[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	patch	v10.3.1 → v10.3.2

---

Release Notes

astral-sh/setup-uv

v10.3.2: 🌈 update known checksums for 0.13.5

Compare Source

Changes

🧰 Maintenance

• chore: update known checksums for 0.13.5 @​github-actions[bot] (#​1103)

📚 Documentation

• docs: update version references to v10.3.1 @​github-actions[bot] (#​1102)

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SONARJAVA-7251

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating the pinned setup-uv action in two workflows may change tool installation behavior and could disrupt CI if the release introduces a regression.

Bumps the astral-sh/setup-uv GitHub Action from v10.3.1 to v10.3.2, which updates known checksums for uv 0.13.5 and refreshes documentation version references. No issues found.

Verification Rules 1/3 met

Rules 2 failed 1 passed

❌ Approved GitHub Actions runners (approved_runners) - build.yml uses the retired runner label sonar-xs-public (Slack notify job); replace it with an approved label such as sonar-xs per the internal GitHub Actions runners policy.
❌ Repository license compliance (license_compliance) - sonar-java's central exception requires LGPL-3.0 in LICENSE.txt, but LICENSE.txt contains the SONAR Source-Available License v1.0; confirm/update the license or exception.
✅ Internal artifact registries (artifactory_registries)

Functional validation No results

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[vdiez]

Auto-approved: Renovate dependency update.