Skip to content

chore(deps): Bump the actions group across 1 directory with 2 updates - #2524

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-e7af2e144d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-e7af2e144d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: astral-sh/setup-uv and taiki-e/install-action.

Updates astral-sh/setup-uv from 10.3.2 to 10.3.3

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

Commits
  • 68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
  • 0192b69 chore: update known checksums for 0.13.6 (#1117)
  • 2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
  • 9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
  • 80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
  • 36b7b57 fix: only report a saved cache when saving succeeded (#1110)
  • 56618ca docs: update version references to v10.3.2 (#1104)
  • See full diff in compare view

Updates taiki-e/install-action from 2.87.31 to 2.88.0

Release notes

Sourced from taiki-e/install-action's releases.

2.88.0

2.87.33

  • Update vacuum@latest to 0.35.4.

  • Update uv@latest to 0.13.6.

  • Update trunk@latest to 0.22.1.

  • Update tombi@latest to 1.9.6.

  • Update release-plz@latest to 0.4.2.

  • Update mise@latest to 2026.10.21.

  • Update cargo-nextest@latest to 0.9.150.

  • Update cargo-about@latest to 0.9.3.

2.87.32

  • Update wild@latest to 0.11.0.

  • Update vacuum@latest to 0.35.2.

  • Update tombi@latest to 1.9.5.

  • Update sccache@latest to 0.19.0.

  • Update release-plz@latest to 0.4.1.

  • Update mise@latest to 2026.10.19.

  • Update knope@latest to 0.23.2.

  • Update dprint@latest to 0.64.3.

  • Update cargo-vet@latest to 0.10.3.

  • Update cargo-sort@latest to 2.1.4.

  • Update cargo-binstall@latest to 1.26.1.

  • Update biome@latest to 2.6.3.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.88.1] - 2026-10-30

  • Update wasmtime@latest to 50.0.1.

  • Update vacuum@latest to 0.36.0.

  • Update tombi@latest to 1.9.8.

  • Update mise@latest to 2026.10.23.

  • Update kingfisher@latest to 2.15.0.

  • Update espup@latest to 0.19.0.

  • Update deepsource@latest to 0.10.2.

  • Update biome@latest to 2.6.4.

[2.88.0] - 2026-10-28

[2.87.33] - 2026-10-28

  • Update vacuum@latest to 0.35.4.

  • Update uv@latest to 0.13.6.

  • Update trunk@latest to 0.22.1.

  • Update tombi@latest to 1.9.6.

  • Update release-plz@latest to 0.4.2.

  • Update mise@latest to 2026.10.21.

  • Update cargo-nextest@latest to 0.9.150.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 31, 2026
@dependabot
dependabot Bot requested a review from jeremi as a code owner October 31, 2026 14:25
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 31, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-01T16:22:33.053436Z 69e47a2 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ae89bc3723

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread .github/workflows/ci.yml
- name: Install uv
if: matrix.lane != 'immediate-actions'
uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Update the BReg SHA assertion with the action pin

On every CI run, the changes job invokes .github/scripts/test_ci_changes.py, but test_breg_contracts_pin_postgresql_and_use_the_product_entry_points still requires the old setup-uv SHA at line 2962. Changing this BReg step to the new SHA therefore makes that test fail before the dependent CI jobs can run; update the hard-coded assertion in the same commit.

AGENTS.md reference: AGENTS.md:L296-L299

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-e7af2e144d branch 2 times, most recently from dba54fb to a9a54e3 Compare November 1, 2026 12:23
Bumps the actions group with 2 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [taiki-e/install-action](https://github.com/taiki-e/install-action).


Updates `astral-sh/setup-uv` from 10.3.2 to 10.3.3
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@07a047e...68559e9)

Updates `taiki-e/install-action` from 2.87.31 to 2.88.0
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@1e29709...86f7a0f)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.88.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-e7af2e144d branch from a9a54e3 to 69e47a2 Compare November 1, 2026 16:21

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants