From 314d2268ab1e2a52b7e54c28e58b9f0fc725ed21 Mon Sep 17 00:00:00 2001 From: Matthieu Darbois Date: Sun, 5 Apr 2026 07:37:55 +0200 Subject: [PATCH] fix(ci): use uv to run nox in the update-dependencies workflow (#2808) While the `wntrblm/nox` action is itself pinned, it's a composite action using an unpinned `actions/setup-python` action which is now rejected. Let's use `astral-sh/setup-uv` instead and run `nox` using `uv`. --- .github/workflows/update-dependencies.yml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/update-dependencies.yml b/.github/workflows/update-dependencies.yml index 9323261b..14c4cf4f 100644 --- a/.github/workflows/update-dependencies.yml +++ b/.github/workflows/update-dependencies.yml @@ -39,14 +39,16 @@ jobs: with: persist-credentials: false - - uses: wntrblm/nox@5a277b752f6094150e25237d47c34168e2b7526e # 2026.02.09 + - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0 + with: + python-version: "3.14" - name: "Run update: dependencies" - run: nox --force-color -s update_constraints + run: uvx nox --force-color -s update_constraints - name: "Run update: python configs" - run: nox --force-color -s update_pins + run: uvx nox --force-color -s update_pins - name: "Run update: docs user projects" - run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }} + run: uvx nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }} - name: Create Pull Request if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'