Skip to content

Bump astral-sh/setup-uv from 4 to 6 - #15

Merged
dependabot[bot] merged 1 commit into
masterfrom
dependabot/github_actions/astral-sh/setup-uv-6
Aug 14, 2025
Merged

Bump astral-sh/setup-uv from 4 to 6#15
dependabot[bot] merged 1 commit into
masterfrom
dependabot/github_actions/astral-sh/setup-uv-6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2025

Copy link
Copy Markdown

Bumps astral-sh/setup-uv from 4 to 6.

Release notes

Sourced from astral-sh/setup-uv's releases.

v6.2.1 🌈 Fix "No such file or directory version-manifest.json"

Changes

Release v6.2.0 contained a bug that slipped through the automated test. The action tried to look for the default version-manifest.json in the root of the repostory using this action instead of relative to the action itself.

🐛 Bug fixes

v6.0.0 🌈 activate-environment and working-directory

Changes

This version contains some breaking changes which have been gathering up for a while. Lets dive into them:

Activate environment

In previous versions using the input python-version automatically activated a venv at the repository root. This led to some unwanted side-effects, was sometimes unexpected and not flexible enough.

The venv activation is now explicitly controlled with the new input activate-environment (false by default):

- name: Install the latest version of uv and activate the environment
  uses: astral-sh/setup-uv@v6
  with:
    activate-environment: true
- run: uv pip install pip

The venv gets created by the uv venv command so the python version is controlled by the python-version input or the files pyproject.toml, uv.toml, .python-version in the working-directory.

Working Directory

The new input working-directory controls where we look for pyproject.toml, uv.toml and .python-version files which are used to determine the version of uv and python to install.

It can also be used to control where the venv gets created.

- name: Install uv based on the config files in the working-directory
  uses: astral-sh/setup-uv@v6
  with:
    working-directory: my/subproject/dir

... (truncated)

Commits
  • bd01e18 Do not warn when version not in manifest-file (#462)
  • c6a5eba chore: update known versions for 0.7.14 (#459)
  • 790df8f Revert "Set expected cache dir drive to C: on windows (#451)" (#460)
  • 445689e Use latest version from manifest-file (#458)
  • a02a550 Look for version-manifest.json relative to action path (#456)
  • 60cc2b4 Add input manifest-file (#454)
  • 7bbb36f chore: update known versions for 0.7.13 and 0.7.12 (#444)
  • 60ecb38 Set expected cache dir drive to C: on windows (#451)
  • 252c995 chore: update known versions for 0.7.11 (#442)
  • 477a814 chore: update known versions for 0.7.10 (#440)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jun 29, 2025
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 4 to 6.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v4...v6)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from masterold to master August 14, 2025 16:01
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/astral-sh/setup-uv-6 branch from f2105f0 to d28b6be Compare August 14, 2025 16:01
@bosd

bosd commented Aug 14, 2025

Copy link
Copy Markdown
Member

@dependabot merge

@dependabot
dependabot Bot merged commit dc294fc into master Aug 14, 2025
20 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/astral-sh/setup-uv-6 branch August 14, 2025 16:13
bosd pushed a commit that referenced this pull request Aug 1, 2026
… + --no-cache

The on-disk id-map cache was keyed only by host+port+db. After the target database
is rebuilt (or a *different* dump is restored under the same name), the record ids
change but the key doesn't, so cached natural-key -> db-id mappings silently point
at whatever now owns those ids — wrong-record writes with no warning.

Fold the Odoo `database.uuid` (ir.config_parameter) into the cache fingerprint: a
rebuild/re-init mints a new uuid (fresh cache), while a pg_restore of the *same*
dump preserves it (and the ids), so the cache stays valid — no needless
invalidation. The uuid read is best-effort and memoized per connection; a
minimal-privilege API user who can't read ir.config_parameter falls back to the
old host+port+db key (restore-detection just unavailable for them).

Also add a `--no-cache` flag (disables all id-map cache reads/writes for the run)
as a universal escape hatch, and dedupe get_cache_dir onto resolve_cache_dir so
both share the fingerprint and the switch.

Tests cover the uuid fingerprint, the ACL/read-failure fallback, and --no-cache.
Full suite: 1435 passed. Docs: a note under the relation pre-resolution section.
bosd added a commit that referenced this pull request Aug 1, 2026
…o-cache (#225)

* fix(#15): invalidate the id-map cache on DB restore via database.uuid + --no-cache

The on-disk id-map cache was keyed only by host+port+db. After the target database
is rebuilt (or a *different* dump is restored under the same name), the record ids
change but the key doesn't, so cached natural-key -> db-id mappings silently point
at whatever now owns those ids — wrong-record writes with no warning.

Fold the Odoo `database.uuid` (ir.config_parameter) into the cache fingerprint: a
rebuild/re-init mints a new uuid (fresh cache), while a pg_restore of the *same*
dump preserves it (and the ids), so the cache stays valid — no needless
invalidation. The uuid read is best-effort and memoized per connection; a
minimal-privilege API user who can't read ir.config_parameter falls back to the
old host+port+db key (restore-detection just unavailable for them).

Also add a `--no-cache` flag (disables all id-map cache reads/writes for the run)
as a universal escape hatch, and dedupe get_cache_dir onto resolve_cache_dir so
both share the fingerprint and the switch.

Tests cover the uuid fingerprint, the ACL/read-failure fallback, and --no-cache.
Full suite: 1435 passed. Docs: a note under the relation pre-resolution section.

* test: narrow Optional fingerprint before .endswith (mypy)

_connection_fingerprint returns Optional[str]; assert non-None before the
suffix checks so full-scope mypy (src tests) passes.

---------

Co-authored-by: bosd <5e2fd43-d292-4c90-9d1f-74ff3436329a@anonaddy.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant