Replace astral-sh/setup-uv action with astral-sh/setup-uv v8 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
astral-sh/setup-uv	action	replacement	v7 → v8

This is a special PR that replaces astral-sh/setup-uv with the community suggested minimal stable replacement version.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Low Risk
Low risk: this only updates the GitHub Action used to install uv in CI/lint/publish workflows, with no product code changes. Main risk is CI/publish behavior changing if setup-uv@v8 differs from v7.

Overview
Updates the GitHub Actions workflows (ci.yml, lint.yaml, pypi-publish.yaml) to use astral-sh/setup-uv@v8 instead of v7 for installing uv before syncing dependencies, running tests/lints, and publishing to PyPI.

^{Reviewed by Cursor Bugbot for commit 35df2af. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 35df2af. Configure here.}

[cursor]

setup-uv @v8 tag does not exist, workflows will fail

High Severity

astral-sh/setup-uv v8 stopped publishing major and minor version tags (@v8, @v8.0) as a security measure. Only the full immutable version tag @v8.0.0 (or a pinned commit hash) works. Using @v8 will cause all three workflows (CI, lint, publish) to fail because the tag simply doesn't exist. This is confirmed by issue #830.

Additional Locations (2)

• .github/workflows/lint.yaml#L19-L20
• .github/workflows/pypi-publish.yaml#L12-L13

 

^{Reviewed by Cursor Bugbot for commit 35df2af. Configure here.}