Repository navigation
chore(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.3 in the actions group across 1 directory - #236
chore(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.3 in the actions group across 1 directory#236dependabot[bot] wants to merge 1 commit into
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
![s2d2-agent[bot]](https://avatars.githubusercontent.com/in/2732751?s=60&v=4){kind=small}
There was a problem hiding this comment.
s2d2 dependabot evidence (run sa-2026-10-29-7e1f25f1)
Decision: SAFE. dev-only patch, CI green.
Packages: astral-sh/setup-uv 10.3.0 to 10.3.2
Scope: dev only, patch bump, tier 1.
CI: 11 checks, 0 failing, 0 pending at classification.
Not a security update.
Local verification not required for this class of bump.
Awaiting merge approval from Guillaume in the Security Autopilot thread. This is an evidence note, not an approval.
Bumps the actions group with 1 update in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `astral-sh/setup-uv` from 10.3.0 to 10.3.3 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@1c37ad0...68559e9) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
ba4c434 to
721285d
Compare
There was a problem hiding this comment.
🟢 Approval recommended
There are no active review issues for the setup-uv action version update.
No open issues 🎉
What changed in this PR
Updates the SHA-pinned astral-sh/setup-uv action from v10.3.0 to v10.3.3 across the SDK’s CI and release workflows.
Changes:
- Updates all five action references and their version comments.
- Preserves existing Python versions, cache settings, and workflow conditions.
| File | Description |
|---|---|
.github/workflows/release.yaml |
Updates two setup-uv references used in the release process. |
.github/workflows/ci.yaml |
Updates three setup-uv references used by CI jobs. |
Review effort: Balanced
|
Redundant: grouped PR #250 already contains this exact bump (same versions and SHAs in the same files) with CI green. No open Dependabot alert on this package. Closed by s2d2 Security Autopilot for Guillaume. Reopen if this is wrong. |
Bumps the actions group with 1 update in the / directory: astral-sh/setup-uv.
Updates
astral-sh/setup-uvfrom 10.3.0 to 10.3.3Release notes
Sourced from astral-sh/setup-uv's releases.
... (truncated)
Commits
68559e9Use Astral mirror for version manifests with GitHub fallback (#1119)0192b69chore: update known checksums for 0.13.6 (#1117)2f29784docs: use JSDoc for compatible release specifier comment (#1113)9c73321fix: allow whitespace in uv requirement specifiers (#1112)80fbe01fix: resolve ~= specifiers with PEP 440 semantics (#1111)36b7b57fix: only report a saved cache when saving succeeded (#1110)56618cadocs: update version references to v10.3.2 (#1104)07a047echore: update known checksums for 0.13.5 (#1103)e1b8536docs: update version references to v10.3.1 (#1102)18d369bchore(deps): roll up Dependabot updates (#1101)