Repository navigation
Bump astral-sh/setup-uv from 10.3.2 to 10.3.3 in the actions group - #112
Conversation
Bumps the actions group with 1 update: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `astral-sh/setup-uv` from 10.3.2 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@v10.3.2...v10.3.3) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Birfy
left a comment
Birfy
left a comment
There was a problem hiding this comment.
LGTM. Patch bump of astral-sh/setup-uv 10.3.2 → 10.3.3 across all 5 usages in .github/workflows/test.yml (the only workflow using it); no input changes. Release is bugfixes only (Astral mirror for version manifests with GitHub fallback, known checksums still verified; ~= / whitespace specifier fixes; cache-save reporting). CI was still running at review time — merge once core/full/benchmarks are green.
hsliuustc0106
left a comment
hsliuustc0106
left a comment
There was a problem hiding this comment.
Review summary
Dependabot patch bump of astral-sh/setup-uv 10.3.2 → 10.3.3 in all five uses in .github/workflows/test.yml. Inputs unchanged. Release notes are bugfixes only (Astral mirror for manifests with GitHub fallback; known checksums still verified).
Findings
No blockers.
Light impact
- Impact: changed CI action pin only; callers are the workflow jobs that already ran green on this tip.
- Risk: low
- Missing tests: none (CI itself is the check)
Merge gates: mergeable clean; core (3.11/3.13), full, and benchmarks green on 3032a1c (browser / windows core skipped as expected for this path).
Bumps the actions group with 1 update: astral-sh/setup-uv.
Updates
astral-sh/setup-uvfrom 10.3.2 to 10.3.3Release notes
Sourced from astral-sh/setup-uv's releases.
Commits
68559e9Use Astral mirror for version manifests with GitHub fallback (#1119)0192b69chore: update known checksums for 0.13.6 (#1117)2f29784docs: use JSDoc for compatible release specifier comment (#1113)9c73321fix: allow whitespace in uv requirement specifiers (#1112)80fbe01fix: resolve ~= specifiers with PEP 440 semantics (#1111)36b7b57fix: only report a saved cache when saving succeeded (#1110)56618cadocs: update version references to v10.3.2 (#1104)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions