Skip to content

build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.2 - #2309

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.3.2
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.3.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Bumps astral-sh/setup-uv from 10.2.0 to 10.3.2.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

... (truncated)

Commits
  • 07a047e chore: update known checksums for 0.13.5 (#1103)
  • e1b8536 docs: update version references to v10.3.1 (#1102)
  • 18d369b chore(deps): roll up Dependabot updates (#1101)
  • 4ad2329 chore: update known checksums for 0.13.4 (#1099)
  • 4bc6759 chore: update known checksums for 0.13.2/0.13.3 (#1098)
  • c97f06e fix: preserve cache error class names in save-cache bundle (#1093)
  • 8ca4be0 chore: update known checksums for 0.13.1 (#1094)
  • b627d85 docs: cache-dependency-glob matches relative to the working directory (#1092)
  • f8c8897 Verify npm dependency signatures before builds (#1027)
  • f64d32b docs: update version references to v10.3.0 (#1090)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.2.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v10.2.0...07a047e)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 25, 2026
@EliahKagan
EliahKagan marked this pull request as draft October 25, 2026 15:31
@EliahKagan EliahKagan self-assigned this Oct 25, 2026

@EliahKagan EliahKagan left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CI is failing here due to some changes on the ubuntu-26.04 image that ubuntu-latest is moving to from ubuntu-24.04.

I'll fix this shortly, and at the same time I'll do several other CI-related improvements that have been in my backlog for a while.

@Byron

Byron commented Oct 25, 2026

Copy link
Copy Markdown
Member

Sorry, a fix is coming up via #2308 . If you have it ready though, feel free to follow through and I rebase.

@EliahKagan

Copy link
Copy Markdown
Member

If you're willing to rebase #2308, then that sounds good and I'll open a PR in the next few minutes and merge it after some final review by me and an LLM (and after CI completes).

@EliahKagan

Copy link
Copy Markdown
Member

My PR is #2310. As noted there, I plan to merge that once CI passes, since if I understand you correctly, you were in favor of rebasing onto it rather than having it wait for your #2308 so long as it could come in soon.

@EliahKagan

EliahKagan commented Oct 25, 2026 •

Copy link
Copy Markdown
Member

Update: #2310 is merged. Dependabot will supersede this PR on its own, since dependabot.yml has been modified on the main branch. #2308 can be rebased onto main at any time. (There will be conflicts of course., when doings so, because some things it does on CI have already been done in another way--and it's possible that some changes it makes on CI will not come out as conflicts but will also need to be dropped or adjusted.)

@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #2312.

@dependabot dependabot Bot closed this Oct 25, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/astral-sh/setup-uv-10.3.2 branch October 25, 2026 17:28
@EliahKagan

Copy link
Copy Markdown
Member

Further update: It looks like you had already rebased #2310 shortly before I posted #2309 (comment). The resolution of actual and conceptual conflicts between there and here looks good to me on quick inspection and, separately from that, Claude Opus 5.5 was also not able to identify any bugs arising from that (it only mentioned that the PR description had not been updated).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

2 participants