fix(ci): use uv to run nox in the update-dependencies workflow (#2808)

While the `wntrblm/nox` action is itself pinned, it's a composite action using an unpinned `actions/setup-python` action which is now rejected.
Let's use `astral-sh/setup-uv` instead and run `nox` using `uv`.
This commit is contained in:
Matthieu Darbois
2026-04-05 00:37:55 -05:00
committed by GitHub
parent b7e8713e11
commit 314d2268ab
+6 -4
View File
@@ -39,14 +39,16 @@ jobs:
with:
persist-credentials: false
- uses: wntrblm/nox@5a277b752f6094150e25237d47c34168e2b7526e # 2026.02.09
- uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
with:
python-version: "3.14"
- name: "Run update: dependencies"
run: nox --force-color -s update_constraints
run: uvx nox --force-color -s update_constraints
- name: "Run update: python configs"
run: nox --force-color -s update_pins
run: uvx nox --force-color -s update_pins
- name: "Run update: docs user projects"
run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
run: uvx nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
- name: Create Pull Request
if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'