The GitHub Actions job "mainline-only" on tvm-ffi.git/main has failed.
Run started by GitHub user cyx-6 (triggered by cyx-6).

Head commit for run:
f9041046820c04e585a4942cb88cda571380be79 / Yaxing Cai <[email protected]>
[CI] Update astral-sh/setup-uv to allowed ref v8.2.0 (#624)

## Motivation

The ASF `infrastructure-actions` allowlist was updated and the
previously pinned `astral-sh/setup-uv` ref was removed:

- Removed: `astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098`
(v7.3.1)

Since this ref is no longer on the approved list, the action allowlist
check will reject our workflows until it is bumped to a currently
allowed ref.

## Change

Bump all usages of `astral-sh/setup-uv` to the latest allowed ref:

- New: `astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39`
(v8.2.0)

This is the newest ref currently on the allowlist and the only
`setup-uv` entry without an `expires_at`, so it is the most durable
choice. The v7.x allowed refs expire on 2026-06-27.

The change is a straightforward pin update — the workflows only use the
stable `python-version` and `activate-environment` inputs, which are
unchanged across the v7 → v8 major bump.

### Files updated (10 occurrences)

- `.github/actions/build-wheel-for-publish/action.yml`
- `.github/workflows/ci_mainline_only.yml`
- `.github/workflows/ci_test.yml`
- `.github/workflows/torch_c_dlpack.yml`

Report URL: https://github.com/apache/tvm-ffi/actions/runs/27678292955

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to