diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ccfd5f0..05bc28e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -46,7 +46,7 @@ jobs: - name: Set up uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: 0.11.29 + version: 0.11.30 - name: Install validator dependencies run: uv pip install --system --require-hashes -r requirements-ci.txt - name: Run static validators diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml index 9b9dfc6..cb728e0 100644 --- a/.github/workflows/python-ci.yml +++ b/.github/workflows/python-ci.yml @@ -19,7 +19,7 @@ on: uv_version: description: 'Exact astral-sh/uv version to pin.' type: string - default: '0.11.29' + default: '0.11.30' install_command: description: 'Dependency install command (bash). Empty to skip.' type: string diff --git a/.github/workflows/semgrep-ci.yml b/.github/workflows/semgrep-ci.yml index d115d6e..9b333f8 100644 --- a/.github/workflows/semgrep-ci.yml +++ b/.github/workflows/semgrep-ci.yml @@ -53,7 +53,7 @@ jobs: - name: Set up uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: 0.11.29 + version: 0.11.30 - name: Semgrep scan env: diff --git a/.github/workflows/sql-ci.yml b/.github/workflows/sql-ci.yml index b914e56..0059f64 100644 --- a/.github/workflows/sql-ci.yml +++ b/.github/workflows/sql-ci.yml @@ -64,7 +64,7 @@ jobs: - name: Set up uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: 0.11.29 + version: 0.11.30 - name: Lint if: ${{ inputs.lint }} diff --git a/.github/workflows/zizmor-no-sarif.yml b/.github/workflows/zizmor-no-sarif.yml index c31ccad..07a5b86 100644 --- a/.github/workflows/zizmor-no-sarif.yml +++ b/.github/workflows/zizmor-no-sarif.yml @@ -49,7 +49,7 @@ jobs: - name: Set up uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: 0.11.29 + version: 0.11.30 - name: Run zizmor (plain, enforced) env: diff --git a/.github/workflows/zizmor-sarif.yml b/.github/workflows/zizmor-sarif.yml index 4998d25..9b96fd3 100644 --- a/.github/workflows/zizmor-sarif.yml +++ b/.github/workflows/zizmor-sarif.yml @@ -56,7 +56,7 @@ jobs: - name: Set up uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: 0.11.29 + version: 0.11.30 - name: Run zizmor (SARIF) id: scan diff --git a/CHANGELOG.md b/CHANGELOG.md index bc9bd6f..f3b9c96 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,14 @@ ## [Unreleased] +## [0.11.2] - 2026-07-21 + +### Changed + +- Bump pinned uv `0.11.29` -> `0.11.30` across the setup-uv workflows and examples. +- Refresh the `github-code-quality-transition` product fact: the GA/paid + transition completed 2026-07-20 as scheduled; re-verified 2026-07-21. + ## [0.11.1] - 2026-07-20 Supersedes 0.11.0, whose tag was burned by an accidental immutable pre-release. @@ -14,11 +22,11 @@ No functional change from 0.11.0. - **BREAKING — uv and bun are now the only language/user-space package managers used by this library.** Every reusable workflow and self-CI step that previously shelled out to `pip`/`pipx`/`poetry` or `npm`/`npx`/`pnpm`/`yarn` - now uses `astral-sh/setup-uv` (uv `0.11.29`) for Python and + now uses `astral-sh/setup-uv` (uv `0.11.30`) for Python and `oven-sh/setup-bun` (bun `1.3.14`) for JavaScript. Callers relying on the removed inputs or the old install/lint defaults must update their invocations: - `python-ci.yml`: `actions/setup-python` + pip is replaced by `setup-uv` - (pinned via the new `uv_version` input, default `0.11.29`) with + (pinned via the new `uv_version` input, default `0.11.30`) with `enable-cache: true`; Python is provisioned with `uv python install`. The `install_command` default changes from `python -m pip install --upgrade pip` to `uv sync --frozen`. The pip-specific `cache` and `cache_dependency_path` diff --git a/VERSION b/VERSION index af88ba8..bc859cb 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.11.1 +0.11.2 diff --git a/catalog/product-facts.yml b/catalog/product-facts.yml index 363125a..435c663 100644 --- a/catalog/product-facts.yml +++ b/catalog/product-facts.yml @@ -506,14 +506,14 @@ facts: overage: AI usage and Actions minutes may add cost status: official source_authority: primary - verified_at: '2026-07-11' - expires_after: '2026-07-20' + verified_at: '2026-07-21' + expires_after: '2026-10-21' source_urls: - https://github.blog/changelog/2026-06-16-github-code-quality-generally-available-july-20-2026/ - https://docs.github.com/en/billing/concepts/product-billing/github-code-quality notes: - - 'Time-sensitive transition: refresh immediately on or after 2026-07-20.' - - 'Verified 2026-07-11 against the changelog and billing docs: GA 2026-07-20, $10/active committer/month, usage-based AI, CodeQL consumes Actions minutes, Team + Enterprise Cloud only (not Enterprise Server).' + - 'GA + paid transition completed 2026-07-20 as scheduled; no longer time-critical.' + - 'Re-verified 2026-07-21 against the billing docs: standalone per-active-committer license ($10/active committer/month), CodeQL scans consume Actions minutes, AI features consume AI credits at $0.01/credit, independent of Advanced Security licenses; Team + Enterprise Cloud.' - id: gitlab-free-hosted provider: GitLab product: GitLab.com Free compute diff --git a/docs/generated/free-tier-matrix.md b/docs/generated/free-tier-matrix.md index e7b8187..e5aa36c 100644 --- a/docs/generated/free-tier-matrix.md +++ b/docs/generated/free-tier-matrix.md @@ -29,7 +29,7 @@ past its expiry, so a stale tier claim cannot silently mislead adopters. | `github-actions-self-hosted-control-plane` | GitHub | Actions self-hosted runners | public, private, internal | All eligible GitHub plans | zero-license-control-plane | unmetered (github-actions-control-plane-minutes) | official | 2026-07-11 | 2026-08-10 | | `github-attestations-private` | GitHub | Artifact attestations | private, internal | Enterprise Cloud | plan-gated | attestations | official | 2026-07-11 | 2026-08-10 | | `github-attestations-public` | GitHub | Artifact attestations | public | Free, Pro, Team, Enterprise Cloud | included-feature | attestations | official | 2026-07-11 | 2026-08-10 | -| `github-code-quality-transition` | GitHub | Code Quality | public, private, internal | Team, Enterprise Cloud | scheduled-paid-transition | 10 usd-per-active-committer/month | official | 2026-07-11 | 2026-07-20 | +| `github-code-quality-transition` | GitHub | Code Quality | public, private, internal | Team, Enterprise Cloud | scheduled-paid-transition | 10 usd-per-active-committer/month | official | 2026-07-21 | 2026-10-21 | | `github-dependabot-private` | GitHub | Dependabot alerts and security updates | private | All eligible plans | included-feature | repository-feature | official | 2026-07-11 | 2026-08-10 | | `github-dependency-review-private` | GitHub | Dependency review | private | Team, Enterprise Cloud | add-on-gated | repository-feature | official | 2026-07-11 | 2026-08-10 | | `github-dependency-review-public` | GitHub | Dependency review | public | All current plans | included-feature | repository-feature | official | 2026-07-11 | 2026-08-10 | diff --git a/examples/release/pypi-trusted-publishing.yml b/examples/release/pypi-trusted-publishing.yml index 3cc3bde..0bf3e3b 100644 --- a/examples/release/pypi-trusted-publishing.yml +++ b/examples/release/pypi-trusted-publishing.yml @@ -21,7 +21,7 @@ jobs: persist-credentials: false - uses: astral-sh/setup-uv@ with: - version: "0.11.29" + version: "0.11.30" - run: uv build - uses: actions/upload-artifact@ with: