chore(deps): bump release-drafter/release-drafter from 7.7.0 to 7.9.0 (#1121 )

Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 7.7.0 to 7.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/release-drafter/release-drafter/releases">release-drafter/release-drafter's releases</a>.</em></p> <blockquote> <h2>v7.9.0</h2> <h1>What's Changed</h1> <h2>New</h2> <ul> <li>feat(autolabeler): sync configured pull request labels (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1787">#1787</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(autolabeler): support multiple labels, stop rules and fallback (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1785">#1785</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: expose PR labels in Drafter and Check PR outputs (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1782">#1782</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: add resolved tag template variable (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1784">#1784</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul> <h2>Dependency Updates</h2> <ul> <li>ci(deps): update reviewdog/action-actionlint action to v1.77.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1781">#1781</a>) <a href="https://github.com/apps/renovate"><code>@renovate[bot]</code></a></li> </ul> <h2>Bug Fixes</h2> <ul> <li>fix(config): provide standard loading for the programmatic API (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1783">#1783</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>fix: skip the missing-baseline warning when <code>from</code> is set (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1789">#1789</a>) <a href="https://github.com/jmeridth"><code>@jmeridth</code></a></li> </ul> <h2>Maintenance</h2> <ul> <li>ci: dogfood Release Drafter and stage npm publishing (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1778">#1778</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>ci: lint GitHub Actions workflows with actionlint (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1780">#1780</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul> <h2>New Contributors</h2> <ul> <li>No new contributors</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/release-drafter/release-drafter/compare/v7.8.0...v7.9.0">https://github.com/release-drafter/release-drafter/compare/v7.8.0...v7.9.0</a></p> <h2>v7.8.0</h2> <h1>What's Changed</h1> <h2>Token authentication change</h2> <p>The <code>token</code> action input now takes precedence over <code>env.GITHUB_TOKEN</code> and defaults to <code>${{ github.token }}</code>. Pass a PAT or GitHub App token through <code>with.token</code>, especially when publishing releases that should trigger downstream workflows:</p> <pre lang="yaml"><code>with: token: ${{ secrets.PAT }} publish: true </code></pre> <h2>New</h2> <ul> <li>feat: merge repeated changes with group-changes (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1725">#1725</a>) <a href="https://github.com/slawekjaranowski"><code>@slawekjaranowski</code></a>, <a href="https://github.com/claude"><code>@claude</code></a></li> <li>feat(facade): wire multiforge adapters (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1709">#1709</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(adapters): add GitLab REST adapter (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1708">#1708</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(adapters): add Gitea and Forgejo REST adapters (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1707">#1707</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: add config-driven check-pr validation (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1706">#1706</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/release-drafter/release-drafter/commit/72967cdc98ddd3160f1fc3dff619de365e137dd0"><code>72967cd</code></a> chore: release v7.9.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1790">#1790</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/43cd2a9c7fdb7a2f7251be3394eabbaa641afd31"><code>43cd2a9</code></a> feat(autolabeler): sync configured pull request labels (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1787">#1787</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/a99850f1915e19ca4688cb09fdb1aed905599e14"><code>a99850f</code></a> feat(autolabeler): support multiple labels, stop rules and fallback (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1785">#1785</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/26b70804414cbb9f92ad61943b96089cb3e613c5"><code>26b7080</code></a> feat: expose PR labels in Drafter and Check PR outputs (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1782">#1782</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/58b89af2fab657ccc06f1b1a8968049ac862ad37"><code>58b89af</code></a> feat: add resolved tag template variable (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1784">#1784</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/7aa25ba4c5822e4f85a6e081a29258c05346823a"><code>7aa25ba</code></a> fix(config): provide standard loading for the programmatic API (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1783">#1783</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/1e800128f2866500319ebd3f13ab67c4713b9f99"><code>1e80012</code></a> fix: skip the missing-baseline warning when <code>from</code> is set (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1789">#1789</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/57f417922ac8a5cf17282aec6e7786aba69a3ee8"><code>57f4179</code></a> ci: dogfood Release Drafter and stage npm publishing (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1778">#1778</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/75620c000f3cea11ac40a3fc917a07910bdfa677"><code>75620c0</code></a> ci(deps): update reviewdog/action-actionlint action to v1.77.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1781">#1781</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/fb48a58bf7b2fa270433efd264ac3211839bc258"><code>fb48a58</code></a> ci: lint GitHub Actions workflows with actionlint (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1780">#1780</a>)</li> <li>Additional commits viewable in <a href="https://github.com/release-drafter/release-drafter/compare/34d80673e067bdc0c24568d3af899c216adcfaa9...72967cdc98ddd3160f1fc3dff619de365e137dd0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=release-drafter/release-drafter&package-manager=github_actions&previous-version=7.7.0&new-version=7.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Run demudhra first on macOS (#1125 )
2026-11-05 01:35:32 +00:00 · 2026-11-04 09:17:08 +01:00 · 2026-11-03 13:23:25 -05:00 · 2026-11-03 19:11:16 +01:00 · 2026-11-03 09:20:52 +01:00 · 2026-10-28 15:45:31 +01:00
24 changed files with 678 additions and 135 deletions
@@ -19,7 +19,7 @@ jobs:
      pull-requests: read
    steps:
      - name: 🚀 Run Release Drafter
-        uses: release-drafter/release-drafter@34d80673e067bdc0c24568d3af899c216adcfaa9 # v7.7.0
+        uses: release-drafter/release-drafter@72967cdc98ddd3160f1fc3dff619de365e137dd0 # v7.9.0
        with:
          commitish: ${{ github.sha }}
        env:
@@ -53,6 +53,8 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, macos-15, windows-latest]
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
@@ -281,6 +283,8 @@ jobs:
          - os: macos-latest
            checksum: "a70cbfbf3bb5c08b2f84963b4f12c94e08fbb2468ba418a3bfe1066fbe9e7218"
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
@@ -318,6 +322,8 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, macos-15, windows-latest]
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - name: Install default version
        uses: $/
      - run: uv tool install ruff==0.14.10
@@ -329,6 +335,8 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
@@ -366,6 +374,8 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - name: Install latest version
        id: setup-uv
        uses: $/
@@ -402,6 +412,8 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - name: Install latest version
        id: setup-uv
        uses: $/
@@ -551,6 +563,8 @@ jobs:
          - os: windows-2025
            expected-os: "windows-2025"
    steps:
+      - if: runner.os == 'macOS'
+        uses: astral-sh/github-actions/demudhra@7aa50a3def9f5428c532b0ae972d1e5b357de5a5 # 2026.11.03.0
      - name: Setup uv
        id: setup-uv
        uses: $/
@@ -985,14 +999,18 @@ jobs:
        run: rm -rf "$UV_PYTHON_INSTALL_DIR"

  test-cache-python-installs:
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-2022]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Verify Python install dir is not populated
+        shell: bash
        run: |
-          if [ -d /home/runner/work/_temp/uv-python-dir ]; then
+          if [ -e "$RUNNER_TEMP/uv-python-dir" ]; then
            echo "Python install dir should not exist"
            exit 1
          fi
@@ -1005,21 +1023,26 @@ jobs:
      - run: uv sync --managed-python
        working-directory: __tests__/fixtures/uv-project
      - name: Verify Python install dir exists
+        shell: bash
        run: |
-          if [ ! -d /home/runner/work/_temp/uv-python-dir ]; then
+          if [ ! -d "$UV_PYTHON_INSTALL_DIR" ]; then
            echo "Python install dir should exist"
            exit 1
          fi
  test-restore-python-installs:
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os }}
    needs: test-cache-python-installs
+    strategy:
+      matrix:
+        os: [ubuntu-latest, windows-2022]
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false
      - name: Verify Python install dir does not exist
+        shell: bash
        run: |
-          if [ -d /home/runner/work/_temp/uv-python-dir ]; then
+          if [ -e "$RUNNER_TEMP/uv-python-dir" ]; then
            echo "Python install dir should not exist"
            exit 1
          fi
@@ -1030,19 +1053,21 @@ jobs:
          enable-cache: true
          cache-python: true
          cache-suffix: ${{ github.run_id }}-${{ github.run_attempt }}-test-cache-python-installs
-      - name: Verify Python install dir exists
-        run: |
-          if [ ! -d /home/runner/work/_temp/uv-python-dir ]; then
-            echo "Python install dir should exist"
-            exit 1
-          fi
-      - name: Cache was hit
-        run: |
-          if [ "$CACHE_HIT" != "true" ]; then
-            exit 1
-          fi
+      - name: Verify the restored Python minor-version link resolves to the patch directory
+        shell: python
        env:
          CACHE_HIT: ${{ steps.restore.outputs.python-cache-hit }}
+        run: |
+          import os
+          from pathlib import Path
+
+          assert os.environ["CACHE_HIT"] == "true", "expected a Python cache hit"
+          installs = Path(os.environ["UV_PYTHON_INSTALL_DIR"]).resolve()
+          assert installs.is_dir(), "Python install dir should exist"
+          patch_dir, = installs.glob("cpython-*.*.*-*")
+          minor_prefix = patch_dir.name.rsplit(".", 1)[0]
+          alias, = installs.glob(f"{minor_prefix}-*")
+          assert alias.resolve(strict=True) == patch_dir, alias
      - run: uv sync --managed-python
        working-directory: __tests__/fixtures/uv-project

@@ -27,7 +27,7 @@ Set up your GitHub Actions workflow with a specific version of [uv](https://docs

 ```yaml
 - name: Install the latest version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 ```

 If you do not specify a version, this action will look for a [required-version](https://docs.astral.sh/uv/reference/settings/#required-version)
@@ -43,7 +43,7 @@ Have a look under [Advanced Configuration](#advanced-configuration) for detailed

 ```yaml
 - name: Install uv with all available options
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    # The version of uv to install, e.g., "0.5.0", "latest", or "latest-known" (default: searches for version in config files, then latest)
    version: ""
@@ -143,7 +143,7 @@ Have a look under [Advanced Configuration](#advanced-configuration) for detailed
 - `venv`: Path to the activated venv if activate-environment is true.
 - `python-version`: The Python version that was set.
 - `python-runtime-id`: An opaque identifier reported by uv for the activated venv's Python runtime. Empty when `activate-environment` is false.
- `python-cache-hit`: A boolean value to indicate the Python cache entry was found.
+- `python-cache-hit`: A boolean indicating whether the Python cache was restored successfully.

 ### Python version

@@ -161,7 +161,7 @@ python 3.13
 ```

 ```yaml
- uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+- uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version-file: ".tool-versions"
 ```
@@ -172,7 +172,7 @@ a warning.

 ```yaml
 - name: Install the latest version of uv and set the python version to 3.13t
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    python-version: 3.13t
 - run: uv pip install --python=3.13t pip
@@ -190,7 +190,7 @@ jobs:
    steps:
      - uses: actions/checkout@v5
      - name: Install the latest version of uv and set the python version
-        uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
        with:
          python-version: ${{ matrix.python-version }}
      - name: Test with python ${{ matrix.python-version }}
@@ -226,7 +226,7 @@ It also controls where [the venv gets created](#activate-environment), unless `v

 ```yaml
 - name: Install uv based on the config files in the working-directory
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    working-directory: my/subproject/dir
 ```
@@ -268,7 +268,7 @@ For example:
 - name: Checkout the repository
  uses: actions/checkout@main
 - name: Install the latest version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
 - name: Test
@@ -280,7 +280,7 @@ To install a specific version of Python, use

 ```yaml
 - name: Install the latest version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
 - name: Install Python 3.12
@@ -299,7 +299,7 @@ output:
  uses: actions/checkout@main
 - name: Install the default version of uv
  id: setup-uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 - name: Print the installed version
  run: echo "Installed uv version is ${{ steps.setup-uv.outputs.uv-version }}"
 ```
@@ -1,3 +1,4 @@
+import { fileURLToPath } from "node:url";
 import { beforeEach, describe, expect, it, jest } from "@jest/globals";
 import { createSetupInputs } from "../helpers/setup-inputs";

@@ -48,6 +49,42 @@ beforeEach(() => {
 });

 describe("restoreCache", () => {
+  it.each([
+    ["win32", false],
+    ["linux", true],
+  ] as const)(
+    "keeps the matched Python cache key on %s when the install directory cannot be read",
+    async (platform, pythonCacheHit) => {
+      const inputs = createSetupInputs({
+        cachePython: true,
+        // A file at the install directory path makes readdir fail.
+        pythonDir: fileURLToPath(import.meta.url),
+        restoreCache: true,
+      });
+      mockRestoreCache
+        .mockReturnValueOnce("uv-key")
+        .mockReturnValueOnce("python-key");
+
+      const originalPlatform = process.platform;
+      Object.defineProperty(process, "platform", { value: platform });
+      try {
+        await restoreCache(inputs);
+      } finally {
+        Object.defineProperty(process, "platform", { value: originalPlatform });
+      }
+
+      expect(mockSetOutput).toHaveBeenCalledWith("cache-hit", true);
+      expect(mockSetOutput).toHaveBeenCalledWith(
+        "python-cache-hit",
+        pythonCacheHit,
+      );
+      expect(mockSaveState).toHaveBeenCalledWith(
+        "python-cache-matched-key",
+        "python-key",
+      );
+    },
+  );
+
  it("encodes Python version ranges before adding them to the cache key", async () => {
    await restoreCache(createSetupInputs(), ">3.10.11,<3.11");

@@ -0,0 +1,87 @@
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import {
+  afterAll,
+  beforeEach,
+  describe,
+  expect,
+  it,
+  jest,
+} from "@jest/globals";
+import { CacheLocalSource, type SetupInputs } from "../../src/utils/inputs";
+import { createSetupInputs } from "../helpers/setup-inputs";
+
+const mockSaveCache = jest.fn<() => Promise<number>>();
+const mockInfo = jest.fn();
+const mockLoadInputs = jest.fn<() => SetupInputs>(() =>
+  createSetupInputs({ enableCache: false }),
+);
+const state: Record<string, string> = {};
+
+jest.unstable_mockModule("@actions/cache", () => ({
+  saveCache: mockSaveCache,
+}));
+
+jest.unstable_mockModule("@actions/core", () => ({
+  getState: jest.fn((name: string) => state[name] ?? ""),
+  setFailed: jest.fn(),
+}));
+
+jest.unstable_mockModule("../../src/utils/inputs", () => ({
+  loadInputs: mockLoadInputs,
+}));
+
+jest.unstable_mockModule("../../src/utils/logging", () => ({
+  info: mockInfo,
+  warning: jest.fn(),
+}));
+
+jest.spyOn(process, "exit").mockImplementation((() => undefined) as never);
+
+const { run } = await import("../../src/save-cache");
+
+const cacheDir = mkdtempSync(join(tmpdir(), "setup-uv-save-cache-"));
+const cacheKey = "setup-uv-2-x86_64-unknown-linux-gnu-ubuntu-24.04-3.12-hash";
+
+function infoMessages(): string[] {
+  return mockInfo.mock.calls.map(([msg]) => msg as string);
+}
+
+beforeEach(() => {
+  delete process.env.UV_CACHE_DIR;
+  state["cache-key"] = cacheKey;
+  state["cache-matched-key"] = "";
+  mockLoadInputs.mockReturnValue(
+    createSetupInputs({
+      cacheLocalPath: { path: cacheDir, source: CacheLocalSource.Input },
+    }),
+  );
+});
+
+afterAll(() => {
+  rmSync(cacheDir, { force: true, recursive: true });
+});
+
+describe("saveCache", () => {
+  it("reports the saved key when the cache is saved", async () => {
+    mockSaveCache.mockResolvedValue(42);
+
+    await run();
+
+    expect(mockSaveCache).toHaveBeenCalledWith([cacheDir], cacheKey);
+    expect(infoMessages()).toContain(`uv cache saved with key: ${cacheKey}`);
+  });
+
+  it("does not report the cache as saved when saving fails", async () => {
+    // @actions/cache logs the failure itself and returns -1
+    mockSaveCache.mockResolvedValue(-1);
+
+    await run();
+
+    expect(mockSaveCache).toHaveBeenCalledWith([cacheDir], cacheKey);
+    expect(infoMessages()).not.toContain(
+      `uv cache saved with key: ${cacheKey}`,
+    );
+  });
+});
@@ -146,6 +146,28 @@ describe("download-version", () => {
      expect(mockGetAllVersions).not.toHaveBeenCalled();
    });

+    it("resolves ~= with PEP 440 compatible release semantics", async () => {
+      mockGetFirstMatchingVersion.mockImplementation(
+        (predicate: (version: string) => boolean) =>
+          ["1.0.0", "0.10.2", "0.9.26"].find(predicate),
+      );
+
+      const version = await resolveVersion("~=0.9", undefined);
+
+      expect(version).toBe("0.10.2");
+    });
+
+    it("resolves ~= with PEP 440 compatible release semantics from manifest-file", async () => {
+      mockGetAllVersions.mockResolvedValue(["1.0.0", "0.10.2", "0.9.26"]);
+
+      const version = await resolveVersion(
+        "~=0.9",
+        "https://example.com/custom.ndjson",
+      );
+
+      expect(version).toBe("0.10.2");
+    });
+
    it("treats == exact pins as explicit versions", async () => {
      const version = await resolveVersion("==0.9.26", undefined);

@@ -220,7 +242,7 @@ describe("download-version", () => {
          "token",
        ),
      ).rejects.toThrow(
-        "Could not find artifact for version 0.9.26, arch x86_64, platform unknown-linux-gnu in https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson .",
+        "Could not find artifact for version 0.9.26, arch x86_64, platform unknown-linux-gnu in https://releases.astral.sh/github/versions/main/v1/uv.ndjson .",
      );

      expect(mockDownloadTool).not.toHaveBeenCalled();
@@ -96,6 +96,78 @@ describe("manifest", () => {
      expect(versions).toHaveLength(2);
      expect(versions[0]?.version).toBe("0.9.26");
      expect(versions[1]?.version).toBe("0.9.25");
+      expect(mockFetch.mock.calls.map(([url]) => url)).toEqual([
+        "https://releases.astral.sh/github/versions/main/v1/uv.ndjson",
+      ]);
+    });
+
+    it("falls back to GitHub after mirror network retries are exhausted", async () => {
+      jest.useFakeTimers();
+      mockFetch
+        .mockRejectedValueOnce(new Error("mirror unavailable"))
+        .mockRejectedValueOnce(new Error("mirror unavailable"))
+        .mockRejectedValueOnce(new Error("mirror unavailable"))
+        .mockResolvedValueOnce(
+          createMockResponse(true, 200, "OK", sampleManifestResponse),
+        );
+
+      const result = fetchManifest();
+      await jest.runAllTimersAsync();
+
+      await expect(result).resolves.toEqual([
+        expect.objectContaining({ version: "0.9.26" }),
+        expect.objectContaining({ version: "0.9.25" }),
+      ]);
+      expect(mockFetch.mock.calls.map(([url]) => url)).toEqual([
+        "https://releases.astral.sh/github/versions/main/v1/uv.ndjson",
+        "https://releases.astral.sh/github/versions/main/v1/uv.ndjson",
+        "https://releases.astral.sh/github/versions/main/v1/uv.ndjson",
+        "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson",
+      ]);
+
+      await expect(getLatestVersion()).resolves.toBe("0.9.26");
+      expect(mockFetch).toHaveBeenCalledTimes(4);
+    });
+
+    it.each([404, 429, 503])(
+      "falls back to a streaming GitHub manifest on mirror HTTP %s",
+      async (status) => {
+        mockFetch
+          .mockResolvedValueOnce(createMockResponse(false, status, "Error", ""))
+          .mockResolvedValueOnce(
+            createStreamingMockResponse([`${sampleManifestResponse}\n`]),
+          );
+
+        await expect(getLatestVersion()).resolves.toBe("0.9.26");
+        await expect(
+          getArtifact("0.9.26", "aarch64", "apple-darwin"),
+        ).resolves.toEqual({
+          archiveFormat: "tar.gz",
+          checksum:
+            "fcf0a9ea6599c6ae28a4c854ac6da76f2c889354d7c36ce136ef071f7ab9721f",
+          downloadUrl:
+            "https://github.com/astral-sh/uv/releases/download/0.9.26/uv-aarch64-apple-darwin.tar.gz",
+        });
+        expect(mockFetch.mock.calls.map(([url]) => url)).toEqual([
+          "https://releases.astral.sh/github/versions/main/v1/uv.ndjson",
+          "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson",
+        ]);
+      },
+    );
+
+    it("does not fall back from a custom manifest", async () => {
+      mockFetch.mockResolvedValue(
+        createMockResponse(false, 503, "Service Unavailable", ""),
+      );
+
+      await expect(
+        fetchManifest("https://example.com/custom.ndjson"),
+      ).rejects.toThrow(
+        "Failed to fetch manifest data: 503 Service Unavailable",
+      );
+      expect(mockFetch.mock.calls.map(([url]) => url)).toEqual([
+        "https://example.com/custom.ndjson",
+      ]);
    });

    it("retries network failures", async () => {
@@ -123,7 +195,7 @@ describe("manifest", () => {
      await jest.runAllTimersAsync();

      await result;
-      expect(mockFetch).toHaveBeenCalledTimes(MANIFEST_FETCH_ATTEMPTS);
+      expect(mockFetch).toHaveBeenCalledTimes(MANIFEST_FETCH_ATTEMPTS * 2);
    });

    it("throws on a failed fetch", async () => {
@@ -35,3 +35,14 @@ test("strips PEP 508 markers from requirements dependencies", () => {

  expect(parsedVersion).toBe("==0.11.20");
 });
+
+test.each([
+  ["uv >= 0.5.0", ">=0.5.0"],
+  ["uv == 0.11.20", "==0.11.20"],
+  ["uv>=0.5.0, <0.6.0", ">=0.5.0,<0.6.0"],
+  ["uv >= 0.5.0 , < 0.6.0", ">=0.5.0,<0.6.0"],
+  ["uv==0.11.20 --hash=sha256:abc", "==0.11.20"],
+  ["uv==0.11.20  # pinned for CI", "==0.11.20"],
+])("allows whitespace in the uv specifier %s", (dependency, expected) => {
+  expect(getUvVersionFromRequirementsText(dependency)).toBe(expected);
+});
@@ -113,7 +113,7 @@ outputs:
  python-runtime-id:
    description: "An opaque identifier reported by uv for the activated venv's Python runtime. Empty when activate-environment is false."
  python-cache-hit:
-    description: "A boolean value to indicate the Python cache entry was found"
+    description: "A boolean indicating whether the Python cache was restored successfully."
 runs:
  using: "node24"
  main: "dist/setup/index.cjs"
@@ -66671,8 +66671,10 @@ async function saveCacheToKey(cacheKey, cachePath, stateKey, cacheName) {
    return;
  }
  info2(`Including ${cacheName} path: ${cachePath}`);
-  await saveCache2([cachePath], cacheKey);
+  const cacheId = await saveCache2([cachePath], cacheKey);
+  if (cacheId !== -1) {
    info2(`${cacheName} saved with key: ${cacheKey}`);
+  }
 }
 __name(saveCacheToKey, "saveCacheToKey");
 run();
@@ -93966,6 +93966,53 @@ function getWindowsNameVersion() {
  return `windows-${match4[1]}`;
 }

+// src/cache/repair-python-junctions.ts
+var import_promises = require("node:fs/promises");
+var import_node_path = __toESM(require("node:path"), 1);
+async function repairPythonJunctions(pythonDir) {
+  const entries = await (0, import_promises.readdir)(pythonDir, { withFileTypes: true });
+  const directories = new Set(
+    entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name.toLowerCase())
+  );
+  for (const entry of entries) {
+    const name = entry.name.toLowerCase();
+    if (!entry.isSymbolicLink() || !/^cpython-\d+\.\d+[+-].+$/.test(name)) {
+      continue;
+    }
+    const link = import_node_path.default.join(pythonDir, entry.name);
+    let target;
+    try {
+      target = import_node_path.default.resolve(pythonDir, await (0, import_promises.readlink)(link));
+    } catch (err) {
+      if (await resolvesWithAccessDenied(link)) {
+        throw err;
+      }
+      continue;
+    }
+    const sibling = import_node_path.default.relative(pythonDir, target).toLowerCase();
+    const version3 = /^(cpython-\d+\.\d+)\.\d+(?:(?:a|b|rc)\d+)?([+-].+)$/.exec(
+      sibling
+    );
+    if (!version3 || version3[1] + version3[2] !== name || !directories.has(sibling)) {
+      continue;
+    }
+    if (!await resolvesWithAccessDenied(link)) {
+      continue;
+    }
+    await (0, import_promises.realpath)(target);
+    await (0, import_promises.unlink)(link);
+    await (0, import_promises.symlink)(target, link, "junction");
+  }
+}
+async function resolvesWithAccessDenied(link) {
+  try {
+    await (0, import_promises.realpath)(link);
+    return false;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+
 // src/cache/restore-cache.ts
 var STATE_CACHE_KEY = "cache-key";
 var STATE_CACHE_MATCHED_KEY = "cache-matched-key";
@@ -93996,26 +94043,37 @@ async function restoreCache2(inputs, pythonVersion) {
      `${cacheKey}-python`,
      inputs.pythonDir,
      STATE_PYTHON_CACHE_MATCHED_KEY,
-      "python-cache-hit"
+      "python-cache-hit",
+      // TODO: Remove this repair once @actions/cache preserves Windows junctions.
+      // https://github.com/actions/toolkit/issues/2562
+      process.platform === "win32" ? repairPythonJunctions : void 0
    );
  } else {
    setOutput("python-cache-hit", false);
  }
 }
-async function restoreCacheFromKey(cacheKey, cachePath, stateKey, outputKey) {
+async function restoreCacheFromKey(cacheKey, cachePath, stateKey, outputKey, afterRestore) {
  info2(
    `Trying to restore cache from GitHub Actions cache with key: ${cacheKey}`
  );
-  let matchedKey;
  try {
-    matchedKey = await restoreCache([cachePath], cacheKey);
+    const matchedKey = await restoreCache([cachePath], cacheKey);
+    if (!matchedKey) {
+      info2(`No GitHub Actions cache found for key: ${cacheKey}`);
+      setOutput(outputKey, false);
+      return;
+    }
+    saveState(stateKey, matchedKey);
+    await afterRestore?.(cachePath);
+    info2(
+      `cache restored from GitHub Actions cache with key: ${matchedKey}`
+    );
+    setOutput(outputKey, true);
  } catch (err) {
    const message = err.message;
    warning2(message);
    setOutput(outputKey, false);
-    return;
  }
-  handleMatchResult(matchedKey, cacheKey, stateKey, outputKey);
 }
 async function computeKeys(inputs, pythonVersion) {
  let cacheDependencyPathHash = "-";
@@ -94045,16 +94103,6 @@ async function computeKeys(inputs, pythonVersion) {
  const python = inputs.cachePython ? "-py" : "";
  return `setup-uv-${CACHE_VERSION}-${getArch()}-${platform2}-${osNameVersion}-${version3}${pythonArchKey}${pruned}${python}${cacheDependencyPathHash}${suffix}`;
 }
-function handleMatchResult(matchedKey, primaryKey, stateKey, outputKey) {
-  if (!matchedKey) {
-    info2(`No GitHub Actions cache found for key: ${primaryKey}`);
-    setOutput(outputKey, false);
-    return;
-  }
-  saveState(stateKey, matchedKey);
-  info2(`cache restored from GitHub Actions cache with key: ${matchedKey}`);
-  setOutput(outputKey, true);
-}

 // src/download/download-version.ts
 var import_node_fs7 = require("node:fs");
@@ -94499,7 +94547,8 @@ function _getGlobal(key, defaultValue) {
 var TOOL_CACHE_NAME = "uv";
 var STATE_UV_PATH = "uv-path";
 var STATE_UV_VERSION = "uv-version";
-var VERSIONS_MANIFEST_URL = "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson";
+var VERSIONS_MANIFEST_URL = "https://releases.astral.sh/github/versions/main/v1/uv.ndjson";
+var GITHUB_VERSIONS_MANIFEST_URL = "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson";
 var GITHUB_RELEASES_PREFIX = "https://github.com/astral-sh/uv/releases/download/";
 var ASTRAL_MIRROR_PREFIX = "https://releases.astral.sh/github/uv/releases/download/";

@@ -94509,6 +94558,42 @@ var fs10 = __toESM(require("node:fs"), 1);

 // src/download/checksum/known-checksums.json
 var known_checksums_default = {
+  "aarch64-apple-darwin-0.13.7": "81b811b57e4624df7ed3aac148e0359100d9962f3d9dce00aec533dc2e086731",
+  "aarch64-pc-windows-msvc-0.13.7": "505d9e65e7692bac3ddf98c66754aa26c5050c409c184af30a881a0a72cc85e3",
+  "aarch64-unknown-linux-gnu-0.13.7": "71279f8d3c67241e807b9d8db872d1bf541579fb9f08b7d1eb1682196d1e57dc",
+  "aarch64-unknown-linux-musl-0.13.7": "2d3ec076a0c4c0e8250bb6418c44080828b544f1a3be0b6e46adf9fb6923de45",
+  "arm-unknown-linux-musleabihf-0.13.7": "2c029d1eda470c667e46a36fc5e2479c9a3e4af91e0cabcde07711bf40d587a9",
+  "armv7-unknown-linux-gnueabihf-0.13.7": "5e2a1315a1b8b4a25250d536f62fa5c1ab5ed17233e7bf486c3c7849cb663284",
+  "armv7-unknown-linux-musleabihf-0.13.7": "4a1a7dc0b1713bbeac665a2f95e680eea3bb7ecebea226ae3b2de552bc72e88b",
+  "i686-pc-windows-msvc-0.13.7": "fa2abbf16f7d12cb01c9b7f313d843218fbd91a9d3fab487cc06a1d6765b27bf",
+  "i686-unknown-linux-gnu-0.13.7": "cc4f86390f9c99e8f53530e5e7f2cdc6ae7c011c9e805764332a3e3c01a378e4",
+  "i686-unknown-linux-musl-0.13.7": "c2d50f5c64eb81fd1fd1ec5870403c0533fe4b6bf76f940cc5e97824e49ab782",
+  "powerpc64le-unknown-linux-gnu-0.13.7": "e8b65412482f848743e73566808f5bb480e826c9ce25361997891fcf71299080",
+  "riscv64gc-unknown-linux-gnu-0.13.7": "48aff38af87c7c8255beb9b51b3676598045786ac5197de15fea54ebfe6c72e1",
+  "riscv64gc-unknown-linux-musl-0.13.7": "6c2e67417dda9661e67c2591a6226805ef2ed8ebc203baeed411f67d459207b2",
+  "s390x-unknown-linux-gnu-0.13.7": "2b64a479b905b9cdab99c71105e523a0d7aa79581cbd716d40bce26d7b595428",
+  "x86_64-apple-darwin-0.13.7": "20c47e4c1f630b8abaff8c291fa9b9aa300fef92c4fbff95adf198b55287cda7",
+  "x86_64-pc-windows-msvc-0.13.7": "0cdc5b38fe5a8168ed6a25814f5ba43c21d313dd3187314fccb37b7cec46e021",
+  "x86_64-unknown-linux-gnu-0.13.7": "c5221ff41b7892bfc223543883600125f6a47fe845093e0f5bdff4f359196d83",
+  "x86_64-unknown-linux-musl-0.13.7": "287491da03f2a785c70fa75b13e1f849918c2f2b5415fe84876b8214eeb792f9",
+  "aarch64-apple-darwin-0.13.6": "60fbd5c8a1ed681845eea28d9d622fcde03c51e91a43465b64a1e17db1ed3472",
+  "aarch64-pc-windows-msvc-0.13.6": "c2426c0c8e28b53d8c440e47a18d96ad4db51e159866c0e81435b196d7f0081c",
+  "aarch64-unknown-linux-gnu-0.13.6": "229e194255c7958d86d56e8790d969a6f74736592133f0dfd0076f754c642c1d",
+  "aarch64-unknown-linux-musl-0.13.6": "819692e404d23e5aae6bc44c0e260f1f5492fd1910ab4693b2c650f926dbe800",
+  "arm-unknown-linux-musleabihf-0.13.6": "57ac0f7c04deb42c5d686b4eeeef555c442db6ffea16fe4cbd7adb0384403794",
+  "armv7-unknown-linux-gnueabihf-0.13.6": "d00cd4949c4524c934afcfee1aedfa9d337cf4e43be4d6b692ad8d74d0a65562",
+  "armv7-unknown-linux-musleabihf-0.13.6": "b215398c886e8cc2cfa282fe346c02025957f8633b75a3d4fd848e0adda4eddd",
+  "i686-pc-windows-msvc-0.13.6": "32ceb64db231cbedfd499f7654c72e4c0b564f2846f9e76c0a4a7b2d03d7e67c",
+  "i686-unknown-linux-gnu-0.13.6": "665ea831c38d342900950e606beb2ccc37b7ba0fcefc37b814eb4b076305f2b6",
+  "i686-unknown-linux-musl-0.13.6": "de3a015c4b0fce63c178ae4fa95c94c873adfd92fa1e258c6a2a94e529812629",
+  "powerpc64le-unknown-linux-gnu-0.13.6": "3b2847185ec2946fcc928500efef7e3e74c255d3be6f2cb435081a84885d8c6c",
+  "riscv64gc-unknown-linux-gnu-0.13.6": "517052603ed46483b59d8875c9c61a577946b8f493c73e4339e45e7b119171d0",
+  "riscv64gc-unknown-linux-musl-0.13.6": "659a95dc6aee3ecf86742a08d8ca6c6261422121cbd41decc0042f5a71af6305",
+  "s390x-unknown-linux-gnu-0.13.6": "fb56d731308aa5c7718059d71afcb14d9a933a974997cee3d4eb5d06fc462a4b",
+  "x86_64-apple-darwin-0.13.6": "63ba17fdda55ad1a230d4b37fc6017ffa10c23688c83818bd3bfdf914c652a02",
+  "x86_64-pc-windows-msvc-0.13.6": "a2a8820d5eea32f08ef467ef3b7f66883a9b076d5737a2fc2fbb5f458d1bb50f",
+  "x86_64-unknown-linux-gnu-0.13.6": "f29c3e94ffabd7e6f3ba521dba169a9b7ec12100bf3257087f0f24f6123f3645",
+  "x86_64-unknown-linux-musl-0.13.6": "5d61f26b6c7213779eda90edc6971ea6b0b796bfb8d49a574c8ad69b59838548",
  "aarch64-apple-darwin-0.13.5": "743f85035a1996ecb350659e01cd9faea9709829be09b1b4b03c73eaf3c9cd73",
  "aarch64-pc-windows-msvc-0.13.5": "09f47edf90726084a70f9426f6e3ca4f46e9bf7cbf23b1716ec64d60b055fae3",
  "aarch64-unknown-linux-gnu-0.13.5": "4bb69cf95ed13f23713bb7bc09f241896ea0c75b7c557e615a20604b82f9c403",
@@ -100287,6 +100372,19 @@ async function getArtifact(version3, arch3, platform2, manifestUrl = VERSIONS_MA
  };
 }
 async function fetchManifestResponse(manifestUrl) {
+  try {
+    return await fetchManifestResponseFromUrl(manifestUrl);
+  } catch (error2) {
+    if (manifestUrl !== VERSIONS_MANIFEST_URL) {
+      throw error2;
+    }
+    info2(
+      `Failed to fetch manifest from Astral mirror, falling back to GitHub: ${error2.message}`
+    );
+    return await fetchManifestResponseFromUrl(GITHUB_VERSIONS_MANIFEST_URL);
+  }
+}
+async function fetchManifestResponseFromUrl(manifestUrl) {
  let response;
  for (let attempt = 1; attempt <= MANIFEST_FETCH_ATTEMPTS; attempt++) {
    info2(`Fetching manifest data from ${manifestUrl} ...`);
@@ -101579,7 +101677,7 @@ function getUvVersionFromAllDependencies(allDependencies) {
 }
 function getUvVersionFromDependency(dependency) {
  const dependencyWithoutMarker = dependency.split(";", 1)[0]?.trim();
-  return dependencyWithoutMarker?.match(/^uv([=<>~!]+\S*)/)?.[1].trim();
+  return dependencyWithoutMarker?.match(/^uv\s*((?:[=<>~!]+\s*[^\s,]+\s*,?\s*)+)/)?.[1].replace(/\s/g, "");
 }

 // src/version/tool-versions-file.ts
@@ -101937,7 +102035,7 @@ async function resolveVersion(versionInput, manifestUrl, resolutionStrategy = "h
  throw new Error(`No version found for ${versionInput}`);
 }
 async function findHighestSatisfyingVersion(versionSpecifier) {
-  const semverRange = semver5.validRange(versionSpecifier);
+  const semverRange = isCompatibleReleaseSpecifier(versionSpecifier) ? null : semver5.validRange(versionSpecifier);
  if (semverRange !== null) {
    const semverMatch = await getFirstMatchingVersion(
      (version3) => semver5.satisfies(version3, semverRange)
@@ -101959,8 +102057,11 @@ async function findHighestSatisfyingVersion(versionSpecifier) {
  }
  return pep440Match;
 }
+function isCompatibleReleaseSpecifier(versionSpecifier) {
+  return versionSpecifier.includes("~=");
+}
 function maxSatisfying2(versions, version3) {
-  const maxSemver = evaluateVersions(versions, version3);
+  const maxSemver = isCompatibleReleaseSpecifier(version3) ? "" : evaluateVersions(versions, version3);
  if (maxSemver !== "") {
    debug(`Found a version that satisfies the semver range: ${maxSemver}`);
    return maxSemver;
@@ -101975,7 +102076,7 @@ function maxSatisfying2(versions, version3) {
  return void 0;
 }
 function minSatisfying3(versions, version3) {
-  const minSemver = semver5.minSatisfying(versions, version3);
+  const minSemver = isCompatibleReleaseSpecifier(version3) ? null : semver5.minSatisfying(versions, version3);
  if (minSemver !== null) {
    debug(`Found a version that satisfies the semver range: ${minSemver}`);
    return minSemver;
@@ -102111,7 +102212,7 @@ function getExtension(platform2) {

 // src/utils/inputs.ts
 var import_node_fs8 = __toESM(require("node:fs"), 1);
-var import_node_path = __toESM(require("node:path"), 1);
+var import_node_path2 = __toESM(require("node:path"), 1);
 function loadInputs() {
  const workingDirectory = getInput("working-directory");
  const version3 = getInput("version");
@@ -102257,7 +102358,7 @@ function getToolBinDir(workingDirectory) {
  }
  if (process.platform === "win32") {
    if (process.env.RUNNER_TEMP !== void 0) {
-      return `${process.env.RUNNER_TEMP}${import_node_path.default.sep}uv-tool-bin-dir`;
+      return `${process.env.RUNNER_TEMP}${import_node_path2.default.sep}uv-tool-bin-dir`;
    }
    throw Error(
      "Could not determine UV_TOOL_BIN_DIR. Please make sure RUNNER_TEMP is set or provide the tool-bin-dir input"
@@ -102273,7 +102374,7 @@ function getToolDir(workingDirectory) {
  }
  if (process.platform === "win32") {
    if (process.env.RUNNER_TEMP !== void 0) {
-      return `${process.env.RUNNER_TEMP}${import_node_path.default.sep}uv-tool-dir`;
+      return `${process.env.RUNNER_TEMP}${import_node_path2.default.sep}uv-tool-dir`;
    }
    throw Error(
      "Could not determine UV_TOOL_DIR. Please make sure RUNNER_TEMP is set or provide the tool-dir input"
@@ -102305,7 +102406,7 @@ function getCacheLocalPath(workingDirectory, versionFile, enableCache) {
    if (process.env.RUNNER_ENVIRONMENT === "github-hosted") {
      if (process.env.RUNNER_TEMP !== void 0) {
        return {
-          path: `${process.env.RUNNER_TEMP}${import_node_path.default.sep}setup-uv-cache`,
+          path: `${process.env.RUNNER_TEMP}${import_node_path2.default.sep}setup-uv-cache`,
          source: 3 /* Default */
        };
      }
@@ -102315,12 +102416,12 @@ function getCacheLocalPath(workingDirectory, versionFile, enableCache) {
    }
    if (process.platform === "win32") {
      return {
-        path: `${process.env.APPDATA}${import_node_path.default.sep}uv${import_node_path.default.sep}cache`,
+        path: `${process.env.APPDATA}${import_node_path2.default.sep}uv${import_node_path2.default.sep}cache`,
        source: 3 /* Default */
      };
    }
    return {
-      path: `${process.env.HOME}${import_node_path.default.sep}.cache${import_node_path.default.sep}uv`,
+      path: `${process.env.HOME}${import_node_path2.default.sep}.cache${import_node_path2.default.sep}uv`,
      source: 3 /* Default */
    };
  }
@@ -102351,12 +102452,12 @@ function getUvPythonDir() {
  }
  if (process.env.RUNNER_ENVIRONMENT !== "github-hosted") {
    if (process.platform === "win32") {
-      return `${process.env.APPDATA}${import_node_path.default.sep}uv${import_node_path.default.sep}python`;
+      return `${process.env.APPDATA}${import_node_path2.default.sep}uv${import_node_path2.default.sep}python`;
    }
-    return `${process.env.HOME}${import_node_path.default.sep}.local${import_node_path.default.sep}share${import_node_path.default.sep}uv${import_node_path.default.sep}python`;
+    return `${process.env.HOME}${import_node_path2.default.sep}.local${import_node_path2.default.sep}share${import_node_path2.default.sep}uv${import_node_path2.default.sep}python`;
  }
  if (process.env.RUNNER_TEMP !== void 0) {
-    return `${process.env.RUNNER_TEMP}${import_node_path.default.sep}uv-python-dir`;
+    return `${process.env.RUNNER_TEMP}${import_node_path2.default.sep}uv-python-dir`;
  }
  throw Error(
    "Could not determine UV_PYTHON_INSTALL_DIR. Please make sure RUNNER_TEMP is set or provide the UV_PYTHON_INSTALL_DIR environment variable"
@@ -102376,10 +102477,10 @@ function expandTilde(input) {
  return input;
 }
 function normalizePath(inputPath) {
-  const normalized = import_node_path.default.normalize(inputPath);
-  const root = import_node_path.default.parse(normalized).root;
+  const normalized = import_node_path2.default.normalize(inputPath);
+  const root = import_node_path2.default.parse(normalized).root;
  let trimmed = normalized;
-  while (trimmed.length > root.length && trimmed.endsWith(import_node_path.default.sep)) {
+  while (trimmed.length > root.length && trimmed.endsWith(import_node_path2.default.sep)) {
    trimmed = trimmed.slice(0, -1);
  }
  return trimmed;
@@ -102387,7 +102488,7 @@ function normalizePath(inputPath) {
 function resolveRelativePath(workingDirectory, inputPath) {
  const hasNegation = inputPath.startsWith("!");
  const pathWithoutNegation = hasNegation ? inputPath.substring(1) : inputPath;
-  const resolvedPath = import_node_path.default.resolve(workingDirectory, pathWithoutNegation);
+  const resolvedPath = import_node_path2.default.resolve(workingDirectory, pathWithoutNegation);
  debug(
    `Resolving relative path ${inputPath} to ${hasNegation ? "!" : ""}${resolvedPath}`
  );
@@ -47182,6 +47182,42 @@ var semver = __toESM(require_semver(), 1);

 // src/download/checksum/known-checksums.json
 var known_checksums_default = {
+  "aarch64-apple-darwin-0.13.7": "81b811b57e4624df7ed3aac148e0359100d9962f3d9dce00aec533dc2e086731",
+  "aarch64-pc-windows-msvc-0.13.7": "505d9e65e7692bac3ddf98c66754aa26c5050c409c184af30a881a0a72cc85e3",
+  "aarch64-unknown-linux-gnu-0.13.7": "71279f8d3c67241e807b9d8db872d1bf541579fb9f08b7d1eb1682196d1e57dc",
+  "aarch64-unknown-linux-musl-0.13.7": "2d3ec076a0c4c0e8250bb6418c44080828b544f1a3be0b6e46adf9fb6923de45",
+  "arm-unknown-linux-musleabihf-0.13.7": "2c029d1eda470c667e46a36fc5e2479c9a3e4af91e0cabcde07711bf40d587a9",
+  "armv7-unknown-linux-gnueabihf-0.13.7": "5e2a1315a1b8b4a25250d536f62fa5c1ab5ed17233e7bf486c3c7849cb663284",
+  "armv7-unknown-linux-musleabihf-0.13.7": "4a1a7dc0b1713bbeac665a2f95e680eea3bb7ecebea226ae3b2de552bc72e88b",
+  "i686-pc-windows-msvc-0.13.7": "fa2abbf16f7d12cb01c9b7f313d843218fbd91a9d3fab487cc06a1d6765b27bf",
+  "i686-unknown-linux-gnu-0.13.7": "cc4f86390f9c99e8f53530e5e7f2cdc6ae7c011c9e805764332a3e3c01a378e4",
+  "i686-unknown-linux-musl-0.13.7": "c2d50f5c64eb81fd1fd1ec5870403c0533fe4b6bf76f940cc5e97824e49ab782",
+  "powerpc64le-unknown-linux-gnu-0.13.7": "e8b65412482f848743e73566808f5bb480e826c9ce25361997891fcf71299080",
+  "riscv64gc-unknown-linux-gnu-0.13.7": "48aff38af87c7c8255beb9b51b3676598045786ac5197de15fea54ebfe6c72e1",
+  "riscv64gc-unknown-linux-musl-0.13.7": "6c2e67417dda9661e67c2591a6226805ef2ed8ebc203baeed411f67d459207b2",
+  "s390x-unknown-linux-gnu-0.13.7": "2b64a479b905b9cdab99c71105e523a0d7aa79581cbd716d40bce26d7b595428",
+  "x86_64-apple-darwin-0.13.7": "20c47e4c1f630b8abaff8c291fa9b9aa300fef92c4fbff95adf198b55287cda7",
+  "x86_64-pc-windows-msvc-0.13.7": "0cdc5b38fe5a8168ed6a25814f5ba43c21d313dd3187314fccb37b7cec46e021",
+  "x86_64-unknown-linux-gnu-0.13.7": "c5221ff41b7892bfc223543883600125f6a47fe845093e0f5bdff4f359196d83",
+  "x86_64-unknown-linux-musl-0.13.7": "287491da03f2a785c70fa75b13e1f849918c2f2b5415fe84876b8214eeb792f9",
+  "aarch64-apple-darwin-0.13.6": "60fbd5c8a1ed681845eea28d9d622fcde03c51e91a43465b64a1e17db1ed3472",
+  "aarch64-pc-windows-msvc-0.13.6": "c2426c0c8e28b53d8c440e47a18d96ad4db51e159866c0e81435b196d7f0081c",
+  "aarch64-unknown-linux-gnu-0.13.6": "229e194255c7958d86d56e8790d969a6f74736592133f0dfd0076f754c642c1d",
+  "aarch64-unknown-linux-musl-0.13.6": "819692e404d23e5aae6bc44c0e260f1f5492fd1910ab4693b2c650f926dbe800",
+  "arm-unknown-linux-musleabihf-0.13.6": "57ac0f7c04deb42c5d686b4eeeef555c442db6ffea16fe4cbd7adb0384403794",
+  "armv7-unknown-linux-gnueabihf-0.13.6": "d00cd4949c4524c934afcfee1aedfa9d337cf4e43be4d6b692ad8d74d0a65562",
+  "armv7-unknown-linux-musleabihf-0.13.6": "b215398c886e8cc2cfa282fe346c02025957f8633b75a3d4fd848e0adda4eddd",
+  "i686-pc-windows-msvc-0.13.6": "32ceb64db231cbedfd499f7654c72e4c0b564f2846f9e76c0a4a7b2d03d7e67c",
+  "i686-unknown-linux-gnu-0.13.6": "665ea831c38d342900950e606beb2ccc37b7ba0fcefc37b814eb4b076305f2b6",
+  "i686-unknown-linux-musl-0.13.6": "de3a015c4b0fce63c178ae4fa95c94c873adfd92fa1e258c6a2a94e529812629",
+  "powerpc64le-unknown-linux-gnu-0.13.6": "3b2847185ec2946fcc928500efef7e3e74c255d3be6f2cb435081a84885d8c6c",
+  "riscv64gc-unknown-linux-gnu-0.13.6": "517052603ed46483b59d8875c9c61a577946b8f493c73e4339e45e7b119171d0",
+  "riscv64gc-unknown-linux-musl-0.13.6": "659a95dc6aee3ecf86742a08d8ca6c6261422121cbd41decc0042f5a71af6305",
+  "s390x-unknown-linux-gnu-0.13.6": "fb56d731308aa5c7718059d71afcb14d9a933a974997cee3d4eb5d06fc462a4b",
+  "x86_64-apple-darwin-0.13.6": "63ba17fdda55ad1a230d4b37fc6017ffa10c23688c83818bd3bfdf914c652a02",
+  "x86_64-pc-windows-msvc-0.13.6": "a2a8820d5eea32f08ef467ef3b7f66883a9b076d5737a2fc2fbb5f458d1bb50f",
+  "x86_64-unknown-linux-gnu-0.13.6": "f29c3e94ffabd7e6f3ba521dba169a9b7ec12100bf3257087f0f24f6123f3645",
+  "x86_64-unknown-linux-musl-0.13.6": "5d61f26b6c7213779eda90edc6971ea6b0b796bfb8d49a574c8ad69b59838548",
  "aarch64-apple-darwin-0.13.5": "743f85035a1996ecb350659e01cd9faea9709829be09b1b4b03c73eaf3c9cd73",
  "aarch64-pc-windows-msvc-0.13.5": "09f47edf90726084a70f9426f6e3ca4f46e9bf7cbf23b1716ec64d60b055fae3",
  "aarch64-unknown-linux-gnu-0.13.5": "4bb69cf95ed13f23713bb7bc09f241896ea0c75b7c557e615a20604b82f9c403",
@@ -52836,7 +52872,8 @@ var import_node_readline = require("node:readline");
 var import_node_stream = require("node:stream");

 // src/utils/constants.ts
-var VERSIONS_MANIFEST_URL = "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson";
+var VERSIONS_MANIFEST_URL = "https://releases.astral.sh/github/versions/main/v1/uv.ndjson";
+var GITHUB_VERSIONS_MANIFEST_URL = "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson";

 // src/utils/fetch.ts
 var import_undici2 = __toESM(require_undici2(), 1);
@@ -52908,6 +52945,19 @@ async function getLatestVersion(manifestUrl = VERSIONS_MANIFEST_URL) {
  return latestVersion;
 }
 async function fetchManifestResponse(manifestUrl) {
+  try {
+    return await fetchManifestResponseFromUrl(manifestUrl);
+  } catch (error2) {
+    if (manifestUrl !== VERSIONS_MANIFEST_URL) {
+      throw error2;
+    }
+    info2(
+      `Failed to fetch manifest from Astral mirror, falling back to GitHub: ${error2.message}`
+    );
+    return await fetchManifestResponseFromUrl(GITHUB_VERSIONS_MANIFEST_URL);
+  }
+}
+async function fetchManifestResponseFromUrl(manifestUrl) {
  let response;
  for (let attempt = 1; attempt <= MANIFEST_FETCH_ATTEMPTS; attempt++) {
    info2(`Fetching manifest data from ${manifestUrl} ...`);
@@ -6,7 +6,7 @@ This document covers advanced options for configuring which version of uv to ins

 ```yaml
 - name: Install the latest version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: "latest"
 ```
@@ -19,7 +19,7 @@ When `manifest-file` is set, `latest-known` still selects a version from setup-u

 ```yaml
 - name: Install the latest version of uv known to setup-uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: "latest-known"
 ```
@@ -28,7 +28,7 @@ When `manifest-file` is set, `latest-known` still selects a version from setup-u

 ```yaml
 - name: Install a specific version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: "0.4.4"
 ```
@@ -41,21 +41,21 @@ to install the latest version that satisfies the range.

 ```yaml
 - name: Install a semver range of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: ">=0.4.0"
 ```

 ```yaml
 - name: Pinning a minor version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: "0.4.x"
 ```

 ```yaml
 - name: Install a pep440-specifier-satisfying version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: ">=0.4.25,<0.5"
 ```
@@ -67,7 +67,7 @@ You can change this behavior using the `resolution-strategy` input:

 ```yaml
 - name: Install the lowest compatible version of uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: ">=0.4.0"
    resolution-strategy: "lowest"
@@ -92,7 +92,7 @@ as `UV_PYTHON`. Only a single Python version is supported; multiple fallback ver

 ```yaml
 - name: Install uv based on the version defined in pyproject.toml
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version-file: "pyproject.toml"
 ```
@@ -103,7 +103,7 @@ silently picking up a newer uv until the lockfile is updated.

 ```yaml
 - name: Install uv based on the version locked in uv.lock
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version-file: "uv.lock"
 ```
@@ -24,7 +24,7 @@ The computed cache key is available as the `cache-key` output:
 ```yaml
 - name: Setup uv
  id: setup-uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
 - name: Print cache key
@@ -54,7 +54,7 @@ You can optionally define a custom cache key suffix.
 ```yaml
 - name: Enable caching and define a custom cache key suffix
  id: setup-uv
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-suffix: "optional-suffix"
@@ -93,7 +93,7 @@ changes. If you use relative paths, they are relative to the working directory.

 ```yaml
 - name: Define a cache dependency glob
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-dependency-glob: "**/pyproject.toml"
@@ -101,7 +101,7 @@ changes. If you use relative paths, they are relative to the working directory.

 ```yaml
 - name: Define a list of cache dependency globs
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-dependency-glob: |
@@ -111,7 +111,7 @@ changes. If you use relative paths, they are relative to the working directory.

 ```yaml
 - name: Define an absolute cache dependency glob
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-dependency-glob: "/tmp/my-folder/requirements*.txt"
@@ -119,7 +119,7 @@ changes. If you use relative paths, they are relative to the working directory.

 ```yaml
 - name: Never invalidate the cache
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-dependency-glob: ""
@@ -132,7 +132,7 @@ By default, the cache will be restored.

 ```yaml
 - name: Don't restore an existing cache
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    restore-cache: false
@@ -148,7 +148,7 @@ these events. Set `save-cache: true` to save the cache for all events.

 ```yaml
 - name: Don't save the cache after the run
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    save-cache: false
@@ -174,7 +174,7 @@ It defaults to `setup-uv-cache` in the `TMP` dir, `D:\a\_temp\setup-uv-cache` on

 ```yaml
 - name: Define a custom uv cache path
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    cache-local-path: "/path/to/cache"
 ```
@@ -191,7 +191,7 @@ If you want to prune the cache before saving it, enable cache pruning with the `

 ```yaml
 - name: Prune the cache before saving it
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    prune-cache: true
@@ -210,7 +210,7 @@ To force managed Python installs, set `UV_PYTHON_PREFERENCE=only-managed`.

 ```yaml
 - name: Cache Python installs
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    cache-python: true
@@ -228,7 +228,7 @@ If you want to ignore this, set the `ignore-nothing-to-cache` input to `true`.

 ```yaml
 - name: Ignore nothing to cache
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    enable-cache: true
    ignore-nothing-to-cache: true
@@ -11,7 +11,7 @@ You can specify a checksum to override those values. The sha256 hashes can also

 ```yaml
 - name: Install a specific version and validate the checksum
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    version: "0.3.1"
    checksum: "e11b01402ab645392c7ad6044db63d37e4fd1e745e015306993b07695ea5f9f8"
@@ -20,10 +20,12 @@ You can specify a checksum to override those values. The sha256 hashes can also
 ## Manifest file

 By default, setup-uv reads version metadata from
-[`astral-sh/versions`](https://github.com/astral-sh/versions).
+the [Astral mirror](https://releases.astral.sh/github/versions/main/v1/uv.ndjson).
+If the mirror request fails, it falls back to [`astral-sh/versions`](https://github.com/astral-sh/versions).

 The `manifest-file` input lets you override that source with your own URL, for example to test
-custom uv builds or alternate download locations.
+custom uv builds or alternate download locations. Custom manifest URLs do not fall back to the
+default sources.

 ### Format

@@ -40,7 +42,7 @@ The `archive_format` field is currently ignored.

 ```yaml
 - name: Use a custom manifest file
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    manifest-file: "https://example.com/my-custom-manifest.ndjson"
 ```
@@ -59,7 +61,7 @@ You can disable this by setting the `add-problem-matchers` input to `false`.

 ```yaml
 - name: Install the latest version of uv without problem matchers
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    add-problem-matchers: false
 ```
@@ -9,7 +9,7 @@ This allows directly using it in later steps:

 ```yaml
 - name: Install the latest version of uv and activate the environment
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    activate-environment: true
 - run: uv pip install pip
@@ -32,7 +32,7 @@ key: build-${{ runner.os }}-${{ runner.arch }}-${{ steps.setup-uv.outputs.python
 You can customize the venv location with `venv-path`, for example to place it in the runner temp directory:

 ```yaml
- uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+- uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    activate-environment: true
    venv-path: ${{ runner.temp }}/custom-venv
@@ -50,12 +50,13 @@ You can customize the venv location with `venv-path`, for example to place it in

 ## GitHub authentication token

-By default, this action resolves available uv versions from
-[`astral-sh/versions`](https://github.com/astral-sh/versions), then downloads uv artifacts from
-GitHub Releases.
+By default, this action fetches version metadata and uv archives from the Astral mirror.
+If a manifest request fails, it falls back to `raw.githubusercontent.com`. If an archive download
+fails, it falls back to GitHub Releases.

-You can provide a token via `github-token` to authenticate those downloads. By default, the
-`GITHUB_TOKEN` secret is used, which is automatically provided by GitHub Actions.
+You can provide a token via `github-token` to authenticate GitHub Releases downloads. The token
+is not sent to the Astral mirror or used for manifest requests. By default, the `GITHUB_TOKEN`
+secret is used, which is automatically provided by GitHub Actions.

 If the default
 [permissions for the GitHub token](https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#permissions-for-the-github_token)
@@ -63,7 +64,7 @@ are not sufficient, you can provide a custom GitHub token with the necessary per

 ```yaml
 - name: Install the latest version of uv with a custom GitHub token
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    github-token: ${{ secrets.CUSTOM_GITHUB_TOKEN }}
 ```
@@ -81,7 +82,7 @@ input:

 ```yaml
 - name: Install the latest version of uv with a custom tool dir
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    tool-dir: "/path/to/tool/dir"
 ```
@@ -100,7 +101,7 @@ If you want to change this behaviour (especially on self-hosted runners) you can

 ```yaml
 - name: Install the latest version of uv with a custom tool bin dir
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    tool-bin-dir: "/path/to/tool-bin/dir"
 ```
@@ -117,7 +118,7 @@ This action supports expanding the `~` character to the user's home directory fo

 ```yaml
 - name: Expand the tilde character
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    cache-local-path: "~/path/to/cache"
    tool-dir: "~/path/to/tool/dir"
@@ -134,7 +135,7 @@ If you want to ignore this, set the `ignore-empty-workdir` input to `true`.

 ```yaml
 - name: Ignore empty workdir
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    ignore-empty-workdir: true
 ```
@@ -160,7 +161,7 @@ This action sets several environment variables that influence uv's behavior and

 ```yaml
 - name: Example using environment variables
-  uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+  uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
  with:
    python-version: "3.12"
    tool-dir: "/custom/tool/dir"
@@ -0,0 +1,60 @@
+import { readdir, readlink, realpath, symlink, unlink } from "node:fs/promises";
+import nodePath from "node:path";
+
+export async function repairPythonJunctions(pythonDir: string): Promise<void> {
+  const entries = await readdir(pythonDir, { withFileTypes: true });
+  const directories = new Set(
+    entries
+      .filter((entry) => entry.isDirectory())
+      .map((entry) => entry.name.toLowerCase()),
+  );
+
+  for (const entry of entries) {
+    const name = entry.name.toLowerCase();
+    if (!entry.isSymbolicLink() || !/^cpython-\d+\.\d+[+-].+$/.test(name)) {
+      continue;
+    }
+    const link = nodePath.join(pythonDir, entry.name);
+    let target: string;
+    try {
+      target = nodePath.resolve(pythonDir, await readlink(link));
+    } catch (err) {
+      // Fail only if the link still has the access error that requires repair.
+      if (await resolvesWithAccessDenied(link)) {
+        throw err;
+      }
+      continue;
+    }
+
+    // uv omits only the patch and prerelease from its minor-version links.
+    const sibling = nodePath.relative(pythonDir, target).toLowerCase();
+    const version = /^(cpython-\d+\.\d+)\.\d+(?:(?:a|b|rc)\d+)?([+-].+)$/.exec(
+      sibling,
+    );
+    if (
+      !version ||
+      version[1] + version[2] !== name ||
+      !directories.has(sibling)
+    ) {
+      continue;
+    }
+    // Git for Windows tar can restore a junction as a file symlink when it
+    // extracts the link before its target. Opening it as a directory fails.
+    if (!(await resolvesWithAccessDenied(link))) {
+      continue;
+    }
+    // An inaccessible installation can also cause EPERM through a valid link.
+    await realpath(target);
+    await unlink(link);
+    await symlink(target, link, "junction");
+  }
+}
+
+async function resolvesWithAccessDenied(link: string): Promise<boolean> {
+  try {
+    await realpath(link);
+    return false;
+  } catch (err) {
+    return (err as NodeJS.ErrnoException).code === "EPERM";
+  }
+}
@@ -4,6 +4,7 @@ import { hashFiles } from "../hash/hash-files";
 import type { SetupInputs } from "../utils/inputs";
 import * as log from "../utils/logging";
 import { getArch, getOSNameVersion, getPlatform } from "../utils/platforms";
+import { repairPythonJunctions } from "./repair-python-junctions";

 export const STATE_CACHE_KEY = "cache-key";
 export const STATE_CACHE_MATCHED_KEY = "cache-matched-key";
@@ -44,6 +45,9 @@ export async function restoreCache(
      inputs.pythonDir,
      STATE_PYTHON_CACHE_MATCHED_KEY,
      "python-cache-hit",
+      // TODO: Remove this repair once @actions/cache preserves Windows junctions.
+      // https://github.com/actions/toolkit/issues/2562
+      process.platform === "win32" ? repairPythonJunctions : undefined,
    );
  } else {
    core.setOutput("python-cache-hit", false);
@@ -55,21 +59,33 @@ async function restoreCacheFromKey(
  cachePath: string,
  stateKey: string,
  outputKey: string,
+  afterRestore?: (cachePath: string) => Promise<void>,
 ): Promise<void> {
  log.info(
    `Trying to restore cache from GitHub Actions cache with key: ${cacheKey}`,
  );
-  let matchedKey: string | undefined;
  try {
-    matchedKey = await cache.restoreCache([cachePath], cacheKey);
-  } catch (err) {
-    const message = (err as Error).message;
-    log.warning(message);
+    const matchedKey = await cache.restoreCache([cachePath], cacheKey);
+    if (!matchedKey) {
+      log.info(`No GitHub Actions cache found for key: ${cacheKey}`);
      core.setOutput(outputKey, false);
      return;
    }

-  handleMatchResult(matchedKey, cacheKey, stateKey, outputKey);
+    // Record the match before the post-restore hook so the post step can skip
+    // archiving the directory again even if the hook fails. A PR that restored
+    // from its base branch could otherwise save the broken copy in its own cache.
+    core.saveState(stateKey, matchedKey);
+    await afterRestore?.(cachePath);
+    log.info(
+      `cache restored from GitHub Actions cache with key: ${matchedKey}`,
+    );
+    core.setOutput(outputKey, true);
+  } catch (err) {
+    const message = (err as Error).message;
+    log.warning(message);
+    core.setOutput(outputKey, false);
+  }
 }

 async function computeKeys(
@@ -107,20 +123,3 @@ async function computeKeys(
  const python = inputs.cachePython ? "-py" : "";
  return `setup-uv-${CACHE_VERSION}-${getArch()}-${platform}-${osNameVersion}-${version}${pythonArchKey}${pruned}${python}${cacheDependencyPathHash}${suffix}`;
 }
-
-function handleMatchResult(
-  matchedKey: string | undefined,
-  primaryKey: string,
-  stateKey: string,
-  outputKey: string,
-): void {
-  if (!matchedKey) {
-    log.info(`No GitHub Actions cache found for key: ${primaryKey}`);
-    core.setOutput(outputKey, false);
-    return;
-  }
-
-  core.saveState(stateKey, matchedKey);
-  log.info(`cache restored from GitHub Actions cache with key: ${matchedKey}`);
-  core.setOutput(outputKey, true);
-}
@@ -1,4 +1,40 @@
 {
+  "aarch64-apple-darwin-0.13.7": "81b811b57e4624df7ed3aac148e0359100d9962f3d9dce00aec533dc2e086731",
+  "aarch64-pc-windows-msvc-0.13.7": "505d9e65e7692bac3ddf98c66754aa26c5050c409c184af30a881a0a72cc85e3",
+  "aarch64-unknown-linux-gnu-0.13.7": "71279f8d3c67241e807b9d8db872d1bf541579fb9f08b7d1eb1682196d1e57dc",
+  "aarch64-unknown-linux-musl-0.13.7": "2d3ec076a0c4c0e8250bb6418c44080828b544f1a3be0b6e46adf9fb6923de45",
+  "arm-unknown-linux-musleabihf-0.13.7": "2c029d1eda470c667e46a36fc5e2479c9a3e4af91e0cabcde07711bf40d587a9",
+  "armv7-unknown-linux-gnueabihf-0.13.7": "5e2a1315a1b8b4a25250d536f62fa5c1ab5ed17233e7bf486c3c7849cb663284",
+  "armv7-unknown-linux-musleabihf-0.13.7": "4a1a7dc0b1713bbeac665a2f95e680eea3bb7ecebea226ae3b2de552bc72e88b",
+  "i686-pc-windows-msvc-0.13.7": "fa2abbf16f7d12cb01c9b7f313d843218fbd91a9d3fab487cc06a1d6765b27bf",
+  "i686-unknown-linux-gnu-0.13.7": "cc4f86390f9c99e8f53530e5e7f2cdc6ae7c011c9e805764332a3e3c01a378e4",
+  "i686-unknown-linux-musl-0.13.7": "c2d50f5c64eb81fd1fd1ec5870403c0533fe4b6bf76f940cc5e97824e49ab782",
+  "powerpc64le-unknown-linux-gnu-0.13.7": "e8b65412482f848743e73566808f5bb480e826c9ce25361997891fcf71299080",
+  "riscv64gc-unknown-linux-gnu-0.13.7": "48aff38af87c7c8255beb9b51b3676598045786ac5197de15fea54ebfe6c72e1",
+  "riscv64gc-unknown-linux-musl-0.13.7": "6c2e67417dda9661e67c2591a6226805ef2ed8ebc203baeed411f67d459207b2",
+  "s390x-unknown-linux-gnu-0.13.7": "2b64a479b905b9cdab99c71105e523a0d7aa79581cbd716d40bce26d7b595428",
+  "x86_64-apple-darwin-0.13.7": "20c47e4c1f630b8abaff8c291fa9b9aa300fef92c4fbff95adf198b55287cda7",
+  "x86_64-pc-windows-msvc-0.13.7": "0cdc5b38fe5a8168ed6a25814f5ba43c21d313dd3187314fccb37b7cec46e021",
+  "x86_64-unknown-linux-gnu-0.13.7": "c5221ff41b7892bfc223543883600125f6a47fe845093e0f5bdff4f359196d83",
+  "x86_64-unknown-linux-musl-0.13.7": "287491da03f2a785c70fa75b13e1f849918c2f2b5415fe84876b8214eeb792f9",
+  "aarch64-apple-darwin-0.13.6": "60fbd5c8a1ed681845eea28d9d622fcde03c51e91a43465b64a1e17db1ed3472",
+  "aarch64-pc-windows-msvc-0.13.6": "c2426c0c8e28b53d8c440e47a18d96ad4db51e159866c0e81435b196d7f0081c",
+  "aarch64-unknown-linux-gnu-0.13.6": "229e194255c7958d86d56e8790d969a6f74736592133f0dfd0076f754c642c1d",
+  "aarch64-unknown-linux-musl-0.13.6": "819692e404d23e5aae6bc44c0e260f1f5492fd1910ab4693b2c650f926dbe800",
+  "arm-unknown-linux-musleabihf-0.13.6": "57ac0f7c04deb42c5d686b4eeeef555c442db6ffea16fe4cbd7adb0384403794",
+  "armv7-unknown-linux-gnueabihf-0.13.6": "d00cd4949c4524c934afcfee1aedfa9d337cf4e43be4d6b692ad8d74d0a65562",
+  "armv7-unknown-linux-musleabihf-0.13.6": "b215398c886e8cc2cfa282fe346c02025957f8633b75a3d4fd848e0adda4eddd",
+  "i686-pc-windows-msvc-0.13.6": "32ceb64db231cbedfd499f7654c72e4c0b564f2846f9e76c0a4a7b2d03d7e67c",
+  "i686-unknown-linux-gnu-0.13.6": "665ea831c38d342900950e606beb2ccc37b7ba0fcefc37b814eb4b076305f2b6",
+  "i686-unknown-linux-musl-0.13.6": "de3a015c4b0fce63c178ae4fa95c94c873adfd92fa1e258c6a2a94e529812629",
+  "powerpc64le-unknown-linux-gnu-0.13.6": "3b2847185ec2946fcc928500efef7e3e74c255d3be6f2cb435081a84885d8c6c",
+  "riscv64gc-unknown-linux-gnu-0.13.6": "517052603ed46483b59d8875c9c61a577946b8f493c73e4339e45e7b119171d0",
+  "riscv64gc-unknown-linux-musl-0.13.6": "659a95dc6aee3ecf86742a08d8ca6c6261422121cbd41decc0042f5a71af6305",
+  "s390x-unknown-linux-gnu-0.13.6": "fb56d731308aa5c7718059d71afcb14d9a933a974997cee3d4eb5d06fc462a4b",
+  "x86_64-apple-darwin-0.13.6": "63ba17fdda55ad1a230d4b37fc6017ffa10c23688c83818bd3bfdf914c652a02",
+  "x86_64-pc-windows-msvc-0.13.6": "a2a8820d5eea32f08ef467ef3b7f66883a9b076d5737a2fc2fbb5f458d1bb50f",
+  "x86_64-unknown-linux-gnu-0.13.6": "f29c3e94ffabd7e6f3ba521dba169a9b7ec12100bf3257087f0f24f6123f3645",
+  "x86_64-unknown-linux-musl-0.13.6": "5d61f26b6c7213779eda90edc6971ea6b0b796bfb8d49a574c8ad69b59838548",
  "aarch64-apple-darwin-0.13.5": "743f85035a1996ecb350659e01cd9faea9709829be09b1b4b03c73eaf3c9cd73",
  "aarch64-pc-windows-msvc-0.13.5": "09f47edf90726084a70f9426f6e3ca4f46e9bf7cbf23b1716ec64d60b055fae3",
  "aarch64-unknown-linux-gnu-0.13.5": "4bb69cf95ed13f23713bb7bc09f241896ea0c75b7c557e615a20604b82f9c403",
@@ -1,7 +1,10 @@
 import { createInterface } from "node:readline";
 import { Readable } from "node:stream";
 import * as core from "@actions/core";
-import { VERSIONS_MANIFEST_URL } from "../utils/constants";
+import {
+  GITHUB_VERSIONS_MANIFEST_URL,
+  VERSIONS_MANIFEST_URL,
+} from "../utils/constants";
 import { fetch } from "../utils/fetch";
 import * as log from "../utils/logging";
 import { selectDefaultVariant } from "./variant-selection";
@@ -167,6 +170,20 @@ export function clearManifestCache(manifestUrl?: string): void {
 }

 async function fetchManifestResponse(manifestUrl: string) {
+  try {
+    return await fetchManifestResponseFromUrl(manifestUrl);
+  } catch (error) {
+    if (manifestUrl !== VERSIONS_MANIFEST_URL) {
+      throw error;
+    }
+    log.info(
+      `Failed to fetch manifest from Astral mirror, falling back to GitHub: ${(error as Error).message}`,
+    );
+    return await fetchManifestResponseFromUrl(GITHUB_VERSIONS_MANIFEST_URL);
+  }
+}
+
+async function fetchManifestResponseFromUrl(manifestUrl: string) {
  let response: Awaited<ReturnType<typeof fetch>> | undefined;
  for (let attempt = 1; attempt <= MANIFEST_FETCH_ATTEMPTS; attempt++) {
    log.info(`Fetching manifest data from ${manifestUrl} ...`);
@@ -159,8 +159,10 @@ async function saveCacheToKey(
  }

  log.info(`Including ${cacheName} path: ${cachePath}`);
-  await cache.saveCache([cachePath], cacheKey);
+  const cacheId = await cache.saveCache([cachePath], cacheKey);
+  if (cacheId !== -1) {
    log.info(`${cacheName} saved with key: ${cacheKey}`);
+  }
 }

 run();
@@ -2,6 +2,8 @@ export const TOOL_CACHE_NAME = "uv";
 export const STATE_UV_PATH = "uv-path";
 export const STATE_UV_VERSION = "uv-version";
 export const VERSIONS_MANIFEST_URL =
+  "https://releases.astral.sh/github/versions/main/v1/uv.ndjson";
+export const GITHUB_VERSIONS_MANIFEST_URL =
  "https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson";

 /** GitHub Releases URL prefix for uv artifacts. */
@@ -69,5 +69,7 @@ function getUvVersionFromAllDependencies(

 function getUvVersionFromDependency(dependency: string): string | undefined {
  const dependencyWithoutMarker = dependency.split(";", 1)[0]?.trim();
-  return dependencyWithoutMarker?.match(/^uv([=<>~!]+\S*)/)?.[1].trim();
+  return dependencyWithoutMarker
+    ?.match(/^uv\s*((?:[=<>~!]+\s*[^\s,]+\s*,?\s*)+)/)?.[1]
+    .replace(/\s/g, "");
 }
@@ -169,7 +169,9 @@ async function findHighestSatisfyingVersion(
 ): Promise<string | undefined> {
  // This fast path assumes uv releases are semver-monotonic: newer manifest
  // entries always have higher versions, with no lower-version backports.
-  const semverRange = semver.validRange(versionSpecifier);
+  const semverRange = isCompatibleReleaseSpecifier(versionSpecifier)
+    ? null
+    : semver.validRange(versionSpecifier);
  if (semverRange !== null) {
    const semverMatch = await getFirstMatchingVersion((version) =>
      semver.satisfies(version, semverRange),
@@ -193,11 +195,22 @@ async function findHighestSatisfyingVersion(
  return pep440Match;
 }

+/**
+ * `~=` is the PEP 440 compatible release operator. semver accepts it as a
+ * tilde range with a narrower upper bound (`~=0.5` as `<0.6.0` instead of
+ * `<1.0`), so it must only be evaluated as PEP 440.
+ */
+function isCompatibleReleaseSpecifier(versionSpecifier: string): boolean {
+  return versionSpecifier.includes("~=");
+}
+
 function maxSatisfying(
  versions: string[],
  version: string,
 ): string | undefined {
-  const maxSemver = tc.evaluateVersions(versions, version);
+  const maxSemver = isCompatibleReleaseSpecifier(version)
+    ? ""
+    : tc.evaluateVersions(versions, version);
  if (maxSemver !== "") {
    core.debug(`Found a version that satisfies the semver range: ${maxSemver}`);
    return maxSemver;
@@ -218,7 +231,9 @@ function minSatisfying(
  versions: string[],
  version: string,
 ): string | undefined {
-  const minSemver = semver.minSatisfying(versions, version);
+  const minSemver = isCompatibleReleaseSpecifier(version)
+    ? null
+    : semver.minSatisfying(versions, version);
  if (minSemver !== null) {
    core.debug(`Found a version that satisfies the semver range: ${minSemver}`);
    return minSemver;
Author	SHA1	Message	Date
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	0a73d6eb01	chore(deps): bump release-drafter/release-drafter from 7.7.0 to 7.9.0 (#1121 ) Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 7.7.0 to 7.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/release-drafter/release-drafter/releases">release-drafter/release-drafter's releases</a>.</em></p> <blockquote> <h2>v7.9.0</h2> <h1>What's Changed</h1> <h2>New</h2> <ul> <li>feat(autolabeler): sync configured pull request labels (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1787">#1787</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(autolabeler): support multiple labels, stop rules and fallback (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1785">#1785</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: expose PR labels in Drafter and Check PR outputs (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1782">#1782</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: add resolved tag template variable (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1784">#1784</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul> <h2>Dependency Updates</h2> <ul> <li>ci(deps): update reviewdog/action-actionlint action to v1.77.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1781">#1781</a>) <a href="https://github.com/apps/renovate"><code>@renovate[bot]</code></a></li> </ul> <h2>Bug Fixes</h2> <ul> <li>fix(config): provide standard loading for the programmatic API (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1783">#1783</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>fix: skip the missing-baseline warning when <code>from</code> is set (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1789">#1789</a>) <a href="https://github.com/jmeridth"><code>@jmeridth</code></a></li> </ul> <h2>Maintenance</h2> <ul> <li>ci: dogfood Release Drafter and stage npm publishing (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1778">#1778</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>ci: lint GitHub Actions workflows with actionlint (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1780">#1780</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul> <h2>New Contributors</h2> <ul> <li>No new contributors</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/release-drafter/release-drafter/compare/v7.8.0...v7.9.0">https://github.com/release-drafter/release-drafter/compare/v7.8.0...v7.9.0</a></p> <h2>v7.8.0</h2> <h1>What's Changed</h1> <h2>Token authentication change</h2> <p>The <code>token</code> action input now takes precedence over <code>env.GITHUB_TOKEN</code> and defaults to <code>${{ github.token }}</code>. Pass a PAT or GitHub App token through <code>with.token</code>, especially when publishing releases that should trigger downstream workflows:</p> <pre lang="yaml"><code>with: token: ${{ secrets.PAT }} publish: true </code></pre> <h2>New</h2> <ul> <li>feat: merge repeated changes with group-changes (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1725">#1725</a>) <a href="https://github.com/slawekjaranowski"><code>@slawekjaranowski</code></a>, <a href="https://github.com/claude"><code>@claude</code></a></li> <li>feat(facade): wire multiforge adapters (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1709">#1709</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(adapters): add GitLab REST adapter (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1708">#1708</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat(adapters): add Gitea and Forgejo REST adapters (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1707">#1707</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> <li>feat: add config-driven check-pr validation (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1706">#1706</a>) <a href="https://github.com/jetersen"><code>@jetersen</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/release-drafter/release-drafter/commit/72967cdc98ddd3160f1fc3dff619de365e137dd0"><code>72967cd</code></a> chore: release v7.9.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1790">#1790</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/43cd2a9c7fdb7a2f7251be3394eabbaa641afd31"><code>43cd2a9</code></a> feat(autolabeler): sync configured pull request labels (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1787">#1787</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/a99850f1915e19ca4688cb09fdb1aed905599e14"><code>a99850f</code></a> feat(autolabeler): support multiple labels, stop rules and fallback (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1785">#1785</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/26b70804414cbb9f92ad61943b96089cb3e613c5"><code>26b7080</code></a> feat: expose PR labels in Drafter and Check PR outputs (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1782">#1782</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/58b89af2fab657ccc06f1b1a8968049ac862ad37"><code>58b89af</code></a> feat: add resolved tag template variable (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1784">#1784</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/7aa25ba4c5822e4f85a6e081a29258c05346823a"><code>7aa25ba</code></a> fix(config): provide standard loading for the programmatic API (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1783">#1783</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/1e800128f2866500319ebd3f13ab67c4713b9f99"><code>1e80012</code></a> fix: skip the missing-baseline warning when <code>from</code> is set (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1789">#1789</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/57f417922ac8a5cf17282aec6e7786aba69a3ee8"><code>57f4179</code></a> ci: dogfood Release Drafter and stage npm publishing (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1778">#1778</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/75620c000f3cea11ac40a3fc917a07910bdfa677"><code>75620c0</code></a> ci(deps): update reviewdog/action-actionlint action to v1.77.0 (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1781">#1781</a>)</li> <li><a href="https://github.com/release-drafter/release-drafter/commit/fb48a58bf7b2fa270433efd264ac3211839bc258"><code>fb48a58</code></a> ci: lint GitHub Actions workflows with actionlint (<a href="https://redirect.github.com/release-drafter/release-drafter/issues/1780">#1780</a>)</li> <li>Additional commits viewable in <a href="https://github.com/release-drafter/release-drafter/compare/34d80673e067bdc0c24568d3af899c216adcfaa9...72967cdc98ddd3160f1fc3dff619de365e137dd0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=release-drafter/release-drafter&package-manager=github_actions&previous-version=7.7.0&new-version=7.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-11-04 09:17:08 +01:00
William WoodruffandGitHub	68ef1d76d3	Run demudhra first on macOS (#1125 )	2026-11-03 13:23:25 -05:00
Zsolt DollensteinandGitHub	fce2a640fd	Repair cached Python directory junctions on Windows (#1122 ) With `cache-python: true`, a Windows runner can report a cache hit while extracting the cache incorrectly. When `@actions/cache`'s tar extracts uv's minor-version junction before the patch directory it points to, it creates a file symlink. Resolving that link later raises `[WinError 5] Access is denied`. This PR fixes things up after restoring the Python cache, recreating the junction if resolving the link fails with access denied and its recorded target is a matching, accessible CPython installation in the same directory. This is a temporary workaround until https://github.com/actions/toolkit/issues/2562 gets resolved and `@actions/cache` itself becomes resilient to these situations. I tested this by restoring the same archive on two fresh `windows-2022` runners. The original run passed because resolving the minor-version link raised the expected WinError 5. With the patch, `uv sync --offline --managed-python --no-python-downloads` created a virtual environment whose `home` in `pyvenv.cfg` resolved to the cached CPython 3.10.22 installation. [Original run](https://github.com/astral-sh/ruff/actions/runs/41469344610/job/125358623949#step:9:1) · [Patched run](https://github.com/astral-sh/ruff/actions/runs/41469344610/job/125358623835#step:10:1).	2026-11-03 19:11:16 +01:00
github-actions[bot]GitHub eifinger	a1b1886df2	chore: update known checksums for 0.13.7 (#1124 ) chore: update known checksums for 0.13.7 Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com>	2026-11-03 09:20:52 +01:00
github-actions[bot]GitHub eifinger	4c58170a94	docs: update version references to v10.3.3 (#1120 ) Update `uses: astral-sh/setup-uv@...` references in documentation to `68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3`. Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com>	2026-10-28 15:45:31 +01:00
Kevin Stillhammer GitHub Amp	68559e99cc	Use Astral mirror for version manifests with GitHub fallback (#1119 ) Amp-Thread-ID: https://ampcode.com/threads/T-01a1822a-68da-7125-9e7d-16e038ab0840 Closes: #1118 Co-authored-by: Amp <amp@ampcode.com>	2026-10-28 15:09:55 +01:00
github-actions[bot]GitHub eifinger	0192b69518	chore: update known checksums for 0.13.6 (#1117 ) chore: update known checksums for 0.13.6 Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com>	2026-10-27 11:55:43 +01:00
Kevin Stillhammer GitHub Amp	2f29784424	docs: use JSDoc for compatible release specifier comment (#1113 ) Amp-Thread-ID: https://ampcode.com/threads/T-01a17443-b5b9-703c-8877-780650eae403 Co-authored-by: Amp <amp@ampcode.com>	2026-10-26 08:49:11 +01:00
soujasK GitHub Claude Opus 5.5	9c7332190c	fix: allow whitespace in uv requirement specifiers (#1112 ) ## Summary When the uv version is read from dependencies (`requirements.txt`, or `project.dependencies` / `optional-dependencies` / `dependency-groups` in `pyproject.toml` via `version-file`), the specifier was matched with `/^uv([=<>~!]+\S*)/`. PEP 508 allows whitespace around operators and after commas, and those valid forms were misread: \| dependency \| before \| after \| \|---\|---\|---\| \| `uv >= 0.5.0` \| not found, latest uv installed \| `>=0.5.0` \| \| `uv == 0.11.20` \| not found, latest uv installed \| `==0.11.20` \| \| `uv>=0.5.0, <0.6.0` \| `>=0.5.0,`, fails with `No version found for >=0.5.0,` \| `>=0.5.0,<0.6.0` \| The regex now allows whitespace around operators and between comma-separated clauses, and strips it from the result. Inputs that worked before give the same result, including inline `--hash=` options, trailing ` # comments`, the `\` continuation lines from `uv pip compile --generate-hashes`, and names that only start with `uv` (`uvicorn`, `uv-build`). ## Test plan - Added cases for spaced operators, spaced clauses, inline `--hash` and trailing comments. The four whitespace cases failed before the change. - `npm run all` on Ubuntu (WSL) with Node 24.19.0: build, Biome (no fixes), packaging, and 165 tests across 15 suites pass. The rebuilt `dist/setup/index.cjs` only differs in the changed line. --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-26 08:37:03 +01:00
soujasK GitHub Claude Opus 5.5	80fbe0140c	fix: resolve ~= specifiers with PEP 440 semantics (#1111 ) ## Summary `~=` is the PEP 440 compatible release operator, but the resolver tries `semver.validRange()` first, and semver accepts `~=` as a tilde range: \| specifier \| semver \| PEP 440 \| \|---\|---\|---\| \| `~=0.9` \| `>=0.9.0 <0.10.0` \| `>=0.9, ==0.*` \| So with the default `highest` strategy, `version: "~=0.9"` (or `required-version = "~=0.9"` picked up through `version-file`) installs the highest 0.9.x instead of the highest 0.x. The same happens with `manifest-file`, where `tc.evaluateVersions` is semver-based. This skips the semver evaluation for specifiers containing `~=`, so they are only evaluated with `@renovatebot/pep440`. No semver range legitimately uses `~=`. Notes: - Only a bare two-segment `~=X.Y` resolved incorrectly. `~=X.Y.Z` gives the same result in both, and compound specifiers like `~=0.9, !=0.9.3` were already rejected by semver and fell through to PEP 440. - `minSatisfying` gets the same check for consistency. The lower bound is the same under both interpretations, so `lowest` didn't produce wrong results before. - A single-segment `~=1` is invalid PEP 440. semver used to resolve it to 1.x; it now fails with `No version found for ~=1`, same as other invalid specifiers. ## Test plan - Added tests for `~=0.9` with the default manifest and with `manifest-file`. Both returned `0.9.26` instead of `0.10.2` before the change. - `npm run all` on Ubuntu (WSL) with Node 24.19.0: build, Biome (no fixes), packaging, and 161 tests across 15 suites pass. The rebuilt `dist/setup/index.cjs` only differs in the changed lines. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-25 19:39:29 +01:00
soujasK GitHub Claude Opus 5.5	36b7b57007	fix: only report a saved cache when saving succeeded (#1110 ) ## Summary The post step logs `uv cache saved with key: ...` (and `Python cache saved with key: ...`) even when the save failed. The log in #769 shows it right after `Warning: Failed to save: ...`: ``` Warning: Failed to save: "C:\Program failed with error: The process 'C:\Program Files\Git\usr\bin\tar.exe' failed with exit code 2 uv cache saved with key: setup-uv-2-x86_64-pc-windows-msvc-windows-11-3.12.12-pruned-... ``` `@actions/cache`'s `saveCache` doesn't throw for these failures. It logs them and returns `-1`, and `saveCacheToKey` ignored the return value. This now checks for `-1` before logging, which is the same check the `actions/cache` save step uses (`if (cacheId != -1) core.info("Cache saved with key: ...")`). `@actions/cache` already logs the reason, so nothing else is logged on failure, and the exit code stays the same. This only changes the log line. It doesn't address the underlying tar/gzip failure in #769. One limitation: with the legacy (v1) cache service, an upload that fails after the cache was reserved still returns the reserved id, so that one case is still reported as saved. That's on the `@actions/cache` side and affects `actions/cache` the same way. Related to #769 ## Test plan - Added `__tests__/cache/save-cache.test.ts`. The `-1` case fails before the change and passes after it. - `npm run all` on Ubuntu (WSL) with Node 24.19.0 / npm 11.17.0: build, Biome (no fixes), packaging, and all 161 tests across 16 suites pass. The regenerated `dist/save-cache/index.cjs` only differs in the changed lines. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-25 19:38:39 +01:00
github-actions[bot]GitHub eifinger	56618cab7a	docs: update version references to v10.3.2 (#1104 ) Update `uses: astral-sh/setup-uv@...` references in documentation to `07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2`. Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com>	2026-10-22 11:25:32 +02:00