From b61287c8d28b9f5007f871b0ff30aa863694cdbd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 06:37:20 +0000 Subject: [PATCH] chore(deps): bump astral-sh/setup-uv from 5 to 7 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 5 to 7. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v5...v7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/airflow.yml | 2 +- .github/workflows/backend.yml | 8 ++++---- .github/workflows/ml.yml | 4 ++-- .github/workflows/sonarqube.yml | 6 +++--- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/airflow.yml b/.github/workflows/airflow.yml index fbc7f5f..eeab85e 100644 --- a/.github/workflows/airflow.yml +++ b/.github/workflows/airflow.yml @@ -50,7 +50,7 @@ jobs: uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: etl/airflow/uv.lock diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml index b3b7dd5..84c0664 100644 --- a/.github/workflows/backend.yml +++ b/.github/workflows/backend.yml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: apps/backend/uv.lock @@ -93,7 +93,7 @@ jobs: uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: apps/backend/uv.lock @@ -129,7 +129,7 @@ jobs: uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: apps/backend/uv.lock @@ -155,7 +155,7 @@ jobs: # Pourquoi : pas de cache ici. uvx n'installe pas le projet, le verrou n'alimente donc # aucune clé de cache ; la seule roue téléchargée est celle de Bandit. - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 # Pourquoi : le périmètre est `app`, le code livré. Les tests emploient légitimement des # secrets factices et des `assert` que Bandit signalerait sans qu'aucun n'atteigne la prod. diff --git a/.github/workflows/ml.yml b/.github/workflows/ml.yml index 4b9be7b..0b745eb 100644 --- a/.github/workflows/ml.yml +++ b/.github/workflows/ml.yml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: ml/uv.lock @@ -72,7 +72,7 @@ jobs: # Pourquoi : pas de cache ici. uvx n'installe pas le projet, le verrou n'alimente donc # aucune clé de cache ; la seule roue téléchargée est celle de Bandit. - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 - name: Analyse le code livré (bloquant à partir de MEDIUM) run: uvx bandit==1.9.4 --recursive enervision_ml --severity-level medium --confidence-level medium diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index be978d5..d988f2d 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -66,7 +66,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: apps/backend/uv.lock @@ -97,7 +97,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: apps/backend/uv.lock @@ -117,7 +117,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Installe uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@v7 with: enable-cache: true cache-dependency-glob: ml/uv.lock