Skip to content

fix: uv version pin and caching #496

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jmeridth merged 1 commit into from
Mar 12, 2026
+20 −0
Merged

fix: uv version pin and caching #496

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .github/workflows/copilot-setup-steps.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,9 @@ jobs:

- name: Install uv
uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
with:
version: "0.10.9"
enable-cache: true
Comment on lines 34 to +37
Copy link

Copilot AI Mar 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow explicitly sets permissions: contents: read; with enable-cache: true for setup-uv, cache restore/save can fail without actions: write permission. Add actions: write to the workflow permissions (or disable caching).

Copilot uses AI. Check for mistakes.

- name: Set up Python
run: uv python install 3.14
Expand Down
7 changes: 7 additions & 0 deletions .github/workflows/python-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,10 @@ on:
pull_request:
branches: [main]

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

permissions:
contents: read

Expand All @@ -25,6 +29,9 @@ jobs:
persist-credentials: false
- name: Install uv
uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
with:
version: "0.10.9"
enable-cache: true
Comment on lines 31 to +34
Copy link

Copilot AI Mar 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

astral-sh/setup-uv caching relies on the GitHub Actions cache service; with workflow-level permissions explicitly set to only contents: read, the job will not have actions: write and cache restore/save can fail. Add actions: write (or at least actions: read + actions: write as needed) to the workflow/job permissions when enable-cache: true is used.

Copilot uses AI. Check for mistakes.
- name: Set up Python ${{ matrix.python-version }}
run: uv python install ${{ matrix.python-version }}
- name: Install dependencies
Expand Down
7 changes: 7 additions & 0 deletions .github/workflows/super-linter.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ on:
pull_request:
branches: [main]

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true

permissions:
contents: read

Expand All @@ -25,6 +29,9 @@ jobs:
persist-credentials: false
- name: Install uv
uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
with:
version: "0.10.9"
enable-cache: true
Comment on lines 31 to +34
Copy link

Copilot AI Mar 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow sets explicit permissions (workflow and job), but neither includes actions: write. With enable-cache: true for setup-uv, cache restore/save can fail due to missing cache permissions. Add actions: write to the job permissions (job-level permissions override workflow-level).

Copilot uses AI. Check for mistakes.
- name: Install dependencies
run: |
uv sync --frozen
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/update-uv-lock.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,9 @@ jobs:

- name: Install uv
uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1
with:
version: "0.10.9"
enable-cache: true
Comment on lines 30 to +34
Copy link

Copilot AI Mar 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With enable-cache: true, setup-uv will attempt to use the GitHub Actions cache service. This workflow’s top-level permissions only grants id-token: write, so it likely lacks actions: write needed to save caches. Add actions: write to the workflow (and keep other permissions minimal) or disable caching here.

Copilot uses AI. Check for mistakes.

- name: Update uv.lock
run: uv lock
Expand Down
Loading