Build fails fetching the latest version

[adamtheturtle]

Sometimes I get:

Trying to find version for uv in: D:\a\vws-test-fixtures\vws-test-fixtures\uv.toml
[17](https://github.com/VWS-Python/vws-test-fixtures/actions/runs/25344312143/job/74309383447?pr=1657#step:3:18)
Could not find file: D:\a\vws-test-fixtures\vws-test-fixtures\uv.toml
[18](https://github.com/VWS-Python/vws-test-fixtures/actions/runs/25344312143/job/74309383447?pr=1657#step:3:19)
Trying to find version for uv in: D:\a\vws-test-fixtures\vws-test-fixtures\pyproject.toml
[19](https://github.com/VWS-Python/vws-test-fixtures/actions/runs/25344312143/job/74309383447?pr=1657#step:3:20)
Could not determine uv version from uv.toml or pyproject.toml. Falling back to latest.
[20](https://github.com/VWS-Python/vws-test-fixtures/actions/runs/25344312143/job/74309383447?pr=1657#step:3:21)
Fetching version data from https://raw.githubusercontent.com/astral-sh/versions/main/v1/uv.ndjson ...

I get this semi-regularly on public GitHub Actions, but it doesn't say "fetch failed" like #849, it just ends the build. See https://github.com/VWS-Python/vws-test-fixtures/actions/runs/25344312143/job/74309383447?pr=1657 as an example.

[eifinger]

I will look into this. But it might very well be, that this is another GitHub outage.

[adamtheturtle]

Thank you.

In one recent project I have these failed runs:

• https://github.com/adamtheturtle/literalizer/actions/runs/25209344595
• https://github.com/adamtheturtle/literalizer/actions/runs/25217546382
• https://github.com/adamtheturtle/literalizer/actions/runs/25224586400

All on Windows, despite using uv on ubuntu, too, in that project.

[eifinger]

Can you please try again with the latest version https://github.com/astral-sh/setup-uv/releases/tag/v8.1.0

[adamtheturtle]

Yes, I can update this issue or use a new one if I hit this again. Thank you

[eifinger]

Let's continue here

[adamtheturtle]

FWIW I think that I wasn't on a recent version because dependabot isn't bumping setup-uv. I'm guessing that was because of:

To increase security even more we will stop publishing minor tags. You won't be able to use @v8 or @v8.0 any longer. We do this because pinning to major releases opens up users to supply chain attacks like what happened to tj-actions.

[adamtheturtle]

Here is an example of this happening with 8.1.0

https://github.com/adamtheturtle/sphinx-combine/actions/runs/25584411682/job/75110013513?pr=444

Also on Windows

[adamtheturtle]

Here is another example:

https://github.com/adamtheturtle/mypy-strict-kwargs/actions/runs/25772701056/job/75698935462

[eifinger]

Thank you! I will look into this in the coming days.

[Skylion007]

Might be related to #882