Skip to content

⬆️ Update astral-sh/setup-uv action to v10 - #1595

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/astral-sh-setup-uv-10.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/astral-sh-setup-uv-10.x

Conversation

@renovate

@renovate renovate Bot commented Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
astral-sh/setup-uv action major v8.3.2 → v10.3.0

Release Notes

astral-sh/setup-uv

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v9.0.0: 🌈 Change prune-cache default to false

Compare Source

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure.
Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #​967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes

🐛 Bug fixes

  • fix: fall back to distribution ID when os-release has no version field @​cxzhong (#​961)

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 2am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Upgrade or downgrade of project dependencies. github_actions no-stale This issue or PR is exempted from the stable bot. labels Sep 8, 2026
github-actions[bot]
github-actions Bot previously approved these changes Sep 8, 2026
@codecov

codecov Bot commented Sep 8, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (bf02204) to head (47727bd).

Additional details and impacted files
@@            Coverage Diff            @@
##              main     #1595   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           14        14           
  Lines         1383      1383           
  Branches       151       151           
=========================================
  Hits          1383      1383           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 2 times, most recently from f25bbdd to 0d97f25 Compare September 12, 2026 04:36
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 0d97f25 to c318512 Compare September 13, 2026 21:39
github-actions[bot]
github-actions Bot previously approved these changes Sep 13, 2026
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 3 times, most recently from e429bb0 to 1bca107 Compare September 19, 2026 18:12
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 2 times, most recently from d669c02 to 9dd7e0b Compare September 24, 2026 01:26
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 9dd7e0b to c98f1ba Compare September 24, 2026 22:55
github-actions[bot]
github-actions Bot previously approved these changes Sep 24, 2026
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 7 times, most recently from 80f067f to a87f305 Compare September 29, 2026 20:47
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 5 times, most recently from 3312da1 to 136111e Compare October 6, 2026 15:51
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 10 times, most recently from 3b9d101 to 3448796 Compare October 12, 2026 10:03
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 3448796 to 8a0c9bc Compare October 13, 2026 01:07
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 12 times, most recently from 167daf5 to 830fed9 Compare October 19, 2026 09:52
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 830fed9 to c8741a9 Compare October 21, 2026 03:06
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from c8741a9 to 47727bd Compare October 21, 2026 05:56
@sonarqubecloud

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Upgrade or downgrade of project dependencies. github_actions no-stale This issue or PR is exempted from the stable bot.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants