build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2 by dependabot[bot] · Pull Request #74495 · github/gh-aw

dependabot · 2026-11-03T10:29:55Z

Bumps astral-sh/setup-uv from 10.3.0 to 10.3.2.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

docs: update version references to v10.3.1 @github-actions[bot] (#1102)

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

fix: preserve cache error class names in save-cache bundle @dannyward630 (#1093)

🧰 Maintenance

chore: update known checksums for 0.13.4 @github-actions[bot] (#1099)

chore: update known checksums for 0.13.2/0.13.3 @github-actions[bot] (#1098)

chore: update known checksums for 0.13.1 @github-actions[bot] (#1094)

Verify npm dependency signatures before builds @zaniebot (#1027)

📚 Documentation

docs: cache-dependency-glob matches relative to the working directory @flange-ipb (#1092)

docs: update version references to v10.3.0 @github-actions[bot] (#1090)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1101)

Commits

07a047e chore: update known checksums for 0.13.5 (#1103)
e1b8536 docs: update version references to v10.3.1 (#1102)
18d369b chore(deps): roll up Dependabot updates (#1101)
4ad2329 chore: update known checksums for 0.13.4 (#1099)
4bc6759 chore: update known checksums for 0.13.2/0.13.3 (#1098)
c97f06e fix: preserve cache error class names in save-cache bundle (#1093)
8ca4be0 chore: update known checksums for 0.13.1 (#1094)
b627d85 docs: cache-dependency-glob matches relative to the working directory (#1092)
f8c8897 Verify npm dependency signatures before builds (#1027)
f64d32b docs: update version references to v10.3.0 (#1090)
See full diff in compare view

Copilot

🟡 Changes recommended

The change downgrades setup-uv in generated locks while their manifests and canonical action-lock remain pinned to v10.3.3, leaving the locks inconsistent and non-reproducible.

21 open issues

Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New
Generated lock downgrades setup-uv but leaves the manifest pinned to v10.3.3 · New

And 1 more that still need to be addressed.

What changed in this PR

This pull request updates astral-sh/setup-uv from v10.3.0 to v10.3.2 in the Copilot setup workflow and generated workflow locks. However, the repository currently records v10.3.3 in its canonical pin and lock metadata, making these changes inconsistent and non-reproducible.

Changes:

Updates the direct setup-uv reference in copilot-setup-steps.yml.
Updates setup-uv references in 21 generated workflow lock files.
Requires synchronization with .github/aw/actions-lock.json and regeneration of the affected locks, or retention of v10.3.3.

This pull request requires changes.

File	Summary
`.github/workflows/weekly-issue-summary.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/stale-repo-identifier.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/python-data-charts.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/prompt-clustering-analysis.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/portfolio-analyst.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/org-health-report.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/github-mcp-structural-analysis.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/detection-analysis-report.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-spending-forecast.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-security-observability.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-repo-chronicle.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-performance-summary.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-news.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-issues-report.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-experiment-report.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-code-metrics.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/daily-agentrx-trace-optimizer.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/copilot-setup-steps.yml`	Updates the direct `setup-uv` action pin.
`.github/workflows/copilot-session-insights.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/copilot-pr-nlp-analysis.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/audit-workflows.lock.yml`	Updates the generated `setup-uv` reference.
`.github/workflows/api-consumption-report.lock.yml`	Updates the generated `setup-uv` reference.

_{Review effort: Lite (auto)}

      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


      - name: Setup uv
        # zizmor: ignore[github_action_from_unverified_creator_used]
-        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2


Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.2. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@v10.3.0...07a047e) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-04T23:55:34Z

🎉 This pull request is included in a new release.

Release: v1.2.0

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 3, 2026

github-actions Bot mentioned this pull request Nov 3, 2026

[Contribution Check Report] Contribution Check — 2026-11-03 #74341

Closed

dependabot Bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-10.3.2 branch from 41d9732 to 26be4e6 Compare November 3, 2026 19:51

Copilot AI auto review requested due to automatic review settings November 3, 2026 19:51

Copilot started reviewing November 3, 2026 19:58

View session

Copilot AI reviewed Nov 3, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-10.3.2 branch from 26be4e6 to 445fec4 Compare November 3, 2026 22:27

dependabot Bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-10.3.2 branch from 445fec4 to 2a72929 Compare November 3, 2026 23:01

pelikhan merged commit aa15704 into main Nov 4, 2026
4 checks passed

pelikhan deleted the dependabot/github_actions/astral-sh/setup-uv-10.3.2 branch November 4, 2026 15:27

Navigation Menu

Repository navigation

build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2 - #74495

build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2#74495
pelikhan merged 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.3.2

dependabot Bot commented on behalf of github Nov 3, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

github-actions Bot commented Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Nov 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

Uh oh!

github-actions Bot commented Nov 4, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Nov 3, 2026 •

edited

Loading