Skip to content

ci(deps): update astral-sh/setup-uv action to v10 - #108

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/astral-sh-setup-uv-10.x
Aug 12, 2026
Merged

ci(deps): update astral-sh/setup-uv action to v10#108
renovate[bot] merged 1 commit into
mainfrom
renovate/astral-sh-setup-uv-10.x

Conversation

@renovate

@renovate renovate Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
astral-sh/setup-uv action major v9.0.0v10.0.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes
🐛 Bug fixes
🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@liblaf-mega-linter

Copy link
Copy Markdown

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 1 0 0 0.61s
⚠️ ACTION zizmor 1 0 1 0 0.76s
✅ BASH shellcheck 2 0 0 0.03s
✅ BASH shfmt 2 0 0 0 0.01s
✅ COPYPASTE jscpd yes no no 0.74s
✅ JSON jsonlint 4 0 0 0.12s
✅ JSON prettier 4 0 0 0 0.41s
✅ JSON v8r 4 0 0 2.01s
✅ MARKDOWN rumdl 3 0 0 0 0.04s
⚠️ PYTHON ruff yes yes 33 no 0.08s
✅ PYTHON ruff-format yes yes no no 0.04s
✅ REPOSITORY git_diff yes no no 0.01s
✅ SPELL cspell 44 0 0 3.56s
✅ YAML prettier 4 0 0 0 0.4s
✅ YAML v8r 4 0 0 1.83s
✅ YAML yamllint 4 0 0 0.53s

Detailed Issues

⚠️ PYTHON / ruff - 33 errors
CPY001 Missing copyright notice at top of file
--> __builtins__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> docs/.scripts/gen-rulesets.py:1:1

CPY001 Missing copyright notice at top of file
--> noxfile.py:1:1

CPY001 Missing copyright notice at top of file
--> scripts/build.py:1:1

CPY001 Missing copyright notice at top of file
--> scripts/render-docs.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/_version.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/core/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/core/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/core/_ruleset.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/export/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/export/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/export/_abc.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/export/_mihomo.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/_builder.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/_config.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/_meta.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/gen/_recipe.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/_abc.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/_registry.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/mihomo/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/mihomo/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/mihomo/_decode.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/mihomo/_enum.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/provider/mihomo/_provider.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/utils/__init__.py:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/utils/__init__.pyi:1:1

CPY001 Missing copyright notice at top of file
--> src/route_rules/utils/_download.py:1:1

Found 33 errors.
⚠️ ACTION / zizmor - 1 error
INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'artipacked' audit failed on file://.github/workflows/build-mihomo.yaml

Caused by:
    0: error in 'artipacked' audit
    1: couldn't list tags for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: GIT, JSON_ESLINT_PLUGIN_JSONC. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@codecov

codecov Bot commented Aug 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.60%. Comparing base (e9d52e6) to head (a840ece).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #108   +/-   ##
=======================================
  Coverage   60.60%   60.60%           
=======================================
  Files          20       20           
  Lines         396      396           
  Branches       24       24           
=======================================
  Hits          240      240           
  Misses        156      156           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@renovate
renovate Bot merged commit 27cc577 into main Aug 12, 2026
17 checks passed
@renovate
renovate Bot deleted the renovate/astral-sh-setup-uv-10.x branch August 12, 2026 22:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants