From 819106c074cacdebda558afcfbbb423a73b939b6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 06:36:23 +0000 Subject: [PATCH] Chore(deps): Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/v8.3.2...v9.0.0) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 95b8f9b..d405deb 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -175,7 +175,7 @@ jobs: # `origin/...HEAD` — the default shallow checkout lacks the # merge base on most PRs. fetch-depth: 0 - - uses: astral-sh/setup-uv@v8.3.2 + - uses: astral-sh/setup-uv@v9.0.0 - name: Set up Python run: uv python install 3.14 - name: Ruff lint diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index dbe643d..adab7ea 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: astral-sh/setup-uv@v8.3.2 + - uses: astral-sh/setup-uv@v9.0.0 # Default persona + the project's .github/zizmor.yml (ref-pin policy) # — we track action versions via Dependabot's github-actions ecosystem # rather than SHA pinning.