Skip to content

chore(deps): bump astral-sh/setup-uv from 10.0.1 to 10.2.0 - #90

Merged
ma2za merged 47 commits into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.2.0
Oct 11, 2026
Merged

ma2za merged 47 commits into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps astral-sh/setup-uv from 10.0.1 to 10.2.0.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Current review status

Review priority: 8 of 9; PR #100 is the packaging prerequisite. Updated against main 17e8fcc while preserving development version 1.37.0 and the hosted-service changes. Includes the shared service-extra audit correction from #100. No PR has been merged.

Current branch validation: 11 focused tests passed; Ruff formatting/lint, mypy, wheel/sdist builds and release verification passed. Fresh CI on the current head completed with 18 successful checks, one skipped check, and no failures.

…ckend with high-precision metrics confirmation
…positeBackend with high-precision metrics confirmation"

This reverts commit 35f6e55.
…baseline

- Full-suite observability: lazy import datasets, harden evaluator tests with bounded timeouts and diagnostics, verify full suite (449 passed, 0 failures, 94.74% coverage)
- Ensemble contract: reconcile remote detector weight to 0.50 in spans.py and docs/architecture.md, add provenance-based conflict, topology, and priority tests
- Observability claims: remove unsupported <1ms claims, test fresh subprocess import isolation, harden OTel span processor against immutable containers
- Operational boundaries: clarify in docs/deployment.md that KMS envelope encryption, key rotation, and TTL storage are caller responsibilities
- Benchmarks: update docs/benchmarks.md with 1,000-sample quality evaluation (0.8308 F1, 0.8611 Precision, 0.8026 Recall)
- Date 1.26.0 in CHANGELOG.md
- Mark 1.26.0 Published in ROADMAP.md and update handover release state
- Reconcile docs/quality_benchmarks.md and docs/benchmarks.md
- Commit sanitized machine-readable 1.26.0 baseline record (benchmarks/results/1.26.0_ai4privacy_validation_1000.json)
- Set fail-on-alert to false in .github/workflows/benchmark.yml to review timing on noisy runners
- Bump project version in pyproject.toml and sync uv.lock
- Update active development state in HANDOVER.md
…or atlas

- benchmarks/evaluate_quality.py: instrument per-row sufficient statistics, exact boundary metrics, character-level masking recall, macro F1, and causal error categorization (missing_candidate, threshold_suppression, label_confusion, boundary_mismatch, conflict_loss) with --manifest support
- benchmarks/compare_quality.py: deterministic artifact comparator with paired document-level bootstrap resampling (95% CI on delta F1/exact F1), per-entity shifts, and error category shifts
- benchmarks/build_manifests.py: template-grouped partition builder preventing near-duplicate leakage across development, calibration, and test splits
- tests/unit: unit test coverage for comparator, evaluator, and manifest builder
…ion runner

- benchmarks/audit_contamination.py: audit pairwise row hash and template collisions across partitions and verify isolation from validation data
- benchmarks/run_ablations.py: execute component ablations on identical development rows with paired statistical delta and error category reporting
- tests/unit: unit tests for contamination auditor and ablation suite
ma2za and others added 13 commits September 27, 2026 18:13
…textual word skipping, and international postal formats
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.0.1 to 10.2.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@20cfd1b...c18668a)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 29, 2026
@dependabot
dependabot Bot requested a review from ma2za as a code owner September 29, 2026 06:44
@ma2za
ma2za force-pushed the dependabot/github_actions/astral-sh/setup-uv-10.2.0 branch from 93f4d60 to bb6558e Compare October 8, 2026 08:30
@ma2za
ma2za merged commit 9629a8f into main Oct 11, 2026
3 checks passed
@ma2za
ma2za deleted the dependabot/github_actions/astral-sh/setup-uv-10.2.0 branch October 11, 2026 07:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant