Visitar URL original
chore: bump astral-sh/setup-uv to v10.0.1 (#1002) · max-sixty/tend@7c1e5d8 · GitHub
Skip to content

Commit 7c1e5d8

Browse files
tend-agenttend-agent
authored
chore: bump astral-sh/setup-uv to v10.0.1 (#1002)
Weekly `uses:` sweep: `astral-sh/setup-uv` v9.0.0 → v10.0.1, crossing one major. This is the adopter-facing half — the ref the generator renders into every adopter's `tend-install-test` workflow, plus the `setup:` examples adopters copy from. The repo's own hand-maintained workflows and `.config/tend.yaml` move in a separate PR. v10's one breaking change is that `enable-cache: auto` (the default, and what every rendered call uses) now **disables** the uv cache on `pull_request_target`, `workflow_run`, and `release` events, to close a cache-poisoning path ([setup-uv#984](astral-sh/setup-uv#984)). Two tend triggers are on that list: `tend-review` runs on `pull_request_target` and `tend-ci-fix` on `workflow_run`, so an adopter whose `setup:` installs uv this way loses cache restores in those two jobs and pays a cold uv download instead. That is the safer default for exactly the reason it was changed — a `pull_request_target` job runs with the base repo's permissions against PR-authored code — and an adopter who wants the cache back can set `enable-cache: true` on their own `setup:` step. The generator's own `tend-install-test` workflow (`workflows.py`) is `pull_request`-triggered, which is not on the sensitive list, so its caching is unaffected. <details><summary>What else changed across v9 → v10.0.1</summary> - `version: latest-known` installs the newest uv whose checksum the action itself ships, trading currency for supply-chain verification. Not adopted here — nothing in tend pins uv through this action. - `version-file` now also sets the Python version when `.tool-versions` defines one. - v10.0.1: tolerates transient manifest timeouts, and refreshes known checksums through uv 0.12.4. `uv run pytest` passes (564); the two `test_install_test_workflow_regtest` outputs are regenerated for the new ref. </details> Co-authored-by: tend-agent <270458913+tend-agent@users.noreply.github.com>
1 parent 1ee0b5f commit 7c1e5d8

5 files changed

Lines changed: 11 additions & 11 deletions

File tree

‎docs/tend.example.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -121,18 +121,18 @@ bot_name: my-project-bot
121121
# `uses`:
122122
#
123123
# setup:
124-
# - uses: astral-sh/setup-uv@v9.0.0
124+
# - uses: astral-sh/setup-uv@v10.0.1
125125
#
126126
# # renders as (in tend-notifications):
127-
# # - uses: astral-sh/setup-uv@v9.0.0
127+
# # - uses: astral-sh/setup-uv@v10.0.1
128128
# # if: steps.check.outputs.count != '0' || github.event_name == 'workflow_dispatch'
129129
# #
130130
# # in tend-review:
131-
# # - uses: astral-sh/setup-uv@v9.0.0
131+
# # - uses: astral-sh/setup-uv@v10.0.1
132132
# # if: steps.gate.outputs.should_run == 'true'
133133
# #
134134
# # and in other workflows:
135-
# # - uses: astral-sh/setup-uv@v9.0.0
135+
# # - uses: astral-sh/setup-uv@v10.0.1
136136
#
137137
# `uses` with action inputs and step-level env:
138138
#

‎generator/src/tend/workflows.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -525,7 +525,7 @@ def generate_install_test(cfg: Config) -> GeneratedWorkflow:
525525
contents: read
526526
steps:
527527
- uses: actions/checkout@v7
528-
- uses: astral-sh/setup-uv@v9.0.0
528+
- uses: astral-sh/setup-uv@v10.0.1
529529
- name: Verify generator output matches committed files
530530
env:
531531
GH_TOKEN: ${{{{ github.token }}}}

‎generator/tests/_regtest_outputs/test_generate.test_install_test_workflow_regtest[claude].out‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
contents: read
2525
steps:
2626
- uses: actions/checkout@v7
27-
- uses: astral-sh/setup-uv@v9.0.0
27+
- uses: astral-sh/setup-uv@v10.0.1
2828
- name: Verify generator output matches committed files
2929
env:
3030
GH_TOKEN: ${{ github.token }}

‎generator/tests/_regtest_outputs/test_generate.test_install_test_workflow_regtest[codex].out‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
contents: read
2525
steps:
2626
- uses: actions/checkout@v7
27-
- uses: astral-sh/setup-uv@v9.0.0
27+
- uses: astral-sh/setup-uv@v10.0.1
2828
- name: Verify generator output matches committed files
2929
env:
3030
GH_TOKEN: ${{ github.token }}

‎plugins/install-tend/skills/install-tend/references/tend.example.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -121,18 +121,18 @@ bot_name: my-project-bot
121121
# `uses`:
122122
#
123123
# setup:
124-
# - uses: astral-sh/setup-uv@v9.0.0
124+
# - uses: astral-sh/setup-uv@v10.0.1
125125
#
126126
# # renders as (in tend-notifications):
127-
# # - uses: astral-sh/setup-uv@v9.0.0
127+
# # - uses: astral-sh/setup-uv@v10.0.1
128128
# # if: steps.check.outputs.count != '0' || github.event_name == 'workflow_dispatch'
129129
# #
130130
# # in tend-review:
131-
# # - uses: astral-sh/setup-uv@v9.0.0
131+
# # - uses: astral-sh/setup-uv@v10.0.1
132132
# # if: steps.gate.outputs.should_run == 'true'
133133
# #
134134
# # and in other workflows:
135-
# # - uses: astral-sh/setup-uv@v9.0.0
135+
# # - uses: astral-sh/setup-uv@v10.0.1
136136
#
137137
# `uses` with action inputs and step-level env:
138138
#

0 commit comments

Comments
 (0)