Skip to content

ci: bump the all-actions group across 1 directory with 2 updates - #849

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-518236acb1
Open

ci: bump the all-actions group across 1 directory with 2 updates#849
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-518236acb1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 2 updates in the / directory: astral-sh/setup-uv and NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml.

Updates astral-sh/setup-uv from 8.1.0 to 9.0.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v9.0.0 馃寛 Change prune-cache default to false

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

馃毃 Breaking changes

馃悰 Bug fixes

  • fix: fall back to distribution ID when os-release has no version field @鈥媍xzhong (#961)

馃殌 Enhancements

馃О Maintenance

馃摎 Documentation

猬嗭笍 Dependency updates

v8.2.0 馃寛 New inputs quiet and download-from-astral-mirror

Changes

This release brings two new inputs and a few bug fixes.

New inputs

Lets talk about the new inputs first.

quiet

Pretty simple. It turns of all info loggings. Useful if you use this in a composite action and are not interested in all the details. In the upcoming releases we will add log groups to fully implement support for "less noise"

[!NOTE]
Warnings and errors are always logged.

... (truncated)

Commits
  • c771a70 chore(deps): roll up Dependabot updates (#970)
  • 2f537ca chore: update known checksums for 0.11.30 (#968)
  • 2269552 Speed up version client by partial response reads (#807)
  • 47a7f4f Change prune-cache default to false (#967)
  • 71966ef chore(deps): roll up Dependabot updates (#962)
  • f12b1f0 fix: fall back to distribution ID when os-release has no version field (#961)
  • ecd24dd chore: update known checksums for 0.11.29 (#960)
  • 6a19136 docs: update version references to v8.3.2 (#949)
  • 11f9893 chore: roll up Dependabot updates (#948)
  • f798556 docs: update version references to v8.3.1 (#946)
  • Additional commits viewable in compare view

Updates NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml from 1.8.4 to 1.8.7

Release notes

Sourced from NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml's releases.

v1.8.7

1.8.7 (2026-08-03)

Bug Fixes

  • trust svcnemo-autobot in community labeling (#535) (df8dcb4)

v1.8.6

1.8.6 (2026-08-02)

Bug Fixes

v1.8.5

1.8.5 (2026-07-29)

Bug Fixes

  • tolerate trailing whitespace in /claude review trigger phrase (#531) (220aeab)
Changelog

Sourced from NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml's changelog.

Changelog

1.8.8 (2026-08-06)

Bug Fixes

  • preserve community bot membership checks (#538) (559a1f9)

1.8.7 (2026-08-03)

Bug Fixes

  • trust svcnemo-autobot in community labeling (#535) (df8dcb4)

1.8.6 (2026-08-02)

Bug Fixes

1.8.5 (2026-07-29)

Bug Fixes

  • tolerate trailing whitespace in /claude review trigger phrase (#531) (220aeab)

1.8.4 (2026-07-15)

Bug Fixes

  • Claude review comment identity and publish contract (#525) (e630cd2)

1.8.3 (2026-07-10)

Bug Fixes

  • allow Claude review top-level PR comments (#523) (3ce78b3)

1.8.2 (2026-07-10)

Bug Fixes

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
astral-sh/setup-uv [>= 8.2.a, < 8.3]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 7, 2026 15:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026
Bumps the all-actions group with 2 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml](https://github.com/nvidia-nemo/fw-ci-templates).


Updates `astral-sh/setup-uv` from 8.1.0 to 9.0.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@v8.1.0...c771a70)

Updates `NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml` from 1.8.4 to 1.8.7
- [Release notes](https://github.com/nvidia-nemo/fw-ci-templates/releases)
- [Changelog](https://github.com/NVIDIA-NeMo/FW-CI-templates/blob/main/CHANGELOG.md)
- [Commits](NVIDIA-NeMo/FW-CI-templates@209ac79...98ea77e)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml
  dependency-version: 1.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci: bump the all-actions group with 2 updates ci: bump the all-actions group across 1 directory with 2 updates Aug 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/all-actions-518236acb1 branch from 85e9d2b to 1c81709 Compare August 7, 2026 16:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants