Sandbox::https://redirect.github.com/astral-sh/setup-uv/issues/1036

woodruffw · 2026-09-03T19:24:02Z

~~WIP, not ready for review yet.~~

pyca/cryptography#15572 (comment) has the context for this: TL;DR our current python-version output mirrors the "request" version exactly, which means that it's insufficient for any downstream that needs to manage its own cache keys (since caches shouldn't be shared across release candidates, but the uv python request version doesn't include RC numbers).

The first commit here was my attempt to fix this by exposing the runtime Python version, but this too is imprecise: the runtime version doesn't indicate the interpreter variant (e.g. freethreading), which is also important to capture in the cache identity.

My solution here is to expose python-runtime-id, which is just the key of the active Python version from uv python list --output-format=json.

These identifiers should be considered opaque. Signed-off-by: William Woodruff <william@yossarian.net>

woodruffw · 2026-09-09T16:38:03Z

@eifinger gentle ping for review 🙂

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (https://github.com/astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) #### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. #### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) #### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) #### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) #### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) #### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.foxden.network/FoxDen/core/pulls/150

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.baer.one/phbaer/waterrower-local-ble/pulls/7

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.baer.one/phbaer/ha-birthday-calendar/pulls/18

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.tainton.uk/actions/gha-workflows/pulls/119 Reviewed-by: Luke Tainton <luke@tainton.uk> Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/370) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.tainton.uk/repos/pypilot/pulls/483 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/11) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.tainton.uk/repos/rsu/pulls/45 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/51) for more information. --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.tainton.uk/repos/labmcp/pulls/56 Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>

@mj0nez

##### [vv10.1.0](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021))

@mj0nez

##### [vv10.1.0](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | | major | `v8.2.0` → `v10.2.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | major | `v8.2.0` → `v10.2.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.2.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.2.0): 🌈 Disable automatic cache saves for merge queues [Compare Source](astral-sh/setup-uv@v10.1.0...v10.2.0) ##### Changes This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used. ##### 🚀 Enhancements - Disable automatic cache saves for merge queues [@eifinger](https://github.com/eifinger) ([#1056](astral-sh/setup-uv#1056)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.17 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1058](astral-sh/setup-uv#1058)) - chore: update known checksums for 0.12.16 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1057](astral-sh/setup-uv#1057)) - chore: update known checksums for 0.12.15 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1054](astral-sh/setup-uv#1054)) - chore: update known checksums for 0.12.14 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1053](astral-sh/setup-uv#1053)) - chore: update known checksums for 0.12.13 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1045](astral-sh/setup-uv#1045)) ##### 📚 Documentation - docs: update version references to v10.1.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1044](astral-sh/setup-uv#1044)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1059](astral-sh/setup-uv#1059)) ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) ### [`v10.0.1`](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.1): 🌈 Tolerate transient manifest timeouts [Compare Source](astral-sh/setup-uv@v10.0.0...v10.0.1) ##### Changes Thank you [@arguile-](https://github.com/arguile-) for making this action more resilient. ##### 🐛 Bug fixes - Tolerate transient manifest timeouts [@arguile-](https://github.com/arguile-) ([#1016](astral-sh/setup-uv#1016)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.4 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1017](astral-sh/setup-uv#1017)) ##### 📚 Documentation - docs: update version references to v10.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1014](astral-sh/setup-uv#1014)) ### [`v10.0.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.0): 🌈 Disable automatic caching for sensitive events and new QOL features [Compare Source](astral-sh/setup-uv@v9.0.0...v10.0.0) ##### Changes Another breaking release, directly after v9.0.0 but we think the added security justifies that. ##### Extra security by default If you use the default `enable-cache: auto` this will now **DISABLE THE CACHE** to protect against cache poisoning for the following events: - `pull_request_target` - `workflow_run` - `release` You can read the full reasoning in [#984](astral-sh/setup-uv#984) ##### `version: latest-known` ```yaml - name: Install the latest version of uv known to setup-uv uses: astral-sh/setup-uv@v10.0.0 with: version: "latest-known" ``` This will now install the latest version with a checksum that is known by this action. The [known `uv` checksums](https://github.com/astral-sh/setup-uv/blob/4f6036f71cec78afb113b323f220c9185d983c12/src/download/checksum/known-checksums.ts) are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security. ##### Read python version from `.tool-versions` ```yaml - name: Install uv based on the version defined in .tool-versions and also set python uses: astral-sh/setup-uv@v10.0.0 with: version-file: "pyproject.toml" ``` Will now also set the python version if it is defined in `.tool-versions`. You can read the details [in the docs](https://github.com/astral-sh/setup-uv/blob/main/docs/advanced-version-configuration.md#install-a-version-defined-in-a-requirements-or-config-file) ##### 🚨 Breaking changes - Disable automatic caching for sensitive events [@eifinger](https://github.com/eifinger) ([#992](astral-sh/setup-uv#992)) ##### 🐛 Bug fixes - Reject paths in .tool-versions [@eifinger](https://github.com/eifinger) ([#1007](astral-sh/setup-uv#1007)) ##### 🚀 Enhancements - Read Python version from .tool-versions [@eifinger](https://github.com/eifinger) ([#996](astral-sh/setup-uv#996)) - Add latest-known version selector [@eifinger](https://github.com/eifinger) ([#993](astral-sh/setup-uv#993)) ##### 🧰 Maintenance - Require pull requests for Dependabot rollups [@eifinger](https://github.com/eifinger) ([#1005](astral-sh/setup-uv#1005)) - ci: pin Alpine container image [@eifinger](https://github.com/eifinger) ([#995](astral-sh/setup-uv#995)) - chore: update known checksums for 0.12.3 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#991](astral-sh/setup-uv#991)) - chore: update known checksums for 0.12.2 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#985](astral-sh/setup-uv#985)) - chore: update known checksums for 0.12.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#982](astral-sh/setup-uv#982)) - chore: update known checksums for 0.12.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#981](astral-sh/setup-uv#981)) - chore: update known checksums for 0.11.31/0.11.32 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#972](astral-sh/setup-uv#972)) ##### 📚 Documentation - docs: update version references to v9.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#971](astral-sh/setup-uv#971)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1013](astral-sh/setup-uv#1013)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1004](astral-sh/setup-uv#1004)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#994](astral-sh/setup-uv#994)) - chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#976](astral-sh/setup-uv#976)) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#980](astral-sh/setup-uv#980)) ### [`v9.0.0`](https://github.com/astral-sh/setup-uv/releases/tag/v9.0.0): 🌈 Change `prune-cache` default to `false` [Compare Source](astral-sh/setup-uv@v8.3.2...v9.0.0) ##### Changes This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in [#967](astral-sh/setup-uv#967) Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith. ##### 🚨 Breaking changes - Change `prune-cache` default to `false` [@charliermarsh](https://github.com/charliermarsh) ([#967](astral-sh/setup-uv#967)) ##### 🐛 Bug fixes - fix: fall back to distribution ID when os-release has no version field [@cxzhong](https://github.com/cxzhong) ([#961](astral-sh/setup-uv#961)) ##### 🚀 Enhancements - Speed up version client by partial response reads [@eifinger](https://github.com/eifinger) ([#807](astral-sh/setup-uv#807)) ##### 🧰 Maintenance - chore: update known checksums for 0.11.30 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#968](astral-sh/setup-uv#968)) - chore: update known checksums for 0.11.29 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#960](astral-sh/setup-uv#960)) ##### 📚 Documentation - docs: update version references to v8.3.2 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#949](astral-sh/setup-uv#949)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#970](astral-sh/setup-uv#970)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#962](astral-sh/setup-uv#962)) ### [`v8.3.2`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.2): 🌈 update known checksums for 0.11.28 [Compare Source](astral-sh/setup-uv@v8.3.1...v8.3.2) ##### Changes Just a maintenance release ##### 🧰 Maintenance - chore: update known checksums for 0.11.28 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#947](astral-sh/setup-uv#947)) ##### 📚 Documentation - docs: update version references to v8.3.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#946](astral-sh/setup-uv#946)) ##### ⬆️ Dependency updates - chore: roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#948](astral-sh/setup-uv#948)) ### [`v8.3.1`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.1): 🌈 update known checksums for 0.11.27 [Compare Source](astral-sh/setup-uv@v8.3.0...v8.3.1) ##### Changes Just a maintenance release ##### 🧰 Maintenance - Change update-docs PR labels from 'update-docs' to 'documentation' [@eifinger](https://github.com/eifinger) ([#945](astral-sh/setup-uv#945)) - chore: update known checksums for 0.11.27 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#944](astral-sh/setup-uv#944)) ##### 📚 Documentation - docs: update version references to v8.3.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#939](astral-sh/setup-uv#939)) ### [`v8.3.0`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.0): 🌈 Support uv.lock as a version-file source [Compare Source](astral-sh/setup-uv@v8.2.0...v8.3.0) ##### Changes Thanks to [@somaz94](https://github.com/somaz94) you can now use the pinned version of uv itself in `uv.lock`. It gets picked up automatically. If you have pinned another version of uv in your `uv.lock` you can use the inputs `version` or `version-source` to override this. ##### 🐛 Bug fixes - Strip environment markers from detected uv dependency pins [@eifinger](https://github.com/eifinger) ([#938](astral-sh/setup-uv#938)) - Fix cache keys for Python version ranges [@eifinger](https://github.com/eifinger) ([#937](astral-sh/setup-uv#937)) - fix: use BUILD\_ID as backup for determining os version [@hgaiser](https://github.com/hgaiser) ([#912](astral-sh/setup-uv#912)) ##### 🚀 Enhancements - feat: support uv.lock as a version-file source [@somaz94](https://github.com/somaz94) ([#918](astral-sh/setup-uv#918)) ##### 🧰 Maintenance - ci: call docs update workflow from release [@eifinger](https://github.com/eifinger) ([#933](astral-sh/setup-uv#933)) - chore: update known checksums for 0.11.26 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#930](astral-sh/setup-uv#930)) - chore: update known checksums for 0.11.25 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#929](astral-sh/setup-uv#929)) - chore: update known checksums for 0.11.24 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#925](astral-sh/setup-uv#925)) - chore: update known checksums for 0.11.23 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#922](astral-sh/setup-uv#922)) - chore: update known checksums for 0.11.22 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#921](astral-sh/setup-uv#921)) - chore: update known checksums for 0.11.21 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#917](astral-sh/setup-uv#917)) - chore: update known checksums for 0.11.20 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#915](astral-sh/setup-uv#915)) - chore: update known checksums for 0.11.19 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#909](astral-sh/setup-uv#909)) ##### 📚 Documentation - docs: update version references to v8.2.0 [@KRRT7](https://github.com/KRRT7) ([#932](astral-sh/setup-uv#932)) - Add a threat model for setup-uv [@zsol](https://github.com/zsol) ([#923](astral-sh/setup-uv#923)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#936](astral-sh/setup-uv#936)) - chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#924](astral-sh/setup-uv#924)) - chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#926](astral-sh/setup-uv#926)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.lx.e6a.app/tools/cookie-py/pulls/99

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | | major | `v8.2.0` → `v10.2.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | major | `v8.2.0` → `v10.2.0` | --- ### Release Notes <details> <summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary> ### [`v10.2.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.2.0): 🌈 Disable automatic cache saves for merge queues [Compare Source](astral-sh/setup-uv@v10.1.0...v10.2.0) ##### Changes This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used. ##### 🚀 Enhancements - Disable automatic cache saves for merge queues [@eifinger](https://github.com/eifinger) ([#1056](astral-sh/setup-uv#1056)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.17 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1058](astral-sh/setup-uv#1058)) - chore: update known checksums for 0.12.16 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1057](astral-sh/setup-uv#1057)) - chore: update known checksums for 0.12.15 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1054](astral-sh/setup-uv#1054)) - chore: update known checksums for 0.12.14 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1053](astral-sh/setup-uv#1053)) - chore: update known checksums for 0.12.13 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1045](astral-sh/setup-uv#1045)) ##### 📚 Documentation - docs: update version references to v10.1.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1044](astral-sh/setup-uv#1044)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1059](astral-sh/setup-uv#1059)) ### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈 New output `python-runtime-id`and respect NO_PROXY [Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0) ##### Changes This release adds more bheind the scene security improvements and also 2 small improvements. ##### NO\_PROXY This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored. ##### New output `python-runtime-id` The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful. ##### 🐛 Bug fixes - fix: respect no proxy directive [@mj0nez](https://github.com/mj0nez) ([#1037](astral-sh/setup-uv#1037)) - Use JSON + a typed wrapper instead of TS codegen [@woodruffw](https://github.com/woodruffw) ([#1025](astral-sh/setup-uv#1025)) ##### 🚀 Enhancements - Expose a Python "identity" output [@woodruffw](https://github.com/woodruffw) ([#1036](astral-sh/setup-uv#1036)) - Verify downloads with astral-sh/versions checksums [@zaniebot](https://github.com/zaniebot) ([#1033](astral-sh/setup-uv#1033)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.12 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1041](astral-sh/setup-uv#1041)) - chore: update known checksums for 0.12.10/0.12.11 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1038](astral-sh/setup-uv#1038)) - chore: update known checksums for 0.12.9 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1035](astral-sh/setup-uv#1035)) - chore: update known checksums for 0.12.7/0.12.8 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1031](astral-sh/setup-uv#1031)) - chore: update known checksums for 0.12.6 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1030](astral-sh/setup-uv#1030)) - chore: update known checksums for 0.12.5 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1020](astral-sh/setup-uv#1020)) - Use self-repo syntax for all in-repo actions/reusable workflows [@woodruffw](https://github.com/woodruffw) ([#1024](astral-sh/setup-uv#1024)) - Pin one-shot tools [@woodruffw](https://github.com/woodruffw) ([#1022](astral-sh/setup-uv#1022)) - ci: remove obsolete direct push attempts [@eifinger](https://github.com/eifinger) ([#1019](astral-sh/setup-uv#1019)) ##### 📚 Documentation - docs: update version references to v10.0.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1018](astral-sh/setup-uv#1018)) ##### ⬆️ Dependency updates - chore(deps-dev): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1043](astral-sh/setup-uv#1043)) - Harden npm install defaults [@zaniebot](https://github.com/zaniebot) ([#1026](astral-sh/setup-uv#1026)) - Add dependency cooldowns [@woodruffw](https://github.com/woodruffw) ([#1021](astral-sh/setup-uv#1021)) ### [`v10.0.1`](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.1): 🌈 Tolerate transient manifest timeouts [Compare Source](astral-sh/setup-uv@v10.0.0...v10.0.1) ##### Changes Thank you [@arguile-](https://github.com/arguile-) for making this action more resilient. ##### 🐛 Bug fixes - Tolerate transient manifest timeouts [@arguile-](https://github.com/arguile-) ([#1016](astral-sh/setup-uv#1016)) ##### 🧰 Maintenance - chore: update known checksums for 0.12.4 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1017](astral-sh/setup-uv#1017)) ##### 📚 Documentation - docs: update version references to v10.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#1014](astral-sh/setup-uv#1014)) ### [`v10.0.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.0.0): 🌈 Disable automatic caching for sensitive events and new QOL features [Compare Source](astral-sh/setup-uv@v9.0.0...v10.0.0) ##### Changes Another breaking release, directly after v9.0.0 but we think the added security justifies that. ##### Extra security by default If you use the default `enable-cache: auto` this will now **DISABLE THE CACHE** to protect against cache poisoning for the following events: - `pull_request_target` - `workflow_run` - `release` You can read the full reasoning in [#984](astral-sh/setup-uv#984) ##### `version: latest-known` ```yaml - name: Install the latest version of uv known to setup-uv uses: astral-sh/setup-uv@v10.0.0 with: version: "latest-known" ``` This will now install the latest version with a checksum that is known by this action. The [known `uv` checksums](https://github.com/astral-sh/setup-uv/blob/4f6036f71cec78afb113b323f220c9185d983c12/src/download/checksum/known-checksums.ts) are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security. ##### Read python version from `.tool-versions` ```yaml - name: Install uv based on the version defined in .tool-versions and also set python uses: astral-sh/setup-uv@v10.0.0 with: version-file: "pyproject.toml" ``` Will now also set the python version if it is defined in `.tool-versions`. You can read the details [in the docs](https://github.com/astral-sh/setup-uv/blob/main/docs/advanced-version-configuration.md#install-a-version-defined-in-a-requirements-or-config-file) ##### 🚨 Breaking changes - Disable automatic caching for sensitive events [@eifinger](https://github.com/eifinger) ([#992](astral-sh/setup-uv#992)) ##### 🐛 Bug fixes - Reject paths in .tool-versions [@eifinger](https://github.com/eifinger) ([#1007](astral-sh/setup-uv#1007)) ##### 🚀 Enhancements - Read Python version from .tool-versions [@eifinger](https://github.com/eifinger) ([#996](astral-sh/setup-uv#996)) - Add latest-known version selector [@eifinger](https://github.com/eifinger) ([#993](astral-sh/setup-uv#993)) ##### 🧰 Maintenance - Require pull requests for Dependabot rollups [@eifinger](https://github.com/eifinger) ([#1005](astral-sh/setup-uv#1005)) - ci: pin Alpine container image [@eifinger](https://github.com/eifinger) ([#995](astral-sh/setup-uv#995)) - chore: update known checksums for 0.12.3 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#991](astral-sh/setup-uv#991)) - chore: update known checksums for 0.12.2 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#985](astral-sh/setup-uv#985)) - chore: update known checksums for 0.12.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#982](astral-sh/setup-uv#982)) - chore: update known checksums for 0.12.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#981](astral-sh/setup-uv#981)) - chore: update known checksums for 0.11.31/0.11.32 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#972](astral-sh/setup-uv#972)) ##### 📚 Documentation - docs: update version references to v9.0.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#971](astral-sh/setup-uv#971)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1013](astral-sh/setup-uv#1013)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#1004](astral-sh/setup-uv#1004)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#994](astral-sh/setup-uv#994)) - chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#976](astral-sh/setup-uv#976)) - chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#980](astral-sh/setup-uv#980)) ### [`v9.0.0`](https://github.com/astral-sh/setup-uv/releases/tag/v9.0.0): 🌈 Change `prune-cache` default to `false` [Compare Source](astral-sh/setup-uv@v8.3.2...v9.0.0) ##### Changes This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in [#967](astral-sh/setup-uv#967) Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith. ##### 🚨 Breaking changes - Change `prune-cache` default to `false` [@charliermarsh](https://github.com/charliermarsh) ([#967](astral-sh/setup-uv#967)) ##### 🐛 Bug fixes - fix: fall back to distribution ID when os-release has no version field [@cxzhong](https://github.com/cxzhong) ([#961](astral-sh/setup-uv#961)) ##### 🚀 Enhancements - Speed up version client by partial response reads [@eifinger](https://github.com/eifinger) ([#807](astral-sh/setup-uv#807)) ##### 🧰 Maintenance - chore: update known checksums for 0.11.30 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#968](astral-sh/setup-uv#968)) - chore: update known checksums for 0.11.29 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#960](astral-sh/setup-uv#960)) ##### 