chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 by dependabot[bot] · Pull Request #4026 · openai/openai-python · GitHub
Skip to content

chore(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 - #4026

Merged
jbeckwith-oai merged 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.2.0
Oct 9, 2026
Merged

jbeckwith-oai merged 1 commit into
mainfrom
dependabot/github_actions/astral-sh/setup-uv-10.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor

Bumps astral-sh/setup-uv from 10.1.0 to 10.2.0.

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.1.0 to 10.2.0.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@bec219d...c18668a)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 5, 2026 09:39
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 5, 2026
@openai-sdks

openai-sdks Bot commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown
Contributor

@jbeckwith-oai jbeckwith-oai left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the full workflow diff and upstream v10.1.0...v10.2.0 changes. The full SHA resolves to the stated release. The behavioral change disables automatic cache saves for merge-group events; explicitly pinned uv 0.12.5, dependency resolution, job permissions, and the separate build/upload publishing boundary are preserved. No SDK source, published metadata, Python support, or consumer dependency changes. Two independent reviewers completed two consecutive clean rounds. Exact-head CI is green, including Python 3.10/3.14, HTTPX2, lint, build, dependency locks, policy, CodeQL, breaking-change detection, and custom-code gates. Approved for normal protected merge; no bypasses.

@jbeckwith-oai
jbeckwith-oai added this pull request to the merge queue Oct 9, 2026
Merged via the queue into main with commit 8bfffd4 Oct 9, 2026
24 checks passed
@jbeckwith-oai
jbeckwith-oai deleted the dependabot/github_actions/astral-sh/setup-uv-10.2.0 branch October 9, 2026 14:38
@openai-sdks openai-sdks Bot mentioned this pull request Oct 9, 2026
gh-actions-shared Bot pushed a commit to xf-qubit/openai-python that referenced this pull request Oct 9, 2026
Automated Release PR
---


##
[3.28.0](openai/openai-python@v3.27.0...v3.28.0)
(2026-10-09)


### Features

* **api:** add agent environment suspension and expiration
([openai#4046](openai#4046))
([6aa25a9](openai@6aa25a9))


### Chores

* **deps:** bump astral-sh/setup-uv from 10.1.0 to 10.2.0
([openai#4026](openai#4026))
([8bfffd4](openai@8bfffd4))
* **deps:** bump CodeQL init and analyze to 4.38.2
([openai#4025](openai#4025))
([4f5e618](openai@4f5e618))
* **deps:** update PyJWT security constraint to 2.14.0
([openai#3991](openai#3991))
([aaed2a7](openai@aaed2a7))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: openai-sdks[bot] <284451331+openai-sdks[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant