Skip to content

chore(deps): update github workflows - #619

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-workflows
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-workflows

Conversation

@renovate

@renovate renovate Bot commented Apr 12, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout (changelog) action digest 9c091bb → 3d3c42e
actions/download-artifact (changelog) action digest 3e5f45b → 9000827
actions/setup-python (changelog) action digest 5fda3b9 → 6d4fd22
actions/upload-artifact (changelog) action digest 043fb46 → cf430e0
astral-sh/setup-uv action minor v10.0.1 → v10.3.2 v10.3.3
astral-sh/uv uses-with patch 0.13.4 → 0.13.5 0.13.7 (+1)
pypa/gh-action-pypi-publish action patch v1.14.2 → v1.14.3
python uses-with minor 3.12 → 3.15 3.15.2
python uses-with minor 3.11 → 3.15 3.15.2
python uses-with minor 3.10 → 3.15 3.15.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

astral-sh/setup-uv

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes
🧰 Maintenance
📚 Documentation

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0: 🌈 Add Python architecture selection

Compare Source

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements
🧰 Maintenance
⬆️ Dependency updates

v10.2.0: 🌈 Disable automatic cache saves for merge queues

Compare Source

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements
🧰 Maintenance
📚 Documentation
⬆️ Dependency updates

v10.1.0: 🌈 New output python-runtime-idand respect NO_PROXY

Compare Source

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 (comment) for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

astral-sh/uv

v0.13.5

Compare Source

Released on 2026-10-21.

Following uv 0.13.4, which removed the affected eMudhra/emSign root from uv's own certificate store, this release updates the latest managed CPython builds for 3.11 and newer to python-build-standalone 20261021, including the CPython 3.15.1, 3.14.9, and 3.13.17 security patch releases. These builds include pip 26.2.2 both preinstalled in the managed interpreter and bundled with ensurepip, which installs pip by default when you run python -m venv. Both copies use certifi 2026.10.19, which removes the same affected root. After upgrading uv, run uv python upgrade to install the updated builds. Virtual environments pinned to an older Python patch version do not switch to the updated interpreter automatically. Upgrade pip separately in existing virtual environments.

Please note upstream CPython 3.9 and 3.10 still bundle pip releases whose certificate bundles trust the affected eMudhra/emSign root. We recommend migrating off of those versions and will no longer be releasing Docker images with uv installed for EOL Python versions.

Enhancements
  • Report incompatible self-dependencies directly in resolution errors (#​21845)
Python
  • Add CPython 3.15.1, 3.14.9, and 3.13.17 (#​22802)
Preview features
  • Select and rank wheel variants with no required properties or properties from PEP 850 static providers in platform-specific resolutions with wheel-variants (#​22535, #​22536, #​22687, #​22688)
Performance
  • Reduce peak memory use when resolving dependencies across multiple environments (#​22769, #​22770, #​22784)
  • Speed up exports with complex transitive extras by resolving activation across the dependency graph (#​22751)
  • Reduce uv's binary size by keeping additional error formatters out of line (#​22775)
  • Reduce overhead when parsing custom build cache keys (#​22749)
Bug fixes
  • Lock packages distributed only as Android wheels without a source distribution (#​22806)
  • Export optional dependencies correctly when transitive extras are activated through different or incompatible environment paths (#​22751)
  • Reject invalid custom build cache keys instead of silently falling back to the defaults (#​22749)
Security
  • Reject certificate chains containing compromised eMudhra intermediate keys via rustls-webpki 0.103.16 (#​22777)
  • Stop publishing uv Docker images based on Python 3.9 and 3.10 images that no longer receive upstream updates (#​22773)
pypa/gh-action-pypi-publish

v1.14.3

Compare Source

Keeping the community safe is a collaborative effort! 💛💙

[!important]
🚨 This release includes fixes for GHSA-5xjx-3w67-w9x9 patched up by @​sethmlarson💰 in #​427 and in other places across the ecosystem.

Additional ecosystem and related mitigations beyond you might want to watch out for:

🛠️ Security Tightening

@​webknjaz💰 made sure the dependency tree within the action runtime uses hash-checking from now on via #​420.

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.14.2...v1.14.3

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

💬 Discuss on Bluesky 🦋, on Mastodon 🐘 and on GitHub.

GH Sponsors badge

actions/python-versions (python)

v3.15.1: 3.15.1

Compare Source

Python 3.15.1

v3.15.0: 3.15.0

Compare Source

Python 3.15.0

v3.14.10: 3.14.10

Compare Source

Python 3.14.10

v3.14.9: 3.14.9

Compare Source

Python 3.14.9

v3.14.8: 3.14.8

Compare Source

Python 3.14.8

v3.14.7: 3.14.7

Compare Source

Python 3.14.7

v3.14.6: 3.14.6

Compare Source

Python 3.14.6

v3.14.5: 3.14.5

Compare Source

Python 3.14.5

v3.14.4: 3.14.4

Compare Source

Python 3.14.4

v3.14.3: 3.14.3

Compare Source

Python 3.14.3

v3.14.2: 3.14.2

Compare Source

Python 3.14.2

v3.14.1: 3.14.1

Compare Source

Python 3.14.1

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

v3.13.18: 3.13.18

Compare Source

Python 3.13.18

v3.13.17: 3.13.17

Compare Source

Python 3.13.17

v3.13.16: 3.13.16

Compare Source

Python 3.13.16

v3.13.15: 3.13.15

Compare Source

Python 3.13.15

v3.13.14: 3.13.14

Compare Source

Python 3.13.14

v3.13.13: 3.13.13

Compare Source

Python 3.13.13

v3.13.12: 3.13.12

Compare Source

Python 3.13.12

v3.13.11: 3.13.11

Compare Source

Python 3.13.11

v3.13.10: 3.13.10

Compare Source

Python 3.13.10

v3.13.9: 3.13.9

Compare Source

Python 3.13.9

v3.13.8: 3.13.8

Compare Source

Python 3.13.8

v3.13.7: 3.13.7

Compare Source

Python 3.13.7

v3.13.6: 3.13.6

Compare Source

Python 3.13.6

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

devin-ai-integration[bot]

This comment was marked as resolved.

@renovate
renovate Bot force-pushed the renovate/github-workflows branch from a453ed8 to d5f2328 Compare April 21, 2026 20:15
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from d5f2328 to eb4145c Compare April 29, 2026 13:23
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from eb4145c to bf4340b Compare May 12, 2026 10:32
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from bf4340b to 06c9eff Compare May 14, 2026 16:34
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 2 times, most recently from ab5449c to c3fa151 Compare May 28, 2026 14:44
@renovate renovate Bot changed the title Update dependency python to 3.14 Update github workflows to 3.14 Jun 2, 2026
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from c3fa151 to 41f3351 Compare June 3, 2026 14:06
@renovate renovate Bot changed the title Update github workflows to 3.14 Update github workflows Jun 3, 2026
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from 41f3351 to f6ca3b4 Compare June 11, 2026 15:52
devin-ai-integration[bot]

This comment was marked as resolved.

@renovate
renovate Bot force-pushed the renovate/github-workflows branch 4 times, most recently from c511dc1 to b8315f5 Compare June 24, 2026 16:29
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from b8315f5 to db8310b Compare June 28, 2026 15:50
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 2 times, most recently from 2a07107 to bc90174 Compare July 12, 2026 11:30
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 4 times, most recently from 3b0b3d5 to 512f10e Compare July 21, 2026 04:04

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 3 additional findings in Devin Review.

Open in Devin Review

@devin-ai-integration devin-ai-integration Bot Jul 21, 2026 •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Type-check environment loses its FFI library

With python-version set to 3.14, Download ffi still targets the Python 3.9 site-packages directory. The active environment cannot load that downloaded library.

Learn more

The type-check job runs uv sync to build a virtual environment for the selected Python interpreter. Its Download ffi step uses a hard-coded Python 3.9 site-packages path. After this version change, the native library lands outside the active Python 3.14 environment. Any check that tries to load that library through the installed package cannot use the downloaded file.

Example: On Ubuntu, the active interpreter looks in .venv/lib/python3.14/site-packages, while the download writes into .venv/lib/python3.9/site-packages.

Recommended fix: Derive the site-packages directory from the active uv run python interpreter, as the docs workflow does with python -m site --user-site, then append livekit/rtc/resources.

Devin Review


Was this helpful? React with 👍 or 👎 to provide feedback.

@renovate
renovate Bot force-pushed the renovate/github-workflows branch 2 times, most recently from 4518161 to 904ad17 Compare July 22, 2026 14:15
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from 904ad17 to c7e73ff Compare July 29, 2026 20:39
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 3 times, most recently from f708b95 to a47979b Compare September 7, 2026 21:15
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 4 times, most recently from b9d4bc6 to 1b3e481 Compare September 16, 2026 20:42
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from 1b3e481 to c578d73 Compare September 25, 2026 04:14
@renovate
renovate Bot requested a review from changt as a code owner September 25, 2026 04:14
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 2 times, most recently from 54178e7 to 073655d Compare October 5, 2026 15:32
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 2 times, most recently from e5fa360 to 73900ad Compare October 13, 2026 16:31
@renovate renovate Bot changed the title Update github workflows chore(deps): update github workflows Oct 14, 2026
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 3 times, most recently from 34b82bd to 0e3900b Compare October 21, 2026 12:49
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 8 times, most recently from 1a74b5d to ed5ec11 Compare October 29, 2026 08:02
@renovate
renovate Bot force-pushed the renovate/github-workflows branch 3 times, most recently from 94b294d to b283b69 Compare November 5, 2026 05:37
Generated by renovateBot
@renovate
renovate Bot force-pushed the renovate/github-workflows branch from b283b69 to 252803b Compare November 5, 2026 11:07

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants