[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv		patch	v10.3.0 → v10.3.3
astral-sh/setup-uv	action	patch	v10.3.0 → v10.3.3
java-jdk	uses-with	major	21 → 25

---

Release Notes

astral-sh/setup-uv

v10.3.3: 🌈 Use Astral mirror for version manifests with GitHub fallback

Compare Source

Changes

This release contains something that should have been included a very long time ago. Sorry for sleeping on that.

This action now retrieves the release manifest that contains the available versions, their download links and checksums from the Astral mirror, rather than trying GitHub first. This should present much more stable.
(Known checksums are still checked, so the security impact does not change)

Also a big thank you to @​soujasK for a set of bugfixes 👏

🐛 Bug fixes

• Use Astral mirror for version manifests with GitHub fallback @​eifinger (#​1119)
• fix: allow whitespace in uv requirement specifiers @​soujasK (#​1112)
• fix: resolve ~= specifiers with PEP 440 semantics @​soujasK (#​1111)
• fix: only report a saved cache when saving succeeded @​soujasK (#​1110)

🧰 Maintenance

• chore: update known checksums for 0.13.6 @​github-actions[bot] (#​1117)

📚 Documentation

• docs: use JSDoc for compatible release specifier comment @​eifinger (#​1113)
• docs: update version references to v10.3.2 @​github-actions[bot] (#​1104)

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

• chore: update known checksums for 0.13.5 @​github-actions[bot] (#​1103)

📚 Documentation

• docs: update version references to v10.3.1 @​github-actions[bot] (#​1102)

v10.3.1: 🌈 preserve cache error class names in save-cache bundle

Compare Source

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

• fix: preserve cache error class names in save-cache bundle @​dannyward630 (#​1093)

🧰 Maintenance

• chore: update known checksums for 0.13.4 @​github-actions[bot] (#​1099)
• chore: update known checksums for 0.13.2/0.13.3 @​github-actions[bot] (#​1098)
• chore: update known checksums for 0.13.1 @​github-actions[bot] (#​1094)
• Verify npm dependency signatures before builds @​zaniebot (#​1027)

📚 Documentation

• docs: cache-dependency-glob matches relative to the working directory @​flange-ipb (#​1092)
• docs: update version references to v10.3.0 @​github-actions[bot] (#​1090)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#​1101)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Java 25 breaks Spark 3 tests

High Severity

Bumping java-version to 25 will fail the Spark 3.5.9 integration tests. pyspark 3.5.9 only supports Java 8, 11, and 17, and Spark 3.x still calls System.setSecurityManager, which JDK 24+ rejects. Those jobs create a SparkContext at fixture setup and will crash on startup. Spark 4.2.0 is unaffected, but 3.5.9 has no JAVA_HOME override.

 

^{Reviewed by Cursor Bugbot for commit db98fbd. Configure here.}

[github-actions]

Coverage Results 📊

✅ 136160 passed | ❌ 10 failed | ⏭️ 7456 skipped | Total: 143626 | Pass Rate: 94.8% | Execution Time: 448m 5s

📊 Comparison with Base Branch

Metric	Change
Total Tests	📉 -694
Passed Tests	📉 -704
Failed Tests	📈 +10
Skipped Tests	—

➕ New Tests (1)

View new tests

• test_cache_spans_item_size[True]
  • File: tests.integrations.django.test_cache_module
  • Status: ❌ Failing

❌ Failed Tests

test_cache_spans_item_size[True]

File: tests.integrations.django.test_cache_module
Suite: py3.14-django-v5.2.18
Error: tests/integrations/django/test_cache_module.py:763: in test_cache_spans_item_size assert not spans[0]["attributes"]["cache.hit"] E assert not True

Stack Trace

tests/integrations/django/test_cache_module.py:763: in test_cache_spans_item_size
    assert not spans[0]["attributes"]["cache.hit"]
E   assert not True

✅ Patch coverage is 100.00% (no changed executable lines found; target 80%).
Project statement coverage is 90.30% (down 0.02 percentage points from base (e4b36ad) to head (0190f56)).

Coverage diff

@@            Coverage Diff             @@
##        master     #8060       +/-##
==========================================
- Coverage    90.32%    90.30%    -0.02%
==========================================
  Files          203       203         —
  Tracked lines     26905     26905         —
  Branches     10048     10048         —
==========================================
- Hits         24301     24295        -6
- Misses        2604      2610        +6
+ Partials      1517      1515        -2

---

Generated by Coverage Action

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 3 total unresolved issues (including 2 from previous reviews).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 91dd107. Configure here.}

[cursor]

Craft preview secret interface mismatch

Medium Severity

The changelog-preview caller still passes a named GITHUB_TOKEN secret into Craft’s reusable workflow after the v2 to v3 pin. Current Craft v3 workflow_call no longer declares that secret and expects secrets: inherit or no secrets map, so GitHub can reject the workflow as invalid on every pull request.

 

^{Reviewed by Cursor Bugbot for commit 91dd107. Configure here.}