From 85002eba514d2033a686173366830904f7300d41 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 01:34:56 +0000 Subject: [PATCH] ci(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/11f9893b081a58869d3b5fccaea48c9e9e46f990...c771a70e6277c0a99b617c7a806ffedaca235ff9) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-docker-images.yml | 2 +- .github/workflows/dependency-audit.yml | 4 ++-- .github/workflows/promote.yml | 2 +- .github/workflows/refresh-baseline.yml | 2 +- .github/workflows/release-candidate.yml | 2 +- .github/workflows/tests.yml | 6 +++--- 6 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build-docker-images.yml b/.github/workflows/build-docker-images.yml index f3908ae48..a28560aca 100644 --- a/.github/workflows/build-docker-images.yml +++ b/.github/workflows/build-docker-images.yml @@ -267,7 +267,7 @@ jobs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: version: "0.11.29" enable-cache: false diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml index e73c899f3..d18d687ee 100644 --- a/.github/workflows/dependency-audit.yml +++ b/.github/workflows/dependency-audit.yml @@ -59,7 +59,7 @@ jobs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Pin jak w tests.yml (job `lock-check`): bez tego setup-uv bierze # "latest", a `uv export` zaczyna zalezec od daty przebiegu. @@ -136,7 +136,7 @@ jobs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Pin jak wyzej — SBOM ma byc funkcja tresci repo, nie daty runu. version: "0.11.29" diff --git a/.github/workflows/promote.yml b/.github/workflows/promote.yml index f344c637d..c07cb668b 100644 --- a/.github/workflows/promote.yml +++ b/.github/workflows/promote.yml @@ -47,7 +47,7 @@ jobs: git fetch --tags origin master dev '+refs/heads/release/*:refs/remotes/origin/release/*' - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Pin jak w tests.yml (job `lock-check`) — sciezka wydawnicza tym # bardziej nie moze zalezec od plywajacej wersji narzedzia. diff --git a/.github/workflows/refresh-baseline.yml b/.github/workflows/refresh-baseline.yml index 0940b04a2..0e53028b0 100644 --- a/.github/workflows/refresh-baseline.yml +++ b/.github/workflows/refresh-baseline.yml @@ -41,7 +41,7 @@ jobs: python-version: "3.12" - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Pin jak w tests.yml (job `lock-check`). Tu szczegolnie wazny: # baseline commitowany do repo nie moze zalezec od tego, ktora diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index 2d04301a9..574a855c8 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -94,7 +94,7 @@ jobs: git fetch --tags origin dev - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Bez cache: w tym jobie uv służy wyłącznie do `uvx bumpver` # (drobne narzędzie w izolowanym env) — cache uv-a dawał tu diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 2713e6f0b..eef2be733 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -56,7 +56,7 @@ jobs: # so the heavy toolchain the test jobs need is unnecessary for # linting. uv is only a fast launcher for pre-commit (via uvx). - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Patrz komentarz przy jobie `lock-check` — bez `version` setup-uv # bierze "latest", co czyni CI niedeterministycznym. @@ -132,7 +132,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # PIN OBOWIAZKOWY. Bez `version` setup-uv loguje "Could not # determine uv version from uv.toml or pyproject.toml. Falling back @@ -174,7 +174,7 @@ jobs: xargs -a docker/bpp_base/build.txt sudo apt-get install -y - name: Install uv - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 + uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 with: # Patrz komentarz przy jobie `lock-check`. Tu dochodzi drugi powod: # `uv sync --frozen` czyta uv.lock, wiec plywajaca wersja uv czyni