fix: upgrade pip before using --uploaded-prior-to=P1D

P1D relative duration requires pip>=26.1 (latest as of this commit).
CI runners ship with older pip, so each install step now upgrades pip
first to ensure the flag is recognised.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: julian-risch

.github/workflows/check_api_ref.yml

@@ -65,7 +65,9 @@ jobs:
 
       - name: Install Hatch
         if: steps.changed.outputs.needs_check == 'true'
-        run: pip install hatch --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch --uploaded-prior-to=P1D
 
       - name: Generate API references
         if: steps.changed.outputs.needs_check == 'true'

.github/workflows/docs-website-test-docs-snippets.yml

@@ -38,7 +38,9 @@ jobs:
           python-version: '3.11'
 
       - name: Install Hatch
-        run: pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
 
       - name: Generate API reference for Docusaurus
         run: hatch run docs

.github/workflows/docs_search_sync.yml

@@ -38,7 +38,9 @@ jobs:
       - name: Install script dependencies
         # sniffio is needed because of https://github.com/deepset-ai/deepset-cloud-sdk/issues/286
         # we pin pyrate-limiter due to https://github.com/deepset-ai/deepset-cloud-sdk/issues/295
-        run: pip install deepset-cloud-sdk sniffio requests "pyrate-limiter<4" --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install deepset-cloud-sdk sniffio requests "pyrate-limiter<4" --uploaded-prior-to=P1D
 
       - name: Update new docs to Search pipeline and remove outdated docs
         env:

.github/workflows/docusaurus_sync.yml

@@ -30,7 +30,9 @@ jobs:
           python-version: "${{ env.PYTHON_VERSION }}"
 
       - name: Install Hatch
-        run: pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
 
       - name: Generate API reference for Docusaurus
         run: hatch run docs

.github/workflows/e2e.yml

@@ -34,7 +34,9 @@ jobs:
         python-version: "${{ env.PYTHON_VERSION }}"
 
     - name: Install Hatch
-      run: pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
+      run: |
+        python -m pip install --upgrade pip
+        pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
 
     - name: Run tests
       run: hatch run e2e:test

.github/workflows/license_compliance.yml

@@ -29,6 +29,7 @@ jobs:
 
       - name: Get direct dependencies
         run: |
+          python -m pip install --upgrade pip
           pip install toml --uploaded-prior-to=P1D
           python .github/utils/pyproject_to_requirements.py pyproject.toml > ${{ env.REQUIREMENTS_FILE }}
 

.github/workflows/nightly_testpypi_release.yml

@@ -36,7 +36,9 @@ jobs:
           echo "Building haystack-ai version: ${NIGHTLY_VERSION}"
 
       - name: Install Hatch
-        run: pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
 
       - name: Build Haystack
         run: hatch build

.github/workflows/project.yml

@@ -4,8 +4,24 @@ on:
   issues:
     types:
       - opened
+      - labeled
 
 jobs:
+  add-bug-label:
+    name: Add bug label on Bug type issues
+    runs-on: ubuntu-slim
+    if: >
+      github.event.issue.type.name == 'Bug' &&
+      (
+        github.event.action == 'opened' ||
+        contains(fromJSON('["P0", "P1", "P2", "P3"]'), github.event.label.name)
+      )
+    steps:
+      - name: Add bug label
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh issue edit ${{ github.event.issue.html_url }} --add-label "bug"
+
   add-to-project:
     name: Add new issues to project for triage
     runs-on: ubuntu-slim

.github/workflows/pypi_release.yml

@@ -22,7 +22,9 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install Hatch
-        run: pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install hatch==${{ env.HATCH_VERSION }} --uploaded-prior-to=P1D
 
       - name: Build Haystack
         run: hatch build

.github/workflows/release.yml

@@ -175,7 +175,9 @@ jobs:
           python-version: "3.13"
 
       - name: Install tomlkit
-        run: pip install tomlkit --uploaded-prior-to=P1D
+        run: |
+          python -m pip install --upgrade pip
+          pip install tomlkit --uploaded-prior-to=P1D
 
       - name: Update haystack-ai in uv.lock
         run: python haystack/.github/utils/update_haystack_dc_custom_nodes.py "${{ env.VERSION }}" deepset-cloud-custom-nodes/uv.lock