actions/setup-uv
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
588 Commits 34 Branches 119 Tags
cf7c38342c3ba6cbec64cd7cd418a2d0ab5d450d
Commit Graph
11 Commits
Author SHA1 Message Date
Kevin Stillhammer f9cdb47d48 Reject paths in .tool-versions (#1007) 
## Summary
- reject path-like uv versions from `.tool-versions`
- reject path-like Python versions from `.tool-versions`
- document the restriction and cover Unix and Windows paths in tests

## Testing
- `npm ci --ignore-scripts`
- `npm run all`

Refs: pi-session 019ff4bb-8b7c-7c4b-8bdf-7c188dfa2e3f
 2026-08-12 13:18:20 +02:00
Kevin Stillhammer 46f427bd47 Read Python version from .tool-versions (#996) 
## Summary
- read the Python version from an explicitly selected `.tool-versions`
file
- preserve `python-version` and existing `UV_PYTHON` precedence
- add parser, input, and workflow coverage and update documentation and
bundled action artifacts

## Validation
- `npm run all`
- `actionlint .github/workflows/test.yml`
- `uvx zizmor .github/workflows/test.yml`

Closes #983

Refs: pi-session 019ff01a-544c-79f3-8f73-a00132af39f5
 2026-08-11 14:26:03 +02:00
Kevin Stillhammer 8473c7fea4 chore(deps): roll up Dependabot updates (#994) 
## Summary

Roll up the remaining net changes from the open Dependabot updates:

- release-drafter/release-drafter 7.7.0 (#990)
- github/codeql-action 4.37.4 (#987, #988, #989)
- zizmorcore/zizmor-action 0.6.1 (#986)
- @actions/cache 6.2.0 (#975)
- @biomejs/biome 2.5.4 (#974)
- undici 8.7.0 (#973)

The Jest 30.4.2 (#905) and @renovatebot/pep440 5.0.0 (#907) updates are
already present on main and require no additional changes.

This also updates the Biome schema, applies the formatter changes from
Biome 2.5.4, and regenerates the published bundles.

## Testing

- `npm run all`
- `actionlint`
- `git diff --check`

Refs: pi-session 019ff01b-f917-73c1-950e-2966956f263c
 2026-08-11 11:27:16 +02:00
Kevin Stillhammer d31148d669 Strip environment markers from detected uv dependency pins (#938) 
## Summary
- strip PEP 508 environment markers before extracting uv versions from
dependency entries
- cover dependency-group pins with and without whitespace before the
marker
- cover requirements-style pins with markers

Fixes #920

## Validation
- npm ci --ignore-scripts
- npm run all

Refs: pi-session 019f316a-4108-7975-892f-ee5bf8abc7c3
 2026-07-05 10:47:17 +02:00
somaz 3faa3174e6 feat: support uv.lock as a version-file source (#918) 
Adds `uv.lock` as a supported `version-file` source. When `uv` is locked
as a
dependency in `uv.lock`, the action now installs the exact pinned
version,
closing the gap reported in #682.

This is useful for deterministic CI: the same uv version is used until
the
lockfile is updated, which avoids "CI worked yesterday, fails today"
drift and
reduces supply-chain exposure from auto-installing the latest release.

The implementation mirrors the existing `version-file` parsers — a new
`uv.lock`
entry in the parser registry reads the `[[package]]` whose `name = "uv"`
and
returns its locked `version`. Scoped to explicit `version-file:
uv.lock`;
workspace auto-detection is left as a possible follow-up to avoid
precedence
ambiguity with `uv.toml` / `pyproject.toml`.

Validation (local, Node 23; dist build is esbuild-deterministic):
- `npm run all` → build clean, biome clean, package clean, jest 77/77
- New tests: 3 unit (`uv-lock-file.test.ts`) + 1 integration — exact pin
resolves
  through the full pipeline (`uv.lock` → `0.8.17`)
- dist rebuilt + committed (single bundle, no spurious churn)

related: #682
 2026-06-19 07:08:57 +02:00
Kevin Stillhammer cdfb2ee6dd Refactor version resolving (#852) 2026-04-11 11:38:41 +02:00
Kevin Stillhammer fd8f376b22 Switch to ESM for source and test, use CommonJS for dist (#806) 2026-03-14 17:43:49 +01:00
Kevin Stillhammer adeb28643f Add support for .tools-versions (#531) 
Closes: #504
 2025-08-21 11:15:28 +02:00
Kevin Stillhammer 4109b4033f Bump biome to v2 (#515) 2025-08-12 20:12:10 +00:00
axm2andaxm2 43f37368c9 Ignore backslashes and whitespace in requirements (#501) 
setup-uv gets confused when there are backslashes in `requirements.txt`.
This changes the regex to ignore backslashes.

---------

Co-authored-by: axm2 <>
 2025-07-26 13:19:52 +00:00
Kevin Stillhammer 7edac99f96 Ignore deps starting with uv when finding uv version (#492)
Update Major Minor Tags / Make sure major and minor tags are up to date on a patch release (push) Canceled after 0s
Details 
Fixes: #489
 2025-07-18 06:10:43 +00:00