Skip to content

chore(deps): update astral-sh/setup-uv action to v10 - #2941

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/astral-sh-setup-uv-10.x
Open

chore(deps): update astral-sh/setup-uv action to v10#2941
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/astral-sh-setup-uv-10.x

Conversation

@renovate

@renovate renovate Bot commented Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
astral-sh/setup-uv action major v9.0.0 → v10.3.0 v10.3.1

Release Notes

astral-sh/setup-uv

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in #​984

version: latest-known
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@apify-service-account

apify-service-account commented Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

✅ Preview for this PR (commit 1a08695) is ready at https://pr-2941.preview.docs.apify.com (see action run).

@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 2 times, most recently from 06c1c7d to e936c96 Compare September 7, 2026 16:49
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 5 times, most recently from eb2db8d to f09752e Compare September 16, 2026 20:26
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 2 times, most recently from 8151e11 to 868462d Compare September 24, 2026 11:45
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 868462d to 83a45b2 Compare October 1, 2026 07:54
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch 3 times, most recently from a0db15b to 2f6e673 Compare October 15, 2026 13:07
@renovate
renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 2f6e673 to 1a08695 Compare October 20, 2026 08:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@apify-service-account @webrdaniel