Likes from 9 May 2026

@nedbat@hachyderm.io @hugovk@mastodon.social these days I increasingly feel like it's impossible to do anything on GitHub without hitting a weird platform limitation like this one 🙂 I've filed https://github.com/dependabot/dependabot-core/issues/14713 for this on the Dependabot side

Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security. But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security. I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉 Here's his writeup into the world of #GitHubActions tags: https://www.jvt.me/posts/2026/04/24/github-actions-tagging/