From 229af669f4c433028f53298cb458df79bb273c0c Mon Sep 17 00:00:00 2001 From: Gregory Oschwald Date: Fri, 30 Oct 2026 20:10:38 +0000 Subject: [PATCH] Use the latest known uv version in CI Set the setup-uv version input to latest-known. This installs the newest uv version whose checksum ships with the pinned setup-uv, so a setup-uv bump also bumps uv, without a network lookup. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/release.yml | 3 ++- .github/workflows/test.yml | 4 +++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 851287a..968564d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,9 +22,10 @@ jobs: submodules: true persist-credentials: false - - name: Install the latest version of uv + - name: Install the latest known version of uv uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: + version: latest-known # Disable caching in the release workflow (zizmor cache-poisoning). enable-cache: false diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index dc79394..a6bf471 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -22,8 +22,10 @@ jobs: with: submodules: true persist-credentials: false - - name: Install the latest version of uv + - name: Install the latest known version of uv uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 + with: + version: latest-known - name: Install tox run: uv tool install --python-preference only-managed --python 3.13 tox --with tox-uv --with tox-gh - name: Install Python