[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	patch	v10.3.0 → v10.3.3
docker/login-action	action	minor	v4.6.0 → v4.7.0

---

Release Notes

astral-sh/setup-uv

v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallback

Compare Source

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

• Use Astral mirror for version manifests with GitHub fallback @​eifinger (#​1119)
• fix: allow whitespace in uv requirement specifiers @​soujasK (#​1112)
• fix: resolve ~= specifiers with PEP 440 semantics @​soujasK (#​1111)
• fix: only report a saved cache when saving succeeded @​soujasK (#​1110)

🧰 Maintenance

• chore: update known checksums for 0.13.6 @​github-actions[bot] (#​1117)

📚 Documentation

• docs: use JSDoc for compatible release specifier comment @​eifinger (#​1113)
• docs: update version references to v10.3.2 @​github-actions[bot] (#​1104)

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

• chore: update known checksums for 0.13.5 @​github-actions[bot] (#​1103)

📚 Documentation

• docs: update version references to v10.3.1 @​github-actions[bot] (#​1102)

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

• fix: preserve cache error class names in save-cache bundle @​dannyward630 (#​1093)

🧰 Maintenance

• chore: update known checksums for 0.13.4 @​github-actions[bot] (#​1099)
• chore: update known checksums for 0.13.2/0.13.3 @​github-actions[bot] (#​1098)
• chore: update known checksums for 0.13.1 @​github-actions[bot] (#​1094)
• Verify npm dependency signatures before builds @​zaniebot (#​1027)

📚 Documentation

• docs: cache-dependency-glob matches relative to the working directory @​flange-ipb (#​1092)
• docs: update version references to v10.3.0 @​github-actions[bot] (#​1090)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#​1101)

docker/login-action

v4.7.0

Compare Source

• Preserve explicit ECR settings in registry-auth by @​crazy-max in #​1089
• Use registry hosts for scoped credentials by @​crazy-max in #​1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in #​1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in #​1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in #​1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in #​1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1077
• Bump csv-parse from 7.0.1 to 7.0.3 in #​1078
• Bump handlebars from 4.7.9 to 4.7.10 in #​1091
• Bump js-yaml from 5.2.2 to 5.5.0 in #​1066
• Bump postcss from 8.5.22 to 8.5.26 in #​1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #​1092
• Bump source-map-js from 1.2.1 to 1.2.2 in #​1090
• Bump undici from 6.27.0 to 6.29.1 in #​1085
• Bump uuid from 14.0.1 to 14.0.3 in #​1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[flaberpengu]

Simple version bumps, LGTM