Skip to content

Use setup-uv defaults for Python and the venv #211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
glenn-jocher merged 5 commits into from
Oct 6, 2026
Merged

Use setup-uv defaults for Python and the venv #211

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
3593fde
Use setup-uv defaults for Python and the venv
glenn-jocher Oct 6, 2026
8af5ed0
Validate against ultralytics/actions#915 setup-uv-defaults branch
glenn-jocher Oct 6, 2026
607e598
Scan the activated venv for the SBOM
glenn-jocher Oct 6, 2026
fba1b64
Name the SBOM after the repository
glenn-jocher Oct 6, 2026
c3144e8
Point setup-uv back to @main now that ultralytics/actions#915 is merged
glenn-jocher Oct 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 6 additions & 18 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,8 @@ jobs:
previous_tag: ${{ steps.check_pypi.outputs.previous_tag }}
steps:
- uses: actions/checkout@v7
- uses: actions/setup-python@v7
with:
python-version: "3.x"
- uses: ultralytics/actions/setup-uv@main
- run: uv pip install --system --no-cache ultralytics-actions
- run: uv pip install --no-cache ultralytics-actions

@glenn-jocher glenn-jocher Oct 6, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ultralytics/actions#915 merged at 17:18 UTC (da5463a, released as 0.4.0), so setup-uv@main now carries the new defaults and this CI run exercises them. The validation commit pointing at @setup-uv-defaults was already reverted, and the PR description is updated to match.

- id: check_pypi
shell: python
env:
Expand Down Expand Up @@ -77,12 +74,8 @@ jobs:
contents: read
steps:
- uses: actions/checkout@v7
- uses: actions/setup-python@v7
with:
python-version: "3.x"
- uses: ultralytics/actions/setup-uv@main
- run: uv pip install --system --no-cache build
- run: python -m build
- run: uv build
- uses: actions/upload-artifact@v7
with:
name: dist
Expand Down Expand Up @@ -127,20 +120,15 @@ jobs:
contents: write
steps:
- uses: actions/checkout@v7
- uses: actions/setup-python@v7
with:
python-version: "3.x"
- uses: ultralytics/actions/setup-uv@main
- run: |
uv venv sbom-env
uv pip install -e .
env:
VIRTUAL_ENV: sbom-env
- run: uv pip install -e .
- uses: anchore/sbom-action@v0
with:
format: spdx-json
output-file: sbom.spdx.json
path: sbom-env
path: ${{ env.VIRTUAL_ENV }}
env:
SYFT_SOURCE_NAME: ${{ github.repository }} # name the SBOM after the repo, not the venv path
- run: gh release upload ${{ needs.check.outputs.current_tag }} sbom.spdx.json --clobber
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Expand Down
Loading