Skip to content

chore(deps): Bump astral-sh/setup-uv from 10.3.2 to 10.3.3 - #65

Merged
mergify[bot] merged 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.3.3
Nov 4, 2026
Merged

mergify[bot] merged 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.3.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps astral-sh/setup-uv from 10.3.2 to 10.3.3.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.3 🌈 Use Astral mirror for version manifests with GitHub fallback

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable. (Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

Commits
  • 68559e9 Use Astral mirror for version manifests with GitHub fallback (#1119)
  • 0192b69 chore: update known checksums for 0.13.6 (#1117)
  • 2f29784 docs: use JSDoc for compatible release specifier comment (#1113)
  • 9c73321 fix: allow whitespace in uv requirement specifiers (#1112)
  • 80fbe01 fix: resolve ~= specifiers with PEP 440 semantics (#1111)
  • 36b7b57 fix: only report a saved cache when saving succeeded (#1110)
  • 56618ca docs: update version references to v10.3.2 (#1104)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.2 to 10.3.3.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@07a047e...68559e9)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 4, 2026
@mergify
mergify Bot deployed to Mergify Merge Protections November 4, 2026 07:05 Active
@mergify

mergify Bot commented Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Merge Protections

🟢 All 6 merge protections satisfied — ready to merge.

Show 6 satisfied protections

🟢 🤖 Continuous Integration

  • all of:
    • check-success=all-greens

🟢 👀 Review Requirements

  • any of:
    • author = dependabot[bot]
    • #approved-reviews-by>=1
    • author = mergify-ci-bot

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

  • title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?:

🟢 🔎 Reviews

  • #changes-requested-reviews-by = 0
  • #review-requested = 0
  • #review-threads-unresolved = 0

🟢 📕 PR description

  • body ~= (?ms:.{48,})

🟢 🚦 Auto-queue

When all merge protections are satisfied, this pull request will be queued automatically.

@mergify
mergify Bot merged commit fe766be into main Nov 4, 2026
8 checks passed
@mergify
mergify Bot deleted the dependabot/github_actions/astral-sh/setup-uv-10.3.3 branch November 4, 2026 07:06
@mergify

mergify Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

✅ Passed · merging

So far

  • ✅ Entered the queue Wed 4 Nov, 07:05 · rule default · triggered by merge protections
  • ✅ Checks skipped · PR is already up-to-date

Times in UTC · dashboard · how the merge queue works

@mergify

mergify Bot commented Nov 4, 2026

Copy link
Copy Markdown
Contributor

✅ Merged into main as fe766be at 07:06 UTC

Less than a minute in the queue, with no time running CI.

So far

  • ✅ Entered the queue Wed 4 Nov, 07:05 · rule default · triggered by merge protections
  • ✅ Checks skipped · PR is already up-to-date
  • ✅ Merged 07:06 · fe766be · squash
8 merge conditions met
  • github-review-approved · required by GitHub repository ruleset rule Require pull request for default branch and GitHub repository ruleset rule main
  • title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?: · required by Merge Protections rule Enforce conventional commit
  • any of · required by Merge Protections rule 👀 Review Requirements:
    • author = dependabot[bot]
    • #approved-reviews-by>=1
    • author = mergify-ci-bot
  • body ~= (?ms:.{48,}) · required by Merge Protections rule 📕 PR description
  • #changes-requested-reviews-by = 0 · required by Merge Protections rule 🔎 Reviews
  • #review-requested = 0 · required by Merge Protections rule 🔎 Reviews
  • #review-threads-unresolved = 0 · required by Merge Protections rule 🔎 Reviews
  • check-success=all-greens · required by Merge Protections rule 🤖 Continuous Integration

Times in UTC · dashboard · how the merge queue works

@mergify mergify Bot added queued and removed queued labels Nov 4, 2026

This branch was successfully deployed

1 active deployment
Mergify Merge Protections — c6e28881 Deployed Nov 4, 2026 by mergify[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants