From 8eaf5fd115f036d207be236009938261758e30f2 Mon Sep 17 00:00:00 2001 From: "Adam Perry @ OpenAI" Date: Thu, 22 Oct 2026 19:31:50 +0000 Subject: [PATCH] Bump uv to 0.13.5 in CI and release workflows (#56248) ## What changed Update `astral-sh/setup-uv` to `v10.3.2` and pin `uv` to `0.13.5` across the affected build, test, and release workflows. Refresh the checksum used for DotSlash publishing. Install `uv` in the Python SDK wheel test from a hash-pinned requirements file, requiring a binary distribution and hash verification. GitOrigin-RevId: 05295f6468f4897ca08672ccf9dc4e9b7d717fa8 --- .github/actions/build-codex-packages/action.yml | 4 ++-- .github/actions/publish-dotslash/action.yml | 6 +++--- .github/workflows/python-runtime-release.yml | 4 ++-- .github/workflows/python-sdk-cli-release.yml | 8 ++++---- .github/workflows/python-sdk-release.yml | 8 ++++---- .github/workflows/repo-checks.yml | 4 ++-- .github/workflows/rust-release-provisioned-macos.yml | 4 ++-- .github/workflows/sdk.yml | 6 +++--- sdk/python/tests/requirements-uv.txt | 3 +++ 9 files changed, 25 insertions(+), 22 deletions(-) create mode 100644 sdk/python/tests/requirements-uv.txt diff --git a/.github/actions/build-codex-packages/action.yml b/.github/actions/build-codex-packages/action.yml index dea7cb623f..86d9fdeae8 100644 --- a/.github/actions/build-codex-packages/action.yml +++ b/.github/actions/build-codex-packages/action.yml @@ -52,9 +52,9 @@ runs: python-version: "3.12" - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Install Linux build dependencies if: ${{ runner.os == 'Linux' }} diff --git a/.github/actions/publish-dotslash/action.yml b/.github/actions/publish-dotslash/action.yml index 1ca3a1addc..75c5e59220 100644 --- a/.github/actions/publish-dotslash/action.yml +++ b/.github/actions/publish-dotslash/action.yml @@ -21,10 +21,10 @@ runs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.12.13" - checksum: "745765a3b6e360ad76743599ae5c42e9278c7edf8bbff9fc76d05bf2623a04dd" + version: "0.13.5" + checksum: "f68d291c75783122dad58ab77def0e13f3233f358731db5d6d7e8715603b928f" github-token: "" enable-cache: false diff --git a/.github/workflows/python-runtime-release.yml b/.github/workflows/python-runtime-release.yml index f7f0b4af23..95919cf47e 100644 --- a/.github/workflows/python-runtime-release.yml +++ b/.github/workflows/python-runtime-release.yml @@ -51,9 +51,9 @@ jobs: skip-existing: true - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Verify Python runtime wheels are available on PyPI env: diff --git a/.github/workflows/python-sdk-cli-release.yml b/.github/workflows/python-sdk-cli-release.yml index 2f7f6a7f19..3af4457744 100644 --- a/.github/workflows/python-sdk-cli-release.yml +++ b/.github/workflows/python-sdk-cli-release.yml @@ -103,9 +103,9 @@ jobs: skip-existing: true - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Verify Python runtime wheels are available on PyPI env: @@ -146,9 +146,9 @@ jobs: skip-existing: true - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Verify Python SDK is available on PyPI env: diff --git a/.github/workflows/python-sdk-release.yml b/.github/workflows/python-sdk-release.yml index 0e01f23a84..bb1ee01ce3 100644 --- a/.github/workflows/python-sdk-release.yml +++ b/.github/workflows/python-sdk-release.yml @@ -120,9 +120,9 @@ jobs: skip-existing: true - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Verify Python runtime wheels are available on PyPI env: @@ -162,9 +162,9 @@ jobs: skip-existing: true - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Verify Python SDK is available on PyPI env: diff --git a/.github/workflows/repo-checks.yml b/.github/workflows/repo-checks.yml index 4f05cd0604..163e5b0448 100644 --- a/.github/workflows/repo-checks.yml +++ b/.github/workflows/repo-checks.yml @@ -27,9 +27,9 @@ jobs: run: python3 .github/scripts/verify_bazel_clippy_lints.py - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Test downstream Python release resolution run: python3 -m unittest discover -s .github/scripts -p 'test_resolve_python_cli_release.py' diff --git a/.github/workflows/rust-release-provisioned-macos.yml b/.github/workflows/rust-release-provisioned-macos.yml index bbed090187..9a1008d8e6 100644 --- a/.github/workflows/rust-release-provisioned-macos.yml +++ b/.github/workflows/rust-release-provisioned-macos.yml @@ -180,9 +180,9 @@ jobs: bin codex-resources codex-path codex-package.json CodexCLI.app (cd verified && shasum -a 256 "codex-provisioned-package-$TARGET.tar.gz" > SHA256SUMS) - uses: ./.github/actions/setup-ci - - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: ${{ matrix.target }}-app-server diff --git a/.github/workflows/sdk.yml b/.github/workflows/sdk.yml index 3f91dd18fa..4cb081eb94 100644 --- a/.github/workflows/sdk.yml +++ b/.github/workflows/sdk.yml @@ -28,7 +28,7 @@ jobs: python:3.12-slim \ sh -euxc ' python -m venv /tmp/build - /tmp/build/bin/python -m pip install uv==0.11.3 + /tmp/build/bin/python -m pip install --only-binary=:all: --require-hashes -r tests/requirements-uv.txt /tmp/build/bin/uv build --wheel --out-dir /tmp/dist python -m venv /tmp/installed /tmp/build/bin/uv pip install --python /tmp/installed/bin/python /tmp/dist/*.whl @@ -136,9 +136,9 @@ jobs: run: pnpm -r --filter ./sdk/typescript run test - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: - version: "0.11.3" + version: "0.13.5" - name: Test Python SDK against the same CLI working-directory: sdk/python diff --git a/sdk/python/tests/requirements-uv.txt b/sdk/python/tests/requirements-uv.txt new file mode 100644 index 0000000000..4f1003d9fd --- /dev/null +++ b/sdk/python/tests/requirements-uv.txt @@ -0,0 +1,3 @@ +# Verify the Linux x86-64 wheel even if the test image's pip trusts a stale CA. +uv==0.13.5 \ + --hash=sha256:fa8d26e08e34c29c0c4e820cf3181757086d547240b4f4d31ff1d8bd810ca946