Python SDK for interacting with VyOS API (mirror of https://github.com/vyos-contrib/pyvyos.git) https://git.amelek.net/vyos-contrib/pyvyos.git/atom?h=dependabot%2Fgithub_actions%2Fastral-sh%2Fsetup-uv-9.0.0 2026-08-01T12:46:03+00:00 2026-08-01T12:46:03+00:00 dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com 2026-08-01T12:46:03+00:00 urn:sha1:43ec7764d1a89e3fc7795c26b24579d2b98c3abf Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.2.0 to 9.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/fac544c07dec837d0ccb6301d7b5580bf5edae39...c771a70e6277c0a99b617c7a806ffedaca235ff9) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2026-07-26T13:55:50+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-07-26T13:55:50+00:00 urn:sha1:51b2625d8a4f376b2d7c80bb022f7647e7f80b40 Bump actions/checkout from 6.0.2 to 7.0.0 2026-07-26T13:55:37+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-07-26T13:55:37+00:00 urn:sha1:edab63680d70cc1347c7fce0f55175c39bdd7d1d Bump actions/setup-python from 6.2.0 to 6.3.0 2026-07-01T12:48:53+00:00 dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com 2026-07-01T12:48:53+00:00 urn:sha1:56408f9cc868ce4e71fac63118efc35816c4ad23 Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> 2026-07-01T12:48:49+00:00 dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com 2026-07-01T12:48:49+00:00 urn:sha1:cd23d2b960c79a4f965ccfdbf2b7b54165cddea2 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.1.0 to 8.2.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/08807647e7069bb48b6ef5acd8ec9567f424441b...fac544c07dec837d0ccb6301d7b5580bf5edae39) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 8.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> 2026-07-01T12:48:46+00:00 dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com 2026-07-01T12:48:46+00:00 urn:sha1:32210137c1609e3a6fa5b3cf6b1e7e88a724b745 Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.2.0 to 6.3.0. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> 2026-05-19T06:14:08+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-05-19T06:14:08+00:00 urn:sha1:6071528289e4a8b11a772433c33851136d30f133 Per OpenSSF Scorecard 'Pinned-Dependencies' guidance, third-party GitHub Actions should be referenced by full commit SHA, not by tag. Tags are mutable; a SHA is not. Each pin keeps a '# vX.Y.Z' trailing comment so Dependabot can read the current version and propose updates while still pinning by SHA. - actions/checkout de0fac2 # v6.0.2 - actions/setup-python a309ff8 # v6.2.0 - astral-sh/setup-uv 0880764 # v8.1.0 - pypa/gh-action-pypi-publish cef2210 # v1.14.0 This commit does not change pyvyos HTTP payloads, request handling, or response parsing. 2026-05-19T06:10:07+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-05-19T06:10:07+00:00 urn:sha1:4080faf81dcfe248394643cfce14112f3346b62f 2026-05-19T06:08:52+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-05-19T06:08:52+00:00 urn:sha1:62aa8b885e45ad9cd8f8ce5d2a48b4aeff82e502 GitHub deprecation notice: Node.js 20 will be removed from runners in September 2026 and forced to Node 24 in June 2026. Pin to current majors that already run on Node 24. - actions/checkout@v4 -> v6 - actions/setup-python@v5 -> v6 - astral-sh/setup-uv@v3 -> v8 - pypa/gh-action-pypi-publish@v1.13.0 -> v1.14.0 - pre-commit/pre-commit-hooks@v5.0.0 -> v6.0.0 This commit does not change pyvyos HTTP payloads, request handling, or response parsing. 2026-05-19T03:20:53+00:00 Roberto Bertó 463349+robertoberto@users.noreply.github.com 2026-05-19T03:20:53+00:00 urn:sha1:c5a2ae114835791de16c5b982632569377c39bfa The matrix job in commit 7aa4989 left astral-sh/setup-uv@v3 with its default cache fingerprint of "**/uv.lock". This repo is a library and intentionally does not commit uv.lock (commit a2df706), so the glob matches nothing and the action errors out. Switch the fingerprint to pyproject.toml, the actual source of truth for dependencies. Cache hits remain across PRs that don't touch dependencies; cache invalidates on dependency changes.