Visitar URL original
Use uv-managed Python for the CI jobs by reaperhulk · Pull Request #15572 · pyca/cryptography · GitHub
Skip to content

Use uv-managed Python for the CI jobs - #15572

Merged
alex merged 10 commits into
mainfrom
claude/ci-macos-setup-uv-o7pqs0
Sep 10, 2026
Merged

alex merged 10 commits into
mainfrom
claude/ci-macos-setup-uv-o7pqs0

Conversation

@reaperhulk

@reaperhulk reaperhulk commented Sep 2, 2026 •

Copy link
Copy Markdown
Member

actions/setup-python on macOS downloads the python.org pkg and runs the installer, and the "Install Python binaries from prebuilt package" step takes 30–50s per job. On Windows the download and extraction is similarly the slowest part of the job. astral-sh/setup-uv installs a python-build-standalone interpreter in a few seconds.

Applies to every job that used actions/setup-python in ci.yml: linux, macOS, windows (x64 and arm64) and downstream.

  • The uv version comes from ci-constraints-requirements.txt via version-file, so it stays in lockstep with the pinned uv== that dependabot bumps.
  • activate-environment puts a venv on that interpreter first on PATH; nox is installed into it with uv pip install.
  • The matrix names use uv's spellings: 3.15 / 3.15t (uv resolves an unreleased minor to its latest prerelease) and pypy3.11.
  • The cargo cache keys use setup-uv v10.1.0's python-runtime-id output (e.g. cpython-3.15.0rc2-linux-x86_64-gnu), which carries the implementation, resolved version and architecture, so the matrix name and arch components of the keys and the extra step that read the version from the interpreter go away.
  • On Windows arm64 a bare version request gets uv the x86_64 (emulated) interpreter, so that job asks for cpython-<version>-windows-aarch64-none by name.
  • The linux job puts the interpreter's LIBDIR on LD_LIBRARY_PATH for the rust session, whose cargo test binaries link libpython.
  • The uv cache replaces setup-python's pip cache, keyed on the same constraints file.

The trade-off is that these jobs no longer exercise the python.org framework build on macOS; the wheel builder still installs and uses the python.org pkg.

🤖 Generated with Claude Code

https://claude.ai/code/session_0116sWJmeCaubZF2aMbR4kfc

setup-python installs the python.org pkg, and that installer runs for
30-50s per job on the macOS runners. uv installs a python-build-standalone
interpreter in a few seconds. The uv version comes from the constraints
file, and the matrix names drop the -dev suffix because uv resolves an
unreleased minor to its latest prerelease.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM

Copy link
Copy Markdown
Member Author

Timing for the macOS jobs. "Before" is the two most recent warm main runs (33562151532 and the re-run of 33588967176); "after" is this PR's run (33589841415). The setup step is the direct effect; the build and test steps are unchanged by this PR and vary ±10s run to run.

Job Setup python, before Setup python, after Job total, before Job total, after
3.9 25s / 30s 3s 156s / 146s 137s
3.14 3s / 4s 2s 142s / 115s 158s
3.14t 57s / 51s 6s 215s / 188s 148s
3.15 (was 3.15-dev) 50s / 45s 4s 215s / 198s 115s
3.15t (was 3.15t-dev) 36s / 32s 9s 173s / 133s 167s

3.14 was already fast because that version is preinstalled in the runner image's toolcache; every other version paid for the pkg installer. Summed over the five jobs the setup step goes from about 170s to about 24s per run. The 3.15 / 3.15t caches were cold in this run because their key changed (matrix name and resolved version), so their build and total numbers will settle on the next run.


Generated by Claude Code

@alex alex left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@reaperhulk let's chat about this one

Comment thread .github/workflows/ci.yml Outdated
Comment thread .github/workflows/ci.yml
Comment on lines +274 to +275
- {VERSION: "3.15", NOXSESSION: "tests"}
- {VERSION: "3.15t", NOXSESSION: "tests"}

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

-dev isn't required for pre-releases?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Right: uv has no -dev spelling (3.15-dev is rejected as an executable name), and a bare minor resolves to the latest prerelease when no stable release exists. Checked with the pinned uv 0.12.8: uv python install 3.15 gives cpython-3.15.0rc1, 3.15t gives cpython-3.15.0rc1+freethreaded, 3.14t gives 3.14.7+freethreaded. The run on this PR used those.


Generated by Claude Code

Comment thread .github/workflows/ci.yml Outdated
cache-dependency-glob: ci-constraints-requirements.txt
timeout-minutes: 3
- id: python-version
run: echo "version=$(python -c 'import platform; print(platform.python_version())')" >> $GITHUB_OUTPUT

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@woodruffw can you give us this as an output :-) Surely setup-uv already has this value internally

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, I can look into this. I thought we did have this as a version output.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In case it helps: in v10.0.1 the python-version output is the input string echoed back (getPythonVersion in src/setup-uv.ts returns inputs.pythonVersion when set), so 3.15t comes out as 3.15t rather than 3.15.0rc1. uv python find --show-version after the venv is created would give the resolved value.


Generated by Claude Code

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude: you know what to do

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done in 1706ca9: bumped to setup-uv v10.1.0 and the three cache keys now use python-runtime-id (e.g. cpython-3.15.0rc2-linux-x86_64-gnu), so the interpreter-probing steps are gone. Since the id also carries the implementation and architecture, the matrix name and arch components of the keys went with them. Also merged main.

The Windows arm64 job keeps asking for cpython-<version>-windows-aarch64-none explicitly: the run on ede2731 shows the aarch64 uv 0.12.9 downloading cpython-3.15.0rc2-windows-x86_64-none for a bare 3.15 request, and nothing in the uv changelog since has changed that.


Generated by Claude Code

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM
Comment thread .github/workflows/ci.yml Outdated
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM
@alex

alex commented Sep 2, 2026

Copy link
Copy Markdown
Member

Notes:

  1. We want a uv fix for the output stuff
  2. We'd lke but won't block on a -dev thing from uv
  3. We want this for all OS

The windows arm64 job stays on setup-python: uv has no Windows arm64
interpreters.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM

Copy link
Copy Markdown
Member Author

Extended to the linux, windows x64 and downstream jobs (c4c8e9f, plus 6932c44 which puts the interpreter's LIBDIR on LD_LIBRARY_PATH for the rust session: its cargo test binaries link libpython, which setup-python had been making findable implicitly). Windows arm64 stays on setup-python because uv has no Windows arm64 interpreters, so its matrix entries keep the -dev spelling.

Setup step times, last warm main run (33588967176) versus this head (33695131695); for Windows the whole windows-tests action, since the composite hides its steps:

Job group Before, median (max) After, median (max)
linux "Setup python", 30 jobs 5s (13s) 3s (5s)
macos "Setup python", 5 jobs 32s (51s) 7s (11s)
windows x64, whole action, 5 jobs 218s (241s) 177s (185s)
downstream "Setup python", 10 jobs 4.5s (7s) 3s (3s)

Linux was already fast because the runner image preinstalls those versions; macOS and Windows x64 are where the time was.


Generated by Claude Code

@reaperhulk reaperhulk changed the title Use uv-managed Python for the macOS CI jobs Use uv-managed Python for the CI jobs Sep 2, 2026
Comment thread .github/actions/windows-tests/action.yml Outdated
uv does ship Windows arm64 interpreters; they just don't appear in
`uv python list --all-platforms`.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM
Left to a bare version request, uv on Windows arm64 downloads the
x86_64 build, and maturin then targets x86_64-pc-windows-msvc.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QZZQDQuPPD8T7jaAsCSHtM
eifinger pushed a commit to astral-sh/setup-uv that referenced this pull request Sep 9, 2026
pyca/cryptography#15572 (comment)
has the context for this: TL;DR our current `python-version` output
mirrors the "request" version exactly, which means that it's
insufficient for any downstream that needs to manage its own cache keys
(since caches shouldn't be shared across release candidates, but the `uv
python` request version doesn't include RC numbers).

The first commit here was my attempt to fix this by exposing the runtime
Python version, but this too is imprecise: the runtime version doesn't
indicate the interpreter variant (e.g. freethreading), which is also
important to capture in the cache identity.

My solution here is to expose `python-runtime-id`, which is just the
`key` of the active Python version from `uv python list
--output-format=json`.

---------

Signed-off-by: William Woodruff <william@yossarian.net>
setup-uv v10.1.0 reports the activated venv's runtime as an opaque id
like cpython-3.15.0rc2-linux-x86_64-gnu, so the steps that read the
resolved version from the interpreter go away. The id also carries the
implementation and architecture, which makes the matrix name and arch
components of the cache keys redundant.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0116sWJmeCaubZF2aMbR4kfc
@alex
alex merged commit 4e7c5cc into main Sep 10, 2026
69 checks passed
@alex
alex deleted the claude/ci-macos-setup-uv-o7pqs0 branch September 10, 2026 19:58
todofixthis added a commit to todofixthis/filters that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/todofixthis/filters).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->
rhatgadkar-goog pushed a commit to GoogleCloudPlatform/alloydb-python-connector that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/GoogleCloudPlatform/alloydb-python-connector).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
canonical-iam added a commit to canonical/identity-saml-provider that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |
|
[the-pr-agent/pr-agent](https://redirect.github.com/the-pr-agent/pr-agent)
([changelog](https://redirect.github.com/the-pr-agent/pr-agent/compare/53072488e4c3b5a6c9ae730fe6fb52fc5f09d06c..1421c673effb7644239e18fdea5403ccf04bb190))
| action | digest | `5307248` → `1421c67` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/canonical/identity-saml-provider).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate Bot added a commit to yxtay/transformer-recommenders that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.16.6` → `v0.16.7` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/ruff-pre-commit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/ruff-pre-commit)
|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/setup-uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/setup-uv)
|
|
[astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
| repository | patch | `0.12.12` → `0.12.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv-pre-commit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv-pre-commit)
|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
stage | patch | `0.12.12` → `0.12.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.16.7`](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.6...v0.16.7)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.6...v0.16.7)

</details>

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)</summary>

###
[`v0.12.13`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.13)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.12...0.12.13)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.13>

</details>

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.12.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01213)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.12.12...0.12.13)

Released on 2026-09-10.

##### Python

- Add GraalPy 3.13.0
([#&#8203;21431](https://redirect.github.com/astral-sh/uv/pull/21431))

##### Enhancements

- Verify hashes when downloading PEP 658 metadata sidecars
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

##### Preview features

- Respect `ty` exclusions when `uv check` automatically selects members
of a virtual workspace
([#&#8203;21555](https://redirect.github.com/astral-sh/uv/pull/21555))

##### Performance

- Avoid full wheel downloads during resolution by reusing supported
hashes from direct URL fragments when metadata is available separately
([#&#8203;21279](https://redirect.github.com/astral-sh/uv/pull/21279))

##### Bug fixes

- Edit Windows entry-point launcher resources in memory to support Nano
Server and reduce antivirus contention
([#&#8203;18713](https://redirect.github.com/astral-sh/uv/pull/18713))
- Prefer `core-metadata` over legacy aliases in JSON index responses
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/yxtay/transformer-recommenders).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
hk21702 added a commit to canonical/ubuntu-insights-k8s-operator that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/canonical/ubuntu-insights-k8s-operator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
github-actions Bot added a commit to netresearch/skill-repo-skill that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/netresearch/skill-repo-skill).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate Bot added a commit to njzjz/wenxian that referenced this pull request Sep 10, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/njzjz/wenxian).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to glotzerlab/parsnip that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Detroit)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/glotzerlab/parsnip).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to lengau/smarter-agents that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/lengau/smarter-agents).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to yxtay/agentic-recommenders that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.16.6` → `v0.16.7` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/ruff-pre-commit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/ruff-pre-commit)
|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/setup-uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/setup-uv)
|
|
[astral-sh/uv-pre-commit](https://redirect.github.com/astral-sh/uv-pre-commit)
| repository | patch | `0.12.12` → `0.12.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv-pre-commit/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv-pre-commit)
|
| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) |
stage | patch | `0.12.12` → `0.12.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.16.7`](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.6...v0.16.7)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.16.6...v0.16.7)

</details>

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>astral-sh/uv-pre-commit (astral-sh/uv-pre-commit)</summary>

###
[`v0.12.13`](https://redirect.github.com/astral-sh/uv-pre-commit/releases/tag/0.12.13)

[Compare
Source](https://redirect.github.com/astral-sh/uv-pre-commit/compare/0.12.12...0.12.13)

See: <https://github.com/astral-sh/uv/releases/tag/0.12.13>

</details>

<details>
<summary>astral-sh/uv (ghcr.io/astral-sh/uv)</summary>

###
[`v0.12.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01213)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.12.12...0.12.13)

Released on 2026-09-10.

##### Python

- Add GraalPy 3.13.0
([#&#8203;21431](https://redirect.github.com/astral-sh/uv/pull/21431))

##### Enhancements

- Verify hashes when downloading PEP 658 metadata sidecars
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

##### Preview features

- Respect `ty` exclusions when `uv check` automatically selects members
of a virtual workspace
([#&#8203;21555](https://redirect.github.com/astral-sh/uv/pull/21555))

##### Performance

- Avoid full wheel downloads during resolution by reusing supported
hashes from direct URL fragments when metadata is available separately
([#&#8203;21279](https://redirect.github.com/astral-sh/uv/pull/21279))

##### Bug fixes

- Edit Windows entry-point launcher resources in memory to support Nano
Server and reduce antivirus contention
([#&#8203;18713](https://redirect.github.com/astral-sh/uv/pull/18713))
- Prefer `core-metadata` over legacy aliases in JSON index responses
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/yxtay/agentic-recommenders).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
mrmans0n pushed a commit to mrmans0n/compose-rules that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/mrmans0n/compose-rules).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renokeeper Bot added a commit to schubydoo/clauster that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[anthropics/claude-code-action](https://redirect.github.com/anthropics/claude-code-action)
| action | patch | `v1.0.220` → `v1.0.221` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/anthropics/claude-code-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/anthropics/claude-code-action)
|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/setup-uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/setup-uv)
|
| [astral-sh/uv](https://redirect.github.com/astral-sh/uv) | uses-with |
patch | `0.12.12` → `0.12.13` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/astral-sh/uv/badge)](https://securityscorecards.dev/viewer/?uri=github.com/astral-sh/uv)
|

---

### Release Notes

<details>
<summary>anthropics/claude-code-action
(anthropics/claude-code-action)</summary>

###
[`v1.0.221`](https://redirect.github.com/anthropics/claude-code-action/releases/tag/v1.0.221)

[Compare
Source](https://redirect.github.com/anthropics/claude-code-action/compare/v1.0.220...v1.0.221)

**Full Changelog**:
<anthropics/claude-code-action@v1.0.220...v1.0.221>

</details>

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>astral-sh/uv (astral-sh/uv)</summary>

###
[`v0.12.13`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#01213)

[Compare
Source](https://redirect.github.com/astral-sh/uv/compare/0.12.12...0.12.13)

Released on 2026-09-10.

##### Python

- Add GraalPy 3.13.0
([#&#8203;21431](https://redirect.github.com/astral-sh/uv/pull/21431))

##### Enhancements

- Verify hashes when downloading PEP 658 metadata sidecars
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

##### Preview features

- Respect `ty` exclusions when `uv check` automatically selects members
of a virtual workspace
([#&#8203;21555](https://redirect.github.com/astral-sh/uv/pull/21555))

##### Performance

- Avoid full wheel downloads during resolution by reusing supported
hashes from direct URL fragments when metadata is available separately
([#&#8203;21279](https://redirect.github.com/astral-sh/uv/pull/21279))

##### Bug fixes

- Edit Windows entry-point launcher resources in memory to support Nano
Server and reduce antivirus contention
([#&#8203;18713](https://redirect.github.com/astral-sh/uv/pull/18713))
- Prefer `core-metadata` over legacy aliases in JSON index responses
([#&#8203;21563](https://redirect.github.com/astral-sh/uv/pull/21563))

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Los_Angeles)

- Branch creation
  - "before 6am"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend Renovate
CLI](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42MS4zIiwidXBkYXRlZEluVmVyIjoiNDQuNjEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renokeeper[bot] <308156799+renokeeper[bot]@users.noreply.github.com>
robert3005 pushed a commit to spiraldb/actions that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | major | `v9.0.0` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

###
[`v10.0.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.0.1):
🌈 Tolerate transient manifest timeouts

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.0...v10.0.1)

##### Changes

Thank you [@&#8203;arguile-](https://redirect.github.com/arguile-) for
making this action more resilient.

##### 🐛 Bug fixes

- Tolerate transient manifest timeouts
[@&#8203;arguile-](https://redirect.github.com/arguile-)
([#&#8203;1016](https://redirect.github.com/astral-sh/setup-uv/issues/1016))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.4
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1017](https://redirect.github.com/astral-sh/setup-uv/issues/1017))

##### 📚 Documentation

- docs: update version references to v10.0.0
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1014](https://redirect.github.com/astral-sh/setup-uv/issues/1014))

###
[`v10.0.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.0.0):
🌈 Disable automatic caching for sensitive events and new QOL features

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v9.0.0...v10.0.0)

##### Changes

Another breaking release, directly after v9.0.0 but we think the added
security justifies that.

##### Extra security by default

If you use the default `enable-cache: auto` this will now **DISABLE THE
CACHE** to protect against cache poisoning for the following events:

- `pull_request_target`
- `workflow_run`
- `release`

You can read the full reasoning in
[#&#8203;984](https://redirect.github.com/astral-sh/setup-uv/issues/984)

##### `version: latest-known`

```yaml
- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"
```

This will now install the latest version with a checksum that is known
by this action. The [known `uv`
checksums](https://redirect.github.com/astral-sh/setup-uv/blob/4f6036f71cec78afb113b323f220c9185d983c12/src/download/checksum/known-checksums.ts)
are automatically updated but will take a release of this action to take
effect. You won't be always using the latest & greatest but you will
have an extra level of security.

##### Read python version from `.tool-versions`

```yaml
- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"
```

Will now also set the python version if it is defined in
`.tool-versions`. You can read the details [in the
docs](https://redirect.github.com/astral-sh/setup-uv/blob/main/docs/advanced-version-configuration.md#install-a-version-defined-in-a-requirements-or-config-file)

##### 🚨 Breaking changes

- Disable automatic caching for sensitive events
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;992](https://redirect.github.com/astral-sh/setup-uv/issues/992))

##### 🐛 Bug fixes

- Reject paths in .tool-versions
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1007](https://redirect.github.com/astral-sh/setup-uv/issues/1007))

##### 🚀 Enhancements

- Read Python version from .tool-versions
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;996](https://redirect.github.com/astral-sh/setup-uv/issues/996))
- Add latest-known version selector
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;993](https://redirect.github.com/astral-sh/setup-uv/issues/993))

##### 🧰 Maintenance

- Require pull requests for Dependabot rollups
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1005](https://redirect.github.com/astral-sh/setup-uv/issues/1005))
- ci: pin Alpine container image
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;995](https://redirect.github.com/astral-sh/setup-uv/issues/995))
- chore: update known checksums for 0.12.3
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;991](https://redirect.github.com/astral-sh/setup-uv/issues/991))
- chore: update known checksums for 0.12.2
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;985](https://redirect.github.com/astral-sh/setup-uv/issues/985))
- chore: update known checksums for 0.12.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;982](https://redirect.github.com/astral-sh/setup-uv/issues/982))
- chore: update known checksums for 0.12.0
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;981](https://redirect.github.com/astral-sh/setup-uv/issues/981))
- chore: update known checksums for 0.11.31/0.11.32
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;972](https://redirect.github.com/astral-sh/setup-uv/issues/972))

##### 📚 Documentation

- docs: update version references to v9.0.0
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;971](https://redirect.github.com/astral-sh/setup-uv/issues/971))

##### ⬆️ Dependency updates

- chore(deps): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1013](https://redirect.github.com/astral-sh/setup-uv/issues/1013))
- chore(deps): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1004](https://redirect.github.com/astral-sh/setup-uv/issues/1004))
- chore(deps): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;994](https://redirect.github.com/astral-sh/setup-uv/issues/994))
- chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0
@&#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
([#&#8203;976](https://redirect.github.com/astral-sh/setup-uv/issues/976))
- chore(deps): bump actions/checkout from 7.0.0 to 7.0.1
@&#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot)
([#&#8203;980](https://redirect.github.com/astral-sh/setup-uv/issues/980))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/spiraldb/actions).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to CopilotKit/CopilotKit that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Los_Angeles)

- Branch creation
  - "before 9am every weekday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/CopilotKit/CopilotKit).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
milanoid pushed a commit to milanoid-labs/devops-study-app that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/36) for more information.

