Skip to content

ci(deps): bump the github-actions group with 3 updates - #337

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-f538117abd
Open

ci(deps): bump the github-actions group with 3 updates#337
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-f538117abd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates: astral-sh/setup-uv, actions/upload-artifact and actions/download-artifact.

Updates astral-sh/setup-uv from 10.2.0 to 10.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

Commits

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
ci(deps): bump the github-actions group with 3 updates
b8979cb 
Bumps the github-actions group with 3 updates: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v10.2.0...v10.3.0)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v7.0.1...v7.0.2)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v8.0.1...v8.0.2)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 12, 2026
@coderabbitai

coderabbitai Bot commented Oct 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f2e3a7bc-b587-4a1e-a121-77b11b74ee97

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

Benchmark Results

🔴 Regression detected — threshold: 30%

scan-clean

Metric Base Compare Change
files_per_second 206.2 files/s 213.5 files/s ✅ +3.6%
scan_max_ms 5228.3 ms 4708.6 ms ✅ -9.9%
scan_mean_ms 4854.6 ms 4688.1 ms ✅ -3.4%
scan_min_ms 4659.6 ms 4673.7 ms ➡️ +0.3%

scan-violations

Metric Base Compare Change
files_per_second 126.4 files/s 127.4 files/s ✅ +0.8%
scan_max_ms 1636.6 ms 1585.0 ms ✅ -3.2%
scan_mean_ms 1590.6 ms 1578.1 ms ✅ -0.8%
scan_min_ms 1563.0 ms 1568.7 ms ➡️ +0.4%

fix-violations

Metric Base Compare Change
fix_files_per_second 52.8 files/s 52.2 files/s ➡️ -1.1%
fix_max_ms 3830.7 ms 3886.6 ms ➡️ +1.5%
fix_mean_ms 3808.9 ms 3851.2 ms ➡️ +1.1%
fix_min_ms 3791.5 ms 3807.5 ms ➡️ +0.4%

cpu

Metric Base Compare Change
cpu_clean_mean_ms 0.6 ms 0.6 ms ➡️ +0.5%
cpu_fix_mean_ms 1.6 ms 1.6 ms ➡️ +0.6%
cpu_violations_mean_ms 0.6 ms 0.6 ms ➡️ +0.3%

import

Metric Base Compare Change
import_package_max_ms 420.2 ms 413.3 ms ✅ -1.6%
import_package_mean_ms 248.3 ms 250.3 ms ➡️ +0.8%
import_package_min_ms 162.0 ms 168.4 ms ➡️ +3.9%
import_rules_max_ms 281.6 ms 532.6 ms 🔴 +89.1%
import_rules_mean_ms 268.3 ms 361.5 ms 🔴 +34.7%
import_rules_min_ms 255.3 ms 272.3 ms ➡️ +6.7%

View benchmark history

Updated 2026-10-12 18:13 UTC

@github-actions

github-actions Bot commented Oct 12, 2026

Copy link
Copy Markdown

📊 Test Coverage Report

Coverage: 89.13%

📥 Coverage XML available as artifact: coverage-xml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants