Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: astral-sh/setup-uv
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: e06108d
Choose a base ref
...
head repository: astral-sh/setup-uv
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 37802ad
Choose a head ref
  • 5 commits
  • 27 files changed
  • 5 contributors

Commits on Mar 14, 2026

  1. chore: update known checksums for 0.10.10 (#804)

    chore: update known checksums for 0.10.10
    
    Co-authored-by: eifinger <[email protected]>
    github-actions[bot] and eifinger authored Mar 14, 2026
    Configuration menu
    Copy the full SHA
    cadb67b View commit details
    Browse the repository at this point in the history
  2. Bump deps (#805)

    eifinger authored Mar 14, 2026
    Configuration menu
    Copy the full SHA
    f9070de View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    fd8f376 View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2026

  1. chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 (#808)

    Bumps
    [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action)
    from 0.5.0 to 0.5.2.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/zizmorcore/zizmor-action/releases">zizmorcore/zizmor-action's
    releases</a>.</em></p>
    <blockquote>
    <h2>v0.5.2</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>zizmor 1.23.1 is now the default used by this action.</li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/zizmorcore/zizmor-action/compare/v0.5.1...v0.5.2">https://github.com/zizmorcore/zizmor-action/compare/v0.5.1...v0.5.2</a></p>
    <h2>v0.5.1</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>zizmor 1.23.0 is now the default used by this action.</li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/zizmorcore/zizmor-action/compare/v0.5.0...v0.5.1">https://github.com/zizmorcore/zizmor-action/compare/v0.5.0...v0.5.1</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/71321a20a9ded102f6e9ce5718a2fcec2c4f70d8"><code>71321a2</code></a>
    Sync zizmor versions (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/96">#96</a>)</li>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/5ed31db0964a9d37608edd5b0675de2b52070662"><code>5ed31db</code></a>
    Bump pins (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/95">#95</a>)</li>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/195d10ad90f31d8cd6ea1efd6ecc12969ddbe73f"><code>195d10a</code></a>
    Sync zizmor versions (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/94">#94</a>)</li>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/c65bc8876171b6d82748ec98b77c0193b1226b94"><code>c65bc88</code></a>
    chore(deps): bump github/codeql-action in the github-actions group (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/93">#93</a>)</li>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/c2c887f84674f9c15123e2905d2d307675d8bc01"><code>c2c887f</code></a>
    chore(deps): bump zizmorcore/zizmor-action in the github-actions group
    (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/91">#91</a>)</li>
    <li><a
    href="https://github.com/zizmorcore/zizmor-action/commit/5507ab0c02a9ac3996895e1598d6b3385ea7d525"><code>5507ab0</code></a>
    Bump pins in README (<a
    href="https://redirect.github.com/zizmorcore/zizmor-action/issues/90">#90</a>)</li>
    <li>See full diff in <a
    href="https://github.com/zizmorcore/zizmor-action/compare/0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d...71321a20a9ded102f6e9ce5718a2fcec2c4f70d8">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zizmorcore/zizmor-action&package-manager=github_actions&previous-version=0.5.0&new-version=0.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    9f00d18 View commit details
    Browse the repository at this point in the history
  2. Fetch uv from Astral's mirror by default (#809)

    This PR tries fetching the uv artifact from `releases.astral.sh` by
    default, only in cases where the artifact would otherwise have come from
    `https://github.com/astral-sh/uv/releases/download/`. The checksums are
    supposed to be the same for the mirror, and can still come from
    `raw.githubusercontent.com/astral-sh/versions`. If the download fails,
    we fall back to the original URL.
    
    This avoids hitting GitHub's Releases API which is prone to rate
    limiting. As far as I can tell, together with
    #802 this PR makes a github
    token entirely unnecessary for this action.
    
    
    Towards astral-sh/uv#18503.
    zsol authored Mar 16, 2026
    Configuration menu
    Copy the full SHA
    37802ad View commit details
    Browse the repository at this point in the history
Loading