build(deps): update github actions (main)

Metadata

Project: craft-grammar
Number: #226
Type: pull request
State: merged
Author: renovate
Labels: PR: Dependencies
Created: 2026-10-24 07:58 AM UTC
Updated: 2026-10-24 10:58 AM UTC
Closed: 2026-10-25 03:55 PM UTC

Current evaluation

⚠️ This summary may be outdated — the issue content or evaluation prompts have changed since this evaluation was made.

Renovate PR updating GitHub Actions (setup-node, setup-uv, pypi-publish, install-action) to minor/patch versions. All CI checks passing, awaiting maintainer review.

Resolution: needs review

Reason: This is a standard Renovate-generated dependency update with a minimal diff (+6/-6 lines, 3 files) and all CI checks passing. The PR updates well-tested upstream GitHub Actions with minor/patch versions and follows conventional commit formatting (build(deps)). It is ready for maintainer review and merge.

Evaluated by: mr-cal-bot

Impact: 15 Quick Win: 11 Complexity: 5 Confidence: 95 Actionability: 80

Issue body

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v7.0.0` → `v7.1.0` | | | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | `v10.2.0` → `v10.3.2` | | | [pypa/gh-action-pypi-publish](https://redirect.github.com/pypa/gh-action-pypi-publish) ([changelog](https://redirect.github.com/pypa/gh-action-pypi-publish/compare/dc37677b2e1c63e2034f94d8a5b11f265b73ba33..7245906fb61fa33a13554f9d5fb856fe61758086)) | action | digest | `dc37677` → `7245906` | | | [taiki-e/install-action](https://redirect.github.com/taiki-e/install-action) | action | patch | `v2.87.26` → `v2.87.30` | `v2.87.31` | --- ### Release Notes <details> <summary>actions/setup-node</summary> ### [`v7.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.1.0) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.1.0) #### What's Changed ##### Enhancements: - Add support for mise.toml file by [@gperdomor](https://redirect.github.com/gperdomor) in [#1421](https://redirect.github.com/actions/setup-node/pull/1421) - Support absolute paths in node-version-file by [@v-mahabaleshwars](https://redirect.github.com/v-mahabaleshwars) in [#1633](https://redirect.github.com/actions/setup-node/pull/1633) ##### Bug fixes: - Add Node version validation and manifest fetch retry by [@v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) in [#1580](https://redirect.github.com/actions/setup-node/pull/1580) ##### Documentation updates: - README.md: bump actions/checkout to latest version 7 by [@deining](https://redirect.github.com/deining) in [#1578](https://redirect.github.com/actions/setup-node/pull/1578) - docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by [@v-gowridurgad](https://redirect.github.com/v-gowridurgad) in [#1593](https://redirect.github.com/actions/setup-node/pull/1593) - Fixed cache recommendation syntax by [@SubJunk](https://redirect.github.com/SubJunk) in [#1603](https://redirect.github.com/actions/setup-node/pull/1603) ##### Dependency updates: - Update workflow pins and migrate Node matrices to modern versions by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1583](https://redirect.github.com/actions/setup-node/pull/1583) - Upgrade [@actions/cache](https://redirect.github.com/actions/cache) to 6.2.0 by [@philip-gai](https://redirect.github.com/philip-gai) in [#1584](https://redirect.github.com/actions/setup-node/pull/1584) - Pin [@types/node](https://redirect.github.com/types/node) to v24 by [@v-priyagupta108](https://redirect.github.com/v-priyagupta108) in [#1585](https://redirect.github.com/actions/setup-node/pull/1585) - Override brace-expansion to 5.0.8 by [@v-priyagupta108](https://redirect.github.com/v-priyagupta108) with [@Copilot](https://redirect.github.com/Copilot) in [#1599](https://redirect.github.com/actions/setup-node/pull/1599) - Upgrade actions/checkout from 7.0.0 to 7.0.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1598](https://redirect.github.com/actions/setup-node/pull/1598) - Upgrade prettier from 3.8.4 to 3.9.6 by [@dependabot](https://redirect.github.com/dependabot) in [#1590](https://redirect.github.com/actions/setup-node/pull/1590) - Upgrade [@vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.44.0 to 0.45.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1610](https://redirect.github.com/actions/setup-node/pull/1610) - Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by [@dependabot](https://redirect.github.com/dependabot) in [#1602](https://redirect.github.com/actions/setup-node/pull/1602) - Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by [@dependabot](https://redirect.github.com/dependabot) in [#1629](https://redirect.github.com/actions/setup-node/pull/1629) - Upgrade [@types/semver](https://redirect.github.com/types/semver) from 7.7.1 to 7.8.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1616](https://redirect.github.com/actions/setup-node/pull/1616) - Upgrade [@typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser) from 8.62.0 to 8.70.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1615](https://redirect.github.com/actions/setup-node/pull/1615) - Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1631](https://redirect.github.com/actions/setup-node/pull/1631) - Upgrade jest-each from 30.4.1 to 30.5.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1636](https://redirect.github.com/actions/setup-node/pull/1636) - Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1638](https://redirect.github.com/actions/setup-node/pull/1638) - Update dependencies and add license files by [@v-HarithaVattikuti](https://redirect.github.com/v-HarithaVattikuti) in [#1642](https://redirect.github.com/actions/setup-node/pull/1642) - Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1635](https://redirect.github.com/actions/setup-node/pull/1635) #### New Contributors - [@v-jitenderpalsingh](https://redirect.github.com/v-jitenderpalsingh) made their first contribution in [#1580](https://redirect.github.com/actions/setup-node/pull/1580) - [@philip-gai](https://redirect.github.com/philip-gai) made their first contribution in [#1584](https://redirect.github.com/actions/setup-node/pull/1584) - [@gperdomor](https://redirect.github.com/gperdomor) made their first contribution in [#1421](https://redirect.github.com/actions/setup-node/pull/1421) - [@SubJunk](https://redirect.github.com/SubJunk) made their first contribution in [#1603](https://redirect.github.com/actions/setup-node/pull/1603) **Full Changelog**: <https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0> </details> <details> <summary>astral-sh/setup-uv</summary> ### [`v10.3.2`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.2): 🌈 update known checksums for 0.13.5 [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.1...v10.3.2) ##### Changes ##### 🧰 Maintenance - chore: update known checksums for 0.13.5 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1103](https://redirect.github.com/astral-sh/setup-uv/issues/1103)) ##### 📚 Documentation - docs: update version references to v10.3.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1102](https://redirect.github.com/astral-sh/setup-uv/issues/1102)) ### [`v10.3.1`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.1): 🌈 preserve cache error class names in save-cache bundle [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.3.0...v10.3.1) ##### Changes This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn `##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.` ##### 🐛 Bug fixes - fix: preserve cache error class names in save-cache bundle [@dannyward630](https://redirect.github.com/dannyward630) ([#1093](https://redirect.github.com/astral-sh/setup-uv/issues/1093)) ##### 🧰 Maintenance - chore: update known checksums for 0.13.4 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1099](https://redirect.github.com/astral-sh/setup-uv/issues/1099)) - chore: update known checksums for 0.13.2/0.13.3 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1098](https://redirect.github.com/astral-sh/setup-uv/issues/1098)) - chore: update known checksums for 0.13.1 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1094](https://redirect.github.com/astral-sh/setup-uv/issues/1094)) - Verify npm dependency signatures before builds [@zaniebot](https://redirect.github.com/zaniebot) ([#1027](https://redirect.github.com/astral-sh/setup-uv/issues/1027)) ##### 📚 Documentation - docs: cache-dependency-glob matches relative to the working directory [@flange-ipb](https://redirect.github.com/flange-ipb) ([#1092](https://redirect.github.com/astral-sh/setup-uv/issues/1092)) - docs: update version references to v10.3.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1090](https://redirect.github.com/astral-sh/setup-uv/issues/1090)) ##### ⬆️ Dependency updates - chore(deps): roll up Dependabot updates [@eifinger](https://redirect.github.com/eifinger) ([#1101](https://redirect.github.com/astral-sh/setup-uv/issues/1101)) ### [`v10.3.0`](https://redirect.github.com/astral-sh/setup-uv/releases/tag/v10.3.0): 🌈 Add Python architecture selection [Compare Source](https://redirect.github.com/astral-sh/setup-uv/compare/v10.2.0...v10.3.0) #### Changes This release adds the `python-arch` input to select a Python architecture independently of the Python version. With `uv` 0.13.0 or later, set `python-arch: x86_64` to use x64 Python on Windows ARM64 runners. It also includes embedded checksums for `uv` releases through 0.13.0. - Use macOS 15 runners for tests [@charliermarsh](https://redirect.github.com/charliermarsh) ([#1081](https://redirect.github.com/astral-sh/setup-uv/issues/1081)) #### 🚀 Enhancements - Add `python-arch` support [@zanieb](https://redirect.github.com/zanieb) ([#1079](https://redirect.github.com/astral-sh/setup-uv/issues/1079)) #### 🧰 Maintenance - chore: update known checksums for 0.13.0 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1089](https://redirect.github.com/astral-sh/setup-uv/issues/1089)) - chore: update known checksums for 0.12.24 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1084](https://redirect.github.com/astral-sh/setup-uv/issues/1084)) - chore: update known checksums for 0.12.23 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1082](https://redirect.github.com/astral-sh/setup-uv/issues/1082)) - chore: update known checksums for 0.12.22 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1080](https://redirect.github.com/astral-sh/setup-uv/issues/1080)) - chore: update known checksums for 0.12.21 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1078](https://redirect.github.com/astral-sh/setup-uv/issues/1078)) - chore: update known checksums for 0.12.20 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1076](https://redirect.github.com/astral-sh/setup-uv/issues/1076)) - chore: update known checksums for 0.12.19 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1068](https://redirect.github.com/astral-sh/setup-uv/issues/1068)) - chore: update known checksums for 0.12.18 @[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) ([#1065](https://redirect.github.com/astral-sh/setup-uv/issues/1065)) #### ⬆️ Dependency updates - chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) ([#1077](https://redirect.github.com/astral-sh/setup-uv/issues/1077)) </details> <details> <summary>taiki-e/install-action</summary> ### [`v2.87.30`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.30): 2.87.30 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.29...v2.87.30) - Update `zizmor@latest` to 1.31.1. - Update `wasmtime@latest` to 50.0.0. - Update `vacuum@latest` to 0.33.2. - Update `uv@latest` to 0.13.4. - Update `trunk@latest` to 0.22.0. - Update `tombi@latest` to 1.8.9. - Update `syft@latest` to 1.55.0. - Update `release-plz@latest` to 0.3.173. - Update `prek@latest` to 0.5.6. - Update `mise@latest` to 2026.10.15. - Update `knope@latest` to 0.23.1. - Update `kingfisher@latest` to 2.14.0. - Update `kache@latest` to 1.2.2. - Update `dprint@latest` to 0.64.1. - Update `cosign@latest` to 3.1.4. - Update `cargo-crap@latest` to 0.9.0. - Update `cargo-binstall@latest` to 1.26.0. ### [`v2.87.29`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.29): 2.87.29 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.28...v2.87.29) - Update `zizmor@latest` to 1.31.0. - Update `wasmtime@latest` to 49.0.3. - Update `wasm-tools@latest` to 1.262.0. - Update `uv@latest` to 0.13.1. - Update `trivy@latest` to 0.76.0. - Update `tombi@latest` to 1.8.4. - Update `release-plz@latest` to 0.3.172. - Update `osv-scanner@latest` to 2.7.0. - Update `mise@latest` to 2026.10.11. - Update `mdbook-d2@latest` to 0.3.9. - Update `kingfisher@latest` to 2.13.0. - Update `kache@latest` to 1.2.1. - Update `just@latest` to 1.59.0. - Update `dprint@latest` to 0.63.0. - Update `cargo-crap@latest` to 0.8.0. - Update `bpf-linker@latest` to 0.12.0. ### [`v2.87.28`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.28): 2.87.28 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.27...v2.87.28) - Update `dprint@latest` to 0.62.0. - Update `vacuum@latest` to 0.33.0. - Update `uv@latest` to 0.13.0. - Update `tombi@latest` to 1.8.1. - Update `release-plz@latest` to 0.3.171. - Update `rclone@latest` to 1.75.2. - Update `mise@latest` to 2026.10.7. - Update `cargo-binstall@latest` to 1.25.3. ### [`v2.87.27`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.87.27): 2.87.27 [Compare Source](https://redirect.github.com/taiki-e/install-action/compare/v2.87.26...v2.87.27) - Update `vacuum@latest` to 0.32.0. - Update `uv@latest` to 0.12.24. - Update `typos@latest` to 1.51.1. - Update `tombi@latest` to 1.7.3. - Update `syft@latest` to 1.54.1. - Update `release-plz@latest` to 0.3.170. - Update `mise@latest` to 2026.10.4. - Update `kingfisher@latest` to 2.11.1. - Update `hyperfine@latest` to 2.0.0. - Update `dprint@latest` to 0.61.1. - Update `cargo-nextest@latest` to 0.9.148. - Update `cargo-neat@latest` to 0.6.0. - Update `cargo-binstall@latest` to 1.25.2. </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-grammar).

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-24 11:05 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 15 Quick Win: 11 Complexity: 5 Confidence: 95 Actionability: 80	needs review	Renovate PR updating GitHub Actions (setup-node, setup-uv, pypi-publish, install-action) to minor/patch versions. All CI checks passing, awaiting maintainer review.
2026-10-24 08:05 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 10 Quick Win: 8 Complexity: 5 Confidence: 95 Actionability: 85	needs review	Renovate PR updating GitHub Actions: setup-node v7.0.0→v7.1.0, setup-uv v10.2.0→v10.3.1, pypa/gh-action-pypi-publish digest, install-action v2.87.26→v2.87.30. CI passing, no review comments.

Update history

Date	Change
2026-10-25 03:55 PM UTC	merged
2026-10-24 10:58 AM UTC	updated
2026-10-24 07:58 AM UTC	created

Related issues

Issue	Project	State	Summary	Similarity
#1232 build(deps): update github actions (main)	craft-application	merged	Renovate PR updating GitHub Actions: setup-node v7.0.0→v7.1.0, setup-uv v10.3.0→v10.3.2, pypi-publish digest, install-action v2.87.26→v2.87.30. CI has failing tests.	89%
#1306 build(deps): update github actions (main) (major)	rockcraft	open	Renovate PR updating multiple GitHub Actions to latest major versions. Open 98 days with 3 failing CI checks and 19 unresolved review comments.	89%
#2190 build(deps): update github actions (main) (major)	charmcraft	closed	Renovate PR #2190 was closed unmerged after a maintainer requested a manual update; equivalent GitHub Actions upgrades later merged through #2514 (75ea55e7).	87%
#271 build(deps): update github actions (main) (major)	imagecraft	merged	Renovate PR merged in commit 3b53327, bumping CI actions to cache v5, checkout v6, download-artifact v7, setup-node v6, upload-artifact v6 (3 files, +10/-10); all CI checks passed.	86%
#637 build(deps): update github actions (main)	starbase	merged	Merged Renovate PR updating GitHub Actions setup-node to v7.1.0, setup-uv to v10.3.0, and taiki-e/install-action to v2.87.29.	86%
#458 build(deps): update github actions (main) (major)	starbase	merged	Renovate PR #458 merged as commit 7803c7c, upgrading download-artifact v5→v6, upload-artifact v4→v5, and CI Node.js 22→24.	85%
#133 build(deps): update github actions (main) (major)	starflow	merged	Merged Renovate PR #133 in commit 964543a, upgrading CI GitHub Actions to v5-v8 and Node.js from 22 to 24.	85%
#198 build(deps): update github actions (main) (major)	craft-platforms	merged	Renovate PR merged (commit 3211ae8): bumped actions/download-artifact v6→v7, actions/upload-artifact v5→v6 and astral-sh/setup-uv v6→v7 across CI workflows; all checks passed with 2 approvals.	85%
#196 build(deps): update github actions (main) (major)	craft-platforms	merged	Merged Renovate PR #196 into main, upgrading checkout, download-artifact, and setup-node to v6, upload-artifact to v5, and CI Node.js from 22 to 24.	85%
#2514 build(deps): update github actions (main) (major)	charmcraft	merged	PR #2514 merged as commit 75ea55e7, upgrading GitHub Actions to their new major versions, setup-uv to v7, and CI Node.js from 22 to 24.	85%