Stop fetching version information from github APIs

.github/workflows/test.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Actionlint
         uses: eifinger/actionlint-action@213860089b7cf97d640aa67567898fabeb132746 # v1.9.3
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@135698455da5c3b3e55f73f4419e481ab68cdd95 # v0.4.1
+        uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
       - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
         with:
           node-version-file: .nvmrc

dist/update-known-versions/index.js

@@ -28196,42 +28196,6 @@ Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.KNOWN_CHECKSUMS = void 0;
 // AUTOGENERATED_DO_NOT_EDIT
 exports.KNOWN_CHECKSUMS = {
-    "aarch64-apple-darwin-0.9.28": "12163fe09eb292d3ad1ea0f132a84485c902e2ff360d57562bf676e6615fcba0",
-    "aarch64-pc-windows-msvc-0.9.28": "081703fa19ae05a49f486f97468f7792e1cdacda403a091b151af7f5bd6f4595",
-    "aarch64-unknown-linux-gnu-0.9.28": "382c342735ff29f8ba4574d88e39bca798bcbac50bff6742710ca9cd8143e7d2",
-    "aarch64-unknown-linux-musl-0.9.28": "eec3249254efac972d2555ff858f8ed20f05b40fbb38ac83b15cf0a2ccc86749",
-    "arm-unknown-linux-musleabihf-0.9.28": "d0df2a9e7db464a567038bd560dc5007e488542c073989334a4a293b8957e1e1",
-    "armv7-unknown-linux-gnueabihf-0.9.28": "6ddf1979609a3f5bdf897965ed6984dacce860ce57c579596bdc4b514c19320b",
-    "armv7-unknown-linux-musleabihf-0.9.28": "e391ba4cc05a3a1096f1ab6cd82fcbed059d048a6ba108b4cb18da311a07c4d5",
-    "i686-pc-windows-msvc-0.9.28": "fb5015efd0db178268312a7a7dcde7b0d3b7d7e0eccd0372a4b6f1dcfc075472",
-    "i686-unknown-linux-gnu-0.9.28": "c0d34d92cb11925530fbc313de7536da3e1d097a442f54668417d241697fb3a2",
-    "i686-unknown-linux-musl-0.9.28": "be1ad4f30d97c95af5105405fc38329d66375cde3de18cd0f9fe73b4581155c7",
-    "powerpc64-unknown-linux-gnu-0.9.28": "6f23bfca0febb001792e7124d0c2ba41ddcfe01d6c030f4a8668ed634a5a582b",
-    "powerpc64le-unknown-linux-gnu-0.9.28": "894ac114f076cffbf041e55e1ad0df759f7bc9dba1291158690781baad38001e",
-    "riscv64gc-unknown-linux-gnu-0.9.28": "e61fa014a0b77acd17f9f366a55cbc0e67b377c4eff13629021a4242cc71eabb",
-    "s390x-unknown-linux-gnu-0.9.28": "af15dc54893b2caecc3604ac68104914b155a8bbf821f667996549e777919a90",
-    "x86_64-apple-darwin-0.9.28": "3a8030881d13b824e5168f5e4d060e715e40753249766bda3d52d6771d93b169",
-    "x86_64-pc-windows-msvc-0.9.28": "9cb567fcd92f31431220ce620787043b946c30b9bb46ca213780e5ef471453be",
-    "x86_64-unknown-linux-gnu-0.9.28": "66ad1822dd9cf96694b95c24f25bc05cff417a65351464da01682a91796d1f2b",
-    "x86_64-unknown-linux-musl-0.9.28": "83cd032167b6b97ac94830608efe11159b3d485654e39fdb0bf84718ef236afe",
-    "aarch64-apple-darwin-0.9.27": "1359538ed8664d172692cf4719ee0933a4a3bfb22fc91b0be1e19e7bdd8f5ef3",
-    "aarch64-pc-windows-msvc-0.9.27": "b448ab228f5d1165b8497e8ca10346af6f652eb8ad4e75e47fa55e8cdb5b60d7",
-    "aarch64-unknown-linux-gnu-0.9.27": "a58b3b77a25620ae15ff3587049b755c7cbf3eaa7df187620b3e6c3dbf71daa0",
-    "aarch64-unknown-linux-musl-0.9.27": "f80e97e1154a06e42143a173831289336ca9e34a67096ab070346958153e8e52",
-    "arm-unknown-linux-musleabihf-0.9.27": "b80f4db9254b9ddec4b576190bdf15723e948f37f648d9b273be2e153d05f820",
-    "armv7-unknown-linux-gnueabihf-0.9.27": "03b45c99ca940739c2a093f6a514da3dd858b3bc1e8c957c16c1832e30b30c28",
-    "armv7-unknown-linux-musleabihf-0.9.27": "da43ee6e2f17b4646e35e2d55ce6a021fdf47c06601a6ae8b827de7bb7b3b02f",
-    "i686-pc-windows-msvc-0.9.27": "f47831a97b8a1bc7c7211905c1e517cc2f4ef84df877f2a283c49609275db0fa",
-    "i686-unknown-linux-gnu-0.9.27": "fdf3067e0c05d39b849ad48fbbc2b58919f70a686a40506c643d32688ceba1a9",
-    "i686-unknown-linux-musl-0.9.27": "3c1f8c2b148ebf884311558aaff32b9fb5b68fe4f4242e3e3765381bb594386a",
-    "powerpc64-unknown-linux-gnu-0.9.27": "c3cbda5118b06f2261d32f4802adfdc71f618f808df0c6a3184695a6ffecb88a",
-    "powerpc64le-unknown-linux-gnu-0.9.27": "9011f6085cee3921c9fce82ce03041ca97aacc8cab86b7a5791faa71fa5f2712",
-    "riscv64gc-unknown-linux-gnu-0.9.27": "7193628620c2c50c2d6632ea8e53a4ab5313f7e8003ddedd9e999f48b6d2c222",
-    "s390x-unknown-linux-gnu-0.9.27": "5b055f02f2c8e5086ae1d05cf70d32d66982d27d8469ed896a65067fac2001d2",
-    "x86_64-apple-darwin-0.9.27": "3977309c5c79984c13c55d2d1cd7aa114a718eb29436c5bdb4bdfa08bf243438",
-    "x86_64-pc-windows-msvc-0.9.27": "c3bf465d5f2b93c836f369aec9f3fa8350843f24abd5f710bb74e72440b82898",
-    "x86_64-unknown-linux-gnu-0.9.27": "8636e693ea0e05f5f4294b161f816c4d8df065267fdb0405cfb84c8e326991fa",
-    "x86_64-unknown-linux-musl-0.9.27": "9f269bfb9c2e80808c373902af6a4af6cd5f4b4668b28c44aa09639cfed925c5",
     "aarch64-apple-darwin-0.9.26": "fcf0a9ea6599c6ae28a4c854ac6da76f2c889354d7c36ce136ef071f7ab9721f",
     "aarch64-pc-windows-msvc-0.9.26": "79e1398ec98681b1b0494ed3485b0f4565e98a7db109a3f205d0fcdc6a1992f7",
     "aarch64-unknown-linux-gnu-0.9.26": "f71040c59798f79c44c08a7a1c1af7de95a8d334ea924b47b67ad6b9632be270",
@@ -32518,8 +32482,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.REMOTE_MANIFEST_URL = void 0;
 exports.getLatestKnownVersion = getLatestKnownVersion;
 exports.getDownloadUrl = getDownloadUrl;
+exports.getAvailableVersionsFromManifest = getAvailableVersionsFromManifest;
 exports.updateVersionManifest = updateVersionManifest;
 const node_fs_1 = __nccwpck_require__(3024);
 const node_path_1 = __nccwpck_require__(6760);
@@ -32527,6 +32493,9 @@ const core = __importStar(__nccwpck_require__(7484));
 const semver = __importStar(__nccwpck_require__(9318));
 const fetch_1 = __nccwpck_require__(3385);
 const localManifestFile = (0, node_path_1.join)(__dirname, "..", "..", "version-manifest.json");
+exports.REMOTE_MANIFEST_URL = "https://raw.githubusercontent.com/astral-sh/setup-uv/main/version-manifest.json";
+// Cache for manifest entries to avoid re-fetching
+const manifestCache = new Map();
 async function getLatestKnownVersion(manifestUrl) {
     const manifestEntries = await getManifestEntries(manifestUrl);
     return manifestEntries.reduce((a, b) => semver.gt(a.version, b.version) ? a : b).version;
@@ -32538,7 +32507,18 @@ async function getDownloadUrl(manifestUrl, version, arch, platform) {
         entry.platform === platform);
     return entry ? entry.downloadUrl : undefined;
 }
+async function getAvailableVersionsFromManifest(manifestUrl) {
+    const manifestEntries = await getManifestEntries(manifestUrl);
+    return [...new Set(manifestEntries.map((entry) => entry.version))];
+}
 async function getManifestEntries(manifestUrl) {
+    const cacheKey = manifestUrl ?? "local";
+    // Return cached entries if available
+    const cached = manifestCache.get(cacheKey);
+    if (cached !== undefined) {
+        core.debug(`Using cached manifest entries for: ${cacheKey}`);
+        return cached;
+    }
     let data;
     if (manifestUrl !== undefined) {
         core.info(`Fetching manifest-file from: ${manifestUrl}`);
@@ -32553,7 +32533,9 @@ async function getManifestEntries(manifestUrl) {
         const fileContent = await node_fs_1.promises.readFile(localManifestFile);
         data = fileContent.toString();
     }
-    return JSON.parse(data);
+    const entries = JSON.parse(data);
+    manifestCache.set(cacheKey, entries);
+    return entries;
 }
 async function updateVersionManifest(manifestUrl, downloadUrls) {
     const manifest = [];

src/download/checksum/known-checksums.ts

@@ -1,77 +1,5 @@
 // AUTOGENERATED_DO_NOT_EDIT
 export const KNOWN_CHECKSUMS: { [key: string]: string } = {
-  "aarch64-apple-darwin-0.9.28":
-    "12163fe09eb292d3ad1ea0f132a84485c902e2ff360d57562bf676e6615fcba0",
-  "aarch64-pc-windows-msvc-0.9.28":
-    "081703fa19ae05a49f486f97468f7792e1cdacda403a091b151af7f5bd6f4595",
-  "aarch64-unknown-linux-gnu-0.9.28":
-    "382c342735ff29f8ba4574d88e39bca798bcbac50bff6742710ca9cd8143e7d2",
-  "aarch64-unknown-linux-musl-0.9.28":
-    "eec3249254efac972d2555ff858f8ed20f05b40fbb38ac83b15cf0a2ccc86749",
-  "arm-unknown-linux-musleabihf-0.9.28":
-    "d0df2a9e7db464a567038bd560dc5007e488542c073989334a4a293b8957e1e1",
-  "armv7-unknown-linux-gnueabihf-0.9.28":
-    "6ddf1979609a3f5bdf897965ed6984dacce860ce57c579596bdc4b514c19320b",
-  "armv7-unknown-linux-musleabihf-0.9.28":
-    "e391ba4cc05a3a1096f1ab6cd82fcbed059d048a6ba108b4cb18da311a07c4d5",
-  "i686-pc-windows-msvc-0.9.28":
-    "fb5015efd0db178268312a7a7dcde7b0d3b7d7e0eccd0372a4b6f1dcfc075472",
-  "i686-unknown-linux-gnu-0.9.28":
-    "c0d34d92cb11925530fbc313de7536da3e1d097a442f54668417d241697fb3a2",
-  "i686-unknown-linux-musl-0.9.28":
-    "be1ad4f30d97c95af5105405fc38329d66375cde3de18cd0f9fe73b4581155c7",
-  "powerpc64-unknown-linux-gnu-0.9.28":
-    "6f23bfca0febb001792e7124d0c2ba41ddcfe01d6c030f4a8668ed634a5a582b",
-  "powerpc64le-unknown-linux-gnu-0.9.28":
-    "894ac114f076cffbf041e55e1ad0df759f7bc9dba1291158690781baad38001e",
-  "riscv64gc-unknown-linux-gnu-0.9.28":
-    "e61fa014a0b77acd17f9f366a55cbc0e67b377c4eff13629021a4242cc71eabb",
-  "s390x-unknown-linux-gnu-0.9.28":
-    "af15dc54893b2caecc3604ac68104914b155a8bbf821f667996549e777919a90",
-  "x86_64-apple-darwin-0.9.28":
-    "3a8030881d13b824e5168f5e4d060e715e40753249766bda3d52d6771d93b169",
-  "x86_64-pc-windows-msvc-0.9.28":
-    "9cb567fcd92f31431220ce620787043b946c30b9bb46ca213780e5ef471453be",
-  "x86_64-unknown-linux-gnu-0.9.28":
-    "66ad1822dd9cf96694b95c24f25bc05cff417a65351464da01682a91796d1f2b",
-  "x86_64-unknown-linux-musl-0.9.28":
-    "83cd032167b6b97ac94830608efe11159b3d485654e39fdb0bf84718ef236afe",
-  "aarch64-apple-darwin-0.9.27":
-    "1359538ed8664d172692cf4719ee0933a4a3bfb22fc91b0be1e19e7bdd8f5ef3",
-  "aarch64-pc-windows-msvc-0.9.27":
-    "b448ab228f5d1165b8497e8ca10346af6f652eb8ad4e75e47fa55e8cdb5b60d7",
-  "aarch64-unknown-linux-gnu-0.9.27":
-    "a58b3b77a25620ae15ff3587049b755c7cbf3eaa7df187620b3e6c3dbf71daa0",
-  "aarch64-unknown-linux-musl-0.9.27":
-    "f80e97e1154a06e42143a173831289336ca9e34a67096ab070346958153e8e52",
-  "arm-unknown-linux-musleabihf-0.9.27":
-    "b80f4db9254b9ddec4b576190bdf15723e948f37f648d9b273be2e153d05f820",
-  "armv7-unknown-linux-gnueabihf-0.9.27":
-    "03b45c99ca940739c2a093f6a514da3dd858b3bc1e8c957c16c1832e30b30c28",
-  "armv7-unknown-linux-musleabihf-0.9.27":
-    "da43ee6e2f17b4646e35e2d55ce6a021fdf47c06601a6ae8b827de7bb7b3b02f",
-  "i686-pc-windows-msvc-0.9.27":
-    "f47831a97b8a1bc7c7211905c1e517cc2f4ef84df877f2a283c49609275db0fa",
-  "i686-unknown-linux-gnu-0.9.27":
-    "fdf3067e0c05d39b849ad48fbbc2b58919f70a686a40506c643d32688ceba1a9",
-  "i686-unknown-linux-musl-0.9.27":
-    "3c1f8c2b148ebf884311558aaff32b9fb5b68fe4f4242e3e3765381bb594386a",
-  "powerpc64-unknown-linux-gnu-0.9.27":
-    "c3cbda5118b06f2261d32f4802adfdc71f618f808df0c6a3184695a6ffecb88a",
-  "powerpc64le-unknown-linux-gnu-0.9.27":
-    "9011f6085cee3921c9fce82ce03041ca97aacc8cab86b7a5791faa71fa5f2712",
-  "riscv64gc-unknown-linux-gnu-0.9.27":
-    "7193628620c2c50c2d6632ea8e53a4ab5313f7e8003ddedd9e999f48b6d2c222",
-  "s390x-unknown-linux-gnu-0.9.27":
-    "5b055f02f2c8e5086ae1d05cf70d32d66982d27d8469ed896a65067fac2001d2",
-  "x86_64-apple-darwin-0.9.27":
-    "3977309c5c79984c13c55d2d1cd7aa114a718eb29436c5bdb4bdfa08bf243438",
-  "x86_64-pc-windows-msvc-0.9.27":
-    "c3bf465d5f2b93c836f369aec9f3fa8350843f24abd5f710bb74e72440b82898",
-  "x86_64-unknown-linux-gnu-0.9.27":
-    "8636e693ea0e05f5f4294b161f816c4d8df065267fdb0405cfb84c8e326991fa",
-  "x86_64-unknown-linux-musl-0.9.27":
-    "9f269bfb9c2e80808c373902af6a4af6cd5f4b4668b28c44aa09639cfed925c5",
   "aarch64-apple-darwin-0.9.26":
     "fcf0a9ea6599c6ae28a4c854ac6da76f2c889354d7c36ce136ef071f7ab9721f",
   "aarch64-pc-windows-msvc-0.9.26":

src/download/download-version.ts

@@ -2,21 +2,18 @@ import { promises as fs } from "node:fs";
 import * as path from "node:path";
 import * as core from "@actions/core";
 import * as tc from "@actions/tool-cache";
-import type { Endpoints } from "@octokit/types";
 import * as pep440 from "@renovatebot/pep440";
 import * as semver from "semver";
 import { OWNER, REPO, TOOL_CACHE_NAME } from "../utils/constants";
-import { Octokit } from "../utils/octokit";
 import type { Architecture, Platform } from "../utils/platforms";
 import { validateChecksum } from "./checksum/checksum";
 import {
+  getAvailableVersionsFromManifest,
   getDownloadUrl,
   getLatestKnownVersion as getLatestVersionInManifest,
+  REMOTE_MANIFEST_URL,
 } from "./version-manifest";
 
