ci: pin setup-uv and dependency-review to full versions

neither publishes a moving major tag anymore, so v8/v5 don't resolve
This commit is contained in:
imSp4rky
2026-07-15 14:56:37 -06:00
parent 0a6f1cbe07
commit 46cf72062d
+4 -4
View File
@@ -25,7 +25,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@v8
- uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
- run: uv sync --locked
@@ -45,7 +45,7 @@ jobs:
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@v8
- uses: astral-sh/setup-uv@v8.3.2
with:
python-version: ${{ matrix.python-version }}
enable-cache: true
@@ -62,7 +62,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: astral-sh/setup-uv@v8
- uses: astral-sh/setup-uv@v8.3.2
with:
enable-cache: true
- name: Build sdist and wheel
@@ -77,4 +77,4 @@ jobs:
contents: read
steps:
- uses: actions/checkout@v7
- uses: actions/dependency-review-action@v5
- uses: actions/dependency-review-action@v5.0.0