diff --git a/.github/workflows/benchmark-python.yml b/.github/workflows/benchmark-python.yml index de2e16f..3c2c82d 100644 --- a/.github/workflows/benchmark-python.yml +++ b/.github/workflows/benchmark-python.yml @@ -48,7 +48,7 @@ jobs: uses: dtolnay/rust-toolchain@stable - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Build mrrc wheel uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index a528bd8..0e33a45 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -102,7 +102,7 @@ jobs: uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Sync dependencies run: uv sync --all-extras diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml index a39d52d..108dc67 100644 --- a/.github/workflows/docs-check.yml +++ b/.github/workflows/docs-check.yml @@ -39,7 +39,7 @@ jobs: python-version: '3.12' - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Install dependencies # See CLAUDE.md "Documentation site" for why `--no-install-project`: diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 45b2b2e..73c7da7 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -31,7 +31,7 @@ jobs: python-version: '3.12' - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Install dependencies # See CLAUDE.md "Documentation site" for why `--no-install-project`. diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 636d7c6..7a0501a 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -100,7 +100,7 @@ jobs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Check formatting run: uvx ruff format --check mrrc/ tests/python/ @@ -129,7 +129,7 @@ jobs: uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Sync dev dependencies run: uv sync --extra dev @@ -161,7 +161,7 @@ jobs: uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2 - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - name: Sync dev dependencies run: uv sync --extra dev @@ -220,7 +220,7 @@ jobs: persist-credentials: false - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 # Audits every workflow for supply-chain issues (unpinned actions, # credential persistence, excessive permissions, cache poisoning). diff --git a/.github/workflows/python-build.yml b/.github/workflows/python-build.yml index 3bb499c..393a330 100644 --- a/.github/workflows/python-build.yml +++ b/.github/workflows/python-build.yml @@ -83,7 +83,7 @@ jobs: python-version: "3.12" - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: @@ -186,7 +186,7 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: @@ -278,7 +278,7 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: diff --git a/.github/workflows/python-release.yml b/.github/workflows/python-release.yml index 04b6805..e46a2e4 100644 --- a/.github/workflows/python-release.yml +++ b/.github/workflows/python-release.yml @@ -264,7 +264,7 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.1 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: enable-cache: false