chore(deps): bump astral-sh/setup-uv from 6.8.0 to 10.1.0 - #47
Conversation
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.8.0 to 10.1.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@d0cc045...bec219d) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
gaochangw
left a comment
gaochangw
left a comment
There was a problem hiding this comment.
Reviewed head: 73e292f
Verified the pinned commit matches the signed upstream v10.1.0 release and reviewed the v7–v10 breaking changes. This job uses no removed server-url or legacy manifest settings. Its explicit Python version, venv creation, and automatic PyTorch backend selection remain compatible. Cache pruning now defaults off upstream; accepting that documented behavior preserves reusable downloaded wheels. The safer cache policy for privileged events remains enabled. No actionable findings in this diff.
Validation: full PR CI passed, including Python 3.10–3.13 tests, default installations on Linux/macOS/Windows, frontend type/lint/unit/build/browser checks, distribution validation, and the documentation build. Workflow YAML, commit pinning, and updated action inputs were also checked locally.
Upstream reference: https://github.com/astral-sh/setup-uv/releases/tag/v10.1.0
This is an automated code review recorded through the repository administrator account, not an independent human approval.
1 participant
Bumps astral-sh/setup-uv from 6.8.0 to 10.1.0.
Release notes
Sourced from astral-sh/setup-uv's releases.
... (truncated)
Commits
bec219dchore(deps-dev): roll up Dependabot updates (#1043)b90ec40fix: respect no proxy directive (#1037)421feb6chore: update known checksums for 0.12.12 (#1041)f634bf4Expose a Python "identity" output (#1036)a6772c8chore: update known checksums for 0.12.10/0.12.11 (#1038)e105c8fchore: update known checksums for 0.12.9 (#1035)cd13f92Verify downloads with astral-sh/versions checksums (#1033)3aef7b9chore: update known checksums for 0.12.7/0.12.8 (#1031)d08d816chore: update known checksums for 0.12.6 (#1030)19b4d1eHarden npm install defaults (#1026)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)