Repository navigation
Pin one-shot tools - #1022
Merged
Merged
Pin one-shot tools#1022
Conversation
charliermarsh
approved these changes
Aug 16, 2026
eifinger
force-pushed
the
oss-remediation/02-one-shot-pins
branch
from
August 16, 2026 19:41
fae7af7 to
b0a1c87
Compare
eifinger
approved these changes
Aug 16, 2026
Doridian
pushed a commit
to FoxDenHome/core
that referenced
this pull request
Sep 12, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (https://github.com/astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) #### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. #### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) #### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) #### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) #### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) #### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43NC4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://git.foxden.network/FoxDen/core/pulls/150
phbaer
pushed a commit
to phbaer/waterrower-local-ble
that referenced
this pull request
Sep 13, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OC4zIiwidXBkYXRlZEluVmVyIjoiNDQuNDguMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://git.baer.one/phbaer/waterrower-local-ble/pulls/7
phbaer
pushed a commit
to phbaer/ha-birthday-calendar
that referenced
this pull request
Sep 13, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- >⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OC4zIiwidXBkYXRlZEluVmVyIjoiNDQuNDguMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Reviewed-on: https://git.baer.one/phbaer/ha-birthday-calendar/pulls/18
luketainton
pushed a commit
to luketainton/actions_gha-workflows
that referenced
this pull request
Sep 16, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43Ny4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/119 Reviewed-by: Luke Tainton <luke@tainton.uk> Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/repos_pypilot
that referenced
this pull request
Sep 16, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- >⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/370) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43Ny4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://git.tainton.uk/repos/pypilot/pulls/483 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/luke_rsu
that referenced
this pull request
Sep 16, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- >⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/11) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43Ny4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://git.tainton.uk/repos/rsu/pulls/45 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
luketainton
pushed a commit
to luketainton/repos_labmcp
that referenced
this pull request
Sep 16, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- >⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/51) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@​mj0nez](https://github.com/mj0nez) ([#​1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@​woodruffw](https://github.com/woodruffw) ([#​1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@​woodruffw](https://github.com/woodruffw) ([#​1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@​zaniebot](https://github.com/zaniebot) ([#​1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@​woodruffw](https://github.com/woodruffw) ([#​1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@​woodruffw](https://github.com/woodruffw) ([#​1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@​eifinger](https://github.com/eifinger) ([#​1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@​eifinger](https://github.com/eifinger) ([#​1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@​zaniebot](https://github.com/zaniebot) ([#​1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@​woodruffw](https://github.com/woodruffw) ([#​1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43Ny4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9kZXBlbmRlbmNpZXMiXX0=--> Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/56 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
renovate Bot
added a commit
to cigaleapp/cigale
that referenced
this pull request
Sep 24, 2026
##### [vv10.1.0](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021))
gwennlbh
pushed a commit
to cigaleapp/cigale
that referenced
this pull request
Sep 27, 2026
##### [vv10.1.0](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
fbidu
added a commit
to fbidu/cookie-py
that referenced
this pull request
Oct 9, 2026
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | | major | `v8.2.0` → `v10.2.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | major | `v8.2.0` → `v10.2.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.2.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.2.0): 🌈 Disable automatic cache saves for merge queues [Compare Source](astral-sh/setup-uv@v10.1.0...v10.2.0) ##### Changes This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used. ##### 🚀 Enhancements - Disable automatic cache saves for merge queues [@​eifinger](https://github.com/eifinger) ([#​1056](astral-sh/setup-uv#1056)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.17 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1058](astral-sh/setup-uv#1058)) - chore: update known checksums for 0.12.16 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1057](astral-sh/setup-uv#1057)) - chore: update known checksums for 0.12.15 @​[github-actions\[bot\]](https://github.com/apps/github-actions) ([#​1054](
This just adds some pins to the action tests; these tests don't rely on the packages under test being unpinned.
Stack created with GitHub Stacks CLI • Give Feedback 💬