setup-uv

mirror of https://github.com/astral-sh/setup-uv.git synced 2025-12-11 11:04:47 +00:00

Files

William Woodruff 64f7f4e15f chore: use npm ci --ignore-scripts everywhere (#699 )

Like https://github.com/astral-sh/ruff-action/pull/276 🙂 

This also adds cooldown stanzas to the Dependabot updater rules: this
ensures that we only receive dependency bumps once they're at least a
week old, which should reduce the window of opportunity for an attacker
who temporarily compromises popular packages (like with "Shai-Hulud"
last week).

Signed-off-by: William Woodruff <william@astral.sh>

2025-12-02 08:08:49 +01:00

scripts

Check that all jobs are in all-tests-passed.needs (#432 )

2025-05-27 18:25:00 +02:00

workflows

chore: use npm ci --ignore-scripts everywhere (#699 )

2025-12-02 08:08:49 +01:00

actionlint.yaml

Use node24 instead of node20 (#608 )

2025-10-07 08:44:57 +02:00

copilot-instructions.md

chore: use npm ci --ignore-scripts everywhere (#699 )