mirror of
https://github.com/astral-sh/setup-uv.git
synced 2026-06-19 11:02:23 +00:00
somaz
3faa3174e6
Adds `uv.lock` as a supported `version-file` source. When `uv` is locked as a dependency in `uv.lock`, the action now installs the exact pinned version, closing the gap reported in #682. This is useful for deterministic CI: the same uv version is used until the lockfile is updated, which avoids "CI worked yesterday, fails today" drift and reduces supply-chain exposure from auto-installing the latest release. The implementation mirrors the existing `version-file` parsers — a new `uv.lock` entry in the parser registry reads the `[[package]]` whose `name = "uv"` and returns its locked `version`. Scoped to explicit `version-file: uv.lock`; workspace auto-detection is left as a possible follow-up to avoid precedence ambiguity with `uv.toml` / `pyproject.toml`. Validation (local, Node 23; dist build is esbuild-deterministic): - `npm run all` → build clean, biome clean, package clean, jest 77/77 - New tests: 3 unit (`uv-lock-file.test.ts`) + 1 integration — exact pin resolves through the full pipeline (`uv.lock` → `0.8.17`) - dist rebuilt + committed (single bundle, no spurious churn) related: #682
37 lines
942 B
TypeScript
37 lines
942 B
TypeScript
import { describe, expect, it } from "@jest/globals";
|
|
import { getUvVersionFromUvLockContent } from "../../src/version/uv-lock-file";
|
|
|
|
const UV_LOCK = `version = 1
|
|
requires-python = ">=3.12"
|
|
|
|
[[package]]
|
|
name = "anyio"
|
|
version = "4.6.0"
|
|
source = { registry = "https://pypi.org/simple" }
|
|
|
|
[[package]]
|
|
name = "uv"
|
|
version = "0.8.17"
|
|
source = { registry = "https://pypi.org/simple" }
|
|
`;
|
|
|
|
describe("getUvVersionFromUvLockContent", () => {
|
|
it("returns the exact uv version locked in uv.lock", () => {
|
|
expect(getUvVersionFromUvLockContent(UV_LOCK)).toBe("0.8.17");
|
|
});
|
|
|
|
it("returns undefined when uv is not a locked package", () => {
|
|
const content = `version = 1
|
|
|
|
[[package]]
|
|
name = "anyio"
|
|
version = "4.6.0"
|
|
`;
|
|
expect(getUvVersionFromUvLockContent(content)).toBeUndefined();
|
|
});
|
|
|
|
it("returns undefined when there are no packages", () => {
|
|
expect(getUvVersionFromUvLockContent("version = 1\n")).toBeUndefined();
|
|
});
|
|
});
|