From 46e4035b0575121eea072766a0bd224aae4f6f9f Mon Sep 17 00:00:00 2001 From: Kevin Turcios Date: Thu, 9 Apr 2026 05:16:10 -0500 Subject: [PATCH] ci: bump astral-sh/setup-uv from v6 to v8.0.0 v8 uses immutable releases (no major/minor tags) for supply chain security. Pinning to exact version tag per upstream recommendation. --- .github/workflows/claude.yml | 4 ++-- .github/workflows/codeflash-optimize.yaml | 2 +- .github/workflows/e2e-async.yaml | 2 +- .github/workflows/e2e-bubblesort-benchmark.yaml | 2 +- .github/workflows/e2e-bubblesort-pytest-nogit.yaml | 2 +- .github/workflows/e2e-bubblesort-unittest.yaml | 2 +- .github/workflows/e2e-coverage-optimization.yaml | 2 +- .github/workflows/e2e-futurehouse-structure.yaml | 2 +- .github/workflows/e2e-init-optimization.yaml | 2 +- .github/workflows/e2e-java-fibonacci-nogit.yaml | 2 +- .github/workflows/e2e-java-tracer.yaml | 2 +- .github/workflows/e2e-js-cjs-function.yaml | 2 +- .github/workflows/e2e-js-esm-async.yaml | 2 +- .github/workflows/e2e-js-ts-class.yaml | 2 +- .github/workflows/e2e-topological-sort.yaml | 2 +- .github/workflows/e2e-tracer-replay.yaml | 2 +- .github/workflows/java-e2e-tests.yml | 2 +- .github/workflows/mypy.yml | 2 +- .github/workflows/prek.yaml | 2 +- .github/workflows/publish.yml | 4 ++-- .github/workflows/unit-tests.yaml | 2 +- 21 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index df85db340..d7959b4cf 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -57,7 +57,7 @@ jobs: ref: ${{ github.event.pull_request.head.ref || github.ref }} - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Install dependencies run: | @@ -317,7 +317,7 @@ jobs: ref: ${{ steps.pr-ref.outputs.ref }} - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Install dependencies run: | diff --git a/.github/workflows/codeflash-optimize.yaml b/.github/workflows/codeflash-optimize.yaml index a27cc1ce9..c3f16d668 100644 --- a/.github/workflows/codeflash-optimize.yaml +++ b/.github/workflows/codeflash-optimize.yaml @@ -31,7 +31,7 @@ jobs: fetch-depth: 0 - name: 🐍 Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-async.yaml b/.github/workflows/e2e-async.yaml index 1acefa63f..f091ffdaf 100644 --- a/.github/workflows/e2e-async.yaml +++ b/.github/workflows/e2e-async.yaml @@ -63,7 +63,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-bubblesort-benchmark.yaml b/.github/workflows/e2e-bubblesort-benchmark.yaml index b3d9dc140..406a67bd0 100644 --- a/.github/workflows/e2e-bubblesort-benchmark.yaml +++ b/.github/workflows/e2e-bubblesort-benchmark.yaml @@ -63,7 +63,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-bubblesort-pytest-nogit.yaml b/.github/workflows/e2e-bubblesort-pytest-nogit.yaml index 9fe357108..10bf43dac 100644 --- a/.github/workflows/e2e-bubblesort-pytest-nogit.yaml +++ b/.github/workflows/e2e-bubblesort-pytest-nogit.yaml @@ -62,7 +62,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-bubblesort-unittest.yaml b/.github/workflows/e2e-bubblesort-unittest.yaml index 654873b53..7fa012b44 100644 --- a/.github/workflows/e2e-bubblesort-unittest.yaml +++ b/.github/workflows/e2e-bubblesort-unittest.yaml @@ -62,7 +62,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-coverage-optimization.yaml b/.github/workflows/e2e-coverage-optimization.yaml index c5d72c083..e4df7d0b2 100644 --- a/.github/workflows/e2e-coverage-optimization.yaml +++ b/.github/workflows/e2e-coverage-optimization.yaml @@ -60,7 +60,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-futurehouse-structure.yaml b/.github/workflows/e2e-futurehouse-structure.yaml index e6a68d17a..dc67cd07c 100644 --- a/.github/workflows/e2e-futurehouse-structure.yaml +++ b/.github/workflows/e2e-futurehouse-structure.yaml @@ -62,7 +62,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-init-optimization.yaml b/.github/workflows/e2e-init-optimization.yaml index d33107af3..2e76c64bc 100644 --- a/.github/workflows/e2e-init-optimization.yaml +++ b/.github/workflows/e2e-init-optimization.yaml @@ -61,7 +61,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-java-fibonacci-nogit.yaml b/.github/workflows/e2e-java-fibonacci-nogit.yaml index 132b10d89..bab4f9a34 100644 --- a/.github/workflows/e2e-java-fibonacci-nogit.yaml +++ b/.github/workflows/e2e-java-fibonacci-nogit.yaml @@ -72,7 +72,7 @@ jobs: cache: maven - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-java-tracer.yaml b/.github/workflows/e2e-java-tracer.yaml index 6ed17ce90..cfefaa8fa 100644 --- a/.github/workflows/e2e-java-tracer.yaml +++ b/.github/workflows/e2e-java-tracer.yaml @@ -67,7 +67,7 @@ jobs: cache: maven - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-js-cjs-function.yaml b/.github/workflows/e2e-js-cjs-function.yaml index e97e263d3..e25e1c89b 100644 --- a/.github/workflows/e2e-js-cjs-function.yaml +++ b/.github/workflows/e2e-js-cjs-function.yaml @@ -79,7 +79,7 @@ jobs: npm install - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-js-esm-async.yaml b/.github/workflows/e2e-js-esm-async.yaml index 44e94d670..8590108ea 100644 --- a/.github/workflows/e2e-js-esm-async.yaml +++ b/.github/workflows/e2e-js-esm-async.yaml @@ -79,7 +79,7 @@ jobs: npm install - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-js-ts-class.yaml b/.github/workflows/e2e-js-ts-class.yaml index 04618e823..a34d8d0c0 100644 --- a/.github/workflows/e2e-js-ts-class.yaml +++ b/.github/workflows/e2e-js-ts-class.yaml @@ -79,7 +79,7 @@ jobs: npm install - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-topological-sort.yaml b/.github/workflows/e2e-topological-sort.yaml index 200b33d5b..945e338f7 100644 --- a/.github/workflows/e2e-topological-sort.yaml +++ b/.github/workflows/e2e-topological-sort.yaml @@ -87,7 +87,7 @@ jobs: fi - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/e2e-tracer-replay.yaml b/.github/workflows/e2e-tracer-replay.yaml index 3e157676b..56a038ddb 100644 --- a/.github/workflows/e2e-tracer-replay.yaml +++ b/.github/workflows/e2e-tracer-replay.yaml @@ -62,7 +62,7 @@ jobs: - name: Set up Python 3.11 for CLI - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: 3.11.6 diff --git a/.github/workflows/java-e2e-tests.yml b/.github/workflows/java-e2e-tests.yml index b8eb9c76f..0e84aada5 100644 --- a/.github/workflows/java-e2e-tests.yml +++ b/.github/workflows/java-e2e-tests.yml @@ -39,7 +39,7 @@ jobs: cache: maven - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Set up Python environment run: | diff --git a/.github/workflows/mypy.yml b/.github/workflows/mypy.yml index f19d6c3dc..a3f950105 100644 --- a/.github/workflows/mypy.yml +++ b/.github/workflows/mypy.yml @@ -31,7 +31,7 @@ jobs: token: ${{ secrets.GITHUB_TOKEN }} - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: sync uv run: | diff --git a/.github/workflows/prek.yaml b/.github/workflows/prek.yaml index 88bda6436..abaad1457 100644 --- a/.github/workflows/prek.yaml +++ b/.github/workflows/prek.yaml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v4 with: fetch-depth: 0 - - uses: astral-sh/setup-uv@v6 + - uses: astral-sh/setup-uv@v8.0.0 - uses: j178/prek-action@v1 with: extra-args: '--from-ref origin/${{ github.base_ref }} --to-ref ${{ github.sha }}' diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 541fdbe41..224d5de3a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -78,7 +78,7 @@ jobs: - name: Install uv if: steps.check_tag.outputs.exists == 'false' - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Build if: steps.check_tag.outputs.exists == 'false' @@ -150,7 +150,7 @@ jobs: - name: Install uv if: steps.check_tag.outputs.exists == 'false' - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 - name: Build if: steps.check_tag.outputs.exists == 'false' diff --git a/.github/workflows/unit-tests.yaml b/.github/workflows/unit-tests.yaml index 4591922e3..1ff8553c1 100644 --- a/.github/workflows/unit-tests.yaml +++ b/.github/workflows/unit-tests.yaml @@ -70,7 +70,7 @@ jobs: mvn install -q -DskipTests - name: Install uv - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@v8.0.0 with: python-version: ${{ matrix.python-version }}