renovate[bot]
3c20ffe9ef
Update PyO3/maturin-action action to v1.47.2 ( #12228 )
2025-03-17 14:17:16 -04:00
renovate[bot]
28a2d07c44
Update CodSpeedHQ/action action to v3.5.0 ( #12227 )
2025-03-17 14:17:03 -04:00
renovate[bot]
68ece236a9
Update peter-evans/create-pull-request action to v7.0.8 ( #12226 )
2025-03-17 14:16:46 -04:00
renovate[bot]
f31a1edd42
Update taiki-e/install-action digest to 2c41309 ( #12213 )
2025-03-17 03:32:42 +00:00
renovate[bot]
5880a98163
Pin dependencies ( #12191 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action ) |
action | pinDigest | -> `0010eb0` |
|
[EmbarkStudios/cargo-deny-action](https://redirect.github.com/EmbarkStudios/cargo-deny-action )
| action | pinDigest | -> `3f4a782` |
| [PyO3/maturin-action](https://redirect.github.com/PyO3/maturin-action )
| action | pinDigest | -> `36db840` |
|
[SebRollen/toml-action](https://redirect.github.com/SebRollen/toml-action )
| action | pinDigest | -> `b1b3628` |
| [Swatinem/rust-cache](https://redirect.github.com/Swatinem/rust-cache )
| action | pinDigest | -> `f0deed1` |
|
[acj/freebsd-firecracker-action](https://redirect.github.com/acj/freebsd-firecracker-action )
| action | pinDigest | -> `4d93174` |
|
[actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance )
| action | pinDigest | -> `c074443` |
| [actions/checkout](https://redirect.github.com/actions/checkout ) |
action | pinDigest | -> `11bd719` |
|
[actions/setup-python](https://redirect.github.com/actions/setup-python )
| action | pinDigest | -> `4237552` |
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv ) |
action | pinDigest | -> `f94ec6b` |
|
[conda-incubator/setup-miniconda](https://redirect.github.com/conda-incubator/setup-miniconda )
| action | pinDigest | -> `505e639` |
|
[docker/build-push-action](https://redirect.github.com/docker/build-push-action )
| action | pinDigest | -> `471d1dc` |
| [docker/login-action](https://redirect.github.com/docker/login-action )
| action | pinDigest | -> `74a5d14` |
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action )
| action | pinDigest | -> `902fa8e` |
|
[docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action )
| action | pinDigest | -> `b5ca514` |
|
[ludeeus/action-shellcheck](https://redirect.github.com/ludeeus/action-shellcheck )
| action | pinDigest | -> `00cae50` |
|
[peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request )
| action | pinDigest | -> `271a8d0` |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action )
| action | pinDigest | -> `2153a01` |
|
[uraimo/run-on-arch-action](https://redirect.github.com/uraimo/run-on-arch-action )
| action | pinDigest | -> `ac33288` |
|
[webfactory/ssh-agent](https://redirect.github.com/webfactory/ssh-agent )
| action | pinDigest | -> `dc588b6` |
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 16:25:19 -04:00
renovate[bot]
8cf439bc36
Update Artifact GitHub Actions dependencies ( #12192 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/download-artifact](https://redirect.github.com/actions/download-artifact )
| action | minor | `v4` -> `v4.1.9` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact )
| action | minor | `v4` -> `v4.6.1` |
---
### Release Notes
<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>
###
[`v4.1.9`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.9 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.8...v4.1.9 )
#### What's Changed
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- docs: small migration fix by
[@​froblesmartin](https://redirect.github.com/froblesmartin ) in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- Update MIGRATION.md by
[@​andyfeller](https://redirect.github.com/andyfeller ) in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- Update artifact package to 2.2.2 by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/354 ](https://redirect.github.com/actions/download-artifact/pull/354 )
- [@​froblesmartin](https://redirect.github.com/froblesmartin )
made their first contribution in
[https://github.com/actions/download-artifact/pull/370 ](https://redirect.github.com/actions/download-artifact/pull/370 )
- [@​andyfeller](https://redirect.github.com/andyfeller ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/372 ](https://redirect.github.com/actions/download-artifact/pull/372 )
- [@​yacaovsnc](https://redirect.github.com/yacaovsnc ) made their
first contribution in
[https://github.com/actions/download-artifact/pull/380 ](https://redirect.github.com/actions/download-artifact/pull/380 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.9
###
[`v4.1.8`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.8 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.7...v4.1.8 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/341 ](https://redirect.github.com/actions/download-artifact/pull/341 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.8
###
[`v4.1.7`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.7 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.6...v4.1.7 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
dependency by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/325 ](https://redirect.github.com/actions/download-artifact/pull/325 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.6...v4.1.7
###
[`v4.1.6`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.6 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.5...v4.1.6 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/download-artifact/pull/324 ](https://redirect.github.com/actions/download-artifact/pull/324 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.5...v4.1.6
###
[`v4.1.5`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.5 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.4...v4.1.5 )
##### What's Changed
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/322 ](https://redirect.github.com/actions/download-artifact/pull/322 )
- Update dependencies `@actions/core` to v1.10.1 and `@actions/artifact`
to v2.1.5
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4.1.4...v4.1.5
###
[`v4.1.4`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.4 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.3...v4.1.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/307 ](https://redirect.github.com/actions/download-artifact/pull/307 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.4
###
[`v4.1.3`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.3 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.2...v4.1.3 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/download-artifact/pull/292 ](https://redirect.github.com/actions/download-artifact/pull/292 )
- Update toolkit dependency with updated unzip logic by
[@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
by [@​bethanyj28](https://redirect.github.com/bethanyj28 ) in
[https://github.com/actions/download-artifact/pull/303 ](https://redirect.github.com/actions/download-artifact/pull/303 )
#### New Contributors
- [@​bethanyj28](https://redirect.github.com/bethanyj28 ) made
their first contribution in
[https://github.com/actions/download-artifact/pull/299 ](https://redirect.github.com/actions/download-artifact/pull/299 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.3
###
[`v4.1.2`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.2 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.1...v4.1.2 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.1.1`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.1 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4.1.0...v4.1.1 )
- Fix transient request timeouts
[https://github.com/actions/download-artifact/issues/249 ](https://redirect.github.com/actions/download-artifact/issues/249 )
- Bump `@actions/artifacts` to latest version
###
[`v4.1.0`](https://redirect.github.com/actions/download-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/download-artifact/compare/v4...v4.1.0 )
#### What's Changed
- Some cleanup by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/247 ](https://redirect.github.com/actions/download-artifact/pull/247 )
- Fix default for run-id by
[@​stchr](https://redirect.github.com/stchr ) in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
- Support pattern matching to filter artifacts & merge to same directory
by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/download-artifact/pull/259 ](https://redirect.github.com/actions/download-artifact/pull/259 )
#### New Contributors
- [@​stchr](https://redirect.github.com/stchr ) made their first
contribution in
[https://github.com/actions/download-artifact/pull/252 ](https://redirect.github.com/actions/download-artifact/pull/252 )
**Full Changelog**:
https://github.com/actions/download-artifact/compare/v4...v4.1.0
</details>
<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>
###
[`v4.6.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.6.0...v4.6.1 )
#### What's Changed
- Update to use artifact 2.2.2 package by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/673 ](https://redirect.github.com/actions/upload-artifact/pull/673 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.1
###
[`v4.6.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.5.0...v4.6.0 )
##### What's Changed
- Expose env vars to control concurrency and timeout by
[@​yacaovsnc](https://redirect.github.com/yacaovsnc ) in
[https://github.com/actions/upload-artifact/pull/662 ](https://redirect.github.com/actions/upload-artifact/pull/662 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.6.0
###
[`v4.5.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.5.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0 )
##### What's Changed
- fix: deprecated `Node.js` version in action by
[@​hamirmahal](https://redirect.github.com/hamirmahal ) in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- Add new `artifact-digest` output by
[@​bdehamer](https://redirect.github.com/bdehamer ) in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
##### New Contributors
- [@​hamirmahal](https://redirect.github.com/hamirmahal ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/578 ](https://redirect.github.com/actions/upload-artifact/pull/578 )
- [@​bdehamer](https://redirect.github.com/bdehamer ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/656 ](https://redirect.github.com/actions/upload-artifact/pull/656 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.3...v4.5.0
###
[`v4.4.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3 )
#### What's Changed
- Undo indirect dependency updates from
[#​627](https://redirect.github.com/actions/upload-artifact/issues/627 )
by [@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/632 ](https://redirect.github.com/actions/upload-artifact/pull/632 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3
###
[`v4.4.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2 )
#### What's Changed
- Bump `@actions/artifact` to 2.1.11 by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/627 ](https://redirect.github.com/actions/upload-artifact/pull/627 )
- Includes fix for relative symlinks not resolving properly
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2
###
[`v4.4.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1 )
#### What's Changed
- Add a section about hidden files by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/607 ](https://redirect.github.com/actions/upload-artifact/pull/607 )
- Add workflow file for publishing releases to immutable action package
by [@​Jcambass](https://redirect.github.com/Jcambass ) in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to latest version, includes symlink and timeout fixes by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/625 ](https://redirect.github.com/actions/upload-artifact/pull/625 )
#### New Contributors
- [@​Jcambass](https://redirect.github.com/Jcambass ) made their
first contribution in
[https://github.com/actions/upload-artifact/pull/621 ](https://redirect.github.com/actions/upload-artifact/pull/621 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1
###
[`v4.4.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0 )
#### Notice: Breaking Changes ⚠️
We will no longer include hidden files and folders by default in the
`upload-artifact` action of this version. This reduces the risk that
credentials are accidentally uploaded into artifacts. Customers who need
to continue to upload these files can use a new option,
`include-hidden-files`, to continue to do so.
See ["Notice of upcoming deprecations and breaking changes in GitHub
Actions
runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/ )
changelog and [this
issue](https://redirect.github.com/actions/upload-artifact/issues/602 )
for more details.
#### What's Changed
- Exclude hidden files by default by
[@​joshmgross](https://redirect.github.com/joshmgross ) in
[https://github.com/actions/upload-artifact/pull/598 ](https://redirect.github.com/actions/upload-artifact/pull/598 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0
###
[`v4.3.6`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.6 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6 )
#### What's Changed
- Revert to
[@​actions/artifact](https://redirect.github.com/actions/artifact )
2.1.8 by [@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/594 ](https://redirect.github.com/actions/upload-artifact/pull/594 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.6
###
[`v4.3.5`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.5 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5 )
#### What's Changed
- Bump
[@​actions/artifact](https://redirect.github.com/actions/artifact )
to v2.1.9 by [@​robherley](https://redirect.github.com/robherley )
in
[https://github.com/actions/upload-artifact/pull/588 ](https://redirect.github.com/actions/upload-artifact/pull/588 )
- Fixed artifact upload chunk timeout logic
[#​1774](https://redirect.github.com/actions/toolkit/pull/1774 )
- Use lazy stream to prevent issues with open file limits
[#​1771](https://redirect.github.com/actions/toolkit/pull/1771 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5
###
[`v4.3.4`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.4 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4 )
#### What's Changed
- Update
[@​actions/artifact](https://redirect.github.com/actions/artifact )
version, bump dependencies by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/584 ](https://redirect.github.com/actions/upload-artifact/pull/584 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4
###
[`v4.3.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.3 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3 )
#### What's Changed
- updating `@actions/artifact` dependency to v2.1.6 by
[@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/565 ](https://redirect.github.com/actions/upload-artifact/pull/565 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3
###
[`v4.3.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.2 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2 )
#### What's Changed
- Update release-new-action-version.yml by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/516 ](https://redirect.github.com/actions/upload-artifact/pull/516 )
- Minor fix to the migration readme by
[@​andrewakim](https://redirect.github.com/andrewakim ) in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
- Update readme with v3/v2/v1 deprecation notice by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/561 ](https://redirect.github.com/actions/upload-artifact/pull/561 )
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core`
to v1.0.1 by [@​eggyhead](https://redirect.github.com/eggyhead ) in
[https://github.com/actions/upload-artifact/pull/562 ](https://redirect.github.com/actions/upload-artifact/pull/562 )
#### New Contributors
- [@​andrewakim](https://redirect.github.com/andrewakim ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/523 ](https://redirect.github.com/actions/upload-artifact/pull/523 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2
###
[`v4.3.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.1 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.0...v4.3.1 )
- Bump
[@​actions/artifacts](https://redirect.github.com/actions/artifacts )
to latest version to include [updated GHES host
check](https://redirect.github.com/actions/toolkit/pull/1648 )
###
[`v4.3.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.2.0...v4.3.0 )
#### What's Changed
- Reorganize upload code in prep for merge logic & add more tests by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/504 ](https://redirect.github.com/actions/upload-artifact/pull/504 )
- Add sub-action to merge artifacts by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/505 ](https://redirect.github.com/actions/upload-artifact/pull/505 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.0
###
[`v4.2.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.2.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.1.0...v4.2.0 )
#### What's Changed
- Ability to overwrite an Artifact by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/501 ](https://redirect.github.com/actions/upload-artifact/pull/501 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.2.0
###
[`v4.1.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.1.0 )
[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.0.0...v4.1.0 )
#### What's Changed
- Add migrations docs by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/482 ](https://redirect.github.com/actions/upload-artifact/pull/482 )
- Update README.md by
[@​samuelwine](https://redirect.github.com/samuelwine ) in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
- Support artifact-url output by
[@​konradpabjan](https://redirect.github.com/konradpabjan ) in
[https://github.com/actions/upload-artifact/pull/496 ](https://redirect.github.com/actions/upload-artifact/pull/496 )
- Update readme to reflect new 500 artifact per job limit by
[@​robherley](https://redirect.github.com/robherley ) in
[https://github.com/actions/upload-artifact/pull/497 ](https://redirect.github.com/actions/upload-artifact/pull/497 )
#### New Contributors
- [@​samuelwine](https://redirect.github.com/samuelwine ) made
their first contribution in
[https://github.com/actions/upload-artifact/pull/492 ](https://redirect.github.com/actions/upload-artifact/pull/492 )
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/ ).
View the [repository job
log](https://developer.mend.io/github/astral-sh/uv ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJpbnRlcm5hbCJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-15 15:11:23 -05:00
Charlie Marsh
4d989b3630
Instruct Renovate to pin GitHub Actions based on SHA ( #12189 )
...
## Summary
The intent here is that all actions should be pinned to an immutable SHA
(but that Renovate should annotate each SHA with the corresponding
SemVer version).
2025-03-15 17:24:33 +00:00
Charlie Marsh
dab1ea2272
Replace change detection GitHub Action ( #12188 )
...
## Summary
`tj-actions/changed-files` no longer exists due to a malicious commit.
This PR replaces it with a minimal shell script to get us unblocked.
2025-03-15 13:12:00 -04:00
Zanie Blue
553bcccb6a
Add support for dynamic musl Python distributions on x86-64 Linux ( #12121 )
...
Following the upstream release and #12120 , removes gating preventing
installation of the managed musl Python versions.
Of note
- The filtering of musl Python distributions has moved from the Rust
runtime to the metadata fetcher
- The filtering is now conditional on the PBS release date, removing all
old static musl distributions
- We could support the `+static` musl downloads in the future; right
now, they are deprioritized when selecting a variant
- I added test to CI which uses Alpine and installs numpy
2025-03-11 18:14:10 -05:00
konsti
b2a0ea3701
Integration test uv_build package ( #12058 )
...
I somehow missed running an actual integration test of the PEP 517 API
in CI and the python shim was using the old uv CLI interface still.
The tests include pip, uv and `python -m build`. They must be a in CI
job since we can't depend on the Python package in the Rust tests (we
only get the binary in `cargo test`, not the `uv_build` wheel).
2025-03-07 23:40:53 +01:00
Zanie Blue
0798c3565d
Fix PyPI typo in publish workflow ( #12051 )
2025-03-07 11:10:23 -06:00
Zanie Blue
7a56aef7d1
Revert "Run the uv-build publish sequentially after uv ( #12022 )" ( #12024 )
...
This was not the problem
2025-03-06 16:53:39 -06:00
Zanie Blue
15bc1e7c03
Fix upload name for macOS wheels ( #12023 )
...
These were missed in the original PR and consequently not uploaded
2025-03-06 16:53:29 -06:00
Zanie Blue
ef1243c6e8
Run the uv-build publish sequentially after uv ( #12022 )
...
In an attempt to resolve a trusted publishing failure
2025-03-06 15:27:57 -06:00
konsti
bf4c7afe8b
A minimal build backend for uv: uv_build ( #11446 )
...
uv itself is a large package with many dependencies and lots of
features. To build a package using the uv build backend, you shouldn't
have to download and install the entirety of uv. For platform where we
don't provide wheels, it should be possible and fast to compile the uv
build backend. To that end, we're introducing a python package that
contains a trimmed down version of uv that only contains the build
backend, with a minimal dependency tree in rust.
The `uv_build` package is publish from CI just like uv itself. It is
part of the workspace, but has much less dependencies for its own
binary. We're using cargo deny to enforce that the network stack is not
part of the dependencies. A new build profile ensure we're getting the
minimum possible binary size for a rust binary.
---------
Co-authored-by: Zanie Blue <contact@zanie.dev >
2025-03-06 13:27:20 -06:00
Zanie Blue
b7f98f1ff2
Use the Depot Ubuntu runners instead of GitHub for release workflows ( #11948 )
...
See
-
https://opensource.axo.dev/cargo-dist/book/reference/config.html#github-custom-runners
- https://github.com/axodotdev/cargo-dist/issues/1760
- #11935
2025-03-04 13:28:14 -06:00
konsti
6132d252d6
Remove unused UV_STACK_SIZE env vars ( #11957 )
...
These were overlooked in #10479
2025-03-04 16:53:34 +00:00
Zanie Blue
f44aba0a96
Run the Docker build workflow when we touch project or toolchain metadata ( #11938 )
...
I noticed that https://github.com/astral-sh/uv/pull/11936 did not run
the Docker builds, nor did #11934
We should run these when the relevant files change so there aren't
surprises at release time!
Updates the `build-binaries` workflow to include toolchain version
changes and `.cargo/config.toml` changes too.
2025-03-04 08:36:20 -06:00
Zanie Blue
f0ec9fd44a
Bump version to 0.6.4 ( #11934 )
2025-03-03 16:04:11 -06:00
Zanie Blue
326d0c460a
Add emulated test for x86-64 Python on aarch64 Windows ( #11626 )
...
Coverage of https://github.com/astral-sh/uv/pull/11625 for unmanaged
Python.
2025-02-19 12:02:13 -06:00
konsti
3634a4d8e9
More consistent build-binaries.yml ( #11478 )
...
For uv-build, we need to duplicate a lot of the `build-binaries.yml`
logic to build another source distribution and wheel. In preparation for
that I tried to make the invocations more consistent, to make it easier
to review the changes when adding the `uv-build` builds on top.
Split out from #11446
---------
Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com >
2025-02-18 11:36:26 -06:00
samypr100
553b3a7c34
Bump alpine default tag to 3.21 ( #11157 )
...
Alpine 3.21 has been released for a few months and it's now being used
officially under `alpine` based [python
images](https://hub.docker.com/_/python ), hence our python-alpine based
images has been using 3.21 since uv 0.5.8 under the hood.
This could arguably be `breaking` as we're dropping alpine3.20 top-level
tag, so it could be a good candidate for 0.6.0.
Alternatively, we can keep support for 3.20 and make this non-breaking
by simply repointing alpine to now be 3.21 and keeping the 3.20 tag
around.
2025-02-13 16:17:49 -06:00
Zanie Blue
4badcef3d8
Disable pip cache in Windows system test job ( #11403 )
...
I have no idea why we'd want the cache enabled here anyway?
Closes https://github.com/astral-sh/uv/issues/11397
2025-02-10 20:36:00 +00:00
Zanie Blue
e22ecee36b
Respect no-build label in Docker image builds ( #11333 )
...
e.g., https://github.com/astral-sh/uv/pull/11329 is runner Docker image
builds but should not
2025-02-08 02:17:59 +00:00
Zanie Blue
1f963d1b89
Move content from the mkdocs.public.yml into the template ( #11246 )
...
Closes https://github.com/astral-sh/uv/issues/11242
2025-02-05 16:13:46 +00:00
Charlie Marsh
ee2bdc21fa
Disable wheel testing for powerpc64le-unknown-linux-gnu ( #11229 )
...
## Summary
I need to look into this later, but the test step is failing to install
Python:
https://github.com/astral-sh/uv/actions/runs/13148286589/job/36694160839 .
We already disable this for the non-`le` variant, so this seems ok to
revisit.
2025-02-04 22:46:08 -05:00
FishAlchemist
49b85d2e65
Add `last updated` for document ( #11164 )
...
## Summary
Display the last document update time, excluding any automatically
generated parts of the document, while ensuring that Google can
accurately read and recognize the webpage's time.
Note that I do not have permission to update
``requirements-insiders.txt``
Google time info
*
https://developers.google.com/search/blog/2019/03/help-google-search-know-best-date-for
*
https://developers.google.com/search/docs/appearance/structured-data/article#amp
Similar https://github.com/astral-sh/uv/pull/11162
Closes #11148
## Test Plan
uvx --with-requirements docs/requirements.txt -- mkdocs serve -f
mkdocs.public.yml --strict
The correct format is actually ``2024-08-08T22:01:08Z``, but Google
Search happens to be lenient and accepts this format.
2025-02-03 22:28:47 -05:00
konsti
c54dbcbcc2
Use dev drive for trampoline CI to avoid timeout ( #11015 )
...
Sometimes that job is just slow:
https://github.com/astral-sh/uv/actions/runs/12996921221/job/36247398606
2025-02-03 15:38:56 +01:00
Martijn Pieters
47f80a62c4
Sign docker images using cosign ( #8685 )
...
cosign uses the GitHub action ID token to retrieve an ephemeral code
signing certificate from Fulcio, and store the signature in the Rekor
transparency log.
Once an image has been successfully signed, you should be able to verify
the signature with:
```sh
cosign verify ghcr.io/astral-sh/uv:latest --certificate-identity-regexp='.*' --certificate-oidc-issuer-regexp='.*'
```
Closes #8670
2025-01-31 09:00:23 -06:00
Zanie Blue
24c70240d5
Link to our MRE documentation in the issue template ( #11045 )
2025-01-28 23:09:04 -06:00
Zanie Blue
a6d887a37e
Include Rust toolchain in cache in trampoline test job ( #11019 )
2025-01-28 14:26:07 +00:00
Zanie Blue
e8d50153d0
Update name of "Build binary" job to highlight that these are the "release" binaries ( #10990 )
...
I found this confusing since we have `build binary` jobs in regular CI
2025-01-27 11:48:38 -06:00
konsti
ad60f8da77
Use install action for cargo shear ( #10983 )
2025-01-27 18:06:17 +01:00
Zanie Blue
1ef47aa1d5
Only move the .cargo directory if it exists ( #10938 )
...
which it usually does... but on some runners it can be missing now?
2025-01-24 15:39:29 +00:00
Zanie Blue
98e7cd00c8
Add Windows aarch64 to the release binaries ( #10885 )
...
Following test coverage from #10540
Closes https://github.com/astral-sh/uv/issues/1141
2025-01-24 09:24:22 -06:00
Zanie Blue
0008ec69c4
Run multiple commands in ecosystem tests ( #10920 )
2025-01-24 09:18:21 -06:00
Zanie Blue
9a2d5fd358
Add ecosystem test case for pydantic/pydantic-core ( #10917 )
2025-01-23 17:05:13 -06:00
Zanie Blue
10654cb8c2
Fix render of matrix arch for system conda tests ( #10914 )
2025-01-23 21:31:59 +00:00
Zanie Blue
a05b0e0346
Separate musl and libc linux builds in CI ( #10830 )
...
We have a lot of jobs downstream of the `build-binary-linux` job, but
the job is significantly slower than the other binary builds because we
need to configure musl. Instead, we split this into two jobs (as it was
before https://github.com/astral-sh/uv/pull/2309#discussion_r1520101330 )
to speed things up.
The libc job takes ~1m and its _downstream_ jobs finish before the musl
build does. The musl job takes ~5m.
2025-01-23 15:19:26 -06:00
Zanie Blue
26210cc0e6
Bump cargo-dist version to 0.28.0 ( #10884 )
...
Some installer improvements; see
https://github.com/axodotdev/cargo-dist/blob/main/CHANGELOG.md#version-0280-2025-01-08
2025-01-23 10:49:53 -06:00
konsti
db4ab9dc8a
Install and remove managed Python to and from the Windows Registry (PEP 514) ( #10634 )
...
## Summary
In preview mode on windows, register und un-register the managed python build standalone installations in the Windows registry following PEP 514.
We write the values defined in the PEP plus the download URL and hash. We add an entry when installing a version, remove an entry when uninstalling and removing all values when uninstalling with `--all`. We update entries only by overwriting existing values, there is no "syncing" involved.
Since they are not official builds, pbs gets a prefix. `py -V:Astral/CPython3.13.1` works, `py -3.13` doesn't.
```
$ py --list-paths
-V:3.12 * C:\Users\Konsti\AppData\Local\Programs\Python\Python312\python.exe
-V:3.11.9 C:\Users\Konsti\.pyenv\pyenv-win\versions\3.11.9\python.exe
-V:3.11 C:\Users\micro\AppData\Local\Programs\Python\Python311\python.exe
-V:3.8 C:\Users\micro\AppData\Local\Programs\Python\Python38\python.exe
-V:Astral/CPython3.13.1 C:\Users\Konsti\AppData\Roaming\uv\data\python\cpython-3.13.1-windows-x86_64-none\python.exe
```
Registry errors are reported but not fatal, except for operations on the company key since it's not bound to any specific python interpreter.
On uninstallation, we prune registry entries that have no matching Python installation (i.e. broken entries).
The code uses the official `windows_registry` crate of the `winreg` crate.
Best reviewed commit-by-commit.
## Test Plan
We're reusing an existing system check to test different (un)installation scenarios.
2025-01-23 14:13:41 +00:00
Divyanshu Kalra
027c3f5e67
Add Windows aarch64 build and test job to CI
...
Based on discussion in https://github.com/astral-sh/uv/pull/10306 , this
adds building aarch64 exe using x86 runner. See:
https://github.com/astral-sh/uv/pull/10402#issuecomment-2579094192
Addresses: #1141
---------
Co-authored-by: Zanie Blue <contact@zanie.dev >
2025-01-22 22:38:50 -06:00
Charlie Marsh
183fe403c6
Disable .egg-info tests via slow-tests feature on Windows and macOS ( #10872 )
...
## Summary
These are super slow on Windows and it's not critical to test them on
that platform. Let's just do the lazy thing.
2025-01-22 21:39:04 +00:00
Zanie Blue
a539d33021
Update smoke test scripts to fail on first error ( #10831 )
...
These continue on failure on Windows, which is annoying.
2025-01-22 15:00:50 -06:00
Zanie Blue
fd16988a4b
Move smoke tests into dedicated jobs and build uvx explicitly ( #10824 )
...
In the interest of expanding these tests and debugging weird behaviors,
I've moved the smoke tests out of the `cargo test` job and into
dedicated `smoke test` jobs. We explicitly build `uvx` in the `build
binary` jobs instead of relying on the implicit build for the test run.
I also added a `uvx` test case to the smoke tests: `uvx ruff --version`
2025-01-21 16:46:12 -06:00
Zanie Blue
6a5e5b33f2
Move cargo to the Dev Drive in Windows CI ( #10656 )
...
This successfully changed the nextest install to target the dev drive
```
info: cargo-nextest installed at /e/.cargo/bin/cargo-nextest.exe
```
2025-01-21 12:43:54 -06:00
Zanie Blue
399086d28f
Disable the distutils setuptools shim during interpreter query ( #10819 )
...
Addresses
https://github.com/astral-sh/uv/issues/4204#issuecomment-2604983670
Original context in https://github.com/astral-sh/uv/issues/2302
2025-01-21 18:34:13 +00:00
Zanie Blue
ad2ef7331a
Add issue templates ( #10786 )
...
Demo at https://github.com/zanieb/uv/issues
I think the next steps are to
- Move the "Build failures" document to a dedicated "Troubleshooting"
section
- Add more documentation on how to create an MRE
- Add more troubleshooting pages
2025-01-21 11:25:07 -06:00
Zanie Blue
f9539d5a8e
Remove old issue template ( #10787 )
...
It is not used anymore because of the GitHub issue preview
2025-01-21 09:03:19 -06:00
Zanie Blue
581a82d370
Install Python via uv in Windows CI ( #10657 )
...
Python 3.8 is a GHA cache miss now, so it is actually like 30-45s. uv
may be faster
2025-01-21 09:02:14 -06:00
