fix(ci): pin setup-uv version to bypass anon GitHub API rate limit #8

Merged
claude-ceo-assistant merged 1 commits from fix/setup-uv-version-pin-anon-rate-limit into main 2026-05-08 16:03:41 +00:00

1 Commits

Author SHA1 Message Date
dev-lead
a99ee3c3dd fix(ci): pin setup-uv version to bypass anon GitHub API rate limit
Some checks failed
Nix / nix (macos-latest) (pull_request) Waiting to run
Tests / e2e (pull_request) Failing after 6s
Nix / nix (ubuntu-latest) (pull_request) Failing after 13m46s
Tests / test (pull_request) Failing after 16m4s
Both Tests/test and Tests/e2e jobs were failing with:

  No (valid) GitHub token provided. Falling back to anonymous.
  ::error::API rate limit exceeded for 5.78.80.188.
    Failure - Main Install uv

Root cause: astral-sh/setup-uv@v5 with no `version:` resolves "latest"
by calling api.github.com (octokit.repos.getLatestRelease). The
operator host's anonymous IP is rate-limited at the public 60-req/hr
cap because we no longer have a Molecule-AI GitHub PAT post the
2026-05-06 org suspension. Multiple uv installs across 16 runners
exhaust the budget within minutes; subsequent installs fail.

Pinning `version: "0.11.11"` makes setup-uv construct the release
download URL directly (github.com/astral-sh/uv/releases/download/0.11.11)
without an API call. Anonymous GitHub releases CDN downloads are not
rate-limited.

Same pattern as the prior molecule-core fix during the 2026-05-08
hermes-agent CI investigation; this one pins the tests.yml workflow
that the prior fix missed.

Drops the .ci-trigger-marker introduced earlier in this session — its
job is done.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-08 09:03:10 -07:00