From 0e7cde31fb6bfa14ca6364b6706589ce8573cdc0 Mon Sep 17 00:00:00 2001 From: Gregory Oschwald Date: Thu, 5 Nov 2026 23:07:37 +0000 Subject: [PATCH 1/2] Update uv in mise.lock to 0.13.7 Co-Authored-By: Claude Opus 5.5 --- mise.lock | 44 ++++++++++++++++++++++---------------------- 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/mise.lock b/mise.lock index 694bcae..dd4d4e7 100644 --- a/mise.lock +++ b/mise.lock @@ -79,47 +79,47 @@ url = "https://github.com/astral-sh/python-build-standalone/releases/download/20 provenance = "github-attestations" [[tools.uv]] -version = "0.11.29" +version = "0.13.7" backend = "aqua:astral-sh/uv" [tools.uv."platforms.linux-arm64"] -checksum = "sha256:593d79a797ece3f1dfaaf3e0a973263422a135d9262c7dbc6cd75d9c11acc0b4" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-aarch64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261262" +checksum = "sha256:71279f8d3c67241e807b9d8db872d1bf541579fb9f08b7d1eb1682196d1e57dc" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-aarch64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009469" provenance = "github-attestations" [tools.uv."platforms.linux-arm64-musl"] -checksum = "sha256:593d79a797ece3f1dfaaf3e0a973263422a135d9262c7dbc6cd75d9c11acc0b4" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-aarch64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261262" +checksum = "sha256:2d3ec076a0c4c0e8250bb6418c44080828b544f1a3be0b6e46adf9fb6923de45" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-aarch64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009487" provenance = "github-attestations" [tools.uv."platforms.linux-x64"] -checksum = "sha256:46711858adb2a3acaa9cee00f9060688ad1fd5706aecc005b96a6a7f285a00b7" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-x86_64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261352" +checksum = "sha256:c5221ff41b7892bfc223543883600125f6a47fe845093e0f5bdff4f359196d83" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-x86_64-unknown-linux-gnu.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009823" provenance = "github-attestations" [tools.uv."platforms.linux-x64-musl"] -checksum = "sha256:46711858adb2a3acaa9cee00f9060688ad1fd5706aecc005b96a6a7f285a00b7" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-x86_64-unknown-linux-musl.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261352" +checksum = "sha256:287491da03f2a785c70fa75b13e1f849918c2f2b5415fe84876b8214eeb792f9" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-x86_64-unknown-linux-musl.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009859" provenance = "github-attestations" [tools.uv."platforms.macos-arm64"] -checksum = "sha256:61c04acc52a33ef0f331e494bdfbedcdb6c26c6970c022ed3699e5860f8930e3" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-aarch64-apple-darwin.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261245" +checksum = "sha256:81b811b57e4624df7ed3aac148e0359100d9962f3d9dce00aec533dc2e086731" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-aarch64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009442" provenance = "github-attestations" [tools.uv."platforms.macos-x64"] -checksum = "sha256:c4c4de482da9ccdd076dc4fb5cfe7b740609029385c72f58606be3153602387d" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-x86_64-apple-darwin.tar.gz" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261331" +checksum = "sha256:20c47e4c1f630b8abaff8c291fa9b9aa300fef92c4fbff95adf198b55287cda7" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-x86_64-apple-darwin.tar.gz" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009775" provenance = "github-attestations" [tools.uv."platforms.windows-x64"] -checksum = "sha256:a047d55651bc3e0ca24595b25ec4cfcb10f9dca9fb56514e661269b37d4fae68" -url = "https://github.com/astral-sh/uv/releases/download/0.11.29/uv-x86_64-pc-windows-msvc.zip" -url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/478261333" +checksum = "sha256:0cdc5b38fe5a8168ed6a25814f5ba43c21d313dd3187314fccb37b7cec46e021" +url = "https://github.com/astral-sh/uv/releases/download/0.13.7/uv-x86_64-pc-windows-msvc.zip" +url_api = "https://api.github.com/repos/astral-sh/uv/releases/assets/704009796" provenance = "github-attestations" From b131d04a71a6d4fcd4844191f11ac1d8e56c5a5d Mon Sep 17 00:00:00 2001 From: Gregory Oschwald Date: Thu, 5 Nov 2026 23:07:37 +0000 Subject: [PATCH 2/2] Install uv with mise in CI Replace astral-sh/setup-uv with jdx/mise-action. CI now runs the uv version in mise.lock, which is the version that local development uses. The release workflow disables the mise cache, as it did for the setup-uv cache (zizmor cache-poisoning). Dependabot does not update mise.lock. To update uv, run `mise upgrade uv` and commit mise.lock. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release.yml | 7 ++++--- .github/workflows/test.yml | 13 ++++++++++--- 2 files changed, 14 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index de545d6..7c773d5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,11 +22,12 @@ jobs: submodules: true persist-credentials: false - - name: Install the latest version of uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + - name: Install uv + uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e # v5.2.3 with: + install_args: uv # Disable caching in the release workflow (zizmor cache-poisoning). - enable-cache: false + cache: false - name: Build run: uv build diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 79eaf8d..aa2136a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -22,10 +22,17 @@ jobs: with: submodules: true persist-credentials: false - - name: Install the latest version of uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + - name: Install uv + uses: jdx/mise-action@82a612c5ab8bcda7cc5db6b7e81a8e7584c3dc6e # v5.2.3 + with: + install_args: uv - name: Install tox - run: uv tool install --python-preference only-managed --python 3.13 tox --with tox-uv --with tox-gh + shell: bash + run: | + uv tool install --python-preference only-managed --python 3.13 tox --with tox-uv --with tox-gh + # mise-action, unlike setup-uv, does not add the uv tool bin + # directory to PATH. Windows runners need it. + uv tool dir --bin >> "$GITHUB_PATH" - name: Install Python if: matrix.env != '3.13' run: uv python install --python-preference only-managed ${{ matrix.env }}