sync: update from python-copier-template

.github/workflows/prek-main.yml

@@ -19,5 +19,5 @@ jobs:
   prek-all-files:
     uses: Komorebi-AI/github-actions/.github/workflows/prek.yml@main
     with:
-      uv-version: 0.13.6
+      uv-version: 0.13.7
       debug-enabled: ${{ github.event_name == 'workflow_dispatch' && inputs.debug_enabled }}

.github/workflows/prek-pr.yml

@@ -18,6 +18,6 @@ jobs:
   prek:
     uses: Komorebi-AI/github-actions/.github/workflows/prek.yml@main
     with:
-      uv-version: 0.13.6
+      uv-version: 0.13.7
       debug-enabled: ${{ github.event_name == 'workflow_dispatch' && inputs.debug_enabled }}
       prek-args: --from-ref ${{ github.event.pull_request.base.sha }} --to-ref ${{ github.event.pull_request.head.sha }}

.github/workflows/pytest.yml

@@ -21,5 +21,5 @@ jobs:
   pytest:
     uses: Komorebi-AI/github-actions/.github/workflows/pytest-uv.yml@main
     with:
-      uv-version: 0.13.6
+      uv-version: 0.13.7
       debug-enabled: ${{ github.event_name == 'workflow_dispatch' && inputs.debug_enabled }}

.github/workflows/security-updates.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   security-updates:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - uses: actions/checkout@v7
         with:
@@ -21,4 +21,4 @@ jobs:
           app-id: ${{ secrets.SECURITY_APP_ID }}
           private-key: ${{ secrets.SECURITY_APP_PRIVATE_KEY }}
           pr-title: "security: upgrade vulnerable dependencies"
-          uv-version: 0.13.6
+          uv-version: 0.13.7

.pre-commit-config.yaml

@@ -27,7 +27,7 @@ repos:
     hooks:
       - id: python-use-type-annotations
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.17.2
+    rev: v0.17.3
     hooks:
       - id: ruff-check
         types_or: [python, pyi, jupyter]
@@ -46,7 +46,7 @@ repos:
       - id: prettier
         types_or: [markdown, yaml]
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.13.6
+    rev: 0.13.7
     hooks:
       - id: uv-lock
   # Auto-syncs rev pins in this file with versions resolved in uv.lock.

Dockerfile

@@ -1,5 +1,5 @@
 # First, build the application in the `/app` directory.
-FROM ghcr.io/astral-sh/uv:0.13.6-python3.15-trixie-slim AS builder
+FROM ghcr.io/astral-sh/uv:0.13.7-python3.15-trixie-slim AS builder
 ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy
 
 # Disable Python downloads, because we want to use the system interpreter