From 9acac92523f99fc5135897f6d86f5a2dbbfc31b1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 10:50:31 +0000
Subject: [PATCH] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#13060)
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from
8.2.0 to 8.3.0.
Commits
d31148d
Strip environment markers from detected uv dependency pins (#938)
17c3989
Fix cache keys for Python version ranges (#937)
3cc3c11
chore(deps): roll up Dependabot updates (#936)
9225f84
chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0
(#924)
fc16fa3
chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#926)
a1a7345
ci: call docs update workflow from release (#933)
a5e9cbf
docs: update version references to v8.2.0 (#932)
c5680ec
chore: update known checksums for 0.11.26 (#930)
c86fe4e
Add a threat model for setup-uv (#923)
224c887
chore: update known checksums for 0.11.25 (#929)
- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/ci-cd.yml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index c018dba6177..24dc24c3581 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -219,7 +219,7 @@ jobs:
# important: do not use system python
env:
UV_PYTHON_PREFERENCE: only-managed
- uses: astral-sh/setup-uv@v8.2.0
+ uses: astral-sh/setup-uv@v8.3.0
with:
python-version: ${{ matrix.pyver }}
activate-environment: true
@@ -324,7 +324,7 @@ jobs:
# important: do not use system python
env:
UV_PYTHON_PREFERENCE: only-managed
- uses: astral-sh/setup-uv@v8.2.0
+ uses: astral-sh/setup-uv@v8.3.0
with:
python-version: ${{ matrix.pyver }}
activate-environment: true
@@ -396,7 +396,7 @@ jobs:
# important: do not use system python
env:
UV_PYTHON_PREFERENCE: only-managed
- uses: astral-sh/setup-uv@v8.2.0
+ uses: astral-sh/setup-uv@v8.3.0
with:
python-version: ${{ matrix.pyver }}
activate-environment: true