Skip to content

Comments

build(deps): Bump astral-sh/setup-uv from 6.1.0 to 7.2.1#344

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/astral-sh/setup-uv-7.2.1
Closed

build(deps): Bump astral-sh/setup-uv from 6.1.0 to 7.2.1#344
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/astral-sh/setup-uv-7.2.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 30, 2026

Bumps astral-sh/setup-uv from 6.1.0 to 7.2.1.

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:

  • python-version: The Python version that was set (same content as existing UV_PYTHON)
  • python-cache-hit: A boolean value to indicate the Python cache entry was found

While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the "normal" cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.

[!NOTE]
This release will invalidate caches that contain the Python binaries. This happens a single time.

🐛 Bug fixes

  • chore: remove stray space from UV_PYTHON_INSTALL_DIR message @​akx (#720)

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v7.1.6 🌈 add OS version to cache key to prevent binary incompatibility

Changes

This release will invalidate your cache existing keys!

The os version e.g. ubuntu-22.04 is now part of the cache key. This prevents failing builds when a cache got populated with wheels built with different tools (e.g. glibc) than are present on the runner where the cache got restored.

🐛 Bug fixes

  • feat: add OS version to cache key to prevent binary incompatibility @​eifinger (#716)

🧰 Maintenance

... (truncated)

Commits
  • 803947b chore: update known checksums for 0.9.28 (#744)
  • 24553ac chore: update known checksums for 0.9.27 (#742)
  • 085087a Bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 (#741)
  • 9cfd029 chore: update known checksums for 0.9.26 (#734)
  • dd9d55b chore: update known checksums for 0.9.25 (#733)
  • 8512ad0 Clarify impact of using actions/setup-python (#732)
  • cc55817 chore: update known checksums for 0.9.24 (#730)
  • 61cb8a9 add outputs python-version and python-cache-hit (#728)
  • 11050ed fix: use uv_build backend for old-python-constraint-project (#729)
  • 1d22faf Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (#719)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 30, 2026
@poiana poiana requested review from Kaizhe and leodido January 30, 2026 09:23
@poiana
Copy link

poiana commented Jan 30, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ekoops for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@poiana poiana added the size/XS label Jan 30, 2026
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.1.0 to 7.2.1.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@f0ec1fc...803947b)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-7.2.1 branch from aa9c358 to fc8aab7 Compare February 12, 2026 16:25
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 13, 2026

Superseded by #346.

@dependabot dependabot bot closed this Feb 13, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/astral-sh/setup-uv-7.2.1 branch February 13, 2026 09:22
@github-project-automation github-project-automation bot moved this from Todo to Done in Falco Roadmap Feb 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dco-signoff: yes dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code size/XS

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant