Skip to content

chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.2.0 in the github-actions group across 1 directory - #96

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-03db81fe05
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-03db81fe05

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 1 update in the / directory: astral-sh/setup-uv.

Updates astral-sh/setup-uv from 10.0.1 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

@dependabot dependabot Bot added area/automation GitHub Actions, bots, or automation dependencies Dependency update labels Sep 14, 2026
@github-actions github-actions Bot added area/docs Affected repository area area/installer Installer, bootstrap, conversion, or rollback area/release Affected repository area area/skills Skills, workflows, or packs security Security-sensitive report status/needs-triage Triage status type/pr Issue or PR type labels Sep 14, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a1ecc1cea9

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread .github/workflows/qc-ci.yml Outdated

- name: Setup uv
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update the pin assertion with the action bump

When qc-ci.yml reaches “Run QC tests” (and when pr-validation.yml runs the full suite), test_workflow_dependency_actions_are_pinned_and_cache_bounded still asserts that every setup-uv step uses the old 20cfd1... SHA. Since this change replaces all 12 occurrences with bec219d..., the test fails immediately and leaves required validation red; update the expected SHA in ls/tests/test_qc_patrol.py as part of this bump.

Useful? React with 👍 / 👎.

@dependabot dependabot Bot changed the title chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-actions group chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.2.0 in the github-actions group across 1 directory Sep 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-03db81fe05 branch from a1ecc1c to a8b1980 Compare September 24, 2026 04:23
Bumps the github-actions group with 1 update in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `astral-sh/setup-uv` from 10.0.1 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...c18668a)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-03db81fe05 branch from a8b1980 to d36ac9b Compare September 27, 2026 03:10
CruxExperts pushed a commit that referenced this pull request Oct 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like astral-sh/setup-uv is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 3, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-03db81fe05 branch October 3, 2026 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/automation GitHub Actions, bots, or automation area/docs Affected repository area area/installer Installer, bootstrap, conversion, or rollback area/release Affected repository area area/skills Skills, workflows, or packs dependencies Dependency update security Security-sensitive report status/needs-triage Triage status type/pr Issue or PR type

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants