Skip to content

Comments

chore(deps): Bump astral-sh/setup-uv from 6 to 7#4

Merged
mergify[bot] merged 1 commit intomainfrom
dependabot/github_actions/astral-sh/setup-uv-7
Feb 23, 2026
Merged

chore(deps): Bump astral-sh/setup-uv from 6 to 7#4
mergify[bot] merged 1 commit intomainfrom
dependabot/github_actions/astral-sh/setup-uv-7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps astral-sh/setup-uv from 6 to 7.

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.2.1 🌈 update known checksums up to 0.9.28

Changes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v7.0.0 🌈 node24 and a lot of bugfixes

Changes

This release comes with a load of bug fixes and a speed up. Because of switching from node20 to node24 it is also a breaking change. If you are running on GitHub hosted runners this will just work, if you are using self-hosted runners make sure, that your runners are up to date. If you followed the normal installation instructions your self-hosted runner will keep itself updated.

This release also removes the deprecated input server-url which was used to download uv releases from a different server. The manifest-file input supersedes that functionality by adding a flexible way to define available versions and where they should be downloaded from.

Fixes

  • The action now respects when the environment variable UV_CACHE_DIR is already set and does not overwrite it. It now also finds cache-dir settings in config files if you set them.
  • Some users encountered problems that cache pruning took forever because they had some uv processes running in the background. Starting with uv version 0.8.24 this action uses uv cache prune --ci --force to ignore the running processes
  • If you just want to install uv but not have it available in path, this action now respects UV_NO_MODIFY_PATH
  • Some other actions also set the env var UV_CACHE_DIR. This action can now deal with that but as this could lead to unwanted behavior in some edgecases a warning is now displayed.

Improvements

If you are using minimum version specifiers for the version of uv to install for example

[tool.uv]
required-version = ">=0.8.17"

This action now detects that and directly uses the latest version. Previously it would download all available releases from the uv repo to determine the highest matching candidate for the version specifier, which took much more time.

If you are using other specifiers like 0.8.x this action still needs to download all available releases because the specifier defines an upper bound (not 0.9.0 or later) and "latest" would possibly not satisfy that.

🚨 Breaking changes

... (truncated)

Commits
  • eac588a Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 (#753)
  • a97c6cb Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#751)
  • 02182fa fix: warn instead of error when no python to cache (#762)
  • a3b3eae chore: update known checksums for 0.10.0 (#759)
  • 78cebec fix: use --clear to create venv (#761)
  • b6b8e2c refactor: tilde-expansion tests as unittests and no self-hosted tests (#760)
  • e31bec8 chore: update known checksums for 0.9.30 (#756)
  • db2b65e Bump actions/checkout from 6.0.1 to 6.0.2 (#740)
  • 3511ff7 feat: add venv-path input for activate-environment (#746)
  • 99b0f04 Fix punctuation (#747)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 23, 2026
@mergify mergify bot deployed to Mergify Merge Protections February 23, 2026 15:53 Active
@mergify
Copy link

mergify bot commented Feb 23, 2026

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🟢 🤖 Continuous Integration

Wonderful, this rule succeeded.
  • all of:
    • check-success=all-greens

🟢 👀 Review Requirements

Wonderful, this rule succeeded.
  • any of:
    • author = dependabot[bot]
    • #approved-reviews-by>=1
    • author = mergify-ci-bot

🟢 Enforce conventional commit

Wonderful, this rule succeeded.

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

  • title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?:

🟢 🔎 Reviews

Wonderful, this rule succeeded.
  • #changes-requested-reviews-by = 0
  • #review-requested = 0
  • #review-threads-unresolved = 0

🟢 📕 PR description

Wonderful, this rule succeeded.
  • body ~= (?ms:.{48,})

@mergify
Copy link

mergify bot commented Feb 23, 2026

Merge Queue Status

Rule: default


  • Entered queue2026-02-23 15:53 UTC
  • 🚫 Left the queue2026-02-23 15:54 UTC · at 227cc43c0ce9d008aea7b776038ee13a04586976

This pull request spent 17 seconds in the queue, with no time running CI.

Reason

The pull request conflicts with pull requests ahead in queue: #3

Hint

There is nothing you can do for now. If the pull request ahead in the queue is merged, this pull request will become conflicting and you'll have to update it.
If the pull request ahead is not merged, you can requeue this pull request with a @mergifyio queue comment.

@mergify
Copy link

mergify bot commented Feb 23, 2026

@dependabot[bot] this pull request is now in conflict 😩

@mergify mergify bot added the conflict label Feb 23, 2026
@jd
Copy link
Member

jd commented Feb 23, 2026

@Mergifyio queue

@mergify
Copy link

mergify bot commented Feb 23, 2026

Merge Queue Status


  • 🟠 Waiting for queue conditions
  • ⬜ Enter queue
  • ⬜ Run checks
  • ⬜ Merge
Required conditions to enter a queue
  • -closed [📌 queue requirement]
  • -conflict [📌 queue requirement]
  • -draft [📌 queue requirement]
  • deployment-success = Mergify Merge Protections [📌 queue requirement]
  • any of [📌 queue -> configuration change requirements]:
    • -mergify-configuration-changed
    • check-success = Configuration changed
  • any of [🔀 queue conditions]:
    • all of [📌 queue conditions of queue default]:
      • base=main

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6 to 7.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v6...v7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-7 branch from 227cc43 to c6a79bb Compare February 23, 2026 16:14
@mergify mergify bot deployed to Mergify Merge Protections February 23, 2026 16:15 Active
@mergify mergify bot added the queued label Feb 23, 2026
@mergify
Copy link

mergify bot commented Feb 23, 2026

queue

☑️ This pull request is already queued

@mergify mergify bot merged commit 7813b28 into main Feb 23, 2026
8 checks passed
@mergify
Copy link

mergify bot commented Feb 23, 2026

Merge Queue Status

Rule: default


  • Entered queue2026-02-23 16:15 UTC
  • Checks passed · in-place
  • Merged2026-02-23 16:15 UTC · at c6a79bbfed90d20d7122a9b89414a5761fa91178

This pull request spent 9 seconds in the queue, with no time running CI.

Required conditions to merge

@mergify mergify bot deleted the dependabot/github_actions/astral-sh/setup-uv-7 branch February 23, 2026 16:15
@mergify mergify bot removed the queued label Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

1 participant