cyx-6 opened a new pull request, #624: URL: https://github.com/apache/tvm-ffi/pull/624
## Motivation The ASF `infrastructure-actions` allowlist was updated and the previously pinned `astral-sh/setup-uv` ref was removed: - Removed: `astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098` (v7.3.1) Since this ref is no longer on the approved list, the action allowlist check will reject our workflows until it is bumped to a currently allowed ref. ## Change Bump all usages of `astral-sh/setup-uv` to the latest allowed ref: - New: `astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39` (v8.2.0) This is the newest ref currently on the allowlist and the only `setup-uv` entry without an `expires_at`, so it is the most durable choice. The v7.x allowed refs expire on 2026-06-27. The change is a straightforward pin update — the workflows only use the stable `python-version` and `activate-environment` inputs, which are unchanged across the v7 → v8 major bump. ### Files updated (10 occurrences) - `.github/actions/build-wheel-for-publish/action.yml` - `.github/workflows/ci_mainline_only.yml` - `.github/workflows/ci_test.yml` - `.github/workflows/torch_c_dlpack.yml` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
