build(deps): bump the actions group across 1 directory with 2 updates

[dependabot]

Bumps the actions group with 2 updates in the / directory: astral-sh/setup-uv and pypa/cibuildwheel.

Updates astral-sh/setup-uv from 10.0.1 to 10.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

• fix: respect no proxy directive @​mj0nez (#1037)
• Use JSON + a typed wrapper instead of TS codegen @​woodruffw (#1025)

🚀 Enhancements

• Expose a Python "identity" output @​woodruffw (#1036)
• Verify downloads with astral-sh/versions checksums @​zaniebot (#1033)

🧰 Maintenance

• chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)
• chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)
• chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)
• chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)
• chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)
• chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)
• Use self-repo syntax for all in-repo actions/reusable workflows @​woodruffw (#1024)
• Pin one-shot tools @​woodruffw (#1022)
• ci: remove obsolete direct push attempts @​eifinger (#1019)

📚 Documentation

• docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

• chore(deps-dev): roll up Dependabot updates @​eifinger (#1043)
• Harden npm install defaults @​zaniebot (#1026)
• Add dependency cooldowns @​woodruffw (#1021)

Commits

• bec219d chore(deps-dev): roll up Dependabot updates (#1043)
• b90ec40 fix: respect no proxy directive (#1037)
• 421feb6 chore: update known checksums for 0.12.12 (#1041)
• f634bf4 Expose a Python "identity" output (#1036)
• a6772c8 chore: update known checksums for 0.12.10/0.12.11 (#1038)
• e105c8f chore: update known checksums for 0.12.9 (#1035)
• cd13f92 Verify downloads with astral-sh/versions checksums (#1033)
• 3aef7b9 chore: update known checksums for 0.12.7/0.12.8 (#1031)
• d08d816 chore: update known checksums for 0.12.6 (#1030)
• 19b4d1e Harden npm install defaults (#1026)
• Additional commits viewable in compare view

Updates pypa/cibuildwheel from 4.2.0 to 4.2.1

Release notes

Sourced from pypa/cibuildwheel's releases.

v4.2.1

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

Changelog

Sourced from pypa/cibuildwheel's changelog.

v4.2.1

5 September 2026

• 🐛 Respects the NuGet package sources configured on the machine when installing CPython on Windows, instead of always falling back to nuget.org (#2966)
• 🐛 Fixes a NameError on Pyodide when an already-compatible wheel was reused, which made the test step fail (#2968)
• 🛠 Updates the Android Python versions, and the Android testbed's Gradle version, making it compatible with Java 25 (#2962)
• 🛠 Updates dependencies including CPython 3.15.0rc2 (#2965, #2970, #2976, #2981, #2985)

Commits

• e090b81 Bump version: v4.2.1
• 59501f4 Respect configured NuGet package sources (#2966)
• 885ead0 [Bot] Update dependencies (#2985)
• 3d9e8c5 docs: refresh CircleCI and CPython platform links (#2977)
• 7d5ec95 [Bot] Update dependencies (#2981)
• a007eed [Bot] Update dependencies (#2976)
• fdda545 chore(deps): bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the actions grou...
• 8832cf6 chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 in the ...
• a35209b [Bot] Update dependencies (#2970)
• 148ea70 chore: faster and stricter mypy (#2968)
• Additional commits viewable in compare view

[codecov]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
5742	2	5740	80

View the top 2 failed test(s) by shortest run time

dimos.e2e_tests.test_dimsim_walk_forward::test_walk_forward

Stack Traces | 197s run time

lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8398c43020>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7b8377705f80>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7b8377706020>
human_input = <function human_input.<locals>.send_human_input at 0x7b8377704ae0>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7b839943cad0>

    @pytest.mark.self_hosted_large
    def test_walk_forward(
        lcm_spy, start_blueprint, wait_for_system_ready, human_input, dim_sim
    ) -> None:
        start_blueprint(
            "run",
            "--disable",
            "spatial-memory",
            "--disable",
            "security-module",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        wait_for_system_ready(timeout=1200.0)
    
        origin_x, origin_y = 1, 2
        dim_sim.set_agent_position(origin_x, origin_y)
    
        human_input("move forward 3 meter")
    
>       lcm_spy.wait_until_odom_position(origin_x + 3, origin_y, threshold=0.4, timeout=120)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7b839943cad0>
human_input = <function human_input.<locals>.send_human_input at 0x7b8377704ae0>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8398c43020>
origin_x   = 1
origin_y   = 2
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7b8377705f80>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7b8377706020>

dimos/e2e_tests/test_dimsim_walk_forward.py:38: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:190: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7b8377707420>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8398c43020>
        threshold  = 0.4
        timeout    = 120
        x          = 4
        y          = 2
dimos/e2e_tests/lcm_spy.py:176: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x7b83e788f1d0: unset>
        fail_message = 'Failed to get to position x=4, y=2'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x7b83777074c0>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7b8377707420>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8398c43020>
        timeout    = 120
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x7b83e788f1d0: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=4, y=2

deadline   = 6179784.556844671
interval   = 0.1
message    = 'Failed to get to position x=4, y=2'
predicate  = <bound method Event.is_set of <threading.Event at 0x7b83e788f1d0: unset>>
timeout    = 120

.../utils/testing/waiting.py:35: TimeoutError

dimos.e2e_tests.test_dimsim_spatial_memory::test_go_to_the_bed

Stack Traces | 325s run time

lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8377c42e10>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7b8377705b20>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7b8377706200>
human_input = <function human_input.<locals>.send_human_input at 0x7b8377706660>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7b83990c46e0>
explore_house = <function explore_house.<locals>.explore at 0x7b8377706de0>

    @pytest.mark.self_hosted_large
    def test_go_to_the_bed(
        lcm_spy, start_blueprint, wait_for_system_ready, human_input, dim_sim, explore_house
    ) -> None:
        start_blueprint(
            "run",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        wait_for_system_ready(timeout=1200.0)
    
        explore_house()
    
        human_input("go to the bed")
    
>       lcm_spy.wait_until_odom_position(-3.567, -1.332, threshold=2, timeout=180)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x7b83990c46e0>
explore_house = <function explore_house.<locals>.explore at 0x7b8377706de0>
human_input = <function human_input.<locals>.send_human_input at 0x7b8377706660>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8377c42e10>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x7b8377705b20>
wait_for_system_ready = <function wait_for_system_ready.<locals>.wait at 0x7b8377706200>

dimos/e2e_tests/test_dimsim_spatial_memory.py:33: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:190: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7b8377704c20>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8377c42e10>
        threshold  = 2
        timeout    = 180
        x          = -3.567
        y          = -1.332
dimos/e2e_tests/lcm_spy.py:176: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x7b8398cf3b30: unset>
        fail_message = 'Failed to get to position x=-3.567, y=-1.332'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x7b83777054e0>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x7b8377704c20>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x7b8377c42e10>
        timeout    = 180
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x7b8398cf3b30: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=-3.567, y=-1.332

deadline   = 6179587.438679359
interval   = 0.1
message    = 'Failed to get to position x=-3.567, y=-1.332'
predicate  = <bound method Event.is_set of <threading.Event at 0x7b8398cf3b30: unset>>
timeout    = 180

.../utils/testing/waiting.py:35: TimeoutError

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[greptile-apps]

Confidence Score: 5/5

Safe to merge: the updated action configurations and release wheel flow completed successfully.

What we checked:

• Compared the parent and updated workflow revisions and confirmed that all 15 changed setup-uv steps use inputs supported by both v10.0.1 and v10.1.0, and verified that the installation pin resolves to the v10.1.0 revision.
• Built the cp312-manylinux_x86_64 wheel with cibuildwheel v4.2.0 and v4.2.1 on the pinned manylinux 2.34 image, and both produced the same dimos-0.0.14-cp312-cp312-manylinux_2_34_x86_64.whl that passed the installed-wheel relay, API, Cockpit, and SDK smoke tests.
• Captured the before and after evidence for the setup-uv run, showing the v10.0.1 execution with exit code 0 and its SHA, and the v10.1.0 execution with exit code 0 and the SHA bec219d24cd3e171d82865faccec33120bb574f4.
• Executed and documented the executable harness and observed outputs, including the full command run, final exit code 0, both versioned builds, and the smoke-test results.

Summary

• Updates astral-sh/setup-uv from v10.0.1 to v10.1.0 across CI, documentation, installation, and release workflows.
• Updates pypa/cibuildwheel from v4.2.0 to v4.2.1 for release wheel builds.
• The updated workflow configuration accepts all existing setup-uv inputs, and the configured CPython 3.12 manylinux wheel build plus installed-wheel smoke test completed successfully.

_{Reviews (1) · Last reviewed commit: "chore(deps): bump the actions group acro..."}