From 98bf055cae9bf9b738038c1460a0232979ca98fe Mon Sep 17 00:00:00 2001 From: Cristian Le Date: Tue, 15 Sep 2026 11:37:28 +0200 Subject: [PATCH 1/2] Add uv-lock-report action Signed-off-by: Cristian Le --- .github/workflows/lock-report.yml | 35 +++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/workflows/lock-report.yml diff --git a/.github/workflows/lock-report.yml b/.github/workflows/lock-report.yml new file mode 100644 index 0000000000..397c268524 --- /dev/null +++ b/.github/workflows/lock-report.yml @@ -0,0 +1,35 @@ +name: lock file report + +on: + pull_request: + paths: + - 'uv.lock' + +permissions: {} + +jobs: + uv-lock-report: + runs-on: ubuntu-latest + steps: + - name: Repository checkout + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + fetch-depth: 0 + persist-credentials: false + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + id: setup + with: + python-version: 3.x + # TODO: Move to upstream github action once it doesn't require permissions + # https://github.com/mw-root/uv-lock-report/issues/178 + - name: Run uv-lock-report + run: | + pipx run --python "$PYTHON_PATH" uv-lock-report \ + --base-sha "${{ github.event.pull_request.base.sha }}" \ + --base-path "${{ github.workspace }}" \ + --output-path report.json \ + --output-format table + jq -r "." report.json + jq -r ".markdown" report.json >> $GITHUB_STEP_SUMMARY + env: + PYTHON_PATH: ${{ steps.setup.outputs.python-path }} From 84939e774130ee5116d9620e7c5f660cd28e8ecc Mon Sep 17 00:00:00 2001 From: Cristian Le Date: Tue, 15 Sep 2026 11:43:11 +0200 Subject: [PATCH 2/2] [DEBUG] force run action on older commit Signed-off-by: Cristian Le --- .github/workflows/lock-report.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/lock-report.yml b/.github/workflows/lock-report.yml index 397c268524..77c3d3f12e 100644 --- a/.github/workflows/lock-report.yml +++ b/.github/workflows/lock-report.yml @@ -3,7 +3,6 @@ name: lock file report on: pull_request: paths: - - 'uv.lock' permissions: {} @@ -25,7 +24,7 @@ jobs: - name: Run uv-lock-report run: | pipx run --python "$PYTHON_PATH" uv-lock-report \ - --base-sha "${{ github.event.pull_request.base.sha }}" \ + --base-sha 0179a0992d7a61fa8ebf3ae515d6f2c722b9bdd3 \ --base-path "${{ github.workspace }}" \ --output-path report.json \ --output-format table