pyvyos.git/.github/workflows/python-publish.yml, branch dependabot/github_actions/astral-sh/setup-uv-8.2.0Python SDK for interacting with VyOS API (mirror of https://github.com/vyos-contrib/pyvyos.git)
https://git.amelek.net/vyos-contrib/pyvyos.git/atom?h=dependabot%2Fgithub_actions%2Fastral-sh%2Fsetup-uv-8.2.02026-05-19T06:14:08+00:00ci: pin actions by full commit SHA2026-05-19T06:14:08+00:00Roberto Bertó463349+robertoberto@users.noreply.github.com2026-05-19T06:14:08+00:00urn:sha1:6071528289e4a8b11a772433c33851136d30f133
Per OpenSSF Scorecard 'Pinned-Dependencies' guidance, third-party
GitHub Actions should be referenced by full commit SHA, not by tag.
Tags are mutable; a SHA is not.
Each pin keeps a '# vX.Y.Z' trailing comment so Dependabot can read
the current version and propose updates while still pinning by SHA.
- actions/checkout de0fac2 # v6.0.2
- actions/setup-python a309ff8 # v6.2.0
- astral-sh/setup-uv 0880764 # v8.1.0
- pypa/gh-action-pypi-publish cef2210 # v1.14.0
This commit does not change pyvyos HTTP payloads, request handling, or
response parsing.
ci: bump actions off Node.js 202026-05-19T06:08:52+00:00Roberto Bertó463349+robertoberto@users.noreply.github.com2026-05-19T06:08:52+00:00urn:sha1:62aa8b885e45ad9cd8f8ce5d2a48b4aeff82e502
GitHub deprecation notice: Node.js 20 will be removed from runners in
September 2026 and forced to Node 24 in June 2026. Pin to current
majors that already run on Node 24.
- actions/checkout@v4 -> v6
- actions/setup-python@v5 -> v6
- astral-sh/setup-uv@v3 -> v8
- pypa/gh-action-pypi-publish@v1.13.0 -> v1.14.0
- pre-commit/pre-commit-hooks@v5.0.0 -> v6.0.0
This commit does not change pyvyos HTTP payloads, request handling, or
response parsing.
Fix - Code fix2025-09-18T21:12:10+00:00eduardormoraiseduardoromorais@gmail.com2025-09-18T21:12:10+00:00urn:sha1:bdfad17e161766bbe8fe0b28eeb76ff0bebddb2aFeature - Changing the dependency management tool to uv. Updating the Python version and dependencies2025-09-18T21:07:53+00:00eduardormoraiseduardoromorais@gmail.com2025-09-18T21:07:53+00:00urn:sha1:9d5341b6933808a6ebec6d69430687a25653dd1cupdated actions to use latest versions2024-03-10T16:42:28+00:00Roberto Bertóroberto.berto@gmail.com2024-03-10T16:42:28+00:00urn:sha1:bf3d1770decc1810fdb69d4d32b2a9e89f6073b7Create python-publish.yml2023-12-13T20:32:14+00:00Roberto Bertóroberto.berto@gmail.com2023-12-13T20:32:14+00:00urn:sha1:d5fcce81b1f0972ecfd948c1df6ab2df73c2c8fa