Skip to content

allow astral-sh/setup-uv v7.0.0#605

Open
adoroszlai wants to merge 1 commit intoapache:mainfrom
adoroszlai:setup-uv-7.0.0
Open

allow astral-sh/setup-uv v7.0.0#605
adoroszlai wants to merge 1 commit intoapache:mainfrom
adoroszlai:setup-uv-7.0.0

Conversation

@adoroszlai
Copy link
Contributor

Add astral-sh/setup-uv @ v7.0.0 to allowed actions. This version is used by latest helm/chart-testing-action @ v2.8.0, which is in the whitelist:

helm/chart-testing-action:
6ec842c01de15ebb84c8627d2744a0c2f2755c9f:
tag: v2.8.0

v7.0.0 was allowed previously (#358), but has expired after 8a7952e.

There aren’t any published security advisories.

Fixes #590.

Copy link
Member

@raboof raboof left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is essentially just extending the deadline on an already-reviewed action.

I used utils/verify-action-build.py astral-sh/setup-uv@eb1897b8dc4b5d5bfe39a428a8f2304605e0983c to check the 3 artifacts in 'dist' match the sources.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cannot use helm/chart-testing-action

2 participants