chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.5 #243

dependabot · 2025-12-08T21:21:22Z

Bumps astral-sh/setup-uv from 7.1.4 to 7.1.5.

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.1.5 🌈 allow setting cache-local-path without enable-cache: true

Changes

astral-sh/setup-uv#612 fixed a faulty behavior where this action set UV_CACHE_DIR even though enable-cache was false. It also fixed the cases were the cache dir is already configured in a settings file like pyproject.toml or UV_CACHE_DIR was already set. Here the action shouldn't overwrite or set UV_CACHE_DIR.

These fixes introduced an unwanted behavior: You can still set cache-local-path but this action didn't do anything. This release fixes that.

You can now use cache-local-path to automatically set UV_CACHE_DIR even when enable-cache is false (or gets set to false by default e.g. on self-hosted runners)
- name: This is now possible
  uses: astral-sh/setup-uv@v7
  with:
    enable-cache: false
    cache-local-path: "/path/to/cache"
🐛 Bug fixes

allow cache-local-path w/o enable-cache @eifinger (#707)

🧰 Maintenance

set biome files.maxSize to 2MiB @eifinger (#708)

chore: update known checksums for 0.9.16 @github-actions[bot] (#706)

chore: update known checksums for 0.9.15 @github-actions[bot] (#704)

chore: use npm ci --ignore-scripts everywhere @woodruffw (#699)

chore: update known checksums for 0.9.14 @github-actions[bot] (#700)

chore: update known checksums for 0.9.13 @github-actions[bot] (#694)

chore: update known checksums for 0.9.12 @github-actions[bot] (#693)

chore: update known checksums for 0.9.11 @github-actions[bot] (#688)

⬆️ Dependency updates

Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 @dependabot[bot] (#695)

bump dependencies @eifinger (#709)

Bump github/codeql-action from 4.30.9 to 4.31.6 @dependabot[bot] (#698)

Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0 @dependabot[bot] (#696)

Bump eifinger/actionlint-action from 1.9.2 to 1.9.3 @dependabot[bot] (#690)

Commits

ed21f2f Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#695)
93202d8 bump dependencies (#709)
5ce0900 set biome files.maxSize to 2MiB (#708)
4180991 allow cache-local-path w/o enable-cache (#707)
0439606 Bump github/codeql-action from 4.30.9 to 4.31.6 (#698)
7dd56c1 chore: update known checksums for 0.9.16 (#706)
9c12bae chore: update known checksums for 0.9.15 (#704)
64f7f4e chore: use npm ci --ignore-scripts everywhere (#699)
5ae467f chore: update known checksums for 0.9.14 (#700)
06e4edb Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0 (#696)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

Chores
- Updated build workflow configuration to use an updated version of the build setup action.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 7.1.4 to 7.1.5. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@1e862df...ed21f2f) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 7.1.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-12-08T21:21:23Z

Labels

The following labels could not be found: skip news. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

codecov · 2025-12-08T21:23:10Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0%. Comparing base (1851599) to head (ea39dde).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@     Coverage Diff     @@
##   main   #243   +/-   ##
===========================
===========================

🚀 New features to boost your workflow:

📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Artmann · 2025-12-09T15:59:15Z

@coderabbitai Please review this

coderabbitai · 2025-12-09T15:59:34Z

@Artmann: I'll review the changes now.

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2025-12-09T15:59:43Z

📝 Walkthrough

Walkthrough

The PR updates the GitHub Actions workflow file to reference a newer commit of the astral-sh/setup-uv action. The commit hash in the "Install uv" step changes from 1e862dfacbd1d6d858c55d9b792c756523627244 to ed21f2f24f8dd64503750218de024bcf64c7250a, advancing the version of this action used during workflow execution.

Possibly related PRs

chore(deps): bump astral-sh/setup-uv from 7.1.2 to 7.1.4 #222: Updates the same workflow file and commits the astral-sh/setup-uv action hash in the "Install uv" step.

Pre-merge checks

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	Title accurately describes the main change: a dependency bump of astral-sh/setup-uv from v7.1.4 to v7.1.5, which matches the single file modification in the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

Disabled knowledge base sources:

Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 1851599 and ea39dde.

📒 Files selected for processing (1)

.github/workflows/copilot-setup-steps.yml (1 hunks)

🔇 Additional comments (1)

.github/workflows/copilot-setup-steps.yml (1)

76-76: Commit hash is correct for v7.1.5 release.

The provided hash ed21f2f24f8dd64503750218de024bcf64c7250a correctly corresponds to the v7.1.5 release of astral-sh/setup-uv. The update is straightforward and safe to merge.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot bot requested a review from a team as a code owner December 8, 2025 21:21

Artmann approved these changes Dec 9, 2025

View reviewed changes

coderabbitai bot approved these changes Dec 9, 2025

View reviewed changes

Artmann merged commit bb8c843 into main Dec 10, 2025
14 checks passed

Artmann deleted the dependabot/github_actions/astral-sh/setup-uv-7.1.5 branch December 10, 2025 08:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.5 #243

chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.5 #243

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025 •

edited by coderabbitai bot

Loading

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025

Uh oh!

codecov bot commented Dec 8, 2025 •

edited

Loading

Uh oh!

Artmann commented Dec 9, 2025

Uh oh!

coderabbitai bot commented Dec 9, 2025

Uh oh!

coderabbitai bot commented Dec 9, 2025 •

edited

Loading

Walkthrough

Possibly related PRs

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.5 #243

chore(deps): bump astral-sh/setup-uv from 7.1.4 to 7.1.5 #243

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 8, 2025 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.1.5 🌈 allow setting cache-local-path without enable-cache: true

Changes

🐛 Bug fixes

🧰 Maintenance

⬆️ Dependency updates

Summary by CodeRabbit

Uh oh!

dependabot bot commented on behalf of github Dec 8, 2025

Labels

Uh oh!

codecov bot commented Dec 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Artmann commented Dec 9, 2025

Uh oh!

coderabbitai bot commented Dec 9, 2025

Uh oh!

coderabbitai bot commented Dec 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Possibly related PRs

Pre-merge checks

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Dec 8, 2025 •

edited by coderabbitai bot

Loading

v7.1.5 🌈 allow setting `cache-local-path` without `enable-cache: true`

codecov bot commented Dec 8, 2025 •

edited

Loading

coderabbitai bot commented Dec 9, 2025 •

edited

Loading