📚 Documentation - docs: update version references to v8.3.2 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#949](astral-sh/setup-uv#949)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#970](astral-sh/setup-uv#970)) - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#962](astral-sh/setup-uv#962)) ### [`v8.3.2`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.2): 🌈 update known checksums for 0.11.28 [Compare Source](astral-sh/setup-uv@v8.3.1...v8.3.2) ##### Changes Just a maintenance release ##### 🧰 Maintenance - chore: update known checksums for 0.11.28 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#947](astral-sh/setup-uv#947)) ##### 📚 Documentation - docs: update version references to v8.3.1 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#946](astral-sh/setup-uv#946)) ##### ⬆️ Dependency updates - chore: roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#948](astral-sh/setup-uv#948)) ### [`v8.3.1`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.1): 🌈 update known checksums for 0.11.27 [Compare Source](astral-sh/setup-uv@v8.3.0...v8.3.1) ##### Changes Just a maintenance release ##### 🧰 Maintenance - Change update-docs PR labels from 'update-docs' to 'documentation' [@eifinger](https://github.com/eifinger) ([#945](astral-sh/setup-uv#945)) - chore: update known checksums for 0.11.27 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#944](astral-sh/setup-uv#944)) ##### 📚 Documentation - docs: update version references to v8.3.0 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#939](astral-sh/setup-uv#939)) ### [`v8.3.0`](https://github.com/astral-sh/setup-uv/releases/tag/v8.3.0): 🌈 Support uv.lock as a version-file source [Compare Source](astral-sh/setup-uv@v8.2.0...v8.3.0) ##### Changes Thanks to [@somaz94](https://github.com/somaz94) you can now use the pinned version of uv itself in `uv.lock`. It gets picked up automatically. If you have pinned another version of uv in your `uv.lock` you can use the inputs `version` or `version-source` to override this. ##### 🐛 Bug fixes - Strip environment markers from detected uv dependency pins [@eifinger](https://github.com/eifinger) ([#938](astral-sh/setup-uv#938)) - Fix cache keys for Python version ranges [@eifinger](https://github.com/eifinger) ([#937](astral-sh/setup-uv#937)) - fix: use BUILD\_ID as backup for determining os version [@hgaiser](https://github.com/hgaiser) ([#912](astral-sh/setup-uv#912)) ##### 🚀 Enhancements - feat: support uv.lock as a version-file source [@somaz94](https://github.com/somaz94) ([#918](astral-sh/setup-uv#918)) ##### 🧰 Maintenance - ci: call docs update workflow from release [@eifinger](https://github.com/eifinger) ([#933](astral-sh/setup-uv#933)) - chore: update known checksums for 0.11.26 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#930](astral-sh/setup-uv#930)) - chore: update known checksums for 0.11.25 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#929](astral-sh/setup-uv#929)) - chore: update known checksums for 0.11.24 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#925](astral-sh/setup-uv#925)) - chore: update known checksums for 0.11.23 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#922](astral-sh/setup-uv#922)) - chore: update known checksums for 0.11.22 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#921](astral-sh/setup-uv#921)) - chore: update known checksums for 0.11.21 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#917](astral-sh/setup-uv#917)) - chore: update known checksums for 0.11.20 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#915](astral-sh/setup-uv#915)) - chore: update known checksums for 0.11.19 @[github-actions\[bot\]](https://github.com/apps/github-actions) ([#909](astral-sh/setup-uv#909)) ##### 📚 Documentation - docs: update version references to v8.2.0 [@KRRT7](https://github.com/KRRT7) ([#932](astral-sh/setup-uv#932)) - Add a threat model for setup-uv [@zsol](https://github.com/zsol) ([#923](astral-sh/setup-uv#923)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://github.com/eifinger) ([#936](astral-sh/setup-uv#936)) - chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#924](astral-sh/setup-uv#924)) - chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 @[dependabot\[bot\]](https://github.com/apps/dependabot) ([#926](astral-sh/setup-uv#926)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

woodruffw added 2 commits September 3, 2026 15:01

Add resolved Python version output for activated environments

3956519

Expose Python runtime identity for downstream caching

70e5842

woodruffw changed the title ~~ww/real python version~~ Expose a Python "identity" output Sep 3, 2026