[dependabot]

Bumps astral-sh/setup-uv from 10.3.0 to 10.3.2.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

• chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

• docs: update version references to v10.3.1 @github-actions[bot] (#1102)

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

• fix: preserve cache error class names in save-cache bundle @​dannyward630 (#1093)

🧰 Maintenance

• chore: update known checksums for 0.13.4 @github-actions[bot] (#1099)
• chore: update known checksums for 0.13.2/0.13.3 @github-actions[bot] (#1098)
• chore: update known checksums for 0.13.1 @github-actions[bot] (#1094)
• Verify npm dependency signatures before builds @​zaniebot (#1027)

📚 Documentation

• docs: cache-dependency-glob matches relative to the working directory @​flange-ipb (#1092)
• docs: update version references to v10.3.0 @github-actions[bot] (#1090)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#1101)

Commits

• 07a047e chore: update known checksums for 0.13.5 (#1103)
• e1b8536 docs: update version references to v10.3.1 (#1102)
• 18d369b chore(deps): roll up Dependabot updates (#1101)
• 4ad2329 chore: update known checksums for 0.13.4 (#1099)
• 4bc6759 chore: update known checksums for 0.13.2/0.13.3 (#1098)
• c97f06e fix: preserve cache error class names in save-cache bundle (#1093)
• 8ca4be0 chore: update known checksums for 0.13.1 (#1094)
• b627d85 docs: cache-dependency-glob matches relative to the working directory (#1092)
• f8c8897 Verify npm dependency signatures before builds (#1027)
• f64d32b docs: update version references to v10.3.0 (#1090)
• See full diff in compare view

[rtibblesbot]

🟡 Waiting for changes

Outcome: reviewed a424552

Last updated: 2026-11-02 09:03 UTC

[rtibblesbot]

PR #405: the CI failure looks unrelated to this bump.

astral-sh/setup-uv 10.3.0 → 10.3.2 is a patch bump to CI tooling. The changelog lists no breaking, security or peer-dependency changes. All 12 uses: lines are updated.

• Only Python unit tests + cryptography (3.11) fails. Python tests fails because it aggregates job results.
• The failing step is Test with tox. setup-uv installed cleanly.
• The failing assertions compare instance IDs, e.g. 'ritif-rikol' == 'ritif-rikol' in test_api.py:1151 and sync/test_controller.py:109. That pattern suggests test pollution.
• The other tox jobs use the same action version and pass.

Re-run the failed job. If it fails again, check whether the same tests fail on release-v0.9.x without this bump.

---

Written by rtibblesbot, an LLM-based coding agent.

[rtibblesbot]

@dependabot rebase

[rtibblesbot]

PR #405: CI fails in Python unit tests + cryptography (3.11, 3.14), and the jobs have not been re-run. No new commits; the 1 prior finding is still open.

• Package: astral-sh/setup-uv 10.3.0 → 10.3.2 (patch, CI tooling)
• Changelog: no breaking changes, deprecations, or security fixes. 10.3.1 fixes cache error class names. 10.3.2 adds uv 0.13.5 checksums.
• Diff: only the 12 version pins change; no inputs change.
• CI: the failure is in the Test with tox step, not the setup-uv step. Parent 799d70d passes. The other tox jobs pass on this version. The bump is unlikely to be the cause.

HOLD: re-run the failed jobs before merging.

Prior-finding status

UNADDRESSED — .github/workflows/tox.yml — CI failure in Python unit tests + cryptography, not re-run

---

Written by rtibblesbot, an LLM-based coding agent.

[rtibblesbot]

PR #405: CI still has no passing run, so 0 of 1 prior findings is resolved.

• astral-sh/setup-uv 10.3.0 → 10.3.2: patch, CI tooling only (development).
• Changelog: no breaking changes, deprecations, security fixes or peer changes.
• 10.3.1 fixes cache-save warnings; 10.3.2 adds uv 0.13.5 checksums.
• Diff: the 12 setup-uv pins change and nothing else.
• CI: the re-run of Python unit tests + cryptography (3.11) failed at Download wheel artifact (Artifact not found for name: wheel).
• The (3.14) job was cancelled.
• The wheel artifact has retention-days: 1 (tox.yml:54) and expired before the re-run.
• The tests never ran; the failure precedes setup-uv, so the bump did not cause it.
• Ask: re-run all jobs in the workflow so a fresh wheel is built and the tests run against setup-uv 10.3.2.

Prior-finding status

UNADDRESSED — .github/workflows/tox.yml:68 — CI failure in Python unit tests + cryptography; the re-run hit the expired wheel artifact

---

Written by rtibblesbot, an LLM-based coding agent.

[rtibblesbot]

Tracked in #409.

[rtibblesbot]

Quick check on rtibblesbot's review of this PR: react 👍 helpful · 😕 mixed · 👎 not helpful. Reply with anything specific.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[rtibblesbot]

PR #405: the one prior finding is resolved. No new findings.

• astral-sh/setup-uv 10.3.0 → 10.3.2: patch, CI tooling only (development)
• Breaking changes, security fixes, peer changes: none
• CI passing.

Prior-finding status

RESOLVED — .github/workflows/tox.yml:68 — CI failure in Python unit tests + cryptography

---

Written by rtibblesbot, an LLM-based coding agent.