Skip to content

CI: GHA: Major version bump and fully-qualify astral-sh action semvers - #14395

Open
jayaddison wants to merge 4 commits into
sphinx-doc:masterfrom
jayaddison:maintenance/update-astral-github-actions
Open

CI: GHA: Major version bump and fully-qualify astral-sh action semvers#14395
jayaddison wants to merge 4 commits into
sphinx-doc:masterfrom
jayaddison:maintenance/update-astral-github-actions

Conversation

@jayaddison

@jayaddison jayaddison commented Apr 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Purpose

Given the current state-of-affairs, Dependabot won't automatically upgrade to the recently-published immutable astral-sh GitHub Actions releases, because they do not have major-version-only semver tags (v7 exists for astral-sh/setup-uv, for example, but v8 does not -- instead only v8.0.0 does).

I'm opening this as a draft pull request because I haven't yet reviewed the diffs in the source repositories for the actions -- and also because it'd be worthwhile to build a collective sense about whether this is a worthwhile change before applying it.

References

Refs:

Edit: action-name fixup (was: uv, intended: setup-uv)
Edit: pull request is now flagged ready-for-review, so add strikethrough to part of this description

@jayaddison jayaddison mentioned this pull request Apr 14, 2026
Closed
@jayaddison

jayaddison commented Apr 14, 2026

Copy link
Copy Markdown
Contributor Author

I'm opening this as a draft pull request because I haven't yet reviewed the diffs in the source repositories for the actions -- and also because it'd be worthwhile to build a collective sense about whether this is a worthwhile change before applying it.

From review of astral-sh/setup-uv:v7.6.0...v8.0.0 and astral-sh/ruff-action:v3.6.1...v4.0.0: those changesets seem OK to me.

@jayaddison
jayaddison marked this pull request as ready for review August 31, 2026 21:35
timhoffm
timhoffm approved these changes Sep 1, 2026
View reviewed changes

@timhoffm timhoffm left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pinning exact versions makes sense. And with dependabot structured updates are easy.

The changes in version bumps of the actions look ok.

@jayaddison

jayaddison commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Thanks @timhoffm

@jayaddison

jayaddison commented Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

NB: a few incremental releases of the astral-sh/setup-uv action (latest: v10.3.2) have taken place since the last update here (ref: v10.0.1); it would probably be worth reviewing the latest changes there, and perhaps to update to the latest tag if all looks well. The astral-sh/ruff-action references are still to the latest release tag (v4.1.0), at the time-of-writing.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@timhoffm timhoffm timhoffm approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jayaddison @timhoffm