Skip to content

Commit 391460b

Browse files
committed
ci(release): disable caching on the release workflow
The release workflow runs on tag push and produces the artifacts that get uploaded to PyPI, so any cache it reads is also a way for an earlier untrusted run to influence what gets shipped. Switch setup-uv to enable-cache: false and drop the actions/cache step for .venv so the release build resolves dependencies from scratch each time.
1 parent a81c518 commit 391460b

1 file changed

Lines changed: 1 addition & 8 deletions

File tree

.github/workflows/release.yml

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -29,14 +29,7 @@ jobs:
2929
- name: Install uv
3030
uses: astral-sh/setup-uv@v7
3131
with:
32-
enable-cache: true
33-
34-
- uses: actions/cache@v4
35-
name: Define a cache for the virtual environment based on the dependencies lock file
36-
id: cache
37-
with:
38-
path: ./.venv
39-
key: venv-${{ runner.os }}-3.12-${{ hashFiles('uv.lock') }}
32+
enable-cache: false
4033

4134
- name: Install dependencies
4235
run: uv sync --extra crypto --extra dev

0 commit comments

Comments
 (0)