build(deps): update setup-uv action to v10
Metadata
Current evaluation
Renovate PR updating astral-sh/setup-uv to v10 in the CI workflow merged as commit 84bd42d. It replaced the earlier attempt #413 (closed unmerged due to OSV-scanner/zizmor failures); later bumps followed in #424 (v10.1.0) and #429 (v10.2.0).
Resolution: closed resolved
Reason: PR #417 was approved and merged into main as commit 84bd42d ("build(deps): update setup-uv action to v10"), a one-line workflow change pinning astral-sh/setup-uv to v10. It explicitly supersedes #413, which was closed unmerged after zizmor/OSV-scanner failures.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Supersedes https://github.com/canonical/craft-store/pull/413 but without zizmor complaining.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/craft-store/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [x] I've added or updated any relevant documentation.
- [x] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [x] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR updating astral-sh/setup-uv to v10 in the CI workflow merged as commit 84bd42d. It replaced the earlier attempt #413 (closed unmerged due to OSV-scanner/zizmor failures); later bumps followed in #424 (v10.1.0) and #429 (v10.2.0). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #417 (commit 84bd42d) updated astral-sh/setup-uv to v10, superseding #413 and resolving its zizmor security-audit concern. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged upgrade of the setup-uv GitHub Action to v10. Supersedes PR #413 by resolving zizmor security audit warnings. Approved by two reviewers and passed CI checks prior to merge. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates setup-uv GitHub Action to v10. Approved by one reviewer. Most CI checks pass, but OSV-scanner and lint/files checks are failing, blocking merge. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates setup-uv GitHub Action to v10, superseding a prior PR. Approved by one reviewer with zero unresolved comments. CI mostly passes except for OSV-scanner and lint/files checks. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates the setup-uv GitHub Action to v10 to resolve a zizmor security warning. All tests pass, but OSV-scanner and file lint checks are failing. Awaiting maintainer review. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| created |
Related work
-
Related To:
canonical/craft-store#413
(confidence 97%)
Earlier attempt at the same setup-uv v10 bump; closed unmerged because of zizmor/OSV-scanner complaints and superseded by this merged PR.
-
Related To:
canonical/craft-store#424
(confidence 88%)
Follow-up Renovate bump of the same action to v10.1.0 (commit 89c84fb).
-
Related To:
canonical/craft-store#429
(confidence 88%)
Later Renovate bump of the same action to v10.2.0 (commit 0f792e7).
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #413 build(deps): update astral-sh/setup-uv action to v10 (main) | craft-store | closed | Closed unmerged after OSV-scanner and zizmor failures; the setup-uv v10 upgrade was later merged in #417 at commit 84bd42d. | |
| #424 build(deps): update astral-sh/setup-uv action to v10.1.0 (main) | craft-store | closed | Renovate PR #424 was auto-merged into main via commit 89c84fb, bumping astral-sh/setup-uv from v10.0.1 to v10.1.0 in the CI workflow. Later superseded by #429 (v10.2.0, commit 0f792e7). | |
| #429 build(deps): update astral-sh/setup-uv action to v10.2.0 (main) | craft-store | merged | Renovate PR #429 merged into main, bumping astral-sh/setup-uv from v10.1.0 to v10.2.0 (1 file, +1/-1); approved by 1 reviewer with all CI checks passing and no review comments. | |
| #6505 build(deps): update astral-sh/setup-uv action to v10 (main) | snapcraft | merged | Updated astral-sh/setup-uv action from v9.0.0 to v10.3.0. Merged into main as a routine dependency update with all CI checks passing. | |
| #214 build(deps): update astral-sh/setup-uv action to v10 (main) - autoclosed | craft-grammar | merged | Renovate PR merged as commit fd4f8f5, bumping astral-sh/setup-uv v9.0.0 -> v10.0.1 (pinned SHA 20cfd1b) in .github/workflows/check-renovate.yaml; all CI checks passed. | |
| #620 build(deps): update astral-sh/setup-uv action to v10 (main) | starbase | merged | Merged Renovate PR updating the astral-sh/setup-uv GitHub Action from v9.0.0 to v10.2.0, incorporating security enhancements, new python-runtime-id output, and disabled cache saves for merge queues. | |
| #264 build(deps): update astral-sh/setup-uv action to v10 (main) | craft-archives | closed | Automated dependency update merging astral-sh/setup-uv action from v9 to v10.3.0. | |
| #2912 build(deps): update astral-sh/setup-uv action to v10 (main) | charmcraft | merged | Merged Renovate PR bumping astral-sh/setup-uv from v9.0.0 to v10.2.0 in a charmcraft workflow. | |
| #1755 build(deps): update astral-sh/setup-uv action to v10 (main) | craft-parts | merged | Merged Renovate PR updating astral-sh/setup-uv GitHub Action from v9.0.0 to v10.2.0 in the main workflow. | |
| #507 build(deps): update astral-sh/setup-uv action to v10.3.2 (main) | imagecraft | merged | Updates astral-sh/setup-uv GitHub Action from v10.3.0 to v10.3.2. Minor patch update with checksum maintenance and cache error fix. Auto-merge enabled, CI passing (except OSV-scanner). |