use astral-sh/setup-uv when possible - #112

Merged

Marco-Sulla merged 14 commits into

workflow_pragmatic

Nov 29, 2025

GitHub Advanced Security / CodeQL failed Nov 29, 2025 in 3s

3 new alerts including 3 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

3 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 36 in .github/workflows/build_primary_wheels.yml

Code scanning / CodeQL

Unpinned tag for a non-immutable Action or reusable workflow Medium

Unpinned 3rd party Action 'Build primary wheels' step

uses 'astral-sh/setup-uv' with ref 'v7', not a pinned commit hash

Check warning on line 152 in .github/workflows/build_secondary_wheels.yml

Code scanning / CodeQL

Unpinned tag for a non-immutable Action or reusable workflow Medium

Unpinned 3rd party Action 'Build secondary wheels' step

uses 'astral-sh/setup-uv' with ref 'v7', not a pinned commit hash

Check warning on line 227 in .github/workflows/build_secondary_wheels.yml

Code scanning / CodeQL

Unpinned tag for a non-immutable Action or reusable workflow Medium

Unpinned 3rd party Action 'Build secondary wheels' step

uses 'astral-sh/setup-uv' with ref 'v7', not a pinned commit hash