-type Release =
-  Endpoints["GET /repos/{owner}/{repo}/releases"]["response"]["data"][number];
-
 export function tryGetFromToolCache(
   arch: Architecture,
   version: string,
@@ -61,27 +58,36 @@ export async function downloadVersionFromManifest(
   checkSum: string | undefined,
   githubToken: string,
 ): Promise<{ version: string; cachedToolDir: string }> {
-  const downloadUrl = await getDownloadUrl(
+  // If no user-provided manifest, try remote manifest first (will use cache if already fetched)
-    manifestUrl,
+  // then fall back to bundled manifest
-    version,
+  const manifestSources =
-    arch,
+    manifestUrl !== undefined
-    platform,
+      ? [manifestUrl]
-  );
+      : [REMOTE_MANIFEST_URL, undefined];
-  if (!downloadUrl) {
+
-    core.info(
+  for (const source of manifestSources) {
-      `manifest-file does not contain version ${version}, arch ${arch}, platform ${platform}. Falling back to GitHub releases.`,
+    try {
-    );
+      const downloadUrl = await getDownloadUrl(source, version, arch, platform);
-    return await downloadVersionFromGithub(
+      if (downloadUrl) {
-      platform,
+        return await downloadVersion(
-      arch,
+          downloadUrl,
-      version,
+          `uv-${arch}-${platform}`,
-      checkSum,
+          platform,
-      githubToken,
+          arch,
-    );
+          version,
+          checkSum,
+          githubToken,
+        );
+      }
+    } catch (err) {
+      core.debug(`Failed to get download URL from manifest ${source}: ${err}`);
+    }
   }
-  return await downloadVersion(
+
-    downloadUrl,
+  core.info(
-    `uv-${arch}-${platform}`,
+    `Manifest does not contain version ${version}, arch ${arch}, platform ${platform}. Falling back to GitHub releases.`,
+  );
+  return await downloadVersionFromGithub(
     platform,
     arch,
     version,
@@ -143,7 +149,6 @@ function getExtension(platform: Platform): string {
 export async function resolveVersion(
   versionInput: string,
   manifestFile: string | undefined,
-  githubToken: string,
   resolutionStrategy: "highest" | "lowest" = "highest",
 ): Promise<string> {
   core.debug(`Resolving version: ${versionInput}`);
@@ -163,7 +168,7 @@ export async function resolveVersion(
   } else {
     version =
       versionInput === "latest" || resolveVersionSpecifierToLatest
-        ? await getLatestVersion(githubToken)
+        ? await getLatestVersion()
         : versionInput;
   }
   if (tc.isExplicitVersion(version)) {
@@ -175,7 +180,7 @@ export async function resolveVersion(
     }
     return version;
   }
-  const availableVersions = await getAvailableVersions(githubToken);
+  const availableVersions = await getAvailableVersions();
   core.debug(`Available versions: ${availableVersions}`);
   const resolvedVersion =
     resolutionStrategy === "lowest"
@@ -187,79 +192,37 @@ export async function resolveVersion(
   return resolvedVersion;
 }
 
-async function getAvailableVersions(githubToken: string): Promise<string[]> {
+async function getAvailableVersions(): Promise<string[]> {
-  core.info("Getting available versions from GitHub API...");
+  // 1. Try remote manifest first (no rate limits, always current)
   try {
-    const octokit = new Octokit({
+    core.info("Getting available versions from remote manifest...");
-      auth: githubToken,
+    const versions =
-    });
+      await getAvailableVersionsFromManifest(REMOTE_MANIFEST_URL);
-    return await getReleaseTagNames(octokit);
+    core.debug(`Found ${versions.length} versions from remote manifest`);
+    return versions;
   } catch (err) {
-    if ((err as Error).message.includes("Bad credentials")) {
+    core.debug(`Remote manifest lookup failed: ${err}`);
-      core.info(
-        "No (valid) GitHub token provided. Falling back to anonymous. Requests might be rate limited.",
-      );
-      const octokit = new Octokit();
-      return await getReleaseTagNames(octokit);
-    }
-    throw err;
   }
+
+  // 2. Fall back to bundled manifest (no network, may be stale)
+  core.info("Getting available versions from bundled manifest...");
+  return await getAvailableVersionsFromManifest(undefined);
 }
 
-async function getReleaseTagNames(octokit: Octokit): Promise<string[]> {
+async function getLatestVersion() {
-  const response: Release[] = await octokit.paginate(
+  // 1. Try remote manifest first (no rate limits, always current)
-    octokit.rest.repos.listReleases,
-    {
-      owner: OWNER,
-      repo: REPO,
-    },
-  );
-  const releaseTagNames = response.map((release) => release.tag_name);
-  if (releaseTagNames.length === 0) {
-    throw Error(
-      "Github API request failed while getting releases. Check the GitHub status page for outages. Try again later.",
-    );
-  }
-  return releaseTagNames;
-}
-
-async function getLatestVersion(githubToken: string) {
-  core.info("Getting latest version from GitHub API...");
-  const octokit = new Octokit({
-    auth: githubToken,
-  });
-
-  let latestRelease: { tag_name: string } | undefined;
   try {
-    latestRelease = await getLatestRelease(octokit);
+    core.info("Getting latest version from remote manifest...");
+    const version = await getLatestVersionInManifest(REMOTE_MANIFEST_URL);
+    core.debug(`Latest version from remote manifest: ${version}`);
+    return version;
   } catch (err) {
-    if ((err as Error).message.includes("Bad credentials")) {
+    core.debug(`Remote manifest lookup failed: ${err}`);
-      core.info(
-        "No (valid) GitHub token provided. Falling back to anonymous. Requests might be rate limited.",
-      );
-      const octokit = new Octokit();
-      latestRelease = await getLatestRelease(octokit);
-    } else {
-      core.error(
-        "Github API request failed while getting latest release. Check the GitHub status page for outages. Try again later.",
-      );
-      throw err;
-    }
   }
 
-  if (!latestRelease) {
+  // 2. Fall back to bundled manifest (no network, may be stale)
-    throw new Error("Could not determine latest release.");
+  core.info("Getting latest version from bundled manifest...");
-  }
+  return await getLatestVersionInManifest(undefined);
-  core.debug(`Latest version: ${latestRelease.tag_name}`);
-  return latestRelease.tag_name;
-}
-
-async function getLatestRelease(octokit: Octokit) {
-  const { data: latestRelease } = await octokit.rest.repos.getLatestRelease({
-    owner: OWNER,
-    repo: REPO,
-  });
-  return latestRelease;
 }
 
 function maxSatisfying(

src/download/version-manifest.ts

@@ -5,6 +5,11 @@ import * as semver from "semver";
 import { fetch } from "../utils/fetch";
 
 const localManifestFile = join(__dirname, "..", "..", "version-manifest.json");
+export const REMOTE_MANIFEST_URL =
+  "https://raw.githubusercontent.com/astral-sh/setup-uv/main/version-manifest.json";
+
+// Cache for manifest entries to avoid re-fetching
+const manifestCache = new Map<string, ManifestEntry[]>();
 
 interface ManifestEntry {
   version: string;
@@ -39,9 +44,25 @@ export async function getDownloadUrl(
   return entry ? entry.downloadUrl : undefined;
 }
 
+export async function getAvailableVersionsFromManifest(
+  manifestUrl: string | undefined,
+): Promise<string[]> {
+  const manifestEntries = await getManifestEntries(manifestUrl);
+  return [...new Set(manifestEntries.map((entry) => entry.version))];
+}
+
 async function getManifestEntries(
   manifestUrl: string | undefined,
 ): Promise<ManifestEntry[]> {
+  const cacheKey = manifestUrl ?? "local";
+
+  // Return cached entries if available
+  const cached = manifestCache.get(cacheKey);
+  if (cached !== undefined) {
+    core.debug(`Using cached manifest entries for: ${cacheKey}`);
+    return cached;
+  }
+
   let data: string;
   if (manifestUrl !== undefined) {
     core.info(`Fetching manifest-file from: ${manifestUrl}`);
@@ -58,7 +79,9 @@ async function getManifestEntries(
     data = fileContent.toString();
   }
 
-  return JSON.parse(data);
+  const entries: ManifestEntry[] = JSON.parse(data);
+  manifestCache.set(cacheKey, entries);
+  return entries;
 }
 
 export async function updateVersionManifest(

src/setup-uv.ts

@@ -157,12 +157,7 @@ async function determineVersion(
   manifestFile: string | undefined,
 ): Promise<string> {
   if (versionInput !== "") {
-    return await resolveVersion(
+    return await resolveVersion(versionInput, manifestFile, resolutionStrategy);
-      versionInput,
-      manifestFile,
-      githubToken,
-      resolutionStrategy,
-    );
   }
   if (versionFileInput !== "") {
     const versionFromFile = getUvVersionFromFile(versionFileInput);
@@ -174,7 +169,6 @@ async function determineVersion(
     return await resolveVersion(
       versionFromFile,
       manifestFile,
-      githubToken,
       resolutionStrategy,
     );
   }
@@ -192,7 +186,6 @@ async function determineVersion(
   return await resolveVersion(
     versionFromUvToml || versionFromPyproject || "latest",
     manifestFile,
-    githubToken,
     resolutionStrategy,
   );
 }

version-manifest.json

@@ -1,256 +1,4 @@
 [
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-apple-darwin.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-aarch64-apple-darwin.tar.gz",
-    "platform": "apple-darwin",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-aarch64-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-aarch64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-aarch64-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "arm",
-    "artifactName": "uv-arm-unknown-linux-musleabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-arm-unknown-linux-musleabihf.tar.gz",
-    "platform": "unknown-linux-musleabihf",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "armv7",
-    "artifactName": "uv-armv7-unknown-linux-gnueabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-armv7-unknown-linux-gnueabihf.tar.gz",
-    "platform": "unknown-linux-gnueabihf",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "armv7",
-    "artifactName": "uv-armv7-unknown-linux-musleabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-armv7-unknown-linux-musleabihf.tar.gz",
-    "platform": "unknown-linux-musleabihf",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-i686-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-i686-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-i686-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "powerpc64",
-    "artifactName": "uv-powerpc64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-powerpc64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "powerpc64le",
-    "artifactName": "uv-powerpc64le-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-powerpc64le-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "riscv64gc",
-    "artifactName": "uv-riscv64gc-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-riscv64gc-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "s390x",
-    "artifactName": "uv-s390x-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-s390x-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-apple-darwin.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-x86_64-apple-darwin.tar.gz",
-    "platform": "apple-darwin",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-x86_64-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-x86_64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.28/uv-x86_64-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.28"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-apple-darwin.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-aarch64-apple-darwin.tar.gz",
-    "platform": "apple-darwin",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-aarch64-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-aarch64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "aarch64",
-    "artifactName": "uv-aarch64-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-aarch64-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "arm",
-    "artifactName": "uv-arm-unknown-linux-musleabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-arm-unknown-linux-musleabihf.tar.gz",
-    "platform": "unknown-linux-musleabihf",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "armv7",
-    "artifactName": "uv-armv7-unknown-linux-gnueabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-armv7-unknown-linux-gnueabihf.tar.gz",
-    "platform": "unknown-linux-gnueabihf",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "armv7",
-    "artifactName": "uv-armv7-unknown-linux-musleabihf.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-armv7-unknown-linux-musleabihf.tar.gz",
-    "platform": "unknown-linux-musleabihf",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-i686-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-i686-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "i686",
-    "artifactName": "uv-i686-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-i686-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "powerpc64",
-    "artifactName": "uv-powerpc64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-powerpc64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "powerpc64le",
-    "artifactName": "uv-powerpc64le-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-powerpc64le-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "riscv64gc",
-    "artifactName": "uv-riscv64gc-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-riscv64gc-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "s390x",
-    "artifactName": "uv-s390x-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-s390x-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-apple-darwin.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-x86_64-apple-darwin.tar.gz",
-    "platform": "apple-darwin",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-pc-windows-msvc.zip",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-x86_64-pc-windows-msvc.zip",
-    "platform": "pc-windows-msvc",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-unknown-linux-gnu.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-x86_64-unknown-linux-gnu.tar.gz",
-    "platform": "unknown-linux-gnu",
-    "version": "0.9.27"
-  },
-  {
-    "arch": "x86_64",
-    "artifactName": "uv-x86_64-unknown-linux-musl.tar.gz",
-    "downloadUrl": "https://github.com/astral-sh/uv/releases/download/0.9.27/uv-x86_64-unknown-linux-musl.tar.gz",
-    "platform": "unknown-linux-musl",
-    "version": "0.9.27"
-  },
   {
     "arch": "aarch64",
     "artifactName": "uv-aarch64-apple-darwin.tar.gz",