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDYuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0Ni4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: milanoid-renovate-bot[bot] <272032144+milanoid-renovate-bot[bot]@users.noreply.github.com>
todofixthis added a commit to todofixthis/filters-django that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/todofixthis/filters-django).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->
todofixthis added a commit to todofixthis/filters-iso that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/todofixthis/filters-iso).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->
todofixthis added a commit to todofixthis/phx-claude-siat that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/todofixthis/phx-claude-siat).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOltdfQ==-->
todofixthis added a commit to todofixthis/filters-pydantic that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/todofixthis/filters-pydantic).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
mrdynamo pushed a commit to mrdynamo/home-ops that referenced this pull request Sep 11, 2026
….0 ) (#3001)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

#### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

#### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

#### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

#### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

#### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

#### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend Renovate
CLI](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4yIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvZ2l0aHViLWFjdGlvbiIsInR5cGUvbWlub3IiXX0=-->

---------

Co-authored-by: robot-rosey[bot] <253320431+robot-rosey[bot]@users.noreply.github.com>
abmantis pushed a commit to abmantis/whirlpool-sixth-sense that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/abmantis/whirlpool-sixth-sense).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
abmantis pushed a commit to abmantis/idasen-ha that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/abmantis/idasen-ha).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
nocarryr pushed a commit to nocarryr/lupy that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

### [`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈  New output `python-runtime-id`and respect NO_PROXY

[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686) for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive [@&#8203;mj0nez](https://redirect.github.com/mj0nez) ([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums [@&#8203;zaniebot](https://redirect.github.com/zaniebot) ([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts [@&#8203;eifinger](https://redirect.github.com/eifinger) ([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates [@&#8203;eifinger](https://redirect.github.com/eifinger) ([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults [@&#8203;zaniebot](https://redirect.github.com/zaniebot) ([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/nocarryr/lupy).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
nocarryr pushed a commit to nocarryr/clickshare-temperature that referenced this pull request Sep 11, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

### [`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈  New output `python-runtime-id`and respect NO_PROXY

[Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686) for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive [@&#8203;mj0nez](https://redirect.github.com/mj0nez) ([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums [@&#8203;zaniebot](https://redirect.github.com/zaniebot) ([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts [@&#8203;eifinger](https://redirect.github.com/eifinger) ([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1 @&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates [@&#8203;eifinger](https://redirect.github.com/eifinger) ([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults [@&#8203;zaniebot](https://redirect.github.com/zaniebot) ([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns [@&#8203;woodruffw](https://redirect.github.com/woodruffw) ([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/nocarryr/clickshare-temperature).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
charlesbmi pushed a commit to charlesbmi/FastSIMUS that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/charlesbmi/FastSIMUS).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to Munich-Quantum-Software-Stack/Component-Catalog that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "every weekend"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Munich-Quantum-Software-Stack/Component-Catalog).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ2l0aHViLWFjdGlvbnMiXX0=-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Doridian pushed a commit to FoxDenHome/core that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://github.com/astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (https://github.com/astral-sh/setup-uv)</summary>

### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈  New output `python-runtime-id`and respect NO_PROXY

[Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0)

#### Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful.

#### 🐛 Bug fixes

- fix: respect no proxy directive [@&#8203;mj0nez](https://github.com/mj0nez) ([#&#8203;1037](astral-sh/setup-uv#1037))
- Use JSON + a typed wrapper instead of TS codegen [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1025](astral-sh/setup-uv#1025))

#### 🚀 Enhancements

- Expose a Python "identity" output [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1036](astral-sh/setup-uv#1036))
- Verify downloads with astral-sh/versions checksums [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1033](astral-sh/setup-uv#1033))

#### 🧰 Maintenance

- chore: update known checksums for 0.12.12 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1041](astral-sh/setup-uv#1041))
- chore: update known checksums for 0.12.10/0.12.11 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1038](astral-sh/setup-uv#1038))
- chore: update known checksums for 0.12.9 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1035](astral-sh/setup-uv#1035))
- chore: update known checksums for 0.12.7/0.12.8 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1031](astral-sh/setup-uv#1031))
- chore: update known checksums for 0.12.6 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1030](astral-sh/setup-uv#1030))
- chore: update known checksums for 0.12.5 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1020](astral-sh/setup-uv#1020))
- Use self-repo syntax for all in-repo actions/reusable workflows [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1024](astral-sh/setup-uv#1024))
- Pin one-shot tools [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1022](astral-sh/setup-uv#1022))
- ci: remove obsolete direct push attempts [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1019](astral-sh/setup-uv#1019))

#### 📚 Documentation

- docs: update version references to v10.0.1 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1018](astral-sh/setup-uv#1018))

#### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1043](astral-sh/setup-uv#1043))
- Harden npm install defaults [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1026](astral-sh/setup-uv#1026))
- Add dependency cooldowns [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1021](astral-sh/setup-uv#1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43NC4wIiwidXBkYXRlZEluVmVyIjoiNDQuNzQuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: https://git.foxden.network/FoxDen/core/pulls/150
renovate Bot added a commit to Munich-Quantum-Software-Stack/QDMI that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "every weekend"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Munich-Quantum-Software-Stack/QDMI).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6ImRldmVsb3AiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ2l0aHViLWFjdGlvbnMiXX0=-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
alexarice pushed a commit to xdslproject/xdsl-quantum that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/xdslproject/xdsl-quantum).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
woutervh pushed a commit to libranet/httpclient-logging that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/libranet/httpclient-logging).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to midea-lan/midea-local that referenced this pull request Sep 12, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/midea-lan/midea-local).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIiwiZ2l0aHViX2FjdGlvbnMiLCJyZW5vdmF0ZSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
phbaer pushed a commit to phbaer/waterrower-local-ble that referenced this pull request Sep 13, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈  New output `python-runtime-id`and respect NO_PROXY

[Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive [@&#8203;mj0nez](https://github.com/mj0nez) ([#&#8203;1037](astral-sh/setup-uv#1037))
- Use JSON + a typed wrapper instead of TS codegen [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1025](astral-sh/setup-uv#1025))

##### 🚀 Enhancements

- Expose a Python "identity" output [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1036](astral-sh/setup-uv#1036))
- Verify downloads with astral-sh/versions checksums [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1033](astral-sh/setup-uv#1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1041](astral-sh/setup-uv#1041))
- chore: update known checksums for 0.12.10/0.12.11 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1038](astral-sh/setup-uv#1038))
- chore: update known checksums for 0.12.9 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1035](astral-sh/setup-uv#1035))
- chore: update known checksums for 0.12.7/0.12.8 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1031](astral-sh/setup-uv#1031))
- chore: update known checksums for 0.12.6 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1030](astral-sh/setup-uv#1030))
- chore: update known checksums for 0.12.5 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1020](astral-sh/setup-uv#1020))
- Use self-repo syntax for all in-repo actions/reusable workflows [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1024](astral-sh/setup-uv#1024))
- Pin one-shot tools [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1022](astral-sh/setup-uv#1022))
- ci: remove obsolete direct push attempts [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1019](astral-sh/setup-uv#1019))

##### 📚 Documentation

- docs: update version references to v10.0.1 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1018](astral-sh/setup-uv#1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1043](astral-sh/setup-uv#1043))
- Harden npm install defaults [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1026](astral-sh/setup-uv#1026))
- Add dependency cooldowns [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1021](astral-sh/setup-uv#1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OC4zIiwidXBkYXRlZEluVmVyIjoiNDQuNDguMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: https://git.baer.one/phbaer/waterrower-local-ble/pulls/7
phbaer pushed a commit to phbaer/ha-birthday-calendar that referenced this pull request Sep 13, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | action | minor | `v10.0.1` → `v10.1.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the warning logs for more information.

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

### [`v10.1.0`](https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0): 🌈  New output `python-runtime-id`and respect NO_PROXY

[Compare Source](astral-sh/setup-uv@v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python version exactly was installed if you use `activate-environment`. See [pyca/cryptography#15572 (comment)](pyca/cryptography#15572 (comment)) for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive [@&#8203;mj0nez](https://github.com/mj0nez) ([#&#8203;1037](astral-sh/setup-uv#1037))
- Use JSON + a typed wrapper instead of TS codegen [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1025](astral-sh/setup-uv#1025))

##### 🚀 Enhancements

- Expose a Python "identity" output [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1036](astral-sh/setup-uv#1036))
- Verify downloads with astral-sh/versions checksums [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1033](astral-sh/setup-uv#1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1041](astral-sh/setup-uv#1041))
- chore: update known checksums for 0.12.10/0.12.11 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1038](astral-sh/setup-uv#1038))
- chore: update known checksums for 0.12.9 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1035](astral-sh/setup-uv#1035))
- chore: update known checksums for 0.12.7/0.12.8 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1031](astral-sh/setup-uv#1031))
- chore: update known checksums for 0.12.6 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1030](astral-sh/setup-uv#1030))
- chore: update known checksums for 0.12.5 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1020](astral-sh/setup-uv#1020))
- Use self-repo syntax for all in-repo actions/reusable workflows [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1024](astral-sh/setup-uv#1024))
- Pin one-shot tools [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1022](astral-sh/setup-uv#1022))
- ci: remove obsolete direct push attempts [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1019](astral-sh/setup-uv#1019))

##### 📚 Documentation

- docs: update version references to v10.0.1 @&#8203;[github-actions\[bot\]](https://github.com/apps/github-actions) ([#&#8203;1018](astral-sh/setup-uv#1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates [@&#8203;eifinger](https://github.com/eifinger) ([#&#8203;1043](astral-sh/setup-uv#1043))
- Harden npm install defaults [@&#8203;zaniebot](https://github.com/zaniebot) ([#&#8203;1026](astral-sh/setup-uv#1026))
- Add dependency cooldowns [@&#8203;woodruffw](https://github.com/woodruffw) ([#&#8203;1021](astral-sh/setup-uv#1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OC4zIiwidXBkYXRlZEluVmVyIjoiNDQuNDguMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: https://git.baer.one/phbaer/ha-birthday-calendar/pulls/18
smoobot Bot added a commit to smoochy/openrouter-model-list that referenced this pull request Sep 13, 2026
This PR contains the following updates:

| Package | Change | Stack | Upstream |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
`v10.0.1` → `v10.1.0` |
[.github/workflows](https://redirect.github.com/smoochy/openrouter-model-list/tree/main/.github/workflows)
| — |
![age](https://developer.mend.io/api/mc/badges/age/github-tags/astral-sh%2fsetup-uv/v10.1.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/astral-sh%2fsetup-uv/v10.0.1/v10.1.0?slim=true)
|

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

#### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

#### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

#### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

#### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

#### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

#### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend Renovate
CLI](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC44Mi4wIiwidXBkYXRlZEluVmVyIjoiNDQuODIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGU6bWlub3IiXX0=-->
renovate Bot added a commit to apify/impit that referenced this pull request Sep 13, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` |
![age](https://developer.mend.io/api/mc/badges/age/github-tags/astral-sh%2fsetup-uv/v10.1.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/astral-sh%2fsetup-uv/v10.0.1/v10.1.0?slim=true)
|
| [pnpm](https://redirect.github.com/pnpm/pnpm/tree/main/pnpm)
([source](https://redirect.github.com/pnpm/pnpm/tree/HEAD/pnpm/npm/pnpm))
| packageManager | minor | [`12.3.4` →
`12.4.1`](https://renovatebot.com/diffs/npm/pnpm/12.3.4/12.4.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/pnpm/12.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pnpm/12.3.4/12.4.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the warning logs for
more information.

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>pnpm/pnpm (pnpm)</summary>

###
[`v12.4.1`](https://redirect.github.com/pnpm/pnpm/releases/tag/v12.4.1):
pnpm 12.4.1

[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v12.4.0...v12.4.1)

pnpm 12.4.1 fixes installs that failed on filesystems refusing hard
links or clones, on Android, and under `nodeLinker: hoisted`. Repeat
installs are faster.

#### Patch Changes

##### Installing packages

- `pnpm install` no longer fails with `Operation not permitted` when the
filesystem refuses a hard link or a copy-on-write clone
[#&#8203;14722](https://redirect.github.com/pnpm/pnpm/issues/14722).
Under `packageImportMethod: auto` and `clone-or-copy`, pnpm copies the
file instead. EdenFS checkouts, which have no hard links, and rootless
containers, which refuse the clone syscall, both hit this. An explicit
`packageImportMethod: hardlink` or `clone` still reports the error.

pnpm also copies a package file whose store entry has reached the
filesystem's limit on names for one file, 1024 on NTFS and 65000 on
ext4. Such a file failed the install under `packageImportMethod:
hardlink`, and under `auto` it stopped pnpm hard linking for the rest of
the install.

- `pnpm install` no longer writes a package file through a symlink left
at the path it is importing to. Copying such a file overwrote whatever
the link pointed at, and created that file when the link pointed
nowhere. An executable package file also made the link's target
executable.

- Fixed `pnpm install` and `pnpm dlx` on Android. Registry requests
crashed because pnpm found no system CA certificates, so pnpm uses
bundled ones there
[#&#8203;14777](https://redirect.github.com/pnpm/pnpm/issues/14777).
Imports also failed with "Permission denied" on filesystems that deny
hard links and reflinks, and now fall back to copying
[#&#8203;14780](https://redirect.github.com/pnpm/pnpm/issues/14780).

- `pnpm install` no longer fails with "Invalid cross-device link" while
preserving a package's nested `node_modules` directory during a Docker
build
[#&#8203;14758](https://redirect.github.com/pnpm/pnpm/issues/14758).

- `pnpm install` no longer fails on a package tarball that carries a
file at the archive root, such as the `._*` entries macOS `tar` adds
[#&#8203;14701](https://redirect.github.com/pnpm/pnpm/issues/14701). The
file is installed at the root of the package.

A `file:` tarball packed without the usual `package/` directory is now
recorded under the name and version from its own `package.json`. It was
recorded under the alias the dependency was given, at version 0.0.0.

- Under `nodeLinker: hoisted`, `pnpm install` no longer re-imports
packages that are already in place. A repeat install replaced the whole
`node_modules` tree and reported `Packages: +N`. A package is still
imported when its directory is missing, when its `package.json` no
longer carries the installed version, when it is a `file:` dependency,
and when it is patched. Lifecycle scripts no longer run again for a
package left in place, and `pnpm rebuild` and a change to `allowBuilds`
still reach it.

- `pnpm install` now runs a dependency's build scripts again when its
side-effects cache entry has no files to restore
[#&#8203;14717](https://redirect.github.com/pnpm/pnpm/issues/14717).
Such builds were skipped and nothing was put in their place, so a script
whose whole effect lands outside its own package directory, such as a
git hook installer, never took effect. pnpm no longer publishes empty
artifacts to the shared side-effects cache either.

##### Resolving and linking dependencies

- `pnpm install`, `pnpm add`, and `pnpm dedupe` now apply
`ignoredOptionalDependencies`
[#&#8203;14729](https://redirect.github.com/pnpm/pnpm/issues/14729).
Matching optional dependencies are left out of the lockfile and are not
installed. pnpm 12 installed them whenever it resolved dependencies from
scratch.

- `pnpm install` no longer links a transitive dependency to a workspace
package when `linkWorkspacePackages` is `true` and the dependency is
declared with a plain version range
[#&#8203;14781](https://redirect.github.com/pnpm/pnpm/issues/14781).
Enabling `preferWorkspacePackages` does not change this. Set
`linkWorkspacePackages: deep` to link them.

- `pnpm install` no longer leaves dangling dependency links in workspace
packages located above the workspace root
[#&#8203;14726](https://redirect.github.com/pnpm/pnpm/issues/14726).

- `pnpm install` and `pnpm add` no longer leave a dangling symlink in
`node_modules` when a project starts depending directly on a package
that the lockfile holds only as a transitive dependency with resolved
peer dependencies
[#&#8203;14714](https://redirect.github.com/pnpm/pnpm/issues/14714).

- `pnpm dedupe` now keeps a compatible auto-installed peer when another
workspace project depends on a newer major
[#&#8203;14697](https://redirect.github.com/pnpm/pnpm/issues/14697).
Repeated runs alternated between compatible and incompatible peer
versions.

- `pnpm peers check` no longer reports a peer dependency declared as
`workspace:^`, `workspace:~`, or a bare `workspace:` as unmet
[#&#8203;14770](https://redirect.github.com/pnpm/pnpm/issues/14770).
pnpm reported these as unmet whatever version the linked workspace
project supplied.

##### Performance

- Sped up repeat installs
[#&#8203;14540](https://redirect.github.com/pnpm/pnpm/issues/14540).
pnpm checks the store's files only for the packages it links into
`node_modules`, instead of every package in the lockfile. Creating the
command shims in `node_modules/.bin` makes about 1,500 fewer filesystem
calls in a 76 project workspace. Installs that use the global virtual
store read their slot paths from the cache directory instead of deriving
them every time. Verifying a large lockfile also allocates less memory.

- Sped up `pnpm install` in Cargo workspaces with many member crates.
Repeated installs reuse verified Cargo checksum metadata.

- Installing several packages from the same Git repository and commit
now downloads the source once per install
[#&#8203;14725](https://redirect.github.com/pnpm/pnpm/issues/14725).
Each package still runs its prepare scripts in its own copy of the
checkout.

##### Running scripts and tasks

- pnpm now passes Ctrl+C on to the script or command it started and
waits for it to shut down
[#&#8203;14723](https://redirect.github.com/pnpm/pnpm/issues/14723).
pnpm exited first, so a script that was still writing landed on the
shell prompt.

- `pnpm run "/pattern/" --no-bail` now lets every matched script finish
after one of them fails
[#&#8203;14718](https://redirect.github.com/pnpm/pnpm/issues/14718). The
command exits with `ERR_PNPM_RUN_FAILED`, and its message lists the
scripts that failed in the order they were selected.

- `pnpm pipeline` no longer fails on a project that tracks a symlink,
such as a `CLAUDE.md` pointing at `AGENTS.md`
[#&#8203;14692](https://redirect.github.com/pnpm/pnpm/issues/14692).
Changing a symlinked input's target invalidates that task's cache, and
`pnpm pipeline --no-cache` no longer hashes task inputs.

##### Commands

- `pnpm add -g`, `pnpm update -g`, and `pnpm remove -g` no longer change
global bins or install directories after reading only part of an
installed package group
[#&#8203;13796](https://redirect.github.com/pnpm/pnpm/issues/13796). If
any declared package manifest is missing, malformed, or unreadable, pnpm
now fails before it activates or removes anything and leaves the
existing global installation intact.

- `pnpm dedupe` now processes every workspace project by default,
including workspaces that keep a separate lockfile per project
[#&#8203;14732](https://redirect.github.com/pnpm/pnpm/issues/14732).
Workspace filters select which projects it processes, and
`--fail-if-no-match` exits with an error when no project matches.

- `pnpm update <name>@<version>` now keeps the range operator the
manifest declares
[#&#8203;14745](https://redirect.github.com/pnpm/pnpm/issues/14745).
Running `pnpm update react@19.3.0` on `"react": "^19.2.8"` writes
`"react": "^19.3.0"`. A `jsr:` entry keeps its `jsr:` prefix, and a
plain `pnpm update` now moves a `jsr:` range the way it moves an npm
range.

- `pnpm --filter` directory selectors now support `?` wildcards and
character classes such as `[ab]`. A `*` or `?` wildcard no longer
selects a directory whose name starts with a dot, as on pnpm 11.

- `pnpm deploy --legacy` now prefers the dependency versions pinned in
the source workspace lockfile when they still satisfy the deployed
project's range
[#&#8203;13857](https://redirect.github.com/pnpm/pnpm/issues/13857).

- `pnpm sbom` now leaves out a package's author field when the manifest
author name is empty or contains only whitespace
[#&#8203;14685](https://redirect.github.com/pnpm/pnpm/issues/14685). In
a filtered or split workspace run, only a project with no `author` field
inherits the workspace root's author.

`pnpm sbom --sbom-format spdx` now writes `creationInfo.created` with
whole seconds, such as `2026-09-08T10:38:21Z`
[#&#8203;14684](https://redirect.github.com/pnpm/pnpm/issues/14684). The
fractional seconds it carried were rejected by strict SPDX consumers.

##### Configuration

- The `updateConfig` pnpmfile hook now receives the resolved
configuration, including settings that came from `.npmrc`, the command
line, or a default
[#&#8203;14676](https://redirect.github.com/pnpm/pnpm/issues/14676).
Scoped registries are reported under `registriesByScope`, and a hook may
rewrite that map to change where packages are fetched from. Registry
credentials are reported under `configByUri`, as pnpm 11 reports them.
An unset setting is left out rather than reported as `null`.

- `pnpm audit --fix` and the `minimumReleaseAgeStrict` approval prompt
now keep the comments in `minimumReleaseAgeExclude` when they append an
entry to it in `pnpm-workspace.yaml`. The rest of the list is left as
written, and the `trustPolicyExcludePrune` and
`minimumReleaseAgeExcludePrune` cleanups keep the comments of the
entries they retain.

`pnpm install` and `pnpm dedupe` now run those cleanups too
[#&#8203;14759](https://redirect.github.com/pnpm/pnpm/issues/14759).
Only `pnpm add`, `pnpm update`, and `pnpm remove` pruned the entries
that the freshly written lockfile no longer resolves.

- `pnpm config set --global node-download-mirrors` no longer rejects the
key [#&#8203;13611](https://redirect.github.com/pnpm/pnpm/issues/13611).
The global config file already accepted `nodeDownloadMirrors`, but the
command refused to write it.

- `NO_PROXY` entries that start with a dot, such as `.npmjs.org`, now
bypass the proxy for the domain and its subdomains
[#&#8203;14686](https://redirect.github.com/pnpm/pnpm/issues/14686).

- pnpm no longer creates a project `pnpm-lock.yaml` when
`devEngines.packageManager.onFail` is `download` and lockfile writing is
off through `lockfile: false` or `--no-lockfile`
[#&#8203;14728](https://redirect.github.com/pnpm/pnpm/issues/14728).
pnpm still switches to the pinned version.

- pnpm now writes `node_modules/.package-map.json` only when
`nodeExperimentalPackageMap` is enabled. Nothing reads the file without
that setting, and an install that stops writing the map removes the one
a previous install left.

##### Windows

- `pnpm pipeline` no longer fails with intermittent access denied errors
when concurrent tasks save their cache entries on Windows.

- Windows filesystem operations now retry permission errors for up to
one second
[#&#8203;14682](https://redirect.github.com/pnpm/pnpm/issues/14682). A
permanent permission error delayed the failure by a minute. Sharing and
lock violations keep their one minute retry budget.

##### Messages and output

- pnpm now warns when the root `package.json` declares a non-empty
`workspaces` array and the project has no `pnpm-workspace.yaml`
[#&#8203;2255](https://redirect.github.com/pnpm/pnpm/issues/2255). Such
an install linked no project and said nothing about why.

- `ERR_PNPM_PACKAGE_MANAGER_REMOVE_MODULES_DIR` now names the file or
directory in `node_modules` that pnpm could not clean up. It reported
only the underlying OS error, such as "Access is denied (os error 5)".

- `pnpm --help` no longer describes pnpm as experimental.

<!-- sponsors -->

#### Platinum Sponsors

<table>
  <tbody>
    <tr>
      <td align="center" valign="middle">
<a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
      </td>
      <td align="center" valign="middle">
<a href="https://openai.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/openai_dark.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/openai_light.svg" />
<img src="https://pnpm.io/img/users/openai_dark.svg" width="160"
alt="OpenAI" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://notion.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/notion.svg" width="80" alt="Notion"></a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a
href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/coderabbit.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
<img src="https://pnpm.io/img/users/coderabbit.svg" width="220"
alt="CodeRabbit" />
          </picture>
        </a>
      </td>
    </tr>
  </tbody>
</table>

#### Gold Sponsors

<table>
  <tbody>
    <tr>
      <td align="center" valign="middle">
<a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/sanity.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/sanity_light.svg" />
<img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity"
/>
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/discord.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/discord_light.svg" />
<img src="https://pnpm.io/img/users/discord.svg" width="220"
alt="Discord" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/serpapi_light.svg" />
<img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160"
alt="SerpApi" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a
href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/stackblitz.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
<img src="https://pnpm.io/img/users/stackblitz.svg" width="190"
alt="Stackblitz" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/workleap.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/workleap_light.svg" />
<img src="https://pnpm.io/img/users/workleap.svg" width="190"
alt="Workleap" />
          </picture>
        </a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/nx.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/nx_light.svg" />
<img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://latitude.so/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/latitude.svg" width="160"
alt="Latitude"></a>
      </td>
    </tr>
  </tbody>
</table>

<!-- sponsors end -->

###
[`v12.4.0`](https://redirect.github.com/pnpm/pnpm/releases/tag/v12.4.0):
pnpm 12.4

[Compare
Source](https://redirect.github.com/pnpm/pnpm/compare/v12.3.4...v12.4.0)

##### Minor Changes

- pnpm can now manage npm, Python, and Cargo dependencies in the same
workspace. Enable `python.enabled` or `cargo.enabled` in
`pnpm-workspace.yaml`, then use `pnpm install` to install them together.

- Add Python packages with `pnpm add pypi:<package>`. pnpm uses
`pyproject.toml`, `pylock.toml`, and a managed `.venv`. Frozen and
offline installs are supported, and `pnpm run` and `pnpm exec` make the
environment's executables available
[#&#8203;14566](https://redirect.github.com/pnpm/pnpm/issues/14566).
- Add Rust crates with `pnpm add crate:<package>`. pnpm supports
crates.io and custom sparse registries configured with `cargo.indexUrl`.
Registry authentication supports pnpm credentials and, for crates.io,
`CARGO_REGISTRY_TOKEN` or `$CARGO_HOME/credentials.toml`.

Both ecosystems support faster dependency resolution through
`pnprServer`, with local resolution as a fallback when the server does
not support it.

- Added `pnpm pipeline [name]` to install frozen dependencies and run
workspace tasks declared in `pipelines`. It selects affected projects,
runs their task graph, and continues running tasks after a task fails.

Tasks support `inputs`, `outputs`, `env`, and `cache` settings. Cached
results restore task outputs and replay logs. Cargo tasks can reuse
local build state between worktrees with `tasks.<name>.cargoTargetDir`.
Set `includeWorkspaceRoot: true` to include root tasks.

Use `pnpm pipeline --dry-run` to preview the task graph without
installing configuration dependencies or running workspace hooks.

- Added support for Android on arm64 and x64, FreeBSD on x64, and Linux
on ppc64le, s390x, and RISC-V (riscv64 with glibc)
[#&#8203;14431](https://redirect.github.com/pnpm/pnpm/issues/14431),
[#&#8203;14597](https://redirect.github.com/pnpm/pnpm/issues/14597),
[#&#8203;7582](https://redirect.github.com/pnpm/pnpm/issues/7582).

- Added `trustPolicyExcludePrune` to automatically remove unused
versions and packages from `trustPolicyExclude` when running `pnpm add`,
`pnpm update`, or `pnpm remove`. It is disabled by default. Package name
patterns such as `@scope/*` are kept, and cleanup is skipped when
`sharedWorkspaceLockfile` is `false`.

- Added `pnpm change check` for CI validation of package versions
against the `versioning.epics` bands and `versioning.fixed` groups in
`pnpm-workspace.yaml`. It reports all violations, including packages
that are not part of the current release.

##### Patch Changes

- Registry metadata is now kept separate for registries with different
URL paths or schemes. This prevents installs from using another
registry's package versions or tarball URLs, and keeps metadata fetched
over HTTP from being reused for HTTPS
[#&#8203;13558](https://redirect.github.com/pnpm/pnpm/issues/13558).

The first install after upgrading refetches registry metadata. The
package store is unchanged. `pnpm cache view` now shows full registry
URLs. Scripts that parse the directory names from `pnpm cache
list-registries` or `pnpm cache list` need updating.

- Patches that add build scripts or a `binding.gyp` now trigger a build,
subject to build approval. Unapproved builds appear under "Ignored build
scripts"
[#&#8203;14648](https://redirect.github.com/pnpm/pnpm/issues/14648).

- Build scripts can now be rejected before installing a package with
`pnpm add --allow-build=!<pkg>`, including global installs. `pnpm
approve-builds <pkg>` and `pnpm approve-builds !<pkg>` also save
decisions when no packages are awaiting approval. They warn if the named
package is not awaiting approval
[#&#8203;14067](https://redirect.github.com/pnpm/pnpm/issues/14067).

- A registry configured in `.npmrc` now takes precedence over registry
settings saved by `pnpm login` in the global `config.yaml`. This fixes
installs using the wrong registry after login
[#&#8203;14614](https://redirect.github.com/pnpm/pnpm/issues/14614).

- Large downloads over slow connections no longer time out while data is
still arriving. `fetch-timeout` now limits how long a request can go
without making progress
[#&#8203;14604](https://redirect.github.com/pnpm/pnpm/issues/14604).

- Sped up installs in workspaces with many projects when reusing a warm
global virtual store
[#&#8203;14540](https://redirect.github.com/pnpm/pnpm/issues/14540).

- `pnpm deploy` is faster in large workspaces and no longer fails with
`ERR_PNPM_LOCKFILE_CONFIG_MISMATCH` when the project includes a
`.pnpmfile.mjs`
[#&#8203;14539](https://redirect.github.com/pnpm/pnpm/issues/14539),
[#&#8203;14671](https://redirect.github.com/pnpm/pnpm/issues/14671).

- `pnpm add --workspace <pkg>` works again. It saves the dependency with
the `workspace:` protocol and links it from the workspace. The command
fails if no workspace project provides the package
[#&#8203;14602](https://redirect.github.com/pnpm/pnpm/issues/14602).

- `pnpm add` and `pnpm install` now accept protocol-prefixed selectors
such as `jsr:@scope/pkg`, `npm:pkg@^1.0.0`, and `workspace:pkg@*`
[#&#8203;14590](https://redirect.github.com/pnpm/pnpm/issues/14590).
Installs with JSR dependencies in the lockfile also no longer fail with
`ERR_PNPM_META_FETCH_FAIL`
[#&#8203;14649](https://redirect.github.com/pnpm/pnpm/issues/14649).

- Boolean flags now accept explicit inline values. For example, `pnpm
install --prod=false` installs devDependencies, while `--prod=true`
skips them
[#&#8203;14553](https://redirect.github.com/pnpm/pnpm/issues/14553).

- `pnpm install <pkg>` now accepts `--offline` and `--prefer-offline`,
as `pnpm add <pkg>` already did
[#&#8203;14194](https://redirect.github.com/pnpm/pnpm/pull/14194).

- Fixed `pnpm install --frozen-lockfile` rejecting a freshly generated
lockfile when overrides use relative `file:` or `link:` paths in a
workspace
[#&#8203;14555](https://redirect.github.com/pnpm/pnpm/issues/14555).

- Fixed installs with config dependencies failing on symlinked
lockfiles, such as those used by Bazel and Nix, when the config
dependencies have not changed. Updates that would write through a
symlink remain disallowed. Updating config dependencies also preserves
lockfiles that start with a byte order mark
[#&#8203;14372](https://redirect.github.com/pnpm/pnpm/issues/14372).

- Fixed package manager version pins being written to the wrong lockfile
when `lockfileDir` is set. The pins also remain consistent across
commands when version switching is disabled, avoiding unnecessary
lockfile changes
[#&#8203;14633](https://redirect.github.com/pnpm/pnpm/issues/14633),
[#&#8203;14575](https://redirect.github.com/pnpm/pnpm/issues/14575).

- `pnpm import` now respects `lockfileDir` and branch lockfiles without
modifying other lockfiles. Failed imports restore the destination
lockfile
[#&#8203;14563](https://redirect.github.com/pnpm/pnpm/issues/14563).

- `pnpm patch-commit` now produces valid patches when files are added or
deleted. `pnpm install` also accepts patches that delete files without
listing their contents, and patch files with CRLF line endings
[#&#8203;14559](https://redirect.github.com/pnpm/pnpm/issues/14559),
[#&#8203;14557](https://redirect.github.com/pnpm/pnpm/issues/14557).

- Fixed version ranges with partial upper bounds. For example, `<=16`
now includes all 16.x versions, and `>=0.11 <=3` correctly accepts 3.0.1
[#&#8203;14419](https://redirect.github.com/pnpm/pnpm/issues/14419).

- Workspace package patterns now support `.` and `..` segments and
repeated slashes. Patterns such as `./packages/*` and exclusions such as
`!./packages/foo` now match correctly
[#&#8203;14571](https://redirect.github.com/pnpm/pnpm/issues/14571).

- `packageConfigs` settings now apply to the specified projects when
`sharedWorkspaceLockfile` is `false`, including `overrides`, `hoist`,
`modulesDir`, `saveExact`, and `savePrefix`. Workspaces with a shared
lockfile report which entries were ignored
[#&#8203;14556](https://redirect.github.com/pnpm/pnpm/issues/14556).

- `pnpm run` and `pnpm exec` no longer report a changed workspace
structure after a successful install when `sharedWorkspaceLockfile` is
`false` and `verifyDepsBeforeRun` is enabled
[#&#8203;14588](https://redirect.github.com/pnpm/pnpm/issues/14588).

- Commands run from a project's subdirectory now find the nearest
ancestor with a manifest. This fixes commands such as `pnpm bin`
returning paths under the wrong directory. `pnpm init` still creates its
manifest in the current directory, and `pnpm exec` still runs there
[#&#8203;14622](https://redirect.github.com/pnpm/pnpm/issues/14622).

- Relative `scriptShell` paths in `pnpm-workspace.yaml` now resolve from
the workspace root, including when scripts run in nested packages. Bare
command names such as `bash` still use `PATH`
[#&#8203;14422](https://redirect.github.com/pnpm/pnpm/issues/14422).

- Fixed installing the pnpm version pinned in `packageManager` when
`nodeLinker` is `hoisted`. Managed Node.js, Deno, and Bun installations
also work when the global config uses `nodeLinker: hoisted`
[#&#8203;14595](https://redirect.github.com/pnpm/pnpm/issues/14595).

- The JavaScript pnpm can again switch to a project's pinned pnpm
version on platforms without a native binary for that version, such as
Alpine Linux with pnpm 10 or Intel Macs with pnpm 11. If a native pnpm
version does not support the platform, the error now names the missing
target
[#&#8203;13622](https://redirect.github.com/pnpm/pnpm/issues/13622).

- Provisioning Yarn 6 now uses `GH_TOKEN` or `GITHUB_TOKEN` when
available to avoid GitHub's anonymous API rate limit in CI. Tokens are
only sent when `strict-ssl` is enabled.

- Fixed concurrent installs sharing a global virtual store on macOS
failing with "failed to import ... No such file or directory"
[#&#8203;14560](https://redirect.github.com/pnpm/pnpm/issues/14560).

- Fixed `pnpm setup` failing with
`ERR_PNPM_DIRECTORY_FETCHER_PATH_ESCAPE` on Windows. Local `file:`
dependencies whose directories are symlinks or junctions are now packed
correctly
[#&#8203;14618](https://redirect.github.com/pnpm/pnpm/issues/14618).

- On Windows, installs now retry replacing command shims temporarily
locked by another process
[#&#8203;14549](https://redirect.github.com/pnpm/pnpm/issues/14549).

- Fixed argument forwarding on Windows with `shellEmulator` enabled.
Paths ending in a backslash, line breaks, and literal shell expressions
are preserved
[#&#8203;14548](https://redirect.github.com/pnpm/pnpm/issues/14548).

- Windows store paths now consistently use backslashes in `pnpm store
path` output and in the `storeDir` and `virtualStoreDir` fields of
`node_modules/.modules.yaml`.

- Invalid certificates in `ca` or `cafile` no longer cause an `Invalid
CA certificate` error. Valid certificates still apply, and blank `cert`
or `key` values are treated as unset
[#&#8203;14646](https://redirect.github.com/pnpm/pnpm/issues/14646).

- Installs now respect the archive extraction concurrency limit even
after a download is abandoned
[#&#8203;14585](https://redirect.github.com/pnpm/pnpm/issues/14585).

- `pnpm audit` summaries now exclude advisories ignored through
`auditConfig.ignoreGhsas` and report them separately. When all
advisories are ignored, the summary says so
[#&#8203;14535](https://redirect.github.com/pnpm/pnpm/issues/14535).

- `pnpm pack --json` now reports errors as JSON. Lifecycle script output
appears before the final JSON output.

- `pnpm outdated -r` now wraps the `Dependents` column, keeping the
table readable when many workspace projects use the same dependency
[#&#8203;14591](https://redirect.github.com/pnpm/pnpm/issues/14591).

- Shell completions now support the `pn` alias in bash, fish, pwsh, and
zsh [#&#8203;11955](https://redirect.github.com/pnpm/pnpm/issues/11955).

- `pnpm version` now accepts `-m` as a short alias for `--message`
[#&#8203;14567](https://redirect.github.com/pnpm/pnpm/issues/14567).

<!-- sponsors -->

##### Platinum Sponsors

<table>
  <tbody>
    <tr>
      <td align="center" valign="middle">
<a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
      </td>
      <td align="center" valign="middle">
<a href="https://openai.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/openai_dark.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/openai_light.svg" />
<img src="https://pnpm.io/img/users/openai_dark.svg" width="160"
alt="OpenAI" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://notion.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/notion.svg" width="80" alt="Notion"></a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a
href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/coderabbit.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
<img src="https://pnpm.io/img/users/coderabbit.svg" width="220"
alt="CodeRabbit" />
          </picture>
        </a>
      </td>
    </tr>
  </tbody>
</table>

##### Gold Sponsors

<table>
  <tbody>
    <tr>
      <td align="center" valign="middle">
<a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/sanity.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/sanity_light.svg" />
<img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity"
/>
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/discord.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/discord_light.svg" />
<img src="https://pnpm.io/img/users/discord.svg" width="220"
alt="Discord" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/serpapi_light.svg" />
<img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160"
alt="SerpApi" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a
href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/stackblitz.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
<img src="https://pnpm.io/img/users/stackblitz.svg" width="190"
alt="Stackblitz" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/workleap.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/workleap_light.svg" />
<img src="https://pnpm.io/img/users/workleap.svg" width="190"
alt="Workleap" />
          </picture>
        </a>
      </td>
    </tr>
    <tr>
      <td align="center" valign="middle">
<a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer">
          <picture>
<source media="(prefers-color-scheme: light)"
srcset="https://pnpm.io/img/users/nx.svg" />
<source media="(prefers-color-scheme: dark)"
srcset="https://pnpm.io/img/users/nx_light.svg" />
<img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
          </picture>
        </a>
      </td>
      <td align="center" valign="middle">
<a href="https://latitude.so/?utm_source=pnpm&utm_medium=release_notes"
target="_blank" rel="noopener noreferrer"><img
src="https://pnpm.io/img/users/latitude.svg" width="160"
alt="Latitude"></a>
      </td>
    </tr>
  </tbody>
</table>

<!-- sponsors end -->

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "every weekday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/apify/impit).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate Bot added a commit to ansible/vscode-ansible that referenced this pull request Sep 13, 2026
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) |
action | minor | `v10.0.1` → `v10.1.0` | |
| [jdx/mise](https://redirect.github.com/jdx/mise) | uses-with | patch |
`2026.9.3` → `2026.9.5` | `v2026.9.6` |

---

### Release Notes

<details>
<summary>astral-sh/setup-uv (astral-sh/setup-uv)</summary>

###
[`v10.1.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.1.0):
🌈 New output `python-runtime-id`and respect NO_PROXY

[Compare
Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.0.1...v10.1.0)

##### Changes

This release adds more bheind the scene security improvements and also 2
small improvements.

##### NO\_PROXY

This action now respects `no_proxy/NO_PROXY` environment variables which
were previously ignored.

##### New output `python-runtime-id`

The new output `python-runtime-id` can be used to know which python
version exactly was installed if you use `activate-environment`. See
[pyca/cryptography#15572
(comment)](https://redirect.github.com/pyca/cryptography/pull/15572#discussion_r3913508686)
for details on why this can be useful.

##### 🐛 Bug fixes

- fix: respect no proxy directive
[@&#8203;mj0nez](https://redirect.github.com/mj0nez)
([#&#8203;1037](https://redirect.github.com/astral-sh/setup-uv/issues/1037))
- Use JSON + a typed wrapper instead of TS codegen
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1025](https://redirect.github.com/astral-sh/setup-uv/issues/1025))

##### 🚀 Enhancements

- Expose a Python "identity" output
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1036](https://redirect.github.com/astral-sh/setup-uv/issues/1036))
- Verify downloads with astral-sh/versions checksums
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1033](https://redirect.github.com/astral-sh/setup-uv/issues/1033))

##### 🧰 Maintenance

- chore: update known checksums for 0.12.12
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1041](https://redirect.github.com/astral-sh/setup-uv/issues/1041))
- chore: update known checksums for 0.12.10/0.12.11
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1038](https://redirect.github.com/astral-sh/setup-uv/issues/1038))
- chore: update known checksums for 0.12.9
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1035](https://redirect.github.com/astral-sh/setup-uv/issues/1035))
- chore: update known checksums for 0.12.7/0.12.8
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1031](https://redirect.github.com/astral-sh/setup-uv/issues/1031))
- chore: update known checksums for 0.12.6
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1030](https://redirect.github.com/astral-sh/setup-uv/issues/1030))
- chore: update known checksums for 0.12.5
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1020](https://redirect.github.com/astral-sh/setup-uv/issues/1020))
- Use self-repo syntax for all in-repo actions/reusable workflows
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1024](https://redirect.github.com/astral-sh/setup-uv/issues/1024))
- Pin one-shot tools
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1022](https://redirect.github.com/astral-sh/setup-uv/issues/1022))
- ci: remove obsolete direct push attempts
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1019](https://redirect.github.com/astral-sh/setup-uv/issues/1019))

##### 📚 Documentation

- docs: update version references to v10.0.1
@&#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions)
([#&#8203;1018](https://redirect.github.com/astral-sh/setup-uv/issues/1018))

##### ⬆️ Dependency updates

- chore(deps-dev): roll up Dependabot updates
[@&#8203;eifinger](https://redirect.github.com/eifinger)
([#&#8203;1043](https://redirect.github.com/astral-sh/setup-uv/issues/1043))
- Harden npm install defaults
[@&#8203;zaniebot](https://redirect.github.com/zaniebot)
([#&#8203;1026](https://redirect.github.com/astral-sh/setup-uv/issues/1026))
- Add dependency cooldowns
[@&#8203;woodruffw](https://redirect.github.com/woodruffw)
([#&#8203;1021](https://redirect.github.com/astral-sh/setup-uv/issues/1021))

</details>

<details>
<summary>jdx/mise (jdx/mise)</summary>

###
[`v2026.9.5`](https://redirect.github.com/jdx/mise/releases/tag/v2026.9.5):
: macOS defaults, per-platform dotfiles, and complete lockfiles

[Compare
Source](https://redirect.github.com/jdx/mise/compare/vfox-v2026.9.4...vfox-v2026.9.5)

This release deepens macOS bootstrap support with current-host and
nested defaults, lets dotfiles and tasks adapt to the platform and to
parsed arguments, and adds an opt-in trial of complete lockfile
generation. It also carries a batch of install progress, self-update,
brew-cask, and sandbox fixes.

##### Added

- **bootstrap:** New `[[bootstrap.macos.defaults_entries]]` blocks let
you set macOS preferences explicitly with `domain`, `key`, `value`, and
an optional `host` (`any` by default, or `current`), covering
preferences normally written via `defaults -currentHost` while keeping
the existing `[bootstrap.macos.defaults]` shorthand. Entries also accept
an optional `path` to patch a nested dictionary value without replacing
its siblings, preserving property-list types and creating missing
parents.
([#&#8203;12983](https://redirect.github.com/jdx/mise/pull/12983) by
[@&#8203;azohra](https://redirect.github.com/azohra),
[#&#8203;12984](https://redirect.github.com/jdx/mise/pull/12984) by
[@&#8203;azohra](https://redirect.github.com/azohra))

  ```toml
  [[bootstrap.macos.defaults_entries]]
  domain = "com.apple.dock"
  key = "autohide"
  value = true
  host = "current"
  ```
- **bootstrap:** More friendly macOS preferences: Finder folder sorting
and default cloud save location, Dock autohide delay and timing
(integers or floats), and keyboard automatic capitalization and spelling
correction, all using snake\_case names consistent with the existing
sections.
([#&#8203;13032](https://redirect.github.com/jdx/mise/pull/13032) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **bootstrap:** `[bootstrap.files]` and `[bootstrap.directories]`
entries gain `phase = "pre-packages"` so repository definitions, apt
sources, and signing keys can be applied before package installation
instead of only afterward. Existing declarations default to
`"post-packages"`.
([#&#8203;13052](https://redirect.github.com/jdx/mise/pull/13052) by
[@&#8203;jdx](https://redirect.github.com/jdx))

  ```toml
  [bootstrap.files."/etc/apt/sources.list.d/vendor.sources"]
  source = "./files/vendor.sources"
  phase = "pre-packages"
  ```
- **bootstrap:** Ordinary `[bootstrap.files]` templates can now
reference resolved `[vars]` values, alongside the existing
`config_root`, `target`, and `secret()` helpers.
([#&#8203;13033](https://redirect.github.com/jdx/mise/pull/13033) by
[@&#8203;nettlesh](https://redirect.github.com/nettlesh))
- **dotfiles:** A single dotfiles source can deploy to different
destinations per operating system, architecture, or mise profile using
`variants` with an optional `target`. This works for `copy`, `symlink`,
`symlink-each`, and `template` modes.
([#&#8203;13050](https://redirect.github.com/jdx/mise/pull/13050) by
[@&#8203;jdx](https://redirect.github.com/jdx))

  ```toml
  [dotfiles.settings]
  source = "dotfiles/vscode/settings.json"
  mode = "copy"
  variants = [
{ os = "macos", target = "~/Library/Application
Support/Code/User/settings.json" },
    { os = "linux", target = "~/.config/Code/User/settings.json" },
  ]
  ```
- **task:** Task `sources` and `outputs` can now use `{{usage.*}}`
templates, resolved per invocation from parsed arguments and flags
before freshness and artifact-cache checks run, so different argument
values track freshness independently.
([#&#8203;13051](https://redirect.github.com/jdx/mise/pull/13051) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **brew-cask:** Casks with structured `set_permissions`
preflight/postflight steps now install correctly (for example
`brew-cask:blender`), running an unprivileged `chmod` over resolved
staged or appdir paths instead of failing with an unsupported step-type
error. ([#&#8203;13043](https://redirect.github.com/jdx/mise/pull/13043)
by [@&#8203;azohra](https://redirect.github.com/azohra))
- **lock:** Opt-in trial of complete lockfile generation via
`lockfile_mode = "generate"` (or `MISE_LOCKFILE_MODE=generate`). The
default remains incremental `merge`. Generate mode rebuilds lockfiles
from current requests while treating the previous file as an immutable
baseline, reusing unchanged artifacts and publishing through staged
atomic writes so failures or concurrent edits do not clobber a good
lockfile. This mode records only cryptographically verified provenance
per target platform; `provenance_verified` is no longer treated as a
trust signal.
([#&#8203;13031](https://redirect.github.com/jdx/mise/pull/13031) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **self-update:** New `disable_update_warning` setting
(`MISE_DISABLE_UPDATE_WARNING`) suppresses "newer mise available"
notices in `mise version`, `mise --version`, and `mise doctor`. Explicit
self-update and automatic updates are unaffected.
([#&#8203;13028](https://redirect.github.com/jdx/mise/pull/13028) by
[@&#8203;jdx](https://redirect.github.com/jdx))

##### Fixed

- **install:** Interactive installs no longer leave a permanent line for
every resolved, skipped, or already-installed tool; live progress shows
what is happening while the final summary lists what changed (for
example `installed 1 tool in 1.1s: dummy@1.0.0`). `mise upgrade` no
longer duplicates its old to new version list.
([#&#8203;13030](https://redirect.github.com/jdx/mise/pull/13030) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **install:** Long non-TTY installs no longer flood CI logs with a
snapshot every three seconds. The heartbeat now scales to roughly 10% of
elapsed time, clamped between 3 seconds and 1 minute.
([#&#8203;13036](https://redirect.github.com/jdx/mise/pull/13036) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **self-update:** On 32-bit ARM, `mise self-update` now selects the
correct `linux-armv7` archive instead of requesting a missing
`linux-arm` one and falling back to an ARM64 binary that failed
signature verification. A missing archive now fails asset selection
rather than picking the wrong architecture.
([#&#8203;13023](https://redirect.github.com/jdx/mise/pull/13023) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **self-update:** npm installs now ship the instructions file that
redirects update guidance to the package manager, so they no longer
advertise `mise self-update`.
([#&#8203;13028](https://redirect.github.com/jdx/mise/pull/13028) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **brew-cask:** `mise bootstrap packages upgrade` no longer replaces
the bundle of a running self-updating app (for example Chrome), which
could strand helper processes and blank out tabs. Such apps are skipped
while running and left to update themselves.
([#&#8203;13041](https://redirect.github.com/jdx/mise/pull/13041) by
[@&#8203;azohra](https://redirect.github.com/azohra))
- **brew-cask:** The cask metadata fetch error no longer includes stale
advice about installing with `brew` and a broken documentation anchor;
it now gives a short, accurate message.
([#&#8203;12800](https://redirect.github.com/jdx/mise/pull/12800) by
[@&#8203;Marukome0743](https://redirect.github.com/Marukome0743))
- **bootstrap:** `mise bootstrap dotfiles origin set <url>` now uses the
repository's own default branch when `--branch` is omitted, so
repositories on `master` connect correctly instead of publishing a
second root branch. A missing requested branch is now reported clearly
rather than mistaken for an empty repository.
([#&#8203;13037](https://redirect.github.com/jdx/mise/pull/13037) by
[@&#8203;Dhaulagiri](https://redirect.github.com/Dhaulagiri))
- **dotfiles:** History watcher locks now live alongside the history
store in the state directory instead of being hashed into the cache
directory, so a launchd watcher and an interactive shell using different
cache directories coordinate correctly and `dotfiles status` no longer
misreports `declared-not-running`. Existing watchers must be stopped and
restarted with the updated binary.
([#&#8203;13038](https://redirect.github.com/jdx/mise/pull/13038) by
[@&#8203;ascarter](https://redirect.github.com/ascarter))
- **sandbox:** The macOS Seatbelt profile now allows
`file-read-metadata` on the ancestors of readable paths, fixing
`Operation not permitted` failures when a portable Ruby resolves its own
executable during third-party tap evaluation. Symlinked data directories
and allow-listed paths are also handled.
([#&#8203;13039](https://redirect.github.com/jdx/mise/pull/13039) by
[@&#8203;Marukome0743](https://redirect.github.com/Marukome0743))

##### Registry

- Added `clipboard`
([github:Slackadays/Clipboard](https://redirect.github.com/Slackadays/Clipboard))
by [@&#8203;i-api](https://redirect.github.com/i-api) in
[#&#8203;13044](https://redirect.github.com/jdx/mise/pull/13044)

##### New Contributors

- [@&#8203;Dhaulagiri](https://redirect.github.com/Dhaulagiri) made
their first contribution in
[#&#8203;13037](https://redirect.github.com/jdx/mise/pull/13037)

**Full Changelog**:
<jdx/mise@v2026.9.4...v2026.9.5>

##### 💚 Sponsor mise

mise is built and maintained by
[@&#8203;jdx](https://redirect.github.com/jdx), an open source developer
at [**entire.io**](https://entire.io/), the title sponsor of his open
source work.

If mise saves you or your team time, please consider becoming an
[individual or company sponsor](https://jdx.dev/sponsors.html). Your
support funds ongoing development and helps keep mise fast, free, and
independent.

###
[`v2026.9.4`](https://redirect.github.com/jdx/mise/releases/tag/v2026.9.4):
: Nix Bootstrap, Environment Selectors, and Man Pages

[Compare
Source](https://redirect.github.com/jdx/mise/compare/vfox-v2026.9.3...vfox-v2026.9.4)

This release expands the bootstrap package model with Nix support and
environment selectors, teaches packslip tools to ship man pages, and
adds a task-scoped quiet setting. It also carries a wide batch of
packslip, bootstrap, and cross-platform fixes plus a major speedup to
dotfiles history rebuilds.

##### Added

- **bootstrap:** Nix is now a built-in `[bootstrap.packages]` manager on
Linux and macOS. Declare packages with the `nix:` prefix and apply them
through your normal Nix profile; the manager supports use, apply, status
JSON, and targeted upgrades while leaving Nix sources, caches, trust,
and profile rollback under Nix control. This also adds `mise bootstrap
packages export --format nix` to emit a deterministic NixOS module from
your `nix:` declarations and `packages use --no-install` to record
declarations without touching package managers.
([#&#8203;13013](https://redirect.github.com/jdx/mise/pull/13013) by
[@&#8203;jdx](https://redirect.github.com/jdx))

  ```toml
  [bootstrap.packages]
  "nix:ripgrep" = "latest"
  ```
- **bootstrap:** `[bootstrap.packages]` entries gain an `env` selector
(a single environment or a list), so a package is only enabled when one
of its listed mise environments is active via `-E` or `MISE_ENV`. When
both `os` and `env` are set, both must match. Packages for inactive
environments stay declared and are protected from pruning.
([#&#8203;12956](https://redirect.github.com/jdx/mise/pull/12956) by
[@&#8203;jdx](https://redirect.github.com/jdx))

  ```toml
  [bootstrap.packages]
  "brew:postgresql" = { version = "latest", env = ["dev", "test"] }
  ```
- **packslip:** Packslip-installed tools can now ship man pages declared
as static `man` resources, alongside completions and agent skills. While
a tool version is active, mise prepends its man root to `MANPATH` and
keeps system and caller-defined paths visible, so `man <tool>` works.
Existing installs need to be reinstalled to pick up man pages.
([#&#8203;13012](https://redirect.github.com/jdx/mise/pull/13012) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **task:** New `task.quiet` setting (and `MISE_TASK_QUIET`) suppresses
mise's own task messages, prefixes, and command-echo headers without
hiding task output or affecting other commands. The bundled `output =
"quiet"` mode is deprecated in favor of explicit output style plus this
setting; removal is scheduled for 2027.9.3.
([#&#8203;12980](https://redirect.github.com/jdx/mise/pull/12980) by
[@&#8203;jdx](https://redirect.github.com/jdx))

##### Fixed

- **install:** A lazy tool whose `depends` target is also lazy now
installs correctly on first use through a shim, `mise x`, or a task;
mise installs the provider together with its still-missing configured
dependencies instead of failing the preflight.
([#&#8203;12997](https://redirect.github.com/jdx/mise/pull/12997) by
[@&#8203;balintant](https://redirect.github.com/balintant))
- **backend:** 32-bit ARM resolution now uses Go's canonical `arm`
architecture name for Aqua (so registry replacements apply), and
automatic GitHub release asset selection no longer picks a generic
`source.tar.gz` when no published binary targets the host.
([#&#8203;13004](https://redirect.github.com/jdx/mise/pull/13004) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **bootstrap:** Homebrew bottles with hard-linked Mach-O executables
are now signed correctly on macOS. Every hard-link alias is tracked and
included in the signing list after relocation, fixing cases like fish
where an aliased binary was killed with SIGKILL after a successful
install.
([#&#8203;12988](https://redirect.github.com/jdx/mise/pull/12988) by
[@&#8203;nettlesh](https://redirect.github.com/nettlesh))
- **packslip:** `mise lock --platform` now verifies the signed release
manifest and records the correct URL, checksum, size, and signer for
each requested target platform (including Windows x64), so locked
installs work across platforms.
([#&#8203;13002](https://redirect.github.com/jdx/mise/pull/13002) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **packslip:** On glibc Linux, an artifact's `glibc_min` is now honored
during selection: when the GNU build requires a newer glibc than the
host, mise falls back to a matching static musl build if one exists.
([#&#8203;13009](https://redirect.github.com/jdx/mise/pull/13009) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **packslip:** Windows installs now link shims with the correct `.exe`
filename, while Unix keeps extensionless names.
([#&#8203;13006](https://redirect.github.com/jdx/mise/pull/13006) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **packslip:** Activated man roots are now scoped to Packslip-backed
tool versions, and the caller's original `MANPATH` is included in the
environment-cache identity so one cached process cannot serve another
caller's `MANPATH`.
([#&#8203;13016](https://redirect.github.com/jdx/mise/pull/13016) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **prune:** `mise prune` no longer exits successfully without pruning
when it cannot show a confirmation prompt; it now fails with guidance to
pass `--yes` or set `MISE_YES=1`. Follow-up prunes from commands like
`mise unuse` still leave installs in place when nobody can answer.
([#&#8203;13003](https://redirect.github.com/jdx/mise/pull/13003) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **generate:** `mise generate tool-stub` now respects a stub's
top-level `os` selector when deciding whether to write a Windows `.cmd`
launcher, so a linux/macos-only stub no longer produces a launcher even
with `--lock`.
([#&#8203;13008](https://redirect.github.com/jdx/mise/pull/13008) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **dotfiles:** History path filters resolve correctly when `HOME` is a
symlink, so aliased, canonical, and tilde paths address the same history
entry and `show latest`/`diff` no longer report a missing checkpoint.
([#&#8203;12982](https://redirect.github.com/jdx/mise/pull/12982) by
[@&#8203;azohra](https://redirect.github.com/azohra))
- **brew:** The published crate now includes the tap formula and cask
metadata shims, fixing `cargo install --locked mise` builds from
crates.io.
([#&#8203;13001](https://redirect.github.com/jdx/mise/pull/13001) by
[@&#8203;jdx](https://redirect.github.com/jdx))

##### Changed

- **bootstrap:** `[bootstrap].config_roots` and the `mise bootstrap
config-roots` command are now deprecated (hidden from help and removed
from public docs), with removal scheduled for mise 2027.3.3. Existing
configurations keep working during the compatibility window but emit a
warning directing users to global or system bootstrap configuration.
([#&#8203;13010](https://redirect.github.com/jdx/mise/pull/13010) by
[@&#8203;jdx](https://redirect.github.com/jdx))
- **registry:** Added basecamp to the registry.
([#&#8203;13024](https://redirect.github.com/jdx/mise/pull/13024))

##### Performance

- **history:** Dotfiles history index rebuilds are dramatically faster,
reconstructing checkpoint metadata in-process with gix instead of
spawning Git per checkpoint. On an 80-checkpoint, 44-file reproducer
this cut a rebuild from roughly 26-28 seconds and thousands of Git
processes down to under a second. Removed annotations are now correctly
dropped after a rebuild, and SHA-256 history repositories are supported.
([#&#8203;13011](https://redirect.github.com/jdx/mise/pull/13011) by
[@&#8203;jdx](https://redirect.github.com/jdx))

##### Deprecated

- The task `output = "quiet"` mode (use `task.quiet` instead; removal in
2027.9.3)
([#&#8203;12980](https://redirect.github.com/jdx/mise/pull/12980)).
- `[bootstrap].config_roots` and `mise bootstrap config-roots` (removal
in mise 2027.3.3)
([#&#8203;13010](https://redirect.github.com/jdx/mise/pull/13010)).

##### New Contributors

- [@&#8203;balintant](https://redirect.github.com/balintant) made their
first contribution in
[#&#8203;12997](https://redirect.github.com/jdx/mise/pull/12997)

**Full Changelog**:
<jdx/mise@v2026.9.3...v2026.9.4>

##### 💚 Sponsor mise

mise is built and maintained by
[@&#8203;jdx](https://redirect.github.com/jdx), an open source developer
at [**entire.io**](https://entire.io/), the title sponsor of his open
source work.

If mise saves you or your team time, please consider becoming an
[individual or company sponsor](https://jdx.dev/sponsors.html). Your
support funds ongoing development and helps keep mise fast, free, and
independent.

</details>

---

### Configuration

📅 **Schedule**: (in timezone UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/ansible/vscode-ansible).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43OS4xIiwidXBkYXRlZEluVmVyIjoiNDQuNzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hvcmUiLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

5 participants