Update astral-sh/setup-uv action to v10 by renovate[bot] · Pull Request #221 · projectsyn/reclass-rs

renovate · 2026-08-12T14:17:58Z

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	major	`v9` → `v10.3.0`

Release Notes

astral-sh/setup-uv (astral-sh/setup-uv)

`v10.3.0`: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

Use macOS 15 runners for tests @charliermarsh (#1081)

🚀 Enhancements

Add python-arch support @zanieb (#1079)

🧰 Maintenance

chore: update known checksums for 0.13.0 @github-actions[bot] (#1089)
chore: update known checksums for 0.12.24 @github-actions[bot] (#1084)
chore: update known checksums for 0.12.23 @github-actions[bot] (#1082)
chore: update known checksums for 0.12.22 @github-actions[bot] (#1080)
chore: update known checksums for 0.12.21 @github-actions[bot] (#1078)
chore: update known checksums for 0.12.20 @github-actions[bot] (#1076)
chore: update known checksums for 0.12.19 @github-actions[bot] (#1068)
chore: update known checksums for 0.12.18 @github-actions[bot] (#1065)

⬆️ Dependency updates

chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @dependabot[bot] (#1077)

`v10.2.0`: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

Disable automatic cache saves for merge queues @eifinger (#1056)

🧰 Maintenance

chore: update known checksums for 0.12.17 @github-actions[bot] (#1058)
chore: update known checksums for 0.12.16 @github-actions[bot] (#1057)
chore: update known checksums for 0.12.15 @github-actions[bot] (#1054)
chore: update known checksums for 0.12.14 @github-actions[bot] (#1053)
chore: update known checksums for 0.12.13 @github-actions[bot] (#1045)

📚 Documentation

docs: update version references to v10.1.0 @github-actions[bot] (#1044)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1059)

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output `python-runtime-id`

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

fix: respect no proxy directive @mj0nez (#1037)
Use JSON + a typed wrapper instead of TS codegen @woodruffw (#1025)

🚀 Enhancements

Expose a Python "identity" output @woodruffw (#1036)
Verify downloads with astral-sh/versions checksums @zaniebot (#1033)

🧰 Maintenance

chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)
chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)
chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)
chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)
chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)
chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)
Use self-repo syntax for all in-repo actions/reusable workflows @woodruffw (#1024)
Pin one-shot tools @woodruffw (#1022)
ci: remove obsolete direct push attempts @eifinger (#1019)

📚 Documentation

docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

chore(deps-dev): roll up Dependabot updates @eifinger (#1043)
Harden npm install defaults @zaniebot (#1026)
Add dependency cooldowns @woodruffw (#1021)

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

Compare Source

Changes

Thank you @arguile- for making this action more resilient.

🐛 Bug fixes

Tolerate transient manifest timeouts @arguile- (#1016)

🧰 Maintenance

chore: update known checksums for 0.12.4 @github-actions[bot] (#1017)

📚 Documentation

docs: update version references to v10.0.0 @github-actions[bot] (#1014)

`v10.0.0`: 🌈 Disable automatic caching for sensitive events and new QOL features

Compare Source

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

pull_request_target
workflow_run
release

You can read the full reasoning in #984

`version: latest-known`

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from `.tool-versions`

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"

Will now also set the python version if it is defined in .tool-versions. You can read the details in the docs

🚨 Breaking changes

Disable automatic caching for sensitive events @eifinger (#992)

🐛 Bug fixes

Reject paths in .tool-versions @eifinger (#1007)

🚀 Enhancements

Read Python version from .tool-versions @eifinger (#996)
Add latest-known version selector @eifinger (#993)

🧰 Maintenance

Require pull requests for Dependabot rollups @eifinger (#1005)
ci: pin Alpine container image @eifinger (#995)
chore: update known checksums for 0.12.3 @github-actions[bot] (#991)
chore: update known checksums for 0.12.2 @github-actions[bot] (#985)
chore: update known checksums for 0.12.1 @github-actions[bot] (#982)
chore: update known checksums for 0.12.0 @github-actions[bot] (#981)
chore: update known checksums for 0.11.31/0.11.32 @github-actions[bot] (#972)

📚 Documentation

docs: update version references to v9.0.0 @github-actions[bot] (#971)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1013)
chore(deps): roll up Dependabot updates @eifinger (#1004)
chore(deps): roll up Dependabot updates @eifinger (#994)
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 @dependabot[bot] (#976)
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#980)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-08-12T14:20:45Z

Benchmark for `6ab2181`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.2±0.16ms	2.1±0.17ms	-4.55%
Reclass::inventory() single-threaded	4.7±0.09ms	4.7±0.09ms	0.00%

github-actions · 2026-08-14T21:00:45Z

Benchmark for `c0e6df5`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.1±0.15ms	2.1±0.12ms	0.00%
Reclass::inventory() single-threaded	3.6±0.05ms	3.7±0.05ms	+2.78%

github-actions · 2026-08-28T09:32:23Z

Benchmark for `7d7c1d6`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.3±0.14ms	2.3±0.15ms	0.00%
Reclass::inventory() single-threaded	4.6±0.11ms	4.6±0.13ms	0.00%

github-actions · 2026-09-10T22:02:19Z

Benchmark for `8b28585`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.3±0.15ms	2.3±0.15ms	0.00%
Reclass::inventory() single-threaded	4.7±0.08ms	4.6±0.14ms	-2.13%

github-actions · 2026-09-21T23:36:06Z

Benchmark for `66a3d3b`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.3±0.14ms	2.3±0.18ms	0.00%
Reclass::inventory() single-threaded	4.6±0.05ms	4.6±0.04ms	0.00%

github-actions · 2026-10-10T01:39:01Z

Benchmark for `85c5322`

Click to view benchmark

Test	Base	PR	%
Reclass::inventory() multi-threaded	2.3±0.14ms	2.3±0.15ms	0.00%
Reclass::inventory() single-threaded	4.7±0.09ms	4.6±0.07ms	-2.13%

renovate Bot added the dependency label Aug 12, 2026

renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from b1e4a31 to 970fa34 Compare August 14, 2026 20:58

renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 970fa34 to 92a36c0 Compare August 28, 2026 09:29

renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 92a36c0 to 62e7da0 Compare September 10, 2026 21:59

renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from 62e7da0 to ce096f5 Compare September 21, 2026 23:33

Update astral-sh/setup-uv action to v10

8a0711c

renovate Bot force-pushed the renovate/astral-sh-setup-uv-10.x branch from ce096f5 to 8a0711c Compare October 10, 2026 01:36

Navigation Menu

Repository navigation

Update astral-sh/setup-uv action to v10 - #221

Update astral-sh/setup-uv action to v10#221
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/astral-sh-setup-uv-10.x

renovate Bot commented Aug 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

github-actions Bot commented Aug 14, 2026

Uh oh!

github-actions Bot commented Aug 28, 2026

Uh oh!

github-actions Bot commented Sep 10, 2026

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

github-actions Bot commented Oct 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v10.3.0: 🌈 Add Python architecture selection

Changes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Changes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Changes

NO_PROXY

New output python-runtime-id

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1: 🌈 Tolerate transient manifest timeouts

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0: 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Extra security by default

version: latest-known

Read python version from .tool-versions

🚨 Breaking changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Configuration

Uh oh!

github-actions Bot commented Aug 12, 2026

Benchmark for 6ab2181

Uh oh!

github-actions Bot commented Aug 14, 2026

Benchmark for c0e6df5

Uh oh!

github-actions Bot commented Aug 28, 2026

Benchmark for 7d7c1d6

Uh oh!

github-actions Bot commented Sep 10, 2026

Benchmark for 8b28585

Uh oh!

github-actions Bot commented Sep 21, 2026

Benchmark for 66a3d3b

Uh oh!

github-actions Bot commented Oct 10, 2026

Benchmark for 85c5322

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 12, 2026 •

edited

Loading

`v10.3.0`: 🌈 Add Python architecture selection

`v10.2.0`: 🌈 Disable automatic cache saves for merge queues

`v10.1.0`: 🌈 New output `python-runtime-id`and respect NO_PROXY

New output `python-runtime-id`

`v10.0.1`: 🌈 Tolerate transient manifest timeouts

`v10.0.0`: 🌈 Disable automatic caching for sensitive events and new QOL features

`version: latest-known`

Read python version from `.tool-versions`

Benchmark for `6ab2181`

Benchmark for `c0e6df5`

Benchmark for `7d7c1d6`

Benchmark for `8b28585`

Benchmark for `66a3d3b`

Benchmark for `85c5322`