From d3e86113366fcec458610e8c99efc13ac61638ec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 18:10:49 +0000 Subject: [PATCH 1/2] Bump astral-sh/setup-uv from 8.2.0 to 10.3.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.2.0 to 10.3.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v8.2.0...v10.3.0) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/check-docs.yml | 2 +- .github/workflows/check_migrations_sqlite.yml | 4 ++-- .github/workflows/pre-commit.yml | 2 +- .github/workflows/python-publish.yml | 2 +- .github/workflows/tox.yml | 14 +++++++------- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/check-docs.yml b/.github/workflows/check-docs.yml index 0c32acd0..8ec93766 100644 --- a/.github/workflows/check-docs.yml +++ b/.github/workflows/check-docs.yml @@ -29,7 +29,7 @@ jobs: sudo apt-get -y -qq update sudo apt-get install -y swig openssl libssl-dev - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: "3.10" activate-environment: "true" diff --git a/.github/workflows/check_migrations_sqlite.yml b/.github/workflows/check_migrations_sqlite.yml index 9813378a..9fb5f18a 100644 --- a/.github/workflows/check_migrations_sqlite.yml +++ b/.github/workflows/check_migrations_sqlite.yml @@ -39,7 +39,7 @@ jobs: with: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: 3.9 enable-cache: "true" @@ -95,7 +95,7 @@ jobs: restore-keys: | ${{ runner.os }}-pip- - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: enable-cache: "true" - name: Manually install test dependencies diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 0fcc68e3..1371cc90 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7.0.1 - - uses: astral-sh/setup-uv@v8.2.0 + - uses: astral-sh/setup-uv@v10.3.0 with: enable-cache: true cache-python: true diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index e61565ce..18d1155b 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -12,7 +12,7 @@ jobs: with: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: 3.9 activate-environment: "true" diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml index ed45bcab..e88b6bbd 100644 --- a/.github/workflows/tox.yml +++ b/.github/workflows/tox.yml @@ -40,7 +40,7 @@ jobs: with: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: 3.9 enable-cache: "true" @@ -70,7 +70,7 @@ jobs: name: wheel path: dist/ - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: "${{ matrix.python-version }}" activate-environment: "true" @@ -99,7 +99,7 @@ jobs: name: wheel path: dist/ - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: enable-cache: "true" - name: Manually install test dependencies @@ -140,7 +140,7 @@ jobs: sudo apt-get -y -qq update sudo apt-get install -y openssl libssl-dev - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: "${{ matrix.python-version }}" enable-cache: "true" @@ -177,7 +177,7 @@ jobs: apt-get -y -qq update apt-get install -y openssl libssl-dev - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: enable-cache: "true" - name: Manually install test dependencies @@ -224,7 +224,7 @@ jobs: name: wheel path: dist/ - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: python-version: "3.9" activate-environment: "true" @@ -255,7 +255,7 @@ jobs: with: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@v8.2.0 + uses: astral-sh/setup-uv@v10.3.0 with: enable-cache: "true" - name: Manually install test dependencies From 419fa6d8f292d7390a222f722f17bfd03482b2d7 Mon Sep 17 00:00:00 2001 From: Blaine Jester Date: Fri, 23 Oct 2026 11:25:38 -0700 Subject: [PATCH 2/2] Disable cache on release workflow, to avoid cache poisoning --- .github/workflows/python-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml index 18d1155b..d67afd75 100644 --- a/.github/workflows/python-publish.yml +++ b/.github/workflows/python-publish.yml @@ -16,7 +16,7 @@ jobs: with: python-version: 3.9 activate-environment: "true" - enable-cache: "true" + enable-cache: "false" - name: Build package run: uv build - name: Publish package