Switch setup-uv action to immutable releases#2189
Merged
waketzheng merged 1 commit intoMay 13, 2026
Merged
Conversation
waketzheng
approved these changes
May 13, 2026
This was referenced May 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated
astral-sh/setup-uvfrom@v7to a pinned commit hash forv8.1.0.Description
Motivation and Context
The setup-uv maintainers moved to an immutable release model starting with v8. They no longer support floating major tags (like @v8), which means automation tools won't see new updates if we stay on @v7.
This change improves CI security by pinning to a specific hash and ensures the project is aligned with the new versioning scheme.
How Has This Been Tested?
This is a CI-only change. I believe the workflows should trigger and run as usual using the new pinned version of the action.
Checklist:
Let me know if this is a change you'd want to roll out across the other repos or something else. thanks!