Skip to content

chore(deps): bump astral-sh/setup-uv from 4 to 7#2

Closed
dependabot[bot] wants to merge 105 commits into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-7
Closed

chore(deps): bump astral-sh/setup-uv from 4 to 7#2
dependabot[bot] wants to merge 105 commits into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-7

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Bumps astral-sh/setup-uv from 4 to 7.

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.2.1 🌈 update known checksums up to 0.9.28

Changes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v7.0.0 🌈 node24 and a lot of bugfixes

Changes

This release comes with a load of bug fixes and a speed up. Because of switching from node20 to node24 it is also a breaking change. If you are running on GitHub hosted runners this will just work, if you are using self-hosted runners make sure, that your runners are up to date. If you followed the normal installation instructions your self-hosted runner will keep itself updated.

This release also removes the deprecated input server-url which was used to download uv releases from a different server. The manifest-file input supersedes that functionality by adding a flexible way to define available versions and where they should be downloaded from.

Fixes

  • The action now respects when the environment variable UV_CACHE_DIR is already set and does not overwrite it. It now also finds cache-dir settings in config files if you set them.
  • Some users encountered problems that cache pruning took forever because they had some uv processes running in the background. Starting with uv version 0.8.24 this action uses uv cache prune --ci --force to ignore the running processes
  • If you just want to install uv but not have it available in path, this action now respects UV_NO_MODIFY_PATH
  • Some other actions also set the env var UV_CACHE_DIR. This action can now deal with that but as this could lead to unwanted behavior in some edgecases a warning is now displayed.

Improvements

If you are using minimum version specifiers for the version of uv to install for example

[tool.uv]
required-version = ">=0.8.17"

This action now detects that and directly uses the latest version. Previously it would download all available releases from the uv repo to determine the highest matching candidate for the version specifier, which took much more time.

If you are using other specifiers like 0.8.x this action still needs to download all available releases because the specifier defines an upper bound (not 0.9.0 or later) and "latest" would possibly not satisfy that.

🚨 Breaking changes

... (truncated)

Commits
  • 37802ad Fetch uv from Astral's mirror by default (#809)
  • 9f00d18 chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 (#808)
  • fd8f376 Switch to ESM for source and test, use CommonJS for dist (#806)
  • f9070de Bump deps (#805)
  • cadb67b chore: update known checksums for 0.10.10 (#804)
  • e06108d Use astral-sh/versions as primary version provider (#802)
  • 0f6ec07 docs: replace copilot instructions with AGENTS.md (#794)
  • 821e5c9 docs: add cross-client dependabot rollup skill (#793)
  • 6ee6290 chore(deps): bump versions (#792)
  • 9f332a1 Add riscv64 architecture support to platform detection (#791)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

AlligatorSky1017 and others added 30 commits March 18, 2026 17:11
Anima — Make Every Hardware Intelligent. An open-source Agent OS that
auto-discovers hardware devices, empowers each with AI Skills, and lets
them autonomously sense, decide, and collaborate.

Core modules:
- EventBus: async event system with wildcard and error isolation
- Rules Engine: fast-path safety rules with operators and cooldown
- Memory System: markdown preferences + JSON history + learned profile
- LLM Brain: skill-driven AI decisions with JSON response parsing
- Scheduler: periodic async job execution
- Discovery Orchestrator: adapter-based device scanning and registry
- MQTT Client: topic builders and pub/sub wrapper
- Skill System: 4 skills (humidifier, AC, light, coordinator)
- MIoT Adapter: Xiaomi device discovery and control via python-miio
- CLI (Rich) + FastAPI HTTP API + main orchestrator
- Docker Compose deployment (core + Mosquitto MQTT)

55 tests, all passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Move all files from anima/ to repo root so the repository root IS the
project root. docs/, core/, adapters/, skills/, tests/ are now all
top-level directories.

55 tests still passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Full English README with architecture, quick start, API reference,
  skill system docs, project structure, and roadmap
- Chinese README (README.zh-CN.md) with same content
- Language switcher links at top of both files

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Add LLM_DISABLE_THINKING config to pass extra_body for models
  that require disabling deep thinking (e.g., Doubao)
- Fix .env.example to use ANIMA_ prefix consistently
- Fix docker-compose.yml env var references
- Verified: Doubao doubao-seed-2-0-lite-260215 API working

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Three-column layout per design doc:
- Left: device list with type icons and online status
- Center: device cards with sensor data and capabilities
- Right: AI decision stream (real-time polling)
- Bottom: chat input bar

pnpm monorepo setup:
- `pnpm install` installs frontend + auto-runs `uv sync` for backend
- `pnpm dev` starts both Vite (port 3000) and Python backend (port 8080)
- Vite proxies /api/* and /health to backend

Also includes Doubao LLM support (LLM_DISABLE_THINKING config).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Switch dashboard from dark to light theme (white backgrounds,
  subtle borders, shadows, emerald/violet accents)
- Update both README.md and README.zh-CN.md:
  - "60 seconds quick start" with pnpm install + pnpm dev
  - Add Dashboard to module list
  - Fix env var names to ANIMA_ prefix
  - Add development scripts table
  - Update project structure with dashboard/
  - Update roadmap (Dashboard now in v0.1)
  - Add prerequisites section

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Backend:
- Add SettingsStore (data/config.json) for runtime user config
- Add Xiaomi Cloud discovery via micloud — login with Mi account,
  get all bound devices + tokens from cloud (primary discovery method)
- mDNS fallback when cloud not configured
- Settings API: /api/settings/xiaomi/connect, /disconnect, /status
- LLM config API: /api/settings/llm/configure, /status
- All settings accessible via Dashboard UI or .env file

Dashboard:
- Add Settings panel (gear icon in header)
- Xiaomi section: login form with account/password/region selector
- LLM section: API key, model, base URL, disable-thinking toggle
- Connection status indicators
- Auto-triggers device scan after Xiaomi login

Open-source design: users self-configure through Dashboard or .env,
no hardcoded credentials.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Backend returns masked_key (first 8 chars + ***) and disable_thinking
  status in /api/settings/llm/status
- Frontend shows current config as readonly summary when configured,
  with "修改配置" button to enter edit mode
- Separate display key (masked) from input key (new value)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Add /api/devices/add endpoint for manually adding devices by IP + token
- Auto-probes device model via miio on manual add
- Persists manual devices to data/config.json, reloads on startup
- Dashboard: new "手动添加设备" section in settings panel with
  IP, token, name, device type selector
- Xiaomi Cloud login is now optional, not required
- Discovery order: manual devices → cloud → mDNS fallback

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Replace password login with QR code scan (much higher success rate):
- User clicks "生成二维码" in Dashboard settings
- Scans with Mi Home app
- System auto-polls, gets serviceToken via longPolling
- Fetches ALL devices with tokens via encrypted Cloud API
- Registers devices in Discovery automatically

Backend:
- adapters/miot/xiaomi_cloud.py: XiaomiCloudConnector, QrLoginFlow,
  fetch_all_devices (RC4 encrypted API, homes + shared devices)
- /api/settings/xiaomi/qr/start + /qr/poll endpoints
- Cloud devices persisted to data/config.json

Frontend:
- QR code display with auto-polling status
- No password input needed — just scan and go
- Region selector (CN/TW/EU/US/SG/IN/RU)

55 tests passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Dashboard:
- Add ? Help button (top-right) with step-by-step usage guide
- 5 steps: configure LLM → QR scan → view devices → AI decisions → chat
- Includes manual device addition and external links

README (EN + CN):
- Add "After Launch: Connect Your Devices" section with 5-step guide
- Explain why QR scan is needed (token security)
- Point to in-app help button

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
After QR login, cloud devices now update existing local-discovered
devices (matched by IP) instead of creating duplicates. This eliminates
the "needs token" state for devices that already got tokens from cloud.

Before: local scan creates miot_local_xxx (no token), QR login creates
miot_cloud_xxx (with token) — user sees both, confused.

After: QR login finds matching IP → updates existing device in-place
with name, type, token, capabilities. No duplicates.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Device cards with "needs token" now show a detailed guide:
1. QR scan (recommended) — with link to settings
2. Multi-account hint — if device is on another account, scan with that one
3. Manual token input — collapsed by default, expandable

Help panel updated with FAQ:
- Why devices still need activation after QR scan (different account)
- Bluetooth vs WiFi devices
- Offline device troubleshooting

QR success message now hints about unmatched devices when relevant.

Principle: every edge case has a clear user-facing explanation and
actionable next step — not just error logs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 1, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jun 1, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/github_actions/astral-sh/setup-uv-7 branch June 1, 2026 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants