build(deps): update setup-uv action to v10
Metadata
Current evaluation
Merged upgrade of the setup-uv GitHub Action to v10. Supersedes PR #413 by resolving zizmor security audit warnings. Approved by two reviewers and passed CI checks prior to merge.
Suggested action: —
No scores available.
Issue body
Supersedes https://github.com/canonical/craft-store/pull/413 but without zizmor complaining.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/craft-store/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [x] I've added or updated any relevant documentation.
- [x] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [x] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged upgrade of the setup-uv GitHub Action to v10. Supersedes PR #413 by resolving zizmor security audit warnings. Approved by two reviewers and passed CI checks prior to merge. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates setup-uv GitHub Action to v10. Approved by one reviewer. Most CI checks pass, but OSV-scanner and lint/files checks are failing, blocking merge. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates setup-uv GitHub Action to v10, superseding a prior PR. Approved by one reviewer with zero unresolved comments. CI mostly passes except for OSV-scanner and lint/files checks. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates the setup-uv GitHub Action to v10 to resolve a zizmor security warning. All tests pass, but OSV-scanner and file lint checks are failing. Awaiting maintainer review. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #214 build(deps): update astral-sh/setup-uv action to v10 (main) - autoclosed | craft-grammar | merged | Merged into main after passing CI and two approvals. Updates astral-sh/setup-uv from v9.0.0 to v10.0.1, adding security hardening, a latest-known version selector, and disabling automatic caching for sensitive events. | |
| #43 build(deps): update astral-sh/setup-uv action to v7 | craft-artifacts | merged | Merged an automated dependency update upgrading the astral-sh/setup-uv GitHub Action from v6 to v7. Approved by two reviewers, all CI checks passed, and the change was automatically merged into the main branch. | |
| #82 build(deps): update astral-sh/setup-uv action to v8 (main) | craft-artifacts | merged | Merged automated dependency update upgrading astral-sh/setup-uv action from v7 to v8.1.0. Approved by reviewers, passed CI checks, and automatically merged into main by Renovate. | |
| #92 build(deps): update github actions to v8.2.0 (main) | craft-artifacts | merged | Merged automated dependency update upgrading astral-sh/setup-uv GitHub Action from v8.1.0 to v8.2.0. Approved by two reviewers, cleared CI checks, and applied to main via Renovate automerge. | |
| #413 build(deps): update astral-sh/setup-uv action to v10 (main) | craft-store | closed | Closed without merging. The dependency update was abandoned, and Renovate will ignore all future 10.x releases for this repository. | |
| #2019 build(deps): update github actions (main) (major) | charmcraft | merged | Merged automated dependency update upgrading actions/cache to v4, setup-uv to v4, and Ubuntu runner to 24.04. Approved by three reviewers with passing CI. Manual edits blocked automatic rebasing, but the PR was successfully merged. | |
| #578 build(deps): update github actions (main) (major) | starbase | merged | Merged automated dependency update for GitHub Actions. Renovate upgraded actions/setup-node to v7 and astral-sh/setup-uv to v9. Approved by one reviewer, passed all CI checks, and merged automatically with a two-line workflow change. | |
| #2062 build(deps): update github actions (main) (major) | charmcraft | merged | Merged automated GitHub Actions dependency updates. Renovate bot upgraded astral-sh/setup-uv to v5 and the Ubuntu runner to 24.04. Changes passed CI, received approvals, and were successfully merged. | |
| #2290 build(deps): update github actions (main) (major) | charmcraft | merged | Merged an automated dependency update by Renovate bot. Updated astral-sh/setup-uv to v6 and Node.js to v22 in GitHub Actions. Approved and automerged after CI checks passed. | |
| #1177 build(deps): run 'uv lock --upgrade' | rockcraft | merged | Merged dependency upgrade PR. Updated numerous packages using uv lock --upgrade. Approved by two reviewers and merged into main, successfully integrating the updates despite one CI test failure. |