Merge pull request #4577 from dev-hato/renovate/pin-dependencies

chore(deps): pin astral-sh/setup-uv action to 38f3f10

Author: renovate[bot]

.github/workflows/pr-format.yml

@@ -31,7 +31,7 @@ jobs:
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         run: echo "uv_version=$(sed -e 's/uv==//g' requirements.txt)" >> "$GITHUB_OUTPUT"
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4.2.0
+        uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
         if: github.event_name != 'pull_request' || github.event.action != 'closed'
         with:
           version: ${{steps.get_uv_version.outputs.uv_version}}

.github/workflows/pr-test-hato-bot.yml

@@ -20,7 +20,7 @@ jobs:
         id: get_uv_version
         run: echo "uv_version=$(sed -e 's/uv==//g' requirements.txt)" >> "$GITHUB_OUTPUT"
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4.2.0
+        uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
         with:
           version: ${{steps.get_uv_version.outputs.uv_version}}
           enable-cache: true

.github/workflows/pr-test.yml

@@ -18,7 +18,7 @@ jobs:
         id: get_uv_version
         run: echo "uv_version=$(sed -e 's/uv==//g' requirements.txt)" >> "$GITHUB_OUTPUT"
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4.2.0
+        uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4.2.0
         with:
           version: ${{steps.get_uv_version.outputs.uv_version}}
           enable-cache: true