Skip to content

build(deps): bump astral-sh/setup-uv from 8.3.2 to 10.1.0 - #411

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/astral-sh/setup-uv-10.1.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/astral-sh/setup-uv-10.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps astral-sh/setup-uv from 8.3.2 to 10.1.0.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 10.1.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@11f9893...bec219d)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2026
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 2b53fbed-a36d-4a40-a5ba-a6cae882ddae

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

PR template needs attention

Please update this PR to match the current .github/PULL_REQUEST_TEMPLATE.md:

  • Missing template section: ## ✨ Summary
  • Missing template section: ## 🎯 Scope
  • Missing template section: ## 🧪 Testing
  • Missing template section: ## ✅ Checklist
  • Missing template section: ## 👀 Notes for Reviewers
  • Missing template item: CLI commands (init, status, doctor, update)
  • Missing template item: Core installer / platform detection
  • Missing template item: Comet skills (assets/skills/, assets/skills-zh/)
  • Missing template item: Comet shell scripts (assets/skills/comet/scripts/)
  • Missing template item: Tests / CI
  • Missing template item: Documentation / changelog
  • Missing template item: Other:
  • Missing template item: pnpm build
  • Missing template item: pnpm lint
  • Missing template item: pnpm run lint:architecture
  • Missing template item: pnpm format:check
  • Missing template item: pnpm test
  • Missing template item: pnpm test -- test/domains/comet-classic/comet-scripts.test.ts
  • Missing template item: Not run:
  • Missing template item: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Missing template item: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Missing template item: CHANGELOG.md is updated when behavior changes
  • Missing template item: Skill changes were made in Chinese first when applicable, then synced to English
  • Missing template item: New scripts are included in assets/manifest.json and relevant tests
  • Missing template item: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Missing template item: No unrelated generated files or local artifacts are included
  • Checklist item is not checked: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Checklist item is not checked: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Checklist item is not checked: CHANGELOG.md is updated when behavior changes
  • Checklist item is not checked: Skill changes were made in Chinese first when applicable, then synced to English
  • Checklist item is not checked: New scripts are included in assets/manifest.json and relevant tests
  • Checklist item is not checked: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Checklist item is not checked: No unrelated generated files or local artifacts are included

@github-actions

Copy link
Copy Markdown

👋 Thanks for opening your first PR to Comet, @dependabot[bot].

Before review, please make sure the PR title follows Conventional Commits, for example fix: handle project-scope init, and that the checklist in the PR template is up to date.

🧪 The most useful local checks are:

pnpm build
pnpm lint
pnpm format:check
pnpm test

🧰 If your change touches assets/skills/comet/scripts/, please also check script portability across macOS, Linux, and Windows Git Bash. Avoid sed -i, support both sha256sum and shasum -a 256, and guard optional grep pipelines with || true.

✨ We appreciate the contribution and will take a look as soon as we can.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants