Alex Waygood and GitHub
665801e39d
Update esbuild to 0.28.2 ( #435 )
...
Update `esbuild` from `0.27.4` to `0.28.2` and regenerate the checked-in
action bundles with the updated version. This addresses [Dependabot
alert
#28 ](https://github.com/astral-sh/ruff-action/security/dependabot/28 ).
2026-10-21 11:19:10 -07:00
Alex Waygood and GitHub
5226eeb6a9
Update smol-toml to 1.9.1 ( #434 )
...
Update the locked `smol-toml` dependency from `1.6.1` to `1.9.1` in
`package-lock.json`. This addresses Dependabot alerts
[#75 ](https://github.com/astral-sh/ruff-action/security/dependabot/75 )
and
[#60 ](https://github.com/astral-sh/ruff-action/security/dependabot/60 ).
The checked-in action bundle includes the updated dependency.
2026-10-21 11:18:55 -07:00
Alex Waygood and GitHub
ea181cb604
Update undici to 6.29.0 ( #431 )
...
Update the locked `undici` dependency from `6.24.1` to `6.29.0` in
`package-lock.json`. This addresses Dependabot alert
[#64 ](https://github.com/astral-sh/ruff-action/security/dependabot/64 ),
among other alerts for this dependency. The checked-in action bundles
include the updated dependency.
2026-10-21 11:18:43 -07:00
Alex Waygood and GitHub
280e92ea43
Update brace-expansion dependencies ( #432 )
...
Update the locked `brace-expansion` dependencies to `1.1.21`, `2.1.7`,
and `5.0.12` in `package-lock.json`. This addresses Dependabot alerts
[#73 ](https://github.com/astral-sh/ruff-action/security/dependabot/73 ),
[#72 ](https://github.com/astral-sh/ruff-action/security/dependabot/72 ),
and
[#71 ](https://github.com/astral-sh/ruff-action/security/dependabot/71 ),
among other alerts for this dependency.
2026-10-21 11:18:16 -07:00
22ba4f8560
chore: update known checksums for 0.17.1 ( #427 )
...
chore: update known checksums for 0.17.1
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-10-16 09:13:49 +02:00
a737711ea8
chore: update known checksums for 0.17.0 ( #425 )
...
chore: update known checksums for 0.17.0
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-10-10 06:50:00 +00:00
8fc297008d
chore: update known checksums for 0.16.9/0.16.10 ( #423 )
...
chore: update known checksums for 0.16.10
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-10-02 08:47:15 +02:00
cc56f639e4
chore: update known checksums for 0.16.8 ( #421 )
...
chore: update known checksums for 0.16.8
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-09-17 05:53:43 +00:00
3906fcf994
chore: update known checksums for 0.16.7 ( #420 )
...
chore: update known checksums for 0.16.7
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-09-11 06:31:56 +00:00
c890b57484
chore: update known checksums for 0.16.6 ( #416 )
...
chore: update known checksums for 0.16.6
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-09-04 07:37:34 +00:00
eifinger-bot and GitHub
127e6a115e
Use JSON for known checksums ( #415 )
...
Ports the hardening from astral-sh/setup-uv#1025 to ruff-action.\n\nThis
stores generated checksums as JSON data behind a small typed TypeScript
wrapper, preventing values sourced from release metadata from being
mixed into generated executable code. It also updates the checksum
workflow and packaged action artifacts, and adds a regression test for
code-like keys and escaped checksum values.\n\nTests: npm run build, npm
run check, npm test, npm run package
2026-08-28 16:15:05 -04:00
6d5deb5cee
chore: update known checksums for 0.16.4/0.16.5 ( #412 )
...
chore: update known checksums for 0.16.5
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-08-28 07:54:42 +00:00
81a72f25c9
chore: update known checksums for 0.16.3 ( #399 )
...
chore: update known checksums for 0.16.3
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-08-14 05:36:13 +00:00
2ce112e5ca
chore: update known checksums for 0.16.2 ( #398 )
...
chore: update known checksums for 0.16.2
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-08-09 08:26:38 +00:00
28ec38735d
chore: update known checksums for 0.16.1 ( #397 )
...
chore: update known checksums for 0.16.1
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-07-31 09:11:18 +02:00
5b168050b9
chore: update known checksums for 0.16.0 ( #395 )
...
chore: update known checksums for 0.16.0
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-07-24 06:30:28 +00:00
3bb5cd7c3c
chore: update known checksums for 0.15.22 ( #393 )
...
chore: update known checksums for 0.15.22
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-07-17 06:19:01 +00:00
8d2a42ddf5
chore: update known checksums for 0.15.21 ( #391 )
...
chore: update known checksums for 0.15.21
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-07-13 09:04:22 +02:00
Kevin Stillhammer and GitHub
278981a28c
Add option to skip Astral mirror downloads ( #387 )
...
## Summary
- add `download-from-astral-mirror` input defaulting to `true`
- skip mirror URL rewriting and download directly from GitHub Releases
when disabled
- document the input and add unit coverage
Fixes #384
Refs: pi-session 019f31bc-bd1c-7276-9b4e-9734fa0aa367
## Testing
- npm run build
- npm run check
- npm run test:unit
2026-07-05 10:17:44 +00:00
Kevin Stillhammer and GitHub
c35f46c92b
chore: roll up Dependabot updates ( #386 )
...
## Summary
- roll up remaining open Dependabot npm updates for @octokit/core and
@octokit/plugin-rest-endpoint-methods
- roll up remaining GitHub Actions pin updates for CodeQL, zizmor,
release-drafter, setup-node, and create-pull-request
- regenerate bundled dist files
## Validation
- npm run all
Refs: pi-session 019f31b8-93d9-7f9b-b3e9-5aaac6bab959
2026-07-05 12:04:11 +02:00
somaz and GitHub
f3db229c84
feat: support uv.lock as version-file ( #379 )
...
Adds `uv.lock` as a supported `version-file` format, alongside the
existing
`pyproject.toml` and `requirements.txt`. A `uv.lock` pins the exact
resolved
ruff version, so reading it gives a reproducible install that matches
the
project's lockfile — the single source of truth — instead of the
lower-bound /
range typically declared in `pyproject.toml`.
The parser reads the `[[package]]` entry whose `name` is `ruff` and
returns its
`version`. If ruff is absent or the file cannot be parsed, the action
warns and
falls back to `latest` (same behaviour as the other formats).
Validation:
- `npm run all` — tsc typecheck clean, biome clean, dist rebuilt, jest
65/65 pass
- Added unit tests (`__tests__/version/file-parser.test.ts`) + a
`uv.lock` fixture
- Added an integration job (`test-default-version-from-uv-lock`) that
runs the
action against the fixture and asserts ruff 0.9.5 is installed
closes #375
2026-07-05 11:56:05 +02:00
Kevin Stillhammer and GitHub
270e80dfe7
Fix wildcard src input ( #368 )
...
Fixes : #355
2026-07-05 11:55:02 +02:00
99fe79f472
chore: update known checksums for 0.15.20 ( #383 )
...
chore: update known checksums for 0.15.20
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-06-26 08:39:54 +02:00
32ad1b993e
chore: update known checksums for 0.15.19 ( #382 )
...
chore: update known checksums for 0.15.19
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-06-24 07:16:05 +00:00
f78e087041
chore: update known checksums for 0.15.18 ( #381 )
...
chore: update known checksums for 0.15.18
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-06-19 05:45:18 +00:00
2f88679623
chore: update known checksums for 0.15.17 ( #380 )
...
chore: update known checksums for 0.15.17
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-06-12 05:57:40 +00:00
b79a7ac759
chore: update known checksums for 0.15.16 ( #378 )
...
chore: update known checksums for 0.15.16
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-06-05 06:27:01 +00:00
30c0929868
chore: update known checksums for 0.15.15 ( #377 )
...
chore: update known checksums for 0.15.15
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-05-29 09:11:56 +00:00
b4bf7655a0
chore: update known checksums for 0.15.14 ( #376 )
...
chore: update known checksums for 0.15.14
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-05-22 05:57:48 +00:00
8c228c72ff
chore: update known checksums for 0.15.13 ( #372 )
...
chore: update known checksums for 0.15.13
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-05-15 06:36:00 +00:00
ecaa98070e
chore: update known checksums for 0.15.12 ( #365 )
...
chore: update known checksums for 0.15.12
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-04-25 07:00:01 +00:00
a9cfed68e4
chore: update known checksums for 0.15.11 ( #360 )
...
chore: update known checksums for 0.15.11
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-04-17 07:31:01 +00:00
Kevin Stillhammer and GitHub
0ce1b0bf8b
refactor version resolving ( #353 )
2026-04-12 13:44:40 +02:00
Kevin Stillhammer and GitHub
9b8caf6c41
Add manifest-file input ( #352 )
2026-04-11 19:14:05 +02:00
2186c6ecae
chore: update known checksums for 0.15.10 ( #351 )
...
chore: update known checksums for 0.15.10
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-04-10 11:34:56 +00:00
d7f6ad639a
chore: update known checksums for 0.15.9 ( #348 )
...
chore: update known checksums for 0.15.9
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-04-03 07:00:21 +00:00
Kevin Stillhammer and GitHub
0be154b683
Migrate to ESMBundler and node 24 ( #345 )
2026-03-28 15:52:59 +00:00
f611dfc122
chore: update known checksums for 0.15.8 ( #344 )
...
chore: update known checksums for 0.15.8
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-03-27 06:13:56 +00:00
d40baf4d10
chore: update known checksums for 0.15.7 ( #342 )
...
chore: update known checksums for 0.15.7
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-03-20 06:47:13 +00:00
18ddc929c7
chore: update known checksums for 0.15.6 ( #337 )
...
chore: update known checksums for 0.15.6
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-03-13 07:28:50 +01:00
cb58d827d0
chore: update known checksums for 0.15.5 ( #331 )
...
chore: update known checksums for 0.15.5
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-03-06 08:28:19 +01:00
845ce6a88f
chore: update known checksums for 0.15.4 ( #328 )
...
chore: update known checksums for 0.15.4
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-02-27 08:11:36 +01:00
48f37fab2d
chore: update known checksums for 0.15.2 ( #325 )
...
chore: update known checksums for 0.15.2
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-02-20 06:59:59 +00:00
53288957fd
chore: update known checksums for 0.15.1 ( #323 )
...
chore: update known checksums for 0.15.1
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-02-14 07:56:44 +00:00
bab84a8f49
chore: update known checksums for 0.15.0 ( #320 )
...
chore: update known checksums for 0.15.0
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-02-04 07:43:18 +00:00
Kevin Stillhammer and GitHub
aedff8d295
Bump dependencies and actions ( #311 )
2026-01-30 09:31:31 +01:00
5eee2a4332
search in parent dir ( #306 )
...
Fixes: #164
---------
Co-authored-by: Clawdbot <clawdbot@users.noreply.github.com >
2026-01-28 11:38:26 +01:00
github-actions[bot] and GitHub
1d756c4b80
chore: update known checksums for 0.14.13/0.14.14 ( #297 )
2026-01-25 21:45:15 +00:00
Kevin Stillhammer and GitHub
deb632007b
ignore environment markers in dep specs ( #295 )
...
Contributes to: #256
2026-01-15 13:58:24 +01:00
7840fe30a7
chore: update known checksums for 0.14.11 ( #292 )
...
chore: update known checksums for 0.14.11
Co-authored-by: eifinger <1481961+eifinger@users.noreply.github.com >
2026-01-09 07:24:10 +00:00
