chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

[dependabot]

Bumps astral-sh/setup-uv from 8.3.2 to 9.0.0.

Release notes

Sourced from astral-sh/setup-uv's releases.

v9.0.0 🌈 Change prune-cache default to false

Changes

This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in #967

Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.

🚨 Breaking changes

• Change prune-cache default to false @​charliermarsh (#967)

🐛 Bug fixes

• fix: fall back to distribution ID when os-release has no version field @​cxzhong (#961)

🚀 Enhancements

• Speed up version client by partial response reads @​eifinger (#807)

🧰 Maintenance

• chore: update known checksums for 0.11.30 @github-actions[bot] (#968)
• chore: update known checksums for 0.11.29 @github-actions[bot] (#960)

📚 Documentation

• docs: update version references to v8.3.2 @github-actions[bot] (#949)

⬆️ Dependency updates

• chore(deps): roll up Dependabot updates @​eifinger (#970)
• chore(deps): roll up Dependabot updates @​eifinger (#962)

Commits

• c771a70 chore(deps): roll up Dependabot updates (#970)
• 2f537ca chore: update known checksums for 0.11.30 (#968)
• 2269552 Speed up version client by partial response reads (#807)
• 47a7f4f Change prune-cache default to false (#967)
• 71966ef chore(deps): roll up Dependabot updates (#962)
• f12b1f0 fix: fall back to distribution ID when os-release has no version field (#961)
• ecd24dd chore: update known checksums for 0.11.29 (#960)
• 6a19136 docs: update version references to v8.3.2 (#949)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Upgrade GitHub Actions astral-sh/setup-uv from v8.3.2 to v9.0.0 in CI and PyPI publish workflows. v9 disables cache pruning by default; our jobs use enable-cache: false, so behavior is unchanged.

• Migration
  • If you enable caching later, set prune-cache: true to match pre-v9 behavior.

^{Written for commit 7a1af76. Summary will update on new commits.}

Note

Bump astral-sh/setup-uv from v8.3.2 to v9.0.0 in CI workflows

Updates the setup-uv action pin in ci.yml and publish-pypi.yml to the v9.0.0 commit hash across all jobs (lint, build, tests, dependency security, and PyPI publish).

^{Macroscope summarized 7a1af76.}

Summary by CodeRabbit

• Chores
  • Updated the project’s automated quality checks and package publishing workflows to use the latest supported tooling version.
  • No changes to application behavior or publicly visible features.

[coderabbitai]

📝 Walkthrough

Walkthrough

The pull request updates astral-sh/setup-uv from v8.3.2 to v9.0.0 in the CI and PyPI publishing workflows. No other workflow behavior or public declarations change.

Changes

CI workflow updates

Layer / File(s)	Summary
Update setup-uv pins .github/workflows/ci.yml, .github/workflows/publish-pypi.yml	The lint, build, test, security, and PyPI publishing jobs now use the pinned v9.0.0 setup-uv action.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: kriptoburak, furkanerday

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency update made in the pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/astral-sh/setup-uv-9.0.0

---

_{Comment @coderabbitai help to get the list of available commands.}