From 59ccfd8f2360f6d4557e113d5fa0f28337a4b24f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Mar 2026 06:10:50 +0000 Subject: [PATCH 1/3] ci: bump astral-sh/setup-uv from 6.0.1 to 7.4.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.0.1 to 7.4.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/6b9c6063abd6010835644d4c2e1bef4cf5cd0fca...6ee6290f1cbc4156c0bdd66691b2c144ef8df19a) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/pages-preview.yml | 2 +- .github/workflows/pages.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pages-preview.yml b/.github/workflows/pages-preview.yml index 0a5f6479f6..1be161e0cc 100644 --- a/.github/workflows/pages-preview.yml +++ b/.github/workflows/pages-preview.yml @@ -39,7 +39,7 @@ jobs: allow-prereleases: true - name: Install uv - uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # v6.0.1 + uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0 - name: Install docs dependencies run: uv sync --group docs --no-dev diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index fd91b059c7..9cd950a572 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -37,7 +37,7 @@ jobs: allow-prereleases: true - name: Install uv - uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # v6.0.1 + uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0 - name: Install docs dependencies run: uv sync --group docs --no-dev From 962cf3e787df778a5c81bb109f3c2386447e4cdf Mon Sep 17 00:00:00 2001 From: Aurelio <19254254+Aureliolo@users.noreply.github.com> Date: Thu, 12 Mar 2026 09:23:53 +0100 Subject: [PATCH 2/3] chore: update composite action setup-uv to v7.4.0 Align the composite action with the Dependabot-updated pages workflows to avoid version inconsistency. --- .github/actions/setup-python-uv/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/setup-python-uv/action.yml b/.github/actions/setup-python-uv/action.yml index 9fb47e980f..22589d2d1c 100644 --- a/.github/actions/setup-python-uv/action.yml +++ b/.github/actions/setup-python-uv/action.yml @@ -11,7 +11,7 @@ runs: using: composite steps: - name: Install uv - uses: astral-sh/setup-uv@c7f87aa956e4c323abf06d5dec078e358f6b4d04 # v6.0.0 + uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0 with: enable-cache: true From 8e223bd346083860849087e8bb20861e41dd3a80 Mon Sep 17 00:00:00 2001 From: Aurelio <19254254+Aureliolo@users.noreply.github.com> Date: Thu, 12 Mar 2026 09:25:18 +0100 Subject: [PATCH 3/3] fix: remove non-existent --timeout flag from gh pr checks in skill gh pr checks --watch does not support --timeout. Use the Bash tool's timeout parameter instead to cap the wait. --- .claude/skills/review-dep-pr/SKILL.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.claude/skills/review-dep-pr/SKILL.md b/.claude/skills/review-dep-pr/SKILL.md index 6917ecfc47..c9460a07c3 100644 --- a/.claude/skills/review-dep-pr/SKILL.md +++ b/.claude/skills/review-dep-pr/SKILL.md @@ -299,7 +299,7 @@ For each PR based on user's choice: - Open a replacement PR targeting the original base branch, linking to the original PR in the description - Close the original Dependabot PR with a comment pointing to the replacement - **Use the replacement PR number for all remaining steps** (CI wait, merge) -5. Wait for CI to pass using `gh pr checks --watch --timeout 600` (10-minute timeout — if it expires, warn the user that CI may be stuck and ask how to proceed rather than hanging indefinitely). Use the replacement PR number if step 4 created one. +5. Wait for CI to pass using `gh pr checks --watch` (use the Bash tool's `timeout` parameter set to 600000ms to cap the wait — if it expires, warn the user that CI may be stuck and ask how to proceed). Use the replacement PR number if step 4 created one. 6. Merge the active PR ### Fix CI and merge @@ -308,7 +308,7 @@ For each PR based on user's choice: 2. Investigate the CI failure 3. Fix the issue 4. Commit and push (same Dependabot fallback applies — if push fails, open a replacement PR and use that PR number for remaining steps) -5. Wait for CI to pass using `gh pr checks --watch --timeout 600` (10-minute timeout — if it expires, warn the user that CI may be stuck and ask how to proceed rather than hanging indefinitely) +5. Wait for CI to pass using `gh pr checks --watch` (use the Bash tool's `timeout` parameter set to 600000ms to cap the wait — if it expires, warn the user that CI may be stuck and ask how to proceed) 6. Merge the active PR when green ### Close / Skip