william@astral.sh >
2025-08-12 13:59:27 -05:00
1567cc862f
Revert "chore(ci): fix lint findings in build-docker ( #15145 )" ( #15174 )
...
This reverts commit 16cb6af605
2025-08-08 15:13:05 -05:00
16cb6af605
chore(ci): fix lint findings in build-docker ( #15145 )
...
## Summary
Addresses zizmor findings in `build-docker.yml`.
Key changes: primarily removing template expansions and restricting some
permissions.
## Test Plan
Let the CI run.
Signed-off-by: William Woodruff <william@astral.sh >
2025-08-07 14:58:13 -05:00
35e2f67b5e
feat(docker): set default UV_TOOL_BIN_DIR on docker images ( #13391 )
...
Closes #13057
Sets `UV_TOOL_BIN_DIR` to `/usr/local/bin` for all derived images to
allow `uv tool install` to work out of the box.
Note, when the default image user is overwritten (e.g. `USER <UID>`) by
a less privileged one, an alternative writable location would now need
to be set by downstream consumers to prevent issues, hence I'm labeling
this as a breaking change for 0.8.x release.
Relates to https://github.com/astral-sh/uv-docker-example/pull/55
Each image was tested to work with uv tool with `UV_TOOL_BIN_DIR` set to
`/usr/local/bin` with the default root user and alternative non-root
users to confirm breaking nature of the change.
2025-07-17 17:20:21 -05:00
7bbdc08dae
Update depot/build-push-action action to v1.15.0 ( #14361 )
2025-06-30 19:16:46 -04:00
1e02008d8b
add more proper docker login if ( #14278 )
2025-06-26 12:05:45 -04:00
e7f5967111
Don't block docker logins on it being a pull-request ( #14222 )
2025-06-23 13:30:49 -04:00
f0407e4b6f
Only use the release environment in Docker builds on push ( #14189 )
...
This drastically reduces the `release` deployment noise, e.g., as seen
in https://github.com/astral-sh/uv/pull/14165
2025-06-21 14:36:07 +00:00
b18f45db14
Restore Docker image annotations and fix attestations ( #14165 )
...
More follow-up to #13459
- Depot doesn't support annotations, so we push those manually
- Docker push for the re-tag was breaking the manifest, since we need to
annotate manually, we just do that instead
- We attest after the annotation
A bit of an aside
- We test building the extra images, it's very fast and I don't see why
it's better to gate it
I tested this on my fork then cleaned it up a bit for a commit here. You
can see the images at
- https://github.com/zanieb/uv/pkgs/container/uv
- https://hub.docker.com/r/astral/uv/tags
---------
Co-authored-by: samypr100 <3933065+samypr100@users.noreply.github.com >
2025-06-21 09:01:20 -05:00
e1046242e7
Fix Docker attestations ( #14133 )
...
These regressed in #14088 and were found during my test publish from a
fork.
2025-06-18 18:46:30 +00:00
1fc65a1d9d
Publish to DockerHub ( #14088 )
...
The primary motivation here is to avoid confusion with non-official
repositories, e.g., https://github.com/astral-sh/uv/issues/13958 which
could lead to attacks against our users.
Resolves
- https://github.com/astral-sh/uv/issues/12679
- #8699
2025-06-18 11:30:37 -05:00
8808e67cff
Add a docker-plan step to consolidate push and tag logic ( #14083 )
...
The dist plan parsing is pretty hard to understand, and I want to add
more images, e.g., for DockerHub in #14088 . As a simplifying
precursor... move the dist plan processing into a dedicated step.
2025-06-17 15:04:39 -05:00
d73d3e8b53
Refactor Docker image builds to use Depot ( #13459 )
...
## Summary
Simplify the Docker image build process to leverage Depot container
builders for faster layer caching and native multi-platform image
builds. The combo of the two removes the need to save cache to
registries and do complex merge operations across GHA runners to get a
multi-platform image.
## Test Plan
UV team will need to add a trust relationship in Depot so that the
container builds can authenticate and run. This can be done following
these docs:
https://depot.dev/docs/cli/authentication#adding-a-trust-relationship-for-github-actions .
Once that is done, this should just work as before, but without all of
the extra work around manifests. We should double that all of the
tagging still makes sense for you all, as some bits of that were
unclear.
Additional context in this draft PR:
https://github.com/astral-sh/uv/pull/9156
---------
Co-authored-by: Zanie Blue <contact@zanie.dev >
2025-06-16 13:32:35 -05:00
ba6413f81f
Update actions/attest-build-provenance action to v2.4.0 ( #14058 )
2025-06-16 02:17:30 +00:00
53efc0cf6d
Update docker/build-push-action action to v6.18.0 ( #13770 )
2025-06-01 21:57:51 -04:00
7941d215e5
Update actions/attest-build-provenance action to v2.3.0 ( #13650 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance )
| action | minor | `v2.2.3` -> `v2.3.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>actions/attest-build-provenance
(actions/attest-build-provenance)</summary>
###
[`v2.3.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v2.3.0 )
[Compare
Source](https://redirect.github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0 )
#### What's Changed
- Bump `actions/attest` from 2.2.1 to 2.3.0 by
[@​bdehamer](https://redirect.github.com/bdehamer ) in
[https://github.com/actions/attest-build-provenance/pull/615 ](https://redirect.github.com/actions/attest-build-provenance/pull/615 )
- Updates `@sigstore/oci` from 0.4.0 to 0.5.0
**Full Changelog**:
https://github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuMTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-26 12:52:22 +00:00
d393bf7886
Update docker/build-push-action action to v6.17.0 ( #13653 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | minor | `v6.16.0` -> `v6.17.0` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>docker/build-push-action (docker/build-push-action)</summary>
###
[`v6.17.0`](https://redirect.github.com/docker/build-push-action/releases/tag/v6.17.0 )
[Compare
Source](https://redirect.github.com/docker/build-push-action/compare/v6.16.0...v6.17.0 )
- Bump
[@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit )
from 0.59.0 to 0.61.0 by
[@​crazy-max](https://redirect.github.com/crazy-max ) in
[https://github.com/docker/build-push-action/pull/1364 ](https://redirect.github.com/docker/build-push-action/pull/1364 )
> \[!NOTE]
> Build record is now exported using the [`buildx history
export`](https://docs.docker.com/reference/cli/docker/buildx/history/export/ )
command instead of the legacy export-build tool.
**Full Changelog**:
https://github.com/docker/build-push-action/compare/v6.16.0...v6.17.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNi4wIiwidXBkYXRlZEluVmVyIjoiNDAuMTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-26 14:37:57 +02:00
395039afd1
feat(docker): add 3.14 beta images to uv docker ( #13390 )
...
## Summary
Now that Python 3.14 first beta is out, I think it's worth adding
support for the official upstream RC images.
Once 3.14 is released, we can remove the `-rc-` infix from the images we
pull from.
## Test Plan
Upstream images verified to be functional with uv.
2025-05-13 20:27:09 +02:00
1cfc67d266
Update Artifact GitHub Actions dependencies ( #13290 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| actions/download-artifact | action | digest | `95815c3` -> `d3f86a1` |
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact )
| action | minor | `v4.2.1` -> `v4.3.0` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
###
[`v4.3.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.3.0 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.2.1...v4.3.0 )
#### What's Changed
- feat: implement new `artifact-ids` input by
[@​GrantBirki](https://redirect.github.com/GrantBirki ) in
[https://github.com/actions/download-artifact/pull/401 ](https://redirect.github.com/actions/download-artifact/pull/401 )
- Fix workflow example for downloading by artifact ID by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/download-artifact/pull/402 ](https://redirect.github.com/actions/download-artifact/pull/402 )
- Prep for v4.3.0 release by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/404 ](https://redirect.github.com/actions/download-artifact/pull/404 )
#### New Contributors
- [@​GrantBirki](https://redirect.github.com/GrantBirki ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/401 ](https://redirect.github.com/actions/download-artifact/pull/401 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.2.1...v4.3.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 09:52:26 +00:00
0a49849f5a
Update docker/build-push-action action to v6.16.0 ( #13151 )
2025-04-28 02:23:30 +00:00
06134f34ea
Update docker/login-action action to v3.4.0 ( #13008 )
2025-04-21 08:29:32 -04:00
e992e5fa17
Update docker/setup-buildx-action action to v3.10.0 ( #13010 )
2025-04-21 08:29:19 -04:00
a74f995441
Update docker/metadata-action action to v5.7.0 ( #13009 )
2025-04-21 08:29:12 -04:00
98e3546afd
Update docker/build-push-action action to v6.15.0 ( #13007 )
2025-04-21 08:29:02 -04:00
78f2b697ce
Update actions/checkout action to v4.2.2 ( #13002 )
2025-04-21 03:08:09 +00:00
9b65e49096
Update actions/attest-build-provenance action to v2.2.3 ( #13001 )
2025-04-21 02:49:22 +00:00
be615cb213
Update Artifact GitHub Actions dependencies ( #12572 )
2025-03-31 09:07:01 -04:00
5880a98163
Pin dependencies ( #12191 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action ) |
action | pinDigest | -> `0010eb0` |
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action )
| action | pinDigest | -> `3f4a782` |
| [PyO3/maturin-action](https://redirect.github.com/PyO3/maturin-action )
| action | pinDigest | -> `36db840` |
|
[SebRollen/toml-action](https://redirect.github.com/SebRollen/toml-action )
| action | pinDigest | -> `b1b3628` |
| [Swatinem/rust-cache](https://redirect.github.com/Swatinem/rust-cache )
| action | pinDigest | -> `f0deed1` |
|
[acj/freebsd-firecracker-action](https://redirect.github.com/acj/freebsd-firecracker-action )
| action | pinDigest | -> `4d93174` |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance )
| action | pinDigest | -> `c074443` |
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | pinDigest | -> `11bd719` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python )
| action | pinDigest | -> `4237552` |
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | pinDigest | -> `f94ec6b` |
|
[conda-incubator/setup-miniconda](https://redirect.github.com/conda-incubator/setup-miniconda )
| action | pinDigest | -> `505e639` |
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | pinDigest | -> `471d1dc` |
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | pinDigest | -> `74a5d14` |
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | pinDigest | -> `902fa8e` |
|
[docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action )
| action | pinDigest | -> `b5ca514` |
|
[ludeeus/action-shellcheck](https://redirect.github.com/ludeeus/action-shellcheck )
| action | pinDigest | -> `00cae50` |
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request )
| action | pinDigest | -> `271a8d0` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action )
| action | pinDigest | -> `2153a01` |
|
[uraimo/run-on-arch-action](https://redirect.github.com/uraimo/run-on-arch-action )
| action | pinDigest | -> `ac33288` |
|
[webfactory/ssh-agent](https://redirect.github.com/webfactory/ssh-agent )
| action | pinDigest | -> `dc588b6` |
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 16:25:19 -04:00
8cf439bc36
Update Artifact GitHub Actions dependencies ( #12192 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact )
| action | minor | `v4` -> `v4.1.9` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact )
| action | minor | `v4` -> `v4.6.1` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
###
[`v4.1.9`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.9 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.8...v4.1.9 )
#### What's Changed
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- docs: small migration fix by
[@​froblesmartin](https://redirect.github.com/froblesmartin ) in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- Update MIGRATION.md by
[@​andyfeller](https://redirect.github.com/andyfeller ) in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- Update artifact package to 2.2.2 by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- [@​froblesmartin](https://redirect.github.com/froblesmartin )
made their first contribution in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- [@​andyfeller](https://redirect.github.com/andyfeller ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- [@​yacaovsnc](https://redirect.github.com/yacaovsnc ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.9
###
[`v4.1.8`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.8 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.7...v4.1.8 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/341 ](https://redirect.github.com/actions/download-artifact/pull/341 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.8
###
[`v4.1.7`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.7 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.6...v4.1.7 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
dependency by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/325 ](https://redirect.github.com/actions/download-artifact/pull/325 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.6...v4.1.7
###
[`v4.1.6`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.6 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.5...v4.1.6 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/download-artifact/pull/324 ](https://redirect.github.com/actions/download-artifact/pull/324 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.5...v4.1.6
###
[`v4.1.5`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.5 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.4...v4.1.5 )
##### What's Changed
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/322 ](https://redirect.github.com/actions/download-artifact/pull/322 )
- Update dependencies `@actions/core` to v1.10.1 and `@actions/artifact`
to v2.1.5
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.4...v4.1.5
###
[`v4.1.4`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.4 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.3...v4.1.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/307 ](https://redirect.github.com/actions/download-artifact/pull/307 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.4
###
[`v4.1.3`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.3 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.2...v4.1.3 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/download-artifact/pull/292 ](https://redirect.github.com/actions/download-artifact/pull/292 )
- Update toolkit dependency with updated unzip logic by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/303 ](https://redirect.github.com/actions/download-artifact/pull/303 )
#### New Contributors
- [@​bethanyj28](https://redirect.github.com/bethanyj28 ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.3
###
[`v4.1.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.2 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.1...v4.1.2 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.1.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.1 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.0...v4.1.1 )
- Fix transient request timeouts
[https://github.com/actions/download-artifact/issues/249 ](https://redirect.github.com/actions/download-artifact/issues/249 )
- Bump `@actions/artifacts` to latest version
###
[`v4.1.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4...v4.1.0 )
#### What's Changed
- Some cleanup by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/247 ](https://redirect.github.com/actions/download-artifact/pull/247 )
- Fix default for run-id by
[@​stchr](https://redirect.github.com/stchr ) in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
- Support pattern matching to filter artifacts & merge to same directory
by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/259 ](https://redirect.github.com/actions/download-artifact/pull/259 )
#### New Contributors
- [@​stchr](https://redirect.github.com/stchr ) made their first
contribution in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.0
</details>
<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>
###
[`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1 )
#### What's Changed
- Update to use artifact 2.2.2 package by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/673 ](https://redirect.github.com/actions/upload-artifact/pull/673 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.1
###
[`v4.6.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.5.0...v4.6.0 )
##### What's Changed
- Expose env vars to control concurrency and timeout by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/662 ](https://redirect.github.com/actions/upload-artifact/pull/662 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.0
###
[`v4.5.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.5.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0 )
##### What's Changed
- fix: deprecated `Node.js` version in action by
[@​hamirmahal](https://redirect.github.com/hamirmahal ) in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- Add new `artifact-digest` output by
[@​bdehamer](https://redirect.github.com/bdehamer ) in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
##### New Contributors
- [@​hamirmahal](https://redirect.github.com/hamirmahal ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- [@​bdehamer](https://redirect.github.com/bdehamer ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0
###
[`v4.4.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3 )
#### What's Changed
- Undo indirect dependency updates from
[#​627](https://redirect.github.com/actions/upload-artifact/issues/627 )
by [@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/632 ](https://redirect.github.com/actions/upload-artifact/pull/632 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3
###
[`v4.4.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2 )
#### What's Changed
- Bump `@actions/artifact` to 2.1.11 by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/627 ](https://redirect.github.com/actions/upload-artifact/pull/627 )
- Includes fix for relative symlinks not resolving properly
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2
###
[`v4.4.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1 )
#### What's Changed
- Add a section about hidden files by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/607 ](https://redirect.github.com/actions/upload-artifact/pull/607 )
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to latest version, includes symlink and timeout fixes by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/625 ](https://redirect.github.com/actions/upload-artifact/pull/625 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1
###
[`v4.4.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0 )
#### Notice: Breaking Changes ⚠️
We will no longer include hidden files and folders by default in the
`upload-artifact` action of this version. This reduces the risk that
credentials are accidentally uploaded into artifacts. Customers who need
to continue to upload these files can use a new option,
`include-hidden-files`, to continue to do so.
See ["Notice of upcoming deprecations and breaking changes in GitHub
Actions
runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/ )
changelog and [this
issue](https://redirect.github.com/actions/upload-artifact/issues/602 )
for more details.
#### What's Changed
- Exclude hidden files by default by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/598 ](https://redirect.github.com/actions/upload-artifact/pull/598 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0
###
[`v4.3.6`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.6 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6 )
#### What's Changed
- Revert to
[@​actions/artifact](https://redirect.github.com/actions/artifact )
2.1.8 by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/594 ](https://redirect.github.com/actions/upload-artifact/pull/594 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.6
###
[`v4.3.5`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.5 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5 )
#### What's Changed
- Bump
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to v2.1.9 by [@​robherley](https://redirect.github.com/robherley )
in
[https://github.com/actions/upload-artifact/pull/588 ](https://redirect.github.com/actions/upload-artifact/pull/588 )
- Fixed artifact upload chunk timeout logic
[#​1774](https://redirect.github.com/actions/toolkit/pull/1774 )
- Use lazy stream to prevent issues with open file limits
[#​1771](https://redirect.github.com/actions/toolkit/pull/1771 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5
###
[`v4.3.4`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.4 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/584 ](https://redirect.github.com/actions/upload-artifact/pull/584 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4
###
[`v4.3.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/565 ](https://redirect.github.com/actions/upload-artifact/pull/565 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3
###
[`v4.3.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/516 ](https://redirect.github.com/actions/upload-artifact/pull/516 )
- Minor fix to the migration readme by
[@​andrewakim](https://redirect.github.com/andrewakim ) in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/561 ](https://redirect.github.com/actions/upload-artifact/pull/561 )
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core`
to v1.0.1 by [@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/562 ](https://redirect.github.com/actions/upload-artifact/pull/562 )
#### New Contributors
- [@​andrewakim](https://redirect.github.com/andrewakim ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2
###
[`v4.3.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.0...v4.3.1 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.3.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.2.0...v4.3.0 )
#### What's Changed
- Reorganize upload code in prep for merge logic & add more tests by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/504 ](https://redirect.github.com/actions/upload-artifact/pull/504 )
- Add sub-action to merge artifacts by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/505 ](https://redirect.github.com/actions/upload-artifact/pull/505 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.0
###
[`v4.2.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.2.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.1.0...v4.2.0 )
#### What's Changed
- Ability to overwrite an Artifact by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/501 ](https://redirect.github.com/actions/upload-artifact/pull/501 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.2.0
###
[`v4.1.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.0.0...v4.1.0 )
#### What's Changed
- Add migrations docs by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/482 ](https://redirect.github.com/actions/upload-artifact/pull/482 )
- Update README.md by
[@​samuelwine](https://redirect.github.com/samuelwine ) in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
- Support artifact-url output by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/496 ](https://redirect.github.com/actions/upload-artifact/pull/496 )
- Update readme to reflect new 500 artifact per job limit by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/497 ](https://redirect.github.com/actions/upload-artifact/pull/497 )
#### New Contributors
- [@​samuelwine](https://redirect.github.com/samuelwine ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 15:11:23 -05:00
f44aba0a96
Run the Docker build workflow when we touch project or toolchain metadata ( #11938 )
...
I noticed that https://github.com/astral-sh/uv/pull/11936 did not run
the Docker builds, nor did #11934
We should run these when the relevant files change so there aren't
surprises at release time!
Updates the `build-binaries` workflow to include toolchain version
changes and `.cargo/config.toml` changes too.
2025-03-04 08:36:20 -06:00
553b3a7c34
Bump alpine default tag to 3.21 ( #11157 )
...
Alpine 3.21 has been released for a few months and it's now being used
officially under `alpine` based [python
images](https://hub.docker.com/_/python ), hence our python-alpine based
images has been using 3.21 since uv 0.5.8 under the hood.
This could arguably be `breaking` as we're dropping alpine3.20 top-level
tag, so it could be a good candidate for 0.6.0.
Alternatively, we can keep support for 3.20 and make this non-breaking
by simply repointing alpine to now be 3.21 and keeping the 3.20 tag
around.
2025-02-13 16:17:49 -06:00
e22ecee36b
Respect no-build label in Docker image builds ( #11333 )
...
e.g., https://github.com/astral-sh/uv/pull/11329 is runner Docker image
builds but should not
2025-02-08 02:17:59 +00:00
47f80a62c4
Sign docker images using cosign ( #8685 )
...
cosign uses the GitHub action ID token to retrieve an ephemeral code
signing certificate from Fulcio, and store the signature in the Rekor
transparency log.
Once an image has been successfully signed, you should be able to verify
the signature with:
```sh
cosign verify ghcr.io/astral-sh/uv:latest --certificate-identity-regexp='.*' --certificate-oidc-issuer-regexp='.*'
```
Closes #8670
2025-01-31 09:00:23 -06:00
68bfa5b5b8
Avoid Docker rate limits by logging into DockerHub ( #10400 )
...
The latest release flaked failing to fetch the buildx image, which is
reportedly due to rate limits. Last I checked, DockerHub enforces much
stricter limits on unauthenticated requests. I added a bot account and a
corresponding read-only token.
2025-01-08 18:46:24 +00:00
Zanie Blue