From 6adac3ec50e7bbf1291135360113e1b30d038ce8 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 3 Nov 2026 00:41:05 +0000 Subject: [PATCH] chore(deps): update github actions --- .github/workflows/_audit.yml | 4 ++-- .github/workflows/_build-native-only.yml | 4 ++-- .github/workflows/_claude-code.yml | 8 ++++---- .github/workflows/_codeql.yml | 6 +++--- .github/workflows/_docs.yml | 2 +- .github/workflows/_ketryx_report_and_check.yml | 6 +++--- .github/workflows/_lint.yml | 2 +- .github/workflows/_package-publish.yml | 16 ++++++++-------- .github/workflows/_scheduled-audit.yml | 4 ++-- .github/workflows/_scheduled-test-daily.yml | 10 +++++----- .github/workflows/_scheduled-test-hourly.yml | 4 ++-- .github/workflows/_scheduled-test-stress.yml | 2 +- .github/workflows/_test.yml | 10 +++++----- .github/workflows/merge-release.yml | 2 +- .github/workflows/prepare-release.yml | 4 ++-- .github/workflows/publish-release.yml | 4 ++-- 16 files changed, 44 insertions(+), 44 deletions(-) diff --git a/.github/workflows/_audit.yml b/.github/workflows/_audit.yml index 67be5a312..b242c5e8c 100644 --- a/.github/workflows/_audit.yml +++ b/.github/workflows/_audit.yml @@ -18,7 +18,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -37,7 +37,7 @@ jobs: run: make audit - name: Upload audit results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: audit-results diff --git a/.github/workflows/_build-native-only.yml b/.github/workflows/_build-native-only.yml index a647d9f38..bcf4d5d0d 100644 --- a/.github/workflows/_build-native-only.yml +++ b/.github/workflows/_build-native-only.yml @@ -44,7 +44,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -61,7 +61,7 @@ jobs: run: make dist_native - name: Upload dist_native artifacts - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: dist_native-${{ matrix.runner }} diff --git a/.github/workflows/_claude-code.yml b/.github/workflows/_claude-code.yml index 7a9e4f3ff..f6f0edbb2 100644 --- a/.github/workflows/_claude-code.yml +++ b/.github/workflows/_claude-code.yml @@ -51,7 +51,7 @@ jobs: fetch-depth: ${{ inputs.mode == 'interactive' && 0 || 1 }} - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -66,7 +66,7 @@ jobs: run: uv sync --all-extras --frozen --link-mode=copy - name: Setup display - uses: pyvista/setup-headless-display-action@5bc8de3bc71fcda7a96439571287a554901541a0 # v4.3 + uses: pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4 # v5.2 - name: Print development version info if: ${{ !startsWith(github.ref, 'refs/tags/v') }} @@ -77,7 +77,7 @@ jobs: - name: Run Claude Code (Interactive Mode) if: inputs.mode == 'interactive' - uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.183 + uses: anthropics/claude-code-action@db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c # v1.0.254 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} track_progress: ${{ inputs.track_progress }} @@ -92,7 +92,7 @@ jobs: - name: Run Claude Code (Automation Mode) if: inputs.mode == 'automation' - uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.183 + uses: anthropics/claude-code-action@db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c # v1.0.254 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} track_progress: ${{ inputs.track_progress }} diff --git a/.github/workflows/_codeql.yml b/.github/workflows/_codeql.yml index a4a3fc3ef..3f7457bc3 100644 --- a/.github/workflows/_codeql.yml +++ b/.github/workflows/_codeql.yml @@ -50,7 +50,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -77,9 +77,9 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # If this step fails, then you should remove it and run the build manually - name: Autobuild - uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/_docs.yml b/.github/workflows/_docs.yml index c7f62126a..923c7e296 100644 --- a/.github/workflows/_docs.yml +++ b/.github/workflows/_docs.yml @@ -18,7 +18,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true diff --git a/.github/workflows/_ketryx_report_and_check.yml b/.github/workflows/_ketryx_report_and_check.yml index 2df426512..fea660de1 100644 --- a/.github/workflows/_ketryx_report_and_check.yml +++ b/.github/workflows/_ketryx_report_and_check.yml @@ -41,7 +41,7 @@ jobs: if: | !contains(inputs.commit_message, 'skip:ketryx') && !contains(github.event.pull_request.labels.*.name, 'skip:ketryx') - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: test-results-ubuntu-latest path: test-results @@ -50,7 +50,7 @@ jobs: if: | !contains(inputs.commit_message, 'skip:ketryx') && !contains(github.event.pull_request.labels.*.name, 'skip:ketryx') - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: audit-results path: audit-results @@ -77,7 +77,7 @@ jobs: # Safety net: a Ketryx-side 500 must not block PR CI (the build still # lands in Ketryx). On push/tag runs (releases) the gate is enforced. continue-on-error: ${{ github.event_name == 'pull_request' }} - uses: Ketryx/ketryx-github-action@719ef26488ed7f9d36a45a6d67d649726d5ece6a # v1.5.0 + uses: Ketryx/ketryx-github-action@e7ad6ff71022a4e8158477c4458778bf4d93353b # v2.0.0 with: project: ${{ secrets.KETRYX_PROJECT }} api-key: ${{ secrets.KETRYX_API_KEY }} diff --git a/.github/workflows/_lint.yml b/.github/workflows/_lint.yml index 54f057dc2..e9fee2fc5 100644 --- a/.github/workflows/_lint.yml +++ b/.github/workflows/_lint.yml @@ -18,7 +18,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true diff --git a/.github/workflows/_package-publish.yml b/.github/workflows/_package-publish.yml index ae6815cfa..15904ee70 100644 --- a/.github/workflows/_package-publish.yml +++ b/.github/workflows/_package-publish.yml @@ -53,7 +53,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -83,7 +83,7 @@ jobs: run: make dist_native - name: Upload dist_native artifacts - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: dist_native-${{ matrix.runner }} @@ -103,7 +103,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" cache-dependency-glob: uv.lock @@ -114,7 +114,7 @@ jobs: run: .github/workflows/_install_dev_tools.bash - name: Download native distribution artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: pattern: dist_native-* path: dist_native_all/ @@ -156,7 +156,7 @@ jobs: run: make docs - name: Generate release notes - uses: orhun/git-cliff-action@f50e11560dce63f7c33227798f90b924471a88b5 # v4.8.0 + uses: orhun/git-cliff-action@a9a95522b26fe6403f7bb24031f21fb573d0f5ff # v4.9.1 id: git-cliff with: config: pyproject.toml @@ -187,13 +187,13 @@ jobs: if: | (!contains(inputs.commit_message, 'skip:test:all')) && (!contains(github.event.pull_request.labels.*.name, 'skip:test:all')) - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: test-results-ubuntu-latest path: test-results - name: Download audit results generated in _audit.yml - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: audit-results path: audit-results @@ -227,7 +227,7 @@ jobs: --notes-file "$GIT_CLIFF_CHANGELOG" - name: Inform Sentry about release - uses: getsentry/action-release@ff07929a6537bac57790c3451cf4d364aca38528 # v3.7.0 + uses: getsentry/action-release@6fb9aeade7061441cf3864e34fbe11a1457ad7dc # v3.7.1 env: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_ORG: ${{ vars.SENTRY_ORG }} diff --git a/.github/workflows/_scheduled-audit.yml b/.github/workflows/_scheduled-audit.yml index 703e6b8a3..4532c13d6 100644 --- a/.github/workflows/_scheduled-audit.yml +++ b/.github/workflows/_scheduled-audit.yml @@ -19,7 +19,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -87,7 +87,7 @@ jobs: exit $EXIT_CODE - name: Upload test results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: test-results-scheduled diff --git a/.github/workflows/_scheduled-test-daily.yml b/.github/workflows/_scheduled-test-daily.yml index bb06e57a7..a3a6a543a 100644 --- a/.github/workflows/_scheduled-test-daily.yml +++ b/.github/workflows/_scheduled-test-daily.yml @@ -54,7 +54,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -70,7 +70,7 @@ jobs: # Need xdisplay for testing QuPath app integration - name: Setup display - uses: pyvista/setup-headless-display-action@5bc8de3bc71fcda7a96439571287a554901541a0 # v4.3 + uses: pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4 # v5.2 - name: Print development version info if: ${{ !startsWith(github.ref, 'refs/tags/v') }} @@ -182,7 +182,7 @@ jobs: summary-title: All very long running e2e tests passed - name: Upload test artifacts for inspection - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: test-results-ubuntu-latest @@ -325,7 +325,7 @@ jobs: fi - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT')}} with: token: ${{ secrets.CODECOV_TOKEN }} @@ -339,7 +339,7 @@ jobs: - name: SonarQube Scan if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} - uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1 + uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/_scheduled-test-hourly.yml b/.github/workflows/_scheduled-test-hourly.yml index 4513f835f..c85fd7371 100644 --- a/.github/workflows/_scheduled-test-hourly.yml +++ b/.github/workflows/_scheduled-test-hourly.yml @@ -52,7 +52,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -170,7 +170,7 @@ jobs: exit $EXIT_CODE - name: Upload test results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: test-results-scheduled diff --git a/.github/workflows/_scheduled-test-stress.yml b/.github/workflows/_scheduled-test-stress.yml index 632037294..f3152d329 100644 --- a/.github/workflows/_scheduled-test-stress.yml +++ b/.github/workflows/_scheduled-test-stress.yml @@ -48,7 +48,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index 4ca6e4b03..615222146 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -78,7 +78,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true @@ -95,7 +95,7 @@ jobs: # Need xdisplay for testing QuPath app integration - name: Setup display - uses: pyvista/setup-headless-display-action@5bc8de3bc71fcda7a96439571287a554901541a0 # v4.3 + uses: pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4 # v5.2 - name: Release version check if: startsWith(github.ref, 'refs/tags/v') @@ -230,7 +230,7 @@ jobs: commit-message: ${{ inputs.commit_message }} - name: Upload test artifacts for inspection - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: ${{ always() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} with: name: test-results-${{ matrix.runner }} @@ -243,7 +243,7 @@ jobs: retention-days: 7 - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 if: | !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') && @@ -267,7 +267,7 @@ jobs: - name: SonarQube Scan if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') && matrix.runner == 'ubuntu-latest' }} - uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1 + uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/merge-release.yml b/.github/workflows/merge-release.yml index 75f91d28e..0d8e2f784 100644 --- a/.github/workflows/merge-release.yml +++ b/.github/workflows/merge-release.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml index ecfc86658..f80b01150 100644 --- a/.github/workflows/prepare-release.yml +++ b/.github/workflows/prepare-release.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} @@ -39,7 +39,7 @@ jobs: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 97e1eebf4..64bd15344 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ secrets.RELEASE_BOT_APP_ID }} private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }} @@ -75,7 +75,7 @@ jobs: run: git checkout "${{ steps.branch.outputs.branch }}" - name: Install uv - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0 + uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0 with: version-file: "pyproject.toml" enable-cache: true