Skip to content

ci: bump the github-actions group across 1 directory with 3 updates - #72

Merged
stefan-jansen merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-f538117abd
Oct 15, 2026
Merged

stefan-jansen merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-f538117abd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: astral-sh/setup-uv, actions/upload-artifact and actions/download-artifact.

Updates astral-sh/setup-uv from 10.1.0 to 10.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

... (truncated)

Commits

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Dependency updates github-actions GitHub Actions dependencies labels Oct 13, 2026
Bumps the github-actions group with 3 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `astral-sh/setup-uv` from 10.1.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@bec219d...1c37ad0)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-f538117abd branch from bc526f4 to 2f82c0d Compare October 14, 2026 21:46
@stefan-jansen

Copy link
Copy Markdown
Contributor

Owner verification at c717fae, integrating qualified main 2259402 without rewriting Dependabot history.

Only the reviewed action pins and version comments differ from main across four workflows. Fresh official release/tag APIs confirm all three pinned releases. actionlint, 10 release-policy tests, Ruff, formatting, ty, lock validation, hooks, 4,266 full-suite tests, package build/import/metadata and strict MkDocs pass. The isolated built and hosted wheels pass the documented public workflows.

All 30 applicable current-head hosted checks pass, including all nine source cells and all nine installed-wheel cells with ten full-suite runs each. The Python 3.15 skip is covered by the validated existing exception; the supported range remains 3.12-3.14. The hosted candidate at 95f265b has the exact reviewed tree, verified metadata and both artifact digests. Earlier-head results are not substituted for current readiness.

CI: https://github.com/ml4t/engineer/actions/runs/38676726037
Ecosystem qualification: https://github.com/ml4t/engineer/actions/runs/38676726496

No workflow triggers, permissions, qualification criteria or release gates were changed. Existing ten-repeat stress qualification remains configured.

AI assistance: Codex reviewed the current submission, integrated qualified main, verified upstream identities, ran the recorded checks and prepared this maintenance assessment. Dependabot's original update attribution is retained.

@stefan-jansen
stefan-jansen merged commit 4d8b181 into main Oct 15, 2026
31 checks passed
@stefan-jansen
stefan-jansen deleted the dependabot/github_actions/github-actions-f538117abd branch October 15, 2026 04:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates github-actions GitHub Actions